LSAT – Linux Security Auditing Tool

Outsmart Malicious Hackers


Linux Security Auditing Tool (LSAT) is a post install security auditing tool. It is modular in design, so new features can be added quickly. It checks inetd entries and scans for unneeded RPM packages. It is being expanded to work with Linux distributions other than Red Hat, and checks for kernel versions.

It (for now) works under Linux (x86: Gentoo, RedHat, Debian, Mandrake; Sparc: SunOS (2.x), Redhat sparc, Mandrake Sparc; Apple OS X).

LSAT - Linux Security Auditing Tool

You can also check out tools like:

Lynis v1.6.0 Released For Download – Linux Security Auditing Tool
Tiger – Unix Security Audit & Intrusion Detection Tool
unix-privesc-check – Unix/Linux User Privilege Escalation Scanner

Modules/Features

  • checkbp: Checks for boot loader password.
  • checkcfg: This module is performed last
  • checkdotfiles: Looks for .forward, .exrc, .rhosts and .netrc files on the system.
  • checkfiles: Checks that /tmp and /var/tmp have sitcky bit set, checks utmp, wtmp, motd, mtab for chmod 644.
  • checkftpusers: Checks that all accounts in /etc/passwd are in /etc/ftpusers.
  • checkhostsfiles: Reads /etc/hosts.allow and /etc/hosts.deny files
  • checkinetd: Checks either /etc/inetd.conf or /etc/xinetd.d/*
  • checkinittab: Checks to see if default runlevel is 5. If it is, give the user a warning.
  • checkipv4: Checks to see that common forwarding and ignoring are off/on in ipv4.
  • checklimits: Performs simple check of limits.conf file
  • checklogging: Performs a simple check to see if auth and authpriv logging facilities are on.
  • checkmd5: Performs md5sum on all regular files on the system and saves in lsatmd5.out
  • checknetforward: Checks that ipv4 forwarding is disabled under linux
  • checkopenfiles: Checks all open files on the system using lsof (if installed)
  • checkpasswd: Checks /etc/passwd for unneeded accounts.
  • checkpkgs: Checks list of packages (rpms, debs) installed on the system.
  • checksecuretty: Check to see if ttys other than tty[1-6] are in /etc/securetty
  • checkset: Checks system for all setuid/setgid files.
  • checkssh: Check some security features of ssh for instance: root logins, X11 forwarding and the like.
  • checkumask: Checks that the default umask on the system is sensible.
  • checkwrite: Checks system for world writable files.
  • checklistening: Checks for applications listening. This is an “extra” test

Usage

You can download LSAT here:

lsat-0.9.8.2.zip

Or read more here.

Posted in: Linux Hacking, Security Software

,


Latest Posts:


OWASP ZSC - Obfuscated Code Generator Tool OWASP ZSC – Obfuscated Code Generator Tool
OWASP ZSC is an open source obfuscated code generator tool in Python which lets you generate customized shellcodes and convert scripts to an obfuscated script.
A Look Back At 2017 – Tools & News Highlights A Look Back At 2017 – Tools & News Highlights
So here we are in 2018, taking a look back at 2017, quite a year it was. Here is a quick rundown of some of the best hacking/security tools released in 2017, the biggest news stories and the 10 most viewed posts on Darknet as a bonus.
Spectre & Meltdown Checker - Vulnerability Mitigation Tool For Linux Spectre & Meltdown Checker – Vulnerability Mitigation Tool For Linux
Spectre & Meltdown Checker is a simple shell script to tell if your Linux installation is vulnerable against the 3 "speculative execution" CVEs that were made public early 2018.
Hijacker - Reaver For Android Wifi Hacker App Hijacker – Reaver For Android Wifi Hacker App
Hijacker is a native GUI which provides Reaver for Android along with Aircrack-ng, Airodump-ng and MDK3 making it a powerful Wifi hacker app.
Sublist3r - Fast Python Subdomain Enumeration Tool Sublist3r – Fast Python Subdomain Enumeration Tool
Sublist3r is a Python-based tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting.
coWPAtty Download - Audit Pre-shared WPA Keys coWPAtty Download – Audit Pre-shared WPA Keys
coWPAtty is a C-based tool for running a brute-force dictionary attack against WPA-PSK and audit pre-shared WPA keys.


2 Responses to LSAT – Linux Security Auditing Tool

  1. fakeman December 1, 2015 at 2:37 am #

    why is the link to the website:
    “Or read more here.”
    sign as broken_link?

    • Darknet December 1, 2015 at 5:56 pm #

      Sourceforge was having some issues last night so it wasn’t always responding with a successful HTTP code, so the link was marked as broken. It should be ok now.