Unix/Linux. It performs a security scan and determines the hardening
state of the machine. Any detected security issues will be provided
in the form of a suggestion or warning. Beside security related
information it will also scan for general system information,
installed packages and possible configuration errors. In general it
is a security and system auditing tool to harden Linux systems.
software aims in assisting automated auditing, hardening, software
patch management, vulnerability and malware scanning of Unix/Linux
based systems. It can be run without prior installation, so inclusion
on read only storage is possible (USB stick, cd/dvd).
assists auditors in performing Basel II, GLBA, HIPAA, PCI DSS and SOx
(Sarbanes-Oxley) compliance audits.
Security specialists, penetration testers, system auditors,
Examples of audit
- – Available authentication methods
– Expired SSL
– Outdated software
– User accounts without
– Incorrect file permissions
– Configuration errors
common shell scripting language (sh). Therefore it runs on most
systems without any adjustments. Packages are created by several
maintainers, for easier installation. Still, if one would like to use
the latest version, simply download the tarball, extract it to a
temporary directory and run the tool.