nmap.ipynb

{
 "cells": [
  {
   "cell_type": "markdown",
   "source": [
    "# NMAP Scan"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 20,
   "outputs": [],
   "source": [
    "import os\n",
    "import subprocess\n",
    "import pandas as pd\n",
    "import plotly.graph_objects as go\n",
    "import os\n",
    "\n",
    "password = \"aks101090hay\"\n",
    "ip = \"172.16.233.155/22\"\n",
    "single_ip = \"172.16.233.155\"\n"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 10,
   "outputs": [],
   "source": [
    "#nmap -sV -p21-8080 --script /home/akshayram/PycharmProjects/cyber_sec/scripts/vulner.nse 172.16.233.155"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 45,
   "outputs": [],
   "source": [],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "outputs": [],
   "source": [
    "import pandas as pd\n",
    "import networkx as nx\n",
    "import matplotlib.pyplot as plt\n",
    "\n",
    "import subprocess\n",
    "import re\n",
    "\n",
    "import pandas as pd\n",
    "\n",
    "\n",
    "\n",
    "def nmap_only_host_disc(ip_addresss, password=password):\n",
    "    \"\"\" NMAP -sn only host discovery\"\"\"\n",
    "    cmd='nmap -sn ' + ip_addresss\n",
    "\n",
    "    # scan_res = call('echo {} | sudo -S {}'.format(password, cmd), shell=True)\n",
    "\n",
    "    # output = subprocess.check_output('echo {} | sudo -S {}'.format(password, cmd), shell=True)\n",
    "    op1 = call_cmd(cmd=cmd, password=password)\n",
    "\n",
    "\n",
    "\n",
    "    scan_results = {}\n",
    "    ip_pattern = re.compile(r'(\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3})')\n",
    "    host_is_pattern = r'\\w+ \\w+ (\\w+)'\n",
    "    lat_pattern = r\"\\w+ \\w+ (\\w+) \\((-?\\d+.\\d+)\\w{1} \\w+\\)\"\n",
    "    dn_pattern = r\"\\w+ \\w+ \\w+ \\w+ (\\S+)\"\n",
    "    done_pattern = r\"\\w+\\s\\w+: (\\d+) \\w+\\s\\w+\\s\\((\\d+)\\s\\w+\\s\\w+\\) \\w+ \\w+ (\\d+.\\d+) \\w+\"\n",
    "\n",
    "    ip_addr = None\n",
    "    for n, line in enumerate(op1.split('\\n')):\n",
    "        if line.startswith(\"Nmap scan\") and ip_addr == None:\n",
    "            ip_addr = ip_pattern.search(line)[0]\n",
    "            device_name = re.findall(dn_pattern, line)[0]\n",
    "            # print(ip_addr)\n",
    "\n",
    "        if line.startswith(\"Host\") and ip_addr != None:\n",
    "            # print(line)\n",
    "            try:\n",
    "                hostis = re.findall(host_is_pattern, line)[0]\n",
    "            except:\n",
    "                print(\"HOSTISSSSSSSSSSSSS\")\n",
    "                print(line)\n",
    "                print(re.findall(host_is_pattern, line))\n",
    "            if hostis == \"up\":\n",
    "                hostis = True\n",
    "\n",
    "                lat = re.findall(lat_pattern, line)\n",
    "                if lat:\n",
    "                    lat = lat[0]\n",
    "                    lat = float(lat[1])\n",
    "                else:\n",
    "                    lat= \"None\"\n",
    "\n",
    "\n",
    "            else:\n",
    "                hostis = False\n",
    "\n",
    "            scan_results[ip_addr] = {'host_up': hostis, \"latency\": lat, \"name\": device_name}\n",
    "            ip_addr = None\n",
    "\n",
    "        else:\n",
    "            pass\n",
    "\n",
    "    res = scan_results\n",
    "    plot_dict = {\"ip\": [], \"host_up\": [], 'latency': [], 'start' : [], \"name\": []}\n",
    "    for i in res:\n",
    "        ip = i\n",
    "        host_up = res[i]['host_up']\n",
    "        latency = res[i]['latency']\n",
    "        name = res[i]['name']\n",
    "\n",
    "        plot_dict['ip'].append(ip)\n",
    "        plot_dict['latency'].append(latency)\n",
    "        plot_dict['start'].append(1)\n",
    "        plot_dict['name'].append(name)\n",
    "\n",
    "        if host_up:\n",
    "            plot_dict['host_up'].append(\"#59CE8F\")\n",
    "\n",
    "        else:\n",
    "            plot_dict['host_up'].append(\"#FF1E00\")\n",
    "\n",
    "    # unfiltered_plot\n",
    "    df = pd.DataFrame.from_dict(plot_dict)\n",
    "    df = df[:15]\n",
    "    G = nx.from_pandas_edgelist(df,\n",
    "                                source='start',\n",
    "                                target= 'name',\n",
    "                                edge_attr='latency')\n",
    "\n",
    "    cols = df['host_up'].to_list()\n",
    "    if len(G.nodes) != len(cols):\n",
    "        cols = [\"blue\"] + cols\n",
    "\n",
    "\n",
    "    nx.draw(G,\n",
    "            with_labels=True,\n",
    "            # node_size=[300] + [i * 1000000 for i in df['latency'].to_list()],\n",
    "            node_color= cols,\n",
    "            font_size=10,\n",
    "            font_color=\"black\")\n",
    "    plt.savefig('network_diagram_auto.png', dpi=300, bbox_inches='tight')\n",
    "\n",
    "\n"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "outputs": [],
   "source": [
    "nmap_only_host_disc(ip_addresss=ip, password=password)"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "markdown",
   "source": [
    "# Nmap open scans"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 17,
   "outputs": [],
   "source": [
    "def open_ports_check():\n",
    "    nmap_cmd = \"nmap -p0-65535 \" + single_ip\n",
    "\n",
    "    ports_op = call_cmd(cmd=nmap_cmd, password=password)\n",
    "    ports_op = ports_op.split(\"\\n\")\n",
    "\n",
    "    port_dict = {\"Port\": [], \"Protocol\":[], \"Status\":[], \"Service\": []}\n",
    "    for n, line in enumerate(ports_op):\n",
    "        # print(line)\n",
    "        if line.startswith(\"PORT\"):\n",
    "            start_line = n +1\n",
    "        if line.startswith(\"Nmap done\"):\n",
    "            end_line = n -1\n",
    "\n",
    "    ports_lines = ports_op[start_line: end_line]\n",
    "\n",
    "    for port_line in ports_lines:\n",
    "\n",
    "        list_of_lines = []\n",
    "        list_of_lines = port_line.split(\" \")\n",
    "\n",
    "        port_proto, status, service = [i for i in list_of_lines if i != \"\"]\n",
    "        port, proto = port_proto.split(\"/\")\n",
    "        port_dict['Port'].append(port)\n",
    "        port_dict['Protocol'].append(proto)\n",
    "        port_dict['Status'].append(status)\n",
    "        port_dict['Service'].append(service)\n",
    "\n",
    "    df = pd.DataFrame.from_dict(port_dict)\n",
    "    fig = go.Figure()\n",
    "\n",
    "    tab = go.Table(header=dict(values=list(df.columns),\n",
    "                               line_color=\"#AEAEAE\",\n",
    "                               fill_color='#009A44',\n",
    "                               font=dict(color='white', size=14),\n",
    "                               height=30\n",
    "                               ),\n",
    "                     cells=dict(values=[df['Port'],\n",
    "                                        df['Protocol'],\n",
    "                                        df['Status'],\n",
    "                                        df['Service']],\n",
    "                   # font_color='black',\n",
    "                   font_size=14,\n",
    "                   height=30))\n",
    "    fig.add_trace(tab)\n",
    "    fig.update_layout(\n",
    "        paper_bgcolor='rgba(0,0,0,0)',\n",
    "        plot_bgcolor='rgba(0,0,0,0)')\n",
    "\n",
    "\n",
    "    fig.write_image(\"open_ports.png\")"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "markdown",
   "source": [
    "# cves"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 217,
   "outputs": [],
   "source": [
    "from urllib.request import urlopen\n",
    "import json\n",
    "import time\n",
    "\n",
    "def get_cve_details(cve):\n",
    "    time.sleep(6.3)\n",
    "    url = \"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=\" + cve\n",
    "    cve_deets = json.loads(urlopen(url).read())\n",
    "    return cve_deets"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 140,
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "/home/akshayram/PycharmProjects/cyber_sec/scripts/vulner.nse\n"
     ]
    }
   ],
   "source": [
    "\n"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 215,
   "outputs": [],
   "source": [
    "import plotly.express as px\n",
    "\n",
    "\n",
    "def nmap_vulner_scanner():\n",
    "    current_dir = os.getcwd()\n",
    "    new_path = os.path.join(current_dir, \"scripts\", \"vulner.nse\")\n",
    "    nmap_cmd = \"nmap -sV -p21-8080 --script \" + new_path  + \" \" +single_ip\n",
    "    cves_op = call_cmd(nmap_cmd).split(\"\\n\")\n",
    "\n",
    "\n",
    "    cve_identification_collection = []\n",
    "    for cve_line in cves_op:\n",
    "        if cve_line.startswith(\"|\"):\n",
    "\n",
    "\n",
    "            cve_split = cve_line.split(\"\\t\")\n",
    "            if len(cve_split) > 1:\n",
    "                # print(cve_split)\n",
    "                if cve_split[1].startswith(\"CVE\"):\n",
    "                    # print(cve_split)\n",
