Audit Script Kit

Audit Script Kit

Collection of security audit scripts for Linux servers: file permission checks, open port enumeration, process monitoring, cron job auditing, and user account review. Run on any server in seconds.

Features

• File permission auditing — detects world-readable, world-writable, and SUID/SGID files
• Open port enumeration — lists all listening ports with associated processes
• Process monitoring — flags suspicious or unexpected running processes
• Cron job auditing — reviews cron entries across all users for anomalies
• User account review — privilege escalation detection, inactive accounts, passwordless users
• Sensitive path detection — checks permissions on /etc/shadow, SSH keys, config files
• JSON output — structured output for integration with other tools or dashboards
• Configurable via JSON — enable/disable modules, set custom paths to audit
• Non-destructive — all checks are read-only, safe for production servers

Requirements

• Python 3.10+
• No external dependencies (stdlib only)
• Linux/macOS (uses OS-level APIs for permission and process checks)

Quick Start

# Run all audit checks
python src/audit_script_kit.py --all

# Check file permissions on a specific path
python src/audit_script_kit.py --check permissions --path /etc

# Enumerate open ports
python src/audit_script_kit.py --check ports

# Check processes and save results
python src/audit_script_kit.py --check processes --output audit.json

Output

Console output shows a categorized audit report with severity indicators. JSON output provides structured findings per module for programmatic consumption.

Configuration Reference

Use a JSON config to customize which modules run (see examples/audit_config.json):

{
    "audit_modules": {
        "file_permissions": {
            "enabled": true,
            "paths": ["/etc", "/var/log", "/home"]
        },
        "open_ports": { "enabled": true },
        "processes": { "enabled": true },
        "cron_jobs": { "enabled": true },
        "user_accounts": { "enabled": true }
    }
}

... continues with setup instructions, usage examples, and more.