dargslan-security-scan 1.0.0

Basic Linux security scanner — check SSH config, file permissions, SUID binaries, world-writable files, and kernel parameters

dargslan-security-scan

Linux Security Scanner — Check SSH config, SUID binaries, kernel parameters, file permissions, world-writable files, and get a security score. Zero external dependencies.

Installation

pip install dargslan-security-scan

CLI Usage

dargslan-secscan report    # Full security report with score
dargslan-secscan ssh       # Check SSH configuration
dargslan-secscan suid      # Find SUID/SGID binaries
dargslan-secscan kernel    # Check kernel parameters
dargslan-secscan perms     # Check file permissions
dargslan-secscan score     # Security score (0-100)
dargslan-secscan json      # JSON output

Python API

from dargslan_security_scan import SecurityScanner

ss = SecurityScanner()
ss.print_report()

score = ss.score()
ssh_issues = ss.check_ssh_config()
suid = ss.find_suid_files()
kernel = ss.check_kernel_params()
full = ss.full_scan()

What It Checks

• SSH configuration (root login, password auth, empty passwords, port)
• SUID/SGID binaries (known vs unknown)
• Kernel security parameters (IP forwarding, ASLR, SYN cookies, etc.)
• File permissions (/etc/passwd, /etc/shadow, sshd_config, etc.)
• World-writable files in /etc and /var

More Resources

• Linux eBooks | Cheat Sheets | Blog

License

MIT — Dargslan