    "                    cve_indentified = cve_split[1]\n",
    "                    cve_score = cve_split[2]\n",
    "                    cve_identification_collection.append({\"cve_identity\": cve_indentified, \"score\": cve_score} )\n",
    "\n",
    "    cve_collection = {\"cve\" : [], \"desc\": [], \"base_score\":[], \"base_severity\": [], \"att_vector\": [], \"att_complex\": [], \"exploitabilaty\": [], \"refs\": []}\n",
    "    for a_cve in cve_identification_collection:\n",
    "        cve_ident = a_cve['cve_identity']\n",
    "\n",
    "\n",
    "        try:\n",
    "            cve_dict = get_cve_details(cve_ident)\n",
    "        except:\n",
    "            continue\n",
    "\n",
    "\n",
    "        cve_collection['cve'].append(cve_ident)\n",
    "        descriptions = \"\"\n",
    "        for des in cve_dict['vulnerabilities'][0]['cve']['descriptions']:\n",
    "            if des['lang'] == 'en':\n",
    "                desc_text = des['value']\n",
    "                descriptions += desc_text\n",
    "\n",
    "        cve_collection['desc'].append(descriptions)\n",
    "        source = cve_dict['vulnerabilities'][0]['cve']['sourceIdentifier']\n",
    "        # print(cve_dict['vulnerabilities'][0]['cve']['metrics'])\n",
    "\n",
    "        metric_keys = list(cve_dict['vulnerabilities'][0]['cve']['metrics'].keys())\n",
    "        for metric_key in metric_keys:\n",
    "            try:\n",
    "                base_severity = cve_dict['vulnerabilities'][0]['cve']['metrics'][metric_key][0]['cvssData'][\"baseSeverity\"]\n",
    "                att_vector = cve_dict['vulnerabilities'][0]['cve']['metrics'][metric_key][0]['cvssData'][\"attackVector\"]\n",
    "                base_score = cve_dict['vulnerabilities'][0]['cve']['metrics'][metric_key][0]['cvssData'][\"baseScore\"]\n",
    "                att_complex = cve_dict['vulnerabilities'][0]['cve']['metrics'][metric_key][0]['cvssData'][\"attackComplexity\"]\n",
    "                exploitabilaty = cve_dict['vulnerabilities'][0]['cve']['metrics'][metric_key][0][\"exploitabilityScore\"]\n",
    "                refs = cve_dict['vulnerabilities'][0]['cve']['references']\n",
    "                break\n",
    "            except Exception as e:\n",
    "                print(e)\n",
    "                continue\n",
    "\n",
    "        if len(cve_collection['exploitabilaty']) == 0:\n",
    "            if \"cvssMetricV2\" in metric_keys:\n",
    "                metric_key = \"cvssMetricV2\"\n",
    "                base_severity = cve_dict['vulnerabilities'][0]['cve']['metrics'][metric_key][0]['cvssData'][\"baseSeverity\"]\n",
    "                att_vector = cve_dict['vulnerabilities'][0]['cve']['metrics'][metric_key][0]['cvssData'][\"accessVector\"]\n",
    "                base_score = cve_dict['vulnerabilities'][0]['cve']['metrics'][metric_key][0]['cvssData'][\"baseScore\"]\n",
    "                att_complex = cve_dict['vulnerabilities'][0]['cve']['metrics'][metric_key][0]['cvssData'][\"accessComplexity\"]\n",
    "                exploitabilaty = cve_dict['vulnerabilities'][0]['cve']['metrics'][metric_key][0][\"exploitabilityScore\"]\n",
    "                refs = cve_dict['vulnerabilities'][0]['cve']['references']\n",
    "\n",
    "            else:\n",
    "                base_severity = \"Unable to Locate\"\n",
    "                att_vector = \"Unable to Locate\"\n",
    "                base_score = \"Unable to Locate\"\n",
    "                att_complex = \"Unable to Locate\"\n",
    "                exploitabilaty = \"Unable to Locate\"\n",
    "                refs = \"Unable to Locate\"\n",
    "\n",
    "        cve_collection['base_severity'].append(base_severity)\n",
    "        cve_collection['att_vector'].append(att_vector)\n",
    "        cve_collection['base_score'].append(base_score)\n",
    "        cve_collection['att_complex'].append(att_complex)\n",
    "        cve_collection['exploitabilaty'].append(exploitabilaty)\n",
    "        cve_collection['refs'].append(refs)\n",
    "\n",
    "\n",
    "    cve_df = pd.DataFrame.from_dict(cve_collection)\n",
    "\n",
    "\n",
    "    base_scores_plot_data = cve_df['base_severity'].value_counts()\n",
    "    fig = px.bar(x=base_scores_plot_data.index,\n",
    "                 y=base_scores_plot_data)\n",
    "    fig.update_layout(template=\"plotly_white\",\n",
    "                      title=\"Distribution of Base Severity\",\n",
    "                      xaxis_title=\"Severity\",\n",
    "                      yaxis_title=\"Counts\")\n",
    "    fig.update_traces(marker_color='#009A44', marker_line_color='#000',\n",
    "                      marker_line_width=1.5, opacity=0.65)\n",
    "    fig.write_image(\"severity_count.png\")\n",
    "\n",
    "    single_plot_data = cve_df['base_score'].value_counts()\n",
    "    fig = px.bar(x=single_plot_data.index,\n",
    "                 y=single_plot_data)\n",
    "    fig.update_layout(template=\"plotly_white\",\n",
    "                      title=\"Distribution of Base Score\",\n",
    "                      xaxis_title=\"Count\",\n",
    "                      yaxis_title=\"Base Score\")\n",
    "    fig.update_traces(marker_color='#009A44', marker_line_color='#000',\n",
    "                      marker_line_width=1.5, opacity=0.6)\n",
    "    fig.write_image(\"base_score_count.png\")\n",
    "\n",
    "\n",
    "    single_plot_data = cve_df['exploitabilaty'].value_counts()\n",
    "    fig = px.bar(x=single_plot_data.index,\n",
    "                 y=single_plot_data)\n",
    "    fig.update_layout(template=\"plotly_white\",\n",
    "                      title=\"Distribution of Exploitabilaty Score\",\n",
    "                      xaxis_title=\"Count\",\n",
    "                      yaxis_title=\"Exploitabilaty Score\")\n",
    "    fig.update_traces(marker_color='#009A44', marker_line_color='#000',\n",
    "                      marker_line_width=1.5, opacity=0.6)\n",
    "    fig.write_image(\"exploitabilaty_score_count.png\")\n",
    "\n",
    "    single_plot_data = cve_df['att_complex'].value_counts()\n",
    "    fig = px.bar(x=single_plot_data.index,\n",
    "                 y=single_plot_data)\n",
    "    fig.update_layout(template=\"plotly_white\",\n",
    "                      title=\"Distribution of Attack Complexity\",\n",
    "                      xaxis_title=\"Count\",\n",
    "                      yaxis_title=\"Attack Complexity\")\n",
    "    fig.update_traces(marker_color='#009A44', marker_line_color='#000',\n",
    "                      marker_line_width=1.5, opacity=0.6)\n",
    "    # fig.show()\n",
    "    fig.write_image(\"attack_complexity_count.png\")\n",
    "\n",
    "\n",
    "\n",
    "    fig = go.Figure()\n",
    "\n",
    "    tab = go.Table(header=dict(values=[i for i in list(cve_df.columns) if i not in [\"desc\", \"refs\"]],\n",
    "                               line_color=\"#AEAEAE\",\n",
    "                               fill_color='#009A44',\n",
    "                               font=dict(color='white', size=14),\n",
    "                               height=30\n",
    "                               ),\n",
    "                     cells=dict(values=[cve_df['cve'],\n",
    "                                        cve_df['base_score'],\n",
    "                                        cve_df['base_severity'],\n",
    "                                        cve_df['att_vector'],\n",
    "                                        cve_df['att_complex'],\n",
    "                                        cve_df['exploitabilaty']],\n",
    "                   # font_color='black',\n",
    "                   font_size=14,\n",
    "                   height=30))\n",
    "\n",
    "\n",
    "    fig.add_trace(tab)\n",
    "    fig.update_layout(\n",
    "        paper_bgcolor='rgba(0,0,0,0)',\n",
    "        plot_bgcolor='rgba(0,0,0,0)')\n",
    "\n",
    "\n",
    "    fig.write_image(\"cve_table.png\")\n",
    "\n"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "markdown",
   "source": [
    "# Rootkit checker"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 245,
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "{'The following suspicious files and directories were found:': ' /usr/lib/python3/dist-packages/PyQt5/uic/widget-plugins/.noinit /usr/lib/python3/dist-packages/PyQt4/uic/widget-plugins/.noinit /usr/lib/python3/dist-packages/matplotlib/tests/baseline_images/.keep /usr/lib/nvidia-visual-profiler/.eclipseproduct /usr/lib/debug/.build-id /usr/lib/jvm/.java-1.11.0-openjdk-amd64.jinfo /usr/lib/jvm/.java-1.8.0-openjdk-amd64.jinfo /lib/modules/5.4.0-100-generic/vdso/.build-id /lib/modules/5.4.0-80-generic/vdso/.build-id /usr/lib/debug/.build-id /lib/modules/5.4.0-100-generic/vdso/.build-id /lib/modules/5.4.0-80-generic/vdso/.build-id'}\n"
     ]
    }
   ],
   "source": [
    "def scan_rookits(password=password):\n",
    "\n",
    "    rootkit_scan_cmd = \"chkrootkit\"\n",
