Looking for Suggestions to Improve My Bash Security Auditing Tool

0
14
Asked By CreativeCactus42 On

I recently completed my final project for a program and posted my first tool on GitHub, inspired by Lynis. It's a security auditing tool written in Bash. I'm planning to enhance it and work on a version 2 soon, so I'd love any suggestions for improvements or features you think could be valuable! I've already noted some potential additions in the readme.

5 Answers

Answered By CodeWizard21 On

Awesome project, well done! If you're interested in getting a more formal review, you might want to consider asking for feedback on platforms like Codidact. They have a category specifically for code reviews.

Answered By SecurityNerd99 On

Nice work on the project! If you're looking for more features to implement, check out the CIS benchmarks at cisecurity.org and the STIGs at cyber.mil. They have great guidelines that could help enhance your tool.

Answered By BashGuru88 On

I'd suggest using `sshd -T -f $SSH_CONFIG_FILE` to check configurations. Your current setup might skip necessary files that are included. Also, consider renaming the sections from SSH checks to SSHD checks for clarity.

Answered By TechSavvyDude On

Consider diving deeper into awk. Right now, you're using pipelines like `grep | tail | awk`, but you could streamline your tool with just awk instead. It would make your code cleaner and more efficient.

Answered By CreativeCactus42 On

Thank you all for the fantastic advice!

Related Questions

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.