secure-shs 1.0.3

Security Hygiene Scanner (SHS) – Windows and Linux security auditing tool

🛡️ Security Hygiene Scanner (SHS) – Windows & Linux

Security Hygiene Scanner (SHS) is a Windows and Linux CLI-based defensive security tool that performs a quick security hygiene check on a system.

It helps users understand whether essential security controls are enabled and highlights common weak security practices.

Think of SHS as a security health check-up for your machine 🩺💻 — simple, fast, safe, and read-only.

📋 Overview

SHS scans a Windows or Linux system and provides a clear security snapshot by checking important areas such as:

• Firewall status
• Antivirus / endpoint protection availability
• System configuration
• User privilege hygiene
• File and permission hygiene

The tool is designed strictly for defensive security awareness and system hygiene validation.

🚫 No exploitation
🚫 No intrusive scanning
🚫 No offensive security actions

⚙️ Windows Features

• 🛡️ Windows Firewall status check
• 🔍 Antivirus detection (installed and active)
• 💻 System and OS information scan
• 👤 User and privilege hygiene checks
• 📁 File and permission hygiene checks
• 📊 Weighted security risk scoring
• ⚡ Fast, lightweight, and safe to run

🐧 Linux Features

• 🔥 Firewall detection (ufw / firewalld / nftables / iptables)
• 🛡️ Antivirus presence detection (ClamAV & others if installed)
• 💻 Linux OS & kernel information
• 👤 User & sudo privilege hygiene
• 📁 Sensitive file & permission hygiene checks

🖥️ Supported Platforms

🪟 Windows

• Windows 10
• Windows 11

🐧 Linux

• Ubuntu
• Kali Linux
• Debian-based distributions
• RHEL/CentOS/Fedora
• Alpine, Arch, openSUSE

🚀 Installation

This installation method works for both Windows and Linux systems.

🔧 Requirements

• Python 3.10 or higher

• pip package manager

📦 Install from PyPI

pip install shs

✅ Verify Installation

After installation, verify SHS is available:

shs --help

If installed correctly, the help menu will be displayed.

▶️ Usage

🔍 Run a full system security hygiene scan

shs scan

🔧 Run specific security checks

shs scan --system
shs scan --network
shs scan --users
shs scan --files

📊 Security Scoring

SHS uses a weighted severity scoring system to measure the overall security health of a system. Each detected issue is classified by severity and assigned a numerical weight.

Severity	Weight
CRITICAL	10
HIGH	7
MEDIUM	4
LOW	1

All findings are aggregated into a Security Score (0–100%) with descriptive labels:

• Excellent
• Good
• Needs Attention
• High Risk
• Critical Risk

📁 Project Structure

SHS/
├── .venv/                     # Python virtual environment
├── build/                     # Build artifacts
├── dist/                      # Distribution packages
├── docs/                      # Technical documentation
├── documentation/             # User guides and reports
├── exe_build/                 # Executable build output
├── pipelines/                 # CI/CD pipelines and scripts
├── release/                   # Release-ready packages
├── reports/                   # Generated scan reports
├── shs/                       # Core SHS source code
├── shs_security.egg-info/     # Package metadata (security build)
├── shs.egg-info/              # Package metadata
├── tests/                     # Unit and integration tests
│
├── .gitignore                 # Git ignore rules
├── network_scan_test.py       # Network scan test script
├── pyproject.toml             # Modern Python project configuration
├── README.md                  # Project README
├── requirements.txt           # Project dependencies
├── run_integration_test.py    # Integration testing script
├── setup.py                   # Package setup configuration
├── shs_report.html            # Sample HTML security report
├── shs_report.json            # Sample JSON security report
├── shs.py                     # Main CLI entry point
├── shs.spec                   # PyInstaller build specification

🔒 Safety & Ethics

SHS is designed with security and ethics in mind:

• ✅ Read-only by default
• ❌ No malware behavior
• ❌ No data exfiltration
• ❌ No exploitation or intrusive scanning

This tool is intended only for defensive security hygiene assessment.

🛣️ Future Improvements

• More Windows and Linux–specific security checks

• Improved scoring logic

• Scheduled scan support

• Enhanced report visualization

• Optional enterprise features

🙌 Author

Mahima Kumawat Cybersecurity & System Security Enthusiast