    "    rootkit_out = call_cmd(rootkit_scan_cmd, password=password)\n",
    "\n",
    "\n",
    "    detected_problems = {}\n",
    "    broken_lines = rootkit_out.split(\"\\n\")\n",
    "    for n, line in enumerate(broken_lines):\n",
    "        if line.startswith(\"Checking\") or line.startswith(\"Searching\") or line.startswith(\"Checking\"):\n",
    "            split_line = [i.strip() for i in line.split(\"...\")]\n",
    "            if len(split_line) == 2:\n",
    "                if 'not' not in split_line[-1]:\n",
    "                    if \"no \"not in split_line[-1]:\n",
    "                        if \"were found\" in split_line[-1]:\n",
    "                            issue_line = n\n",
    "                            detected_problems[split_line[1]] = ''\n",
    "                            while True:\n",
    "                                issue_line += 1\n",
    "                                next_lines_check = broken_lines[issue_line]\n",
    "                                # print(next_lines_check)\n",
    "                                if not (next_lines_check.startswith(\"Checking\") or next_lines_check.startswith(\"Searching\") or next_lines_check.startswith(\"Checking\") or next_lines_check.startswith(\"!\")):\n",
    "                                    detected_problems[split_line[1]] += \" \" + next_lines_check\n",
    "                                else:\n",
    "                                    break\n",
    "\n",
    "    if len(detected_problems) != 0:\n",
    "        fig = go.Figure()\n",
    "\n",
    "        cell_vals1 =[]\n",
    "        cell_vals2 = []\n",
    "        for i in detected_problems:\n",
    "            cell_vals1.append(i)\n",
    "            cell_vals2.append(detected_problems[i])\n",
    "\n",
    "\n",
    "        tab = go.Table(\n",
    "                         cells=dict(values=[cell_vals1, cell_vals2],\n",
    "                       # font_color='black',\n",
    "                       font_size=14,\n",
    "                       height=30))\n",
    "\n",
    "\n",
    "        fig.add_trace(tab)\n",
    "        fig.update_layout(\n",
    "            paper_bgcolor='rgba(0,0,0,0)',\n",
    "            plot_bgcolor='rgba(0,0,0,0)')\n",
    "\n",
    "        fig.show()\n",
    "        fig.write_image(\"rootkit_scans.png\")\n",
    "\n"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "markdown",
   "source": [
    "# system audit"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 249,
   "outputs": [],
   "source": [
    "audit_cmd = \"lynis audit system --quick\""
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 251,
   "outputs": [
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "[sudo] password for akshayram: W: GPG error: https://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64  InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY A4B469963BF863CC\n",
      "E: The repository 'https://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64  InRelease' is no longer signed.\n",
      "W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://deb.anydesk.com all InRelease: The following signatures were invalid: EXPKEYSIG 18DF3741CDFFDE29 philandro Software GmbH <info@philandro.com>\n"
     ]
    }
   ],
   "source": [
    "audit_op = call_cmd(audit_cmd, password=password)\n"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 252,
   "outputs": [
    {
     "data": {
      "text/plain": "\"\\n\\x1b[1;37m[ Lynis 2.6.2 ]\\x1b[0m\\n\\n################################################################################\\n  Lynis comes with ABSOLUTELY NO WARRANTY. This is free software, and you are\\n  welcome to redistribute it under the terms of the GNU General Public License.\\n  See the LICENSE file for details about using this software.\\n\\n  2007-2018, CISOfy - https://cisofy.com/lynis/\\n  Enterprise support available (compliance, plugins, interface and tools)\\n################################################################################\\n\\n\\n[+] \\x1b[1;33mInitializing program\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Detecting OS... \\x1b[41C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\x1b[2C- Checking profiles...\\x1b[37C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\n  ---------------------------------------------------\\n  Program version:           2.6.2\\n  Operating system:          Linux\\n  Operating system name:     Ubuntu Linux\\n  Operating system version:  18.04\\n  Kernel version:            5.4.0\\n  Hardware platform:         x86_64\\n  Hostname:                  linuxadmin-System-Product-Name\\n  ---------------------------------------------------\\n  Profiles:                  /etc/lynis/default.prf\\n  Log file:                  /var/log/lynis.log\\n  Report file:               /var/log/lynis-report.dat\\n  Report version:            1.0\\n  Plugin directory:          /etc/lynis/plugins\\n  ---------------------------------------------------\\n  Auditor:                   [Not Specified]\\n  Language:                  en\\n  Test category:             all\\n  Test group:                all\\n  ---------------------------------------------------\\n\\x1b[2C- Program update status... \\x1b[32C [ \\x1b[1;31mWARNING\\x1b[0m ]\\n\\n      ===============================================================================\\n        \\x1b[0;36mLynis update available\\x1b[0m\\n      ===============================================================================\\n\\n        \\x1b[1;33mCurrent version is more than 4 months old\\x1b[0m\\n\\n        Current version : \\x1b[1;33m262\\x1b[0m   Latest version : \\x1b[1;32m308\\x1b[0m\\n\\n        \\x1b[1;37mPlease update to the latest version.\\x1b[0m\\n        New releases include additional features, bug fixes, tests, and baselines.\\x1b[0m\\n\\n        Download the latest version:\\n\\n        Packages (DEB/RPM) -  https://packages.cisofy.com\\n        Website (TAR)      -  https://cisofy.com/downloads/\\n        GitHub (source)    -  https://github.com/CISOfy/lynis\\n\\n      ===============================================================================\\n\\n\\n[+] \\x1b[1;33mSystem Tools\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Scanning available tools...\\x1b[30C\\n\\x1b[2C- Checking system binaries...\\x1b[30C\\n\\n[+] \\x1b[1;35mPlugins (phase 1)\\x1b[0m\\n------------------------------------\\n\\x1b[0CNote: plugins have more extensive tests and may take several minutes to complete\\x1b[0C\\n\\x1b[0C \\x1b[0C\\n\\x1b[2C- \\x1b[0;36mPlugin\\x1b[0m: \\x1b[1;37mdebian\\x1b[0m\\x1b[21C\\n    [\\n[+] \\x1b[1;33mDebian Tests\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking for system binaries that are required by Debian Tests...\\x1b[0C\\n\\x1b[4C- Checking /bin... \\x1b[38C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Checking /sbin... \\x1b[37C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Checking /usr/bin... \\x1b[34C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Checking /usr/sbin... \\x1b[33C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Checking /usr/local/bin... \\x1b[28C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Checking /usr/local/sbin... \\x1b[27C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- Authentication:\\x1b[42C\\n\\x1b[4C- PAM (Pluggable Authentication Modules):\\x1b[16C\\n\\x1b[6C- libpam-tmpdir\\x1b[40C [ \\x1b[1;31mNot Installed\\x1b[0m ]\\n\\x1b[6C- libpam-usb\\x1b[43C [ \\x1b[1;31mNot Installed\\x1b[0m ]\\n\\x1b[2C- File System Checks:\\x1b[38C\\n\\x1b[4C- DM-Crypt, Cryptsetup & Cryptmount:\\x1b[21C\\n\\x1b[2C- Software:\\x1b[48C\\n\\x1b[4C- apt-listbugs\\x1b[43C [ \\x1b[1;31mNot Installed\\x1b[0m ]\\n\\x1b[4C- apt-listchanges\\x1b[40C [ \\x1b[1;31mNot Installed\\x1b[0m ]\\n\\x1b[4C- checkrestart\\x1b[43C [ \\x1b[1;31mNot Installed\\x1b[0m ]\\n\\x1b[4C- needrestart\\x1b[44C [ \\x1b[1;31mNot Installed\\x1b[0m ]\\n\\x1b[4C- debsecan\\x1b[47C [ \\x1b[1;31mNot Installed\\x1b[0m ]\\n\\x1b[4C- debsums\\x1b[48C [ \\x1b[1;31mNot Installed\\x1b[0m ]\\n\\x1b[4C- fail2ban\\x1b[47C [ \\x1b[1;31mNot Installed\\x1b[0m ]\\n]\\n\\n[+] \\x1b[1;33mBoot and services\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Service Manager\\x1b[42C [ \\x1b[1;32msystemd\\x1b[0m ]\\n\\x1b[2C- Checking UEFI boot\\x1b[39C [ \\x1b[1;37mDISABLED\\x1b[0m ]\\n\\x1b[2C- Checking presence GRUB2\\x1b[34C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Checking for password protection\\x1b[23C [ \\x1b[1;31mWARNING\\x1b[0m ]\\n\\x1b[2C- Check running services (systemctl)\\x1b[23C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\x1b[8CResult: found 39 running services\\x1b[20C\\n\\x1b[2C- Check enabled services at boot (systemctl)\\x1b[15C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\x1b[8CResult: found 61 enabled services\\x1b[20C\\n\\x1b[2C- Check startup files (permissions)\\x1b[24C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\n[+] \\x1b[1;33mKernel\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking