Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've previously used a great script on a Linux servers to report on all sorts of security issues.

It generates a comprehensive list of potential security flaws on the machine including:

  1. out of date software / bugs
  2. open ports
  3. incorrect privileges

And it summarises everything in a report along with suggested fixes.

Problem is I cann't remember the name of the script or where to find it?

Any clues?! J

share|improve this question
    
I'm guessing there is no right answer to this question, so all reasonable answers get up-votes - but I'll hold out from closing the question until I see an answer with the name of the script I used (which I'll recognise once I see it). –  Joel Jul 31 '10 at 10:13
    
It would help if you tell us the format of the report, text? html? pdf? –  chmeee Jul 31 '10 at 11:19
    
@chmee - as I recall, just text output on the command line. –  Joel Aug 21 '10 at 18:15

2 Answers 2

chkrootkit and rkhunter are excellent choices, both being just shell scripts.

Then there are other security tools, such as Nessus , Prelude, tripwire and aide.

share|improve this answer
    
Just what I was going to suggest - IME both required some knowledge / research to use on a production system due to false positives (particularly with 'hidden processes'). Nikto (cirt.net/nikto2) is handy for webservers. And Snort for network IDS –  symcbean Jul 31 '10 at 21:56

Maybe you are talking about Lynis, which is a security and system auditing tool. Tiger is a similar tool.

There is also Bastille Unix that lets you harden as you analyze.

EDIT: If it is none of the above, maybe is one of these other three (less known).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.