Features

This chapter covers the core features and capabilities of Audit Script Kit.

Features

• File permission auditing — detects world-readable, world-writable, and SUID/SGID files
• Open port enumeration — lists all listening ports with associated processes
• Process monitoring — flags suspicious or unexpected running processes
• Cron job auditing — reviews cron entries across all users for anomalies
• User account review — privilege escalation detection, inactive accounts, passwordless users
• Sensitive path detection — checks permissions on /etc/shadow, SSH keys, config files
• JSON output — structured output for integration with other tools or dashboards
• Configurable via JSON — enable/disable modules, set custom paths to audit
• Non-destructive — all checks are read-only, safe for production servers

Requirements

• Python 3.10+
• No external dependencies (stdlib only)
• Linux/macOS (uses OS-level APIs for permission and process checks)

Quick Start

Follow this guide to get Audit Script Kit up and running in your environment.

Quick Start

# Run all audit checks
python src/audit_script_kit.py --all

# Check file permissions on a specific path
python src/audit_script_kit.py --check permissions --path /etc

# Enumerate open ports
python src/audit_script_kit.py --check ports

# Check processes and save results
python src/audit_script_kit.py --check processes --output audit.json

Output

Console output shows a categorized audit report with severity indicators. JSON output provides structured findings per module for programmatic consumption.