default runlevel\\x1b[32C [ \\x1b[1;32mrunlevel 5\\x1b[0m ]\\n\\x1b[2C- Checking CPU support (NX/PAE)\\x1b[28C\\n\\x1b[4CCPU support: PAE and/or NoeXecute supported\\x1b[14C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- Checking kernel version and release\\x1b[22C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\x1b[2C- Checking kernel type\\x1b[37C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\x1b[2C- Checking loaded kernel modules\\x1b[27C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\x1b[6CFound 132 active modules\\x1b[31C\\n\\x1b[2C- Checking Linux kernel configuration file\\x1b[17C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- Checking default I/O kernel scheduler\\x1b[20C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[2C- Checking for available kernel update\\x1b[21C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Checking core dumps configuration\\x1b[24C [ \\x1b[1;32mDISABLED\\x1b[0m ]\\n\\x1b[4C- Checking setuid core dumps configuration\\x1b[15C [ \\x1b[1;32mPROTECTED\\x1b[0m ]\\n\\x1b[2C- Check if reboot is needed\\x1b[32C [ \\x1b[1;32mNO\\x1b[0m ]\\n\\n[+] \\x1b[1;33mMemory and Processes\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking /proc/meminfo\\x1b[35C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- Searching for dead/zombie processes\\x1b[22C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Searching for IO waiting processes\\x1b[23C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\n[+] \\x1b[1;33mUsers, Groups and Authentication\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Administrator accounts\\x1b[35C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Unique UIDs\\x1b[46C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Consistency of group files (grpck)\\x1b[23C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Unique group IDs\\x1b[41C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Unique group names\\x1b[39C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Password file consistency\\x1b[32C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Query system users (non daemons)\\x1b[25C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\x1b[2C- NIS+ authentication support\\x1b[30C [ \\x1b[1;37mNOT ENABLED\\x1b[0m ]\\n\\x1b[2C- NIS authentication support\\x1b[31C [ \\x1b[1;37mNOT ENABLED\\x1b[0m ]\\n\\x1b[2C- sudoers file\\x1b[45C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Check sudoers file permissions\\x1b[25C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- PAM password strength tools\\x1b[30C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[2C- PAM configuration files (pam.conf)\\x1b[23C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- PAM configuration files (pam.d)\\x1b[26C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- PAM modules\\x1b[46C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- LDAP module in PAM\\x1b[39C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[2C- Accounts without expire date\\x1b[29C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Accounts without password\\x1b[32C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Checking user password aging (minimum)\\x1b[19C [ \\x1b[1;33mDISABLED\\x1b[0m ]\\n\\x1b[2C- User password aging (maximum)\\x1b[28C [ \\x1b[1;33mDISABLED\\x1b[0m ]\\n\\x1b[2C- Checking expired passwords\\x1b[31C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Checking Linux single user mode authentication\\x1b[11C [ \\x1b[1;31mWARNING\\x1b[0m ]\\n\\x1b[2C- Determining default umask\\x1b[32C\\n\\x1b[4C- umask (/etc/profile)\\x1b[35C [ \\x1b[1;33mNOT FOUND\\x1b[0m ]\\n\\x1b[4C- umask (/etc/login.defs)\\x1b[32C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[2C- LDAP authentication support\\x1b[30C [ \\x1b[1;37mNOT ENABLED\\x1b[0m ]\\n\\x1b[2C- Logging failed login attempts\\x1b[28C [ \\x1b[1;32mENABLED\\x1b[0m ]\\n\\n[+] \\x1b[1;33mShells\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking shells from /etc/shells\\x1b[25C\\n\\x1b[4CResult: found 4 shells (valid shells: 4).\\x1b[16C\\n\\x1b[4C- Session timeout settings/tools\\x1b[25C [ \\x1b[1;33mNONE\\x1b[0m ]\\n\\x1b[2C- Checking default umask values\\x1b[28C\\n\\x1b[4C- Checking default umask in /etc/bash.bashrc\\x1b[13C [ \\x1b[1;33mNONE\\x1b[0m ]\\n\\x1b[4C- Checking default umask in /etc/profile\\x1b[17C [ \\x1b[1;33mNONE\\x1b[0m ]\\n\\n[+] \\x1b[1;33mFile systems\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking mount points\\x1b[36C\\n\\x1b[4C- Checking /home mount point\\x1b[29C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- Checking /tmp mount point\\x1b[30C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- Checking /var mount point\\x1b[30C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[2C- Query swap partitions (fstab)\\x1b[28C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Testing swap partitions\\x1b[34C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Testing /proc mount (hidepid)\\x1b[28C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[2C- Checking for old files in /tmp\\x1b[27C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Checking /tmp sticky bit\\x1b[33C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Checking /var/tmp sticky bit\\x1b[29C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- ACL support root file system\\x1b[29C [ \\x1b[1;32mENABLED\\x1b[0m ]\\n\\x1b[2C- Mount options of /\\x1b[39C [ \\x1b[1;33mNON DEFAULT\\x1b[0m ]\\n\\x1b[2C- Mount options of /home\\x1b[35C [ \\x1b[1;33mNON DEFAULT\\x1b[0m ]\\n\\x1b[2C- Checking Locate database\\x1b[33C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- Disable kernel support of some filesystems\\x1b[15C\\n\\x1b[4C- Discovered kernel modules: cramfs freevxfs jffs2 udf \\x1b[2C\\n\\n[+] \\x1b[1;33mUSB Devices\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking usb-storage driver (modprobe config)\\x1b[12C [ \\x1b[1;37mNOT DISABLED\\x1b[0m ]\\n\\x1b[2C- Checking USB devices authorization\\x1b[23C [ \\x1b[1;33mENABLED\\x1b[0m ]\\n\\x1b[2C- Checking USBGuard\\x1b[40C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mStorage\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking firewire ohci driver (modprobe config)\\x1b[10C [ \\x1b[1;32mDISABLED\\x1b[0m ]\\n\\n[+] \\x1b[1;33mNFS\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Check running NFS daemon\\x1b[33C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mName services\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking search domains\\x1b[34C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- Checking /etc/resolv.conf options\\x1b[24C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- Searching DNS domain name\\x1b[32C [ \\x1b[1;33mUNKNOWN\\x1b[0m ]\\n\\x1b[2C- Checking /etc/hosts\\x1b[38C\\n\\x1b[4C- Checking /etc/hosts (duplicates)\\x1b[23C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- Checking /etc/hosts (hostname)\\x1b[25C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- Checking /etc/hosts (localhost)\\x1b[24C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- Checking /etc/hosts (localhost to IP)\\x1b[18C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\n[+] \\x1b[1;33mPorts and packages\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Searching package managers\\x1b[31C\\n\\x1b[4C- Searching dpkg package manager\\x1b[25C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[6C- Querying package manager\\x1b[29C\\n\\x1b[4C- Query unpurged packages\\x1b[32C [ \\x1b[1;33mFOUND\\x1b[0m ]\\n\\x1b[2C- Checking security repository in sources.list file\\x1b[8C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Checking APT package database\\x1b[28C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Checking vulnerable packages\\x1b[29C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Checking upgradeable packages\\x1b[28C [ \\x1b[1;37mSKIPPED\\x1b[0m ]\\n\\x1b[2C- Checking package audit tool\\x1b[30C [ \\x1b[1;32mINSTALLED\\x1b[0m ]\\n\\x1b[4CFound: apt-check\\x1b[41C\\n\\n[+] \\x1b[1;33mNetworking\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking IPv6 configuration\\x1b[30C [ \\x1b[1;37mENABLED\\x1b[0m ]\\n\\x1b[6CConfiguration method\\x1b[35C [ \\x1b[1;37mAUTO\\x1b[0m ]\\n\\x1b[6CIPv6 only\\x1b[46C [ \\x1b[1;37mNO\\x1b[0m ]\\n\\x1b[2C- Checking configured nameservers\\x1b[26C\\n\\x1b[4C- Testing nameservers\\x1b[36C\\n\\x1b[8CNameserver: 127.0.0.53\\x1b[31C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- Minimal of 2 responsive nameservers\\x1b[20C [ \\x1b[1;31mWARNING\\x1b[0m ]\\n\\x1b[2C- Checking default gateway\\x1b[33C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\x1b[2C- Getting listening ports (TCP/UDP)\\x1b[24C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\x1b[6C* Found 40 ports\\x1b[39C\\n\\x1b[2C- Checking promiscuous interfaces\\x1b[26C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Checking waiting connections\\x1b[29C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Checking status DHCP client\\x1b[30C [ \\x1b[1;37mRUNNING\\x1b[0m ]\\n\\x1b[2C- Checking for ARP monitoring software\\x1b[21C [ \\x1b[1;33mNOT FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mPrinters and Spools\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking cups daemon\\x1b[37C [ \\x1b[1;32mRUNNING\\x1b[0m ]\\n\\x1b[2C- Checking CUPS configuration file\\x1b[25C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- File permissions\\x1b[39C [ \\x1b[1;31mWARNING\\x1b[0m ]\\n\\x1b[2C- Checking CUPS addresses/sockets\\x1b[26C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- Checking lp daemon\\x1b[39C [ \\x1b[1;37mNOT RUNNING\\x1b[0m ]\\n\\n[+] \\x1b[1;33mSoftware: e-mail and messaging\\x1b[0m\\n------------------------------------\\n\\n[+] \\x1b[1;33mSoftware: firewalls\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking iptables kernel module\\x1b[26C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Checking iptables policies of chains\\x1b[19C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[6C- Checking chain INPUT (table: filter, policy )\\x1b[8C [ \\x1b[1;33mother\\x1b[0m ]\\n\\x1b[4C- Checking for empty ruleset\\x1b[29C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- Checking for unused rules\\x1b[30C [ \\x1b[1;33mFOUND\\x1b[0m ]\\n\\x1b[2C- Checking host based firewall\\x1b[29C [ \\x1b[1;32mACTIVE\\x1b[0m ]\\n\\n[+] \\x1b[1;33mSoftware: webserver\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking Apache\\x1b[42C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[2C- Checking nginx\\x1b[43C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mSSH Support\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking running SSH daemon\\x1b[30C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Searching SSH configuration\\x1b[28C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- SSH option: AllowTcpForwarding\\x1b[25C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- SSH option: ClientAliveCountMax\\x1b[24C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- SSH option: ClientAliveInterval\\x1b[24C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- SSH option: Compression\\x1b[32C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- SSH option: FingerprintHash\\x1b[28C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- SSH option: GatewayPorts\\x1b[31C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- SSH option: IgnoreRhosts\\x1b[31C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- SSH option: LoginGraceTime\\x1b[29C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- SSH option: LogLevel\\x1b[35C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- SSH option: MaxAuthTries\\x1b[31C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- SSH option: MaxSessions\\x1b[32C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- SSH option: PermitRootLogin\\x1b[28C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- SSH option: PermitUserEnvironment\\x1b[22C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- SSH option: PermitTunnel\\x1b[31C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- SSH option: Port\\x1b[39C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- SSH option: PrintLastLog\\x1b[31C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- SSH option: Protocol\\x1b[35C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[4C- SSH option: StrictModes\\x1b[32C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- SSH option: TCPKeepAlive\\x1b[31C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- SSH option: UseDNS\\x1b[37C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- SSH option: UsePrivilegeSeparation\\x1b[21C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[4C- SSH option: VerifyReverseMapping\\x1b[23C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[4C- SSH option: X11Forwarding\\x1b[30C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- SSH option: AllowAgentForwarding\\x1b[23C [ \\x1b[1;33mSUGGESTION\\x1b[0m ]\\n\\x1b[4C- SSH option: AllowUsers\\x1b[33C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[4C- SSH option: AllowGroups\\x1b[32C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mSNMP Support\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking running SNMP daemon\\x1b[29C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mDatabases\\x1b[0m\\n------------------------------------\\n\\x1b[4CNo database engines found\\x1b[32C\\n\\n[+] \\x1b[1;33mLDAP Services\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking OpenLDAP instance\\x1b[31C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mPHP\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking PHP\\x1b[45C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mSquid Support\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking running Squid daemon\\x1b[28C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mLogging and files\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking for a running log daemon\\x1b[24C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- Checking Syslog-NG status\\x1b[30C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[4C- Checking systemd journal status\\x1b[24C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Checking Metalog status\\x1b[32C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[4C- Checking RSyslog status\\x1b[32C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Checking RFC 3195 daemon status\\x1b[24C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[4C- Checking minilogd instances\\x1b[28C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[2C- Checking logrotate presence\\x1b[30C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[2C- Checking log directories (static list)\\x1b[19C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\x1b[2C- Checking open log files\\x1b[34C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\x1b[2C- Checking deleted files in use\\x1b[28C [ \\x1b[1;33mFILES FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mInsecure services\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking inetd status\\x1b[36C [ \\x1b[1;32mNOT ACTIVE\\x1b[0m ]\\n\\n[+] \\x1b[1;33mBanners and identification\\x1b[0m\\n------------------------------------\\n\\x1b[2C- /etc/issue\\x1b[47C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- /etc/issue contents\\x1b[36C [ \\x1b[1;33mWEAK\\x1b[0m ]\\n\\x1b[2C- /etc/issue.net\\x1b[43C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- /etc/issue.net contents\\x1b[32C [ \\x1b[1;33mWEAK\\x1b[0m ]\\n\\n[+] \\x1b[1;33mScheduled tasks\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking crontab/cronjob\\x1b[33C [ \\x1b[1;32mDONE\\x1b[0m ]\\n\\n[+] \\x1b[1;33mAccounting\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking accounting information\\x1b[26C [ \\x1b[1;33mNOT FOUND\\x1b[0m ]\\n\\x1b[2C- Checking sysstat accounting data\\x1b[25C [ \\x1b[1;33mNOT FOUND\\x1b[0m ]\\n\\x1b[2C- Checking auditd\\x1b[42C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mTime and Synchronization\\x1b[0m\\n------------------------------------\\n\\x1b[2C- NTP daemon found: systemd (timesyncd)\\x1b[20C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[2C- Checking for a running NTP daemon or client\\x1b[14C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\n[+] \\x1b[1;33mCryptography\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking for expired SSL certificates [0/4]\\x1b[14C [ \\x1b[1;32mNONE\\x1b[0m ]\\n\\n[+] \\x1b[1;33mVirtualization\\x1b[0m\\n------------------------------------\\n\\n[+] \\x1b[1;33mContainers\\x1b[0m\\n------------------------------------\\n\\x1b[4C- Docker\\x1b[49C\\n\\x1b[6C- Docker daemon\\x1b[40C [ \\x1b[1;32mRUNNING\\x1b[0m ]\\n\\x1b[8C- Docker info output (warnings)\\x1b[22C [ \\x1b[1;33m1\\x1b[0m ]\\n\\x1b[6C- Containers\\x1b[43C\\n\\x1b[8C- Total containers\\x1b[35C [ \\x1b[1;31mUNKNOWN\\x1b[0m ]\\n\\x1b[4C- File permissions\\x1b[39C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\n[+] \\x1b[1;33mSecurity frameworks\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking presence AppArmor\\x1b[31C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\x1b[4C- Checking AppArmor status\\x1b[31C [ \\x1b[1;32mENABLED\\x1b[0m ]\\n\\x1b[2C- Checking presence SELinux\\x1b[32C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[2C- Checking presence grsecurity\\x1b[29C [ \\x1b[1;37mNOT FOUND\\x1b[0m ]\\n\\x1b[2C- Checking for implemented MAC framework\\x1b[19C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\n[+] \\x1b[1;33mSoftware: file integrity\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking file integrity tools\\x1b[28C\\n\\x1b[2C- Checking presence integrity tool\\x1b[25C [ \\x1b[1;33mNOT FOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mSoftware: System tooling\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking automation tooling\\x1b[30C\\n\\x1b[2C- Automation tooling\\x1b[39C [ \\x1b[1;33mNOT FOUND\\x1b[0m ]\\n\\x1b[2C- Checking for IDS/IPS tooling\\x1b[29C [ \\x1b[1;33mNONE\\x1b[0m ]\\n\\n[+] \\x1b[1;33mSoftware: Malware\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking chkrootkit\\x1b[38C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mFile Permissions\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Starting file permissions check\\x1b[26C\\n\\n[+] \\x1b[1;33mHome directories\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Checking shell history files\\x1b[29C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\n[+] \\x1b[1;33mKernel Hardening\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Comparing sysctl key pairs with scan profile\\x1b[13C\\n\\x1b[4C- fs.protected_hardlinks (exp: 1)\\x1b[24C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- fs.protected_symlinks (exp: 1)\\x1b[25C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- fs.suid_dumpable (exp: 0)\\x1b[30C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- kernel.core_uses_pid (exp: 1)\\x1b[26C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- kernel.ctrl-alt-del (exp: 0)\\x1b[27C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- kernel.dmesg_restrict (exp: 1)\\x1b[25C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- kernel.kptr_restrict (exp: 2)\\x1b[26C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- kernel.randomize_va_space (exp: 2)\\x1b[21C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- kernel.sysrq (exp: 0)\\x1b[34C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- kernel.yama.ptrace_scope (exp: 1 2 3)\\x1b[18C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.all.accept_redirects (exp: 0)\\x1b[12C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.all.accept_source_route (exp: 0)\\x1b[9C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.all.bootp_relay (exp: 0)\\x1b[17C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.all.forwarding (exp: 0)\\x1b[18C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.all.log_martians (exp: 1)\\x1b[16C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.all.mc_forwarding (exp: 0)\\x1b[15C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.all.proxy_arp (exp: 0)\\x1b[19C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.all.rp_filter (exp: 1)\\x1b[19C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.all.send_redirects (exp: 0)\\x1b[14C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.default.accept_redirects (exp: 0)\\x1b[8C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.default.accept_source_route (exp: 0)\\x1b[5C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- net.ipv4.conf.default.log_martians (exp: 1)\\x1b[12C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- net.ipv4.icmp_echo_ignore_broadcasts (exp: 1)\\x1b[10C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv4.icmp_ignore_bogus_error_responses (exp: 1)\\x1b[4C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv4.tcp_syncookies (exp: 1)\\x1b[23C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv4.tcp_timestamps (exp: 0 1)\\x1b[21C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv6.conf.all.accept_redirects (exp: 0)\\x1b[12C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- net.ipv6.conf.all.accept_source_route (exp: 0)\\x1b[9C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\x1b[4C- net.ipv6.conf.default.accept_redirects (exp: 0)\\x1b[8C [ \\x1b[1;31mDIFFERENT\\x1b[0m ]\\n\\x1b[4C- net.ipv6.conf.default.accept_source_route (exp: 0)\\x1b[5C [ \\x1b[1;32mOK\\x1b[0m ]\\n\\n[+] \\x1b[1;33mHardening\\x1b[0m\\n------------------------------------\\n\\x1b[4C- Installed compiler(s)\\x1b[34C [ \\x1b[1;31mFOUND\\x1b[0m ]\\n\\x1b[4C- Installed malware scanner\\x1b[30C [ \\x1b[1;32mFOUND\\x1b[0m ]\\n\\n[+] \\x1b[1;33mCustom Tests\\x1b[0m\\n------------------------------------\\n\\x1b[2C- Running custom tests... \\x1b[33C [ \\x1b[1;37mNONE\\x1b[0m ]\\n\\n[+] \\x1b[1;35mPlugins (phase 2)\\x1b[0m\\n------------------------------------\\n\\n================================================================================\\n\\n  -[ \\x1b[1;37mLynis 2.6.2 Results\\x1b[0m ]-\\n\\n  \\x1b[1;31mWarnings\\x1b[0m (3):\\n  \\x1b[1;37m----------------------------\\x1b[0m\\n  \\x1b[1;31m!\\x1b[0m Version of Lynis is very old and should be updated [LYNIS] \\n      https://cisofy.com/controls/LYNIS/\\n\\n  \\x1b[1;31m!\\x1b[0m No password set for single mode [AUTH-9308] \\n      https://cisofy.com/controls/AUTH-9308/\\n\\n  \\x1b[1;31m!\\x1b[0m Couldn't find 2 responsive nameservers [NETW-2705] \\n      https://cisofy.com/controls/NETW-2705/\\n\\n  \\x1b[1;33mSuggestions\\x1b[0m (49):\\n  \\x1b[1;37m----------------------------\\x1b[0m\\n  \\x1b[1;33m*\\x1b[0m Install libpam-tmpdir to set $TMP and $TMPDIR for PAM sessions [CUST-0280] \\n      \\x1b[0;37mhttps://your-domain.example.org/controls/CUST-0280/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install libpam-usb to enable multi-factor authentication for PAM sessions [CUST-0285] \\n      \\x1b[0;37mhttps://your-domain.example.org/controls/CUST-0285/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install apt-listbugs to display a list of critical bugs prior to each APT installation. [CUST-0810] \\n      \\x1b[0;37mhttps://your-domain.example.org/controls/CUST-0810/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install apt-listchanges to display any significant changes prior to any upgrade via APT. [CUST-0811] \\n      \\x1b[0;37mhttps://your-domain.example.org/controls/CUST-0811/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install debian-goodies so that you can run checkrestart after upgrades to determine which services are using old versions of libraries and need restarting. [CUST-0830] \\n      \\x1b[0;37mhttps://your-domain.example.org/controls/CUST-0830/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install needrestart, alternatively to debian-goodies, so that you can run needrestart after upgrades to determine which daemons are using old versions of libraries and need restarting. [CUST-0831] \\n      \\x1b[0;37mhttps://your-domain.example.org/controls/CUST-0831/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install debsecan to generate lists of vulnerabilities which affect this installation. [CUST-0870] \\n      \\x1b[0;37mhttps://your-domain.example.org/controls/CUST-0870/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install debsums for the verification of installed package files against MD5 checksums. [CUST-0875] \\n      \\x1b[0;37mhttps://your-domain.example.org/controls/CUST-0875/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install fail2ban to automatically ban hosts that commit multiple authentication errors. [DEB-0880] \\n      \\x1b[0;37mhttps://cisofy.com/controls/DEB-0880/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Set a password on GRUB bootloader to prevent altering boot configuration (e.g. boot in single user mode without password) [BOOT-5122] \\n      \\x1b[0;37mhttps://cisofy.com/controls/BOOT-5122/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install a PAM module for password strength testing like pam_cracklib or pam_passwdqc [AUTH-9262] \\n      \\x1b[0;37mhttps://cisofy.com/controls/AUTH-9262/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Configure minimum password age in /etc/login.defs [AUTH-9286] \\n      \\x1b[0;37mhttps://cisofy.com/controls/AUTH-9286/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Configure maximum password age in /etc/login.defs [AUTH-9286] \\n      \\x1b[0;37mhttps://cisofy.com/controls/AUTH-9286/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Set password for single user mode to minimize physical access attack surface [AUTH-9308] \\n      \\x1b[0;37mhttps://cisofy.com/controls/AUTH-9308/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Default umask in /etc/login.defs could be more strict like 027 [AUTH-9328] \\n      \\x1b[0;37mhttps://cisofy.com/controls/AUTH-9328/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m To decrease the impact of a full /tmp file system, place /tmp on a separated partition [FILE-6310] \\n      \\x1b[0;37mhttps://cisofy.com/controls/FILE-6310/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m To decrease the impact of a full /var file system, place /var on a separated partition [FILE-6310] \\n      \\x1b[0;37mhttps://cisofy.com/controls/FILE-6310/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Disable drivers like USB storage when not used, to prevent unauthorized storage or data theft [STRG-1840] \\n      \\x1b[0;37mhttps://cisofy.com/controls/STRG-1840/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Check DNS configuration for the dns domain name [NAME-4028] \\n      \\x1b[0;37mhttps://cisofy.com/controls/NAME-4028/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Purge old/removed packages (106 found) with aptitude purge or dpkg --purge command. This will cleanup old configuration files, cron jobs and startup scripts. [PKGS-7346] \\n      \\x1b[0;37mhttps://cisofy.com/controls/PKGS-7346/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install debsums utility for the verification of packages with known good database. [PKGS-7370] \\n      \\x1b[0;37mhttps://cisofy.com/controls/PKGS-7370/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install package apt-show-versions for patch management purposes [PKGS-7394] \\n      \\x1b[0;37mhttps://cisofy.com/controls/PKGS-7394/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Check your resolv.conf file and fill in a backup nameserver if possible [NETW-2705] \\n      \\x1b[0;37mhttps://cisofy.com/controls/NETW-2705/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider running ARP monitoring software (arpwatch,arpon) [NETW-3032] \\n      \\x1b[0;37mhttps://cisofy.com/controls/NETW-3032/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Access to CUPS configuration could be more strict. [PRNT-2307] \\n      \\x1b[0;37mhttps://cisofy.com/controls/PRNT-2307/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Check iptables rules to see which rules are currently not used [FIRE-4513] \\n      \\x1b[0;37mhttps://cisofy.com/controls/FIRE-4513/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider hardening SSH configuration [SSH-7408] \\n    - Details  : \\x1b[0;36mAllowTcpForwarding (YES --> NO)\\x1b[0m\\n      \\x1b[0;37mhttps://cisofy.com/controls/SSH-7408/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider hardening SSH configuration [SSH-7408] \\n    - Details  : \\x1b[0;36mClientAliveCountMax (3 --> 2)\\x1b[0m\\n      \\x1b[0;37mhttps://cisofy.com/controls/SSH-7408/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider hardening SSH configuration [SSH-7408] \\n    - Details  : \\x1b[0;36mCompression (YES --> (DELAYED|NO))\\x1b[0m\\n      \\x1b[0;37mhttps://cisofy.com/controls/SSH-7408/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider hardening SSH configuration [SSH-7408] \\n    - Details  : \\x1b[0;36mLogLevel (INFO --> VERBOSE)\\x1b[0m\\n      \\x1b[0;37mhttps://cisofy.com/controls/SSH-7408/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider hardening SSH configuration [SSH-7408] \\n    - Details  : \\x1b[0;36mMaxAuthTries (6 --> 2)\\x1b[0m\\n      \\x1b[0;37mhttps://cisofy.com/controls/SSH-7408/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider hardening SSH configuration [SSH-7408] \\n    - Details  : \\x1b[0;36mMaxSessions (10 --> 2)\\x1b[0m\\n      \\x1b[0;37mhttps://cisofy.com/controls/SSH-7408/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider hardening SSH configuration [SSH-7408] \\n    - Details  : \\x1b[0;36mPermitRootLogin (WITHOUT-PASSWORD --> NO)\\x1b[0m\\n      \\x1b[0;37mhttps://cisofy.com/controls/SSH-7408/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider hardening SSH configuration [SSH-7408] \\n    - Details  : \\x1b[0;36mPort (22 --> )\\x1b[0m\\n      \\x1b[0;37mhttps://cisofy.com/controls/SSH-7408/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider hardening SSH configuration [SSH-7408] \\n    - Details  : \\x1b[0;36mTCPKeepAlive (YES --> NO)\\x1b[0m\\n      \\x1b[0;37mhttps://cisofy.com/controls/SSH-7408/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider hardening SSH configuration [SSH-7408] \\n    - Details  : \\x1b[0;36mX11Forwarding (YES --> NO)\\x1b[0m\\n      \\x1b[0;37mhttps://cisofy.com/controls/SSH-7408/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Consider hardening SSH configuration [SSH-7408] \\n    - Details  : \\x1b[0;36mAllowAgentForwarding (YES --> NO)\\x1b[0m\\n      \\x1b[0;37mhttps://cisofy.com/controls/SSH-7408/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Check what deleted files are still in use and why. [LOGG-2190] \\n      \\x1b[0;37mhttps://cisofy.com/controls/LOGG-2190/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Add a legal banner to /etc/issue, to warn unauthorized users [BANN-7126] \\n      \\x1b[0;37mhttps://cisofy.com/controls/BANN-7126/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Add legal banner to /etc/issue.net, to warn unauthorized users [BANN-7130] \\n      \\x1b[0;37mhttps://cisofy.com/controls/BANN-7130/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Enable process accounting [ACCT-9622] \\n      \\x1b[0;37mhttps://cisofy.com/controls/ACCT-9622/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Enable sysstat to collect accounting (no results) [ACCT-9626] \\n      \\x1b[0;37mhttps://cisofy.com/controls/ACCT-9626/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Enable auditd to collect audit information [ACCT-9628] \\n      \\x1b[0;37mhttps://cisofy.com/controls/ACCT-9628/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Run 'docker info' to see warnings applicable to Docker daemon [CONT-8104] \\n      \\x1b[0;37mhttps://cisofy.com/controls/CONT-8104/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Test output of both 'docker ps -a' and 'docker info', to determine why they report a different amount of containers [CONT-8106] \\n      \\x1b[0;37mhttps://cisofy.com/controls/CONT-8106/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Install a file integrity tool to monitor changes to critical and sensitive files [FINT-4350] \\n      \\x1b[0;37mhttps://cisofy.com/controls/FINT-4350/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Determine if automation tools are present for system management [TOOL-5002] \\n      \\x1b[0;37mhttps://cisofy.com/controls/TOOL-5002/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m One or more sysctl values differ from the scan profile and could be tweaked [KRNL-6000] \\n    - Solution : Change sysctl value or disable test (skip-test=KRNL-6000:<sysctl-key>)\\n      \\x1b[0;37mhttps://cisofy.com/controls/KRNL-6000/\\x1b[0m\\n\\n  \\x1b[1;33m*\\x1b[0m Harden compilers like restricting access to root user only [HRDN-7222] \\n      \\x1b[0;37mhttps://cisofy.com/controls/HRDN-7222/\\x1b[0m\\n\\n  \\x1b[0;36mFollow-up\\x1b[0m:\\n  \\x1b[1;37m----------------------------\\x1b[0m\\n  \\x1b[1;37m-\\x1b[0m Show details of a test (lynis show details TEST-ID)\\n  \\x1b[1;37m-\\x1b[0m Check the logfile for all details (less /var/log/lynis.log)\\n  \\x1b[1;37m-\\x1b[0m Read security controls texts (https://cisofy.com)\\n  \\x1b[1;37m-\\x1b[0m Use --upload to upload data to central system (Lynis Enterprise users)\\n\\n================================================================================\\n\\n  \\x1b[1;37mLynis security scan details\\x1b[0m:\\n\\n  \\x1b[0;36mHardening index\\x1b[0m : \\x1b[1;37m60\\x1b[0m [\\x1b[1;33m############\\x1b[0m        ]\\n  \\x1b[0;36mTests performed\\x1b[0m : \\x1b[1;37m225\\x1b[0m\\n  \\x1b[0;36mPlugins enabled\\x1b[0m : \\x1b[1;37m1\\x1b[0m\\n\\n  \\x1b[1;37mComponents\\x1b[0m:\\n  - Firewall               [\\x1b[1;32mV\\x1b[0m]\\n  - Malware scanner        [\\x1b[1;32mV\\x1b[0m]\\n\\n  \\x1b[1;33mLynis Modules\\x1b[0m:\\n  - Compliance Status      [\\x1b[1;33m?\\x1b[0m]\\n  - Security Audit         [\\x1b[1;32mV\\x1b[0m]\\n  - Vulnerability Scan     [\\x1b[1;32mV\\x1b[0m]\\n\\n  \\x1b[1;33mFiles\\x1b[0m:\\n  - Test and debug information      : \\x1b[1;37m/var/log/lynis.log\\x1b[0m\\n  - Report data                     : \\x1b[1;37m/var/log/lynis-report.dat\\x1b[0m\\n\\n================================================================================\\n  \\x1b[1;33mNotice: \\x1b[1;37mLynis update available\\x1b[0m\\n  Current version : \\x1b[1;37m262\\x1b[0m    Latest version : \\x1b[1;37m308\\x1b[0m\\n================================================================================\\n\\n  \\x1b[1;37mLynis\\x1b[0m 2.6.2\\n\\n  Auditing, system hardening, and compliance for UNIX-based systems\\n  (Linux, macOS, BSD, and others)\\n\\n  2007-2018, CISOfy - https://cisofy.com/lynis/\\n  \\x1b[1;37mEnterprise support available (compliance, plugins, interface and tools)\\x1b[0m\\n\\n================================================================================\\n\\n  \\x1b[0;44m[TIP]\\x1b[0m: \\x1b[0;94mEnhance Lynis audits by adding your settings to custom.prf (see /etc/lynis/default.prf for all settings)\\x1b[0m\\n\\n\""
     },
     "execution_count": 252,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "audit_op"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 272,
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "\n",
      "\u001B[1;37m[ Lynis 2.6.2 ]\u001B[0m\n",
      "\n",
      "################################################################################\n",
      "  Lynis comes with ABSOLUTELY NO WARRANTY. This is free software, and you are\n",
      "  welcome to redistribute it under the terms of the GNU General Public License.\n",
      "  See the LICENSE file for details about using this software.\n",
      "\n",
      "  2007-2018, CISOfy - https://cisofy.com/lynis/\n",
      "  Enterprise support available (compliance, plugins, interface and tools)\n",
      "################################################################################\n",
      "\n",
      "\n",
      "[+] \u001B[1;33mInitializing program\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Detecting OS... \u001B[41C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\u001B[2C- Checking profiles...\u001B[37C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\n",
      "  ---------------------------------------------------\n",
      "  Program version:           2.6.2\n",
      "  Operating system:          Linux\n",
      "  Operating system name:     Ubuntu Linux\n",
      "  Operating system version:  18.04\n",
      "  Kernel version:            5.4.0\n",
      "  Hardware platform:         x86_64\n",
      "  Hostname:                  linuxadmin-System-Product-Name\n",
      "  ---------------------------------------------------\n",
      "  Profiles:                  /etc/lynis/default.prf\n",
      "  Log file:                  /var/log/lynis.log\n",
      "  Report file:               /var/log/lynis-report.dat\n",
      "  Report version:            1.0\n",
      "  Plugin directory:          /etc/lynis/plugins\n",
      "  ---------------------------------------------------\n",
      "  Auditor:                   [Not Specified]\n",
      "  Language:                  en\n",
      "  Test category:             all\n",
      "  Test group:                all\n",
      "  ---------------------------------------------------\n",
      "\u001B[2C- Program update status... \u001B[32C [ \u001B[1;31mWARNING\u001B[0m ]\n",
      "\n",
      "      ===============================================================================\n",
      "        \u001B[0;36mLynis update available\u001B[0m\n",
      "      ===============================================================================\n",
      "\n",
      "        \u001B[1;33mCurrent version is more than 4 months old\u001B[0m\n",
      "\n",
      "        Current version : \u001B[1;33m262\u001B[0m   Latest version : \u001B[1;32m308\u001B[0m\n",
      "\n",
      "        \u001B[1;37mPlease update to the latest version.\u001B[0m\n",
      "        New releases include additional features, bug fixes, tests, and baselines.\u001B[0m\n",
      "\n",
      "        Download the latest version:\n",
      "\n",
      "        Packages (DEB/RPM) -  https://packages.cisofy.com\n",
      "        Website (TAR)      -  https://cisofy.com/downloads/\n",
      "        GitHub (source)    -  https://github.com/CISOfy/lynis\n",
      "\n",
      "      ===============================================================================\n",
      "\n",
      "\n",
      "[+] \u001B[1;33mSystem Tools\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Scanning available tools...\u001B[30C\n",
      "\u001B[2C- Checking system binaries...\u001B[30C\n",
      "\n",
      "[+] \u001B[1;35mPlugins (phase 1)\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[0CNote: plugins have more extensive tests and may take several minutes to complete\u001B[0C\n",
      "\u001B[0C \u001B[0C\n",
      "\u001B[2C- \u001B[0;36mPlugin\u001B[0m: \u001B[1;37mdebian\u001B[0m\u001B[21C\n",
      "    [\n",
      "[+] \u001B[1;33mDebian Tests\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking for system binaries that are required by Debian Tests...\u001B[0C\n",
      "\u001B[4C- Checking /bin... \u001B[38C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Checking /sbin... \u001B[37C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Checking /usr/bin... \u001B[34C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Checking /usr/sbin... \u001B[33C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Checking /usr/local/bin... \u001B[28C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Checking /usr/local/sbin... \u001B[27C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- Authentication:\u001B[42C\n",
      "\u001B[4C- PAM (Pluggable Authentication Modules):\u001B[16C\n",
      "\u001B[6C- libpam-tmpdir\u001B[40C [ \u001B[1;31mNot Installed\u001B[0m ]\n",
      "\u001B[6C- libpam-usb\u001B[43C [ \u001B[1;31mNot Installed\u001B[0m ]\n",
      "\u001B[2C- File System Checks:\u001B[38C\n",
      "\u001B[4C- DM-Crypt, Cryptsetup & Cryptmount:\u001B[21C\n",
      "\u001B[2C- Software:\u001B[48C\n",
      "\u001B[4C- apt-listbugs\u001B[43C [ \u001B[1;31mNot Installed\u001B[0m ]\n",
      "\u001B[4C- apt-listchanges\u001B[40C [ \u001B[1;31mNot Installed\u001B[0m ]\n",
      "\u001B[4C- checkrestart\u001B[43C [ \u001B[1;31mNot Installed\u001B[0m ]\n",
      "\u001B[4C- needrestart\u001B[44C [ \u001B[1;31mNot Installed\u001B[0m ]\n",
      "\u001B[4C- debsecan\u001B[47C [ \u001B[1;31mNot Installed\u001B[0m ]\n",
      "\u001B[4C- debsums\u001B[48C [ \u001B[1;31mNot Installed\u001B[0m ]\n",
      "\u001B[4C- fail2ban\u001B[47C [ \u001B[1;31mNot Installed\u001B[0m ]\n",
      "]\n",
      "\n",
      "[+] \u001B[1;33mBoot and services\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Service Manager\u001B[42C [ \u001B[1;32msystemd\u001B[0m ]\n",
      "\u001B[2C- Checking UEFI boot\u001B[39C [ \u001B[1;37mDISABLED\u001B[0m ]\n",
      "\u001B[2C- Checking presence GRUB2\u001B[34C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Checking for password protection\u001B[23C [ \u001B[1;31mWARNING\u001B[0m ]\n",
      "\u001B[2C- Check running services (systemctl)\u001B[23C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\u001B[8CResult: found 39 running services\u001B[20C\n",
      "\u001B[2C- Check enabled services at boot (systemctl)\u001B[15C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\u001B[8CResult: found 61 enabled services\u001B[20C\n",
      "\u001B[2C- Check startup files (permissions)\u001B[24C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mKernel\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking default runlevel\u001B[32C [ \u001B[1;32mrunlevel 5\u001B[0m ]\n",
      "\u001B[2C- Checking CPU support (NX/PAE)\u001B[28C\n",
      "\u001B[4CCPU support: PAE and/or NoeXecute supported\u001B[14C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- Checking kernel version and release\u001B[22C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\u001B[2C- Checking kernel type\u001B[37C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\u001B[2C- Checking loaded kernel modules\u001B[27C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\u001B[6CFound 132 active modules\u001B[31C\n",
      "\u001B[2C- Checking Linux kernel configuration file\u001B[17C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- Checking default I/O kernel scheduler\u001B[20C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[2C- Checking for available kernel update\u001B[21C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Checking core dumps configuration\u001B[24C [ \u001B[1;32mDISABLED\u001B[0m ]\n",
      "\u001B[4C- Checking setuid core dumps configuration\u001B[15C [ \u001B[1;32mPROTECTED\u001B[0m ]\n",
      "\u001B[2C- Check if reboot is needed\u001B[32C [ \u001B[1;32mNO\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mMemory and Processes\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking /proc/meminfo\u001B[35C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- Searching for dead/zombie processes\u001B[22C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Searching for IO waiting processes\u001B[23C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mUsers, Groups and Authentication\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Administrator accounts\u001B[35C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Unique UIDs\u001B[46C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Consistency of group files (grpck)\u001B[23C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Unique group IDs\u001B[41C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Unique group names\u001B[39C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Password file consistency\u001B[32C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Query system users (non daemons)\u001B[25C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\u001B[2C- NIS+ authentication support\u001B[30C [ \u001B[1;37mNOT ENABLED\u001B[0m ]\n",
      "\u001B[2C- NIS authentication support\u001B[31C [ \u001B[1;37mNOT ENABLED\u001B[0m ]\n",
      "\u001B[2C- sudoers file\u001B[45C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Check sudoers file permissions\u001B[25C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- PAM password strength tools\u001B[30C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[2C- PAM configuration files (pam.conf)\u001B[23C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- PAM configuration files (pam.d)\u001B[26C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- PAM modules\u001B[46C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- LDAP module in PAM\u001B[39C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[2C- Accounts without expire date\u001B[29C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Accounts without password\u001B[32C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Checking user password aging (minimum)\u001B[19C [ \u001B[1;33mDISABLED\u001B[0m ]\n",
      "\u001B[2C- User password aging (maximum)\u001B[28C [ \u001B[1;33mDISABLED\u001B[0m ]\n",
      "\u001B[2C- Checking expired passwords\u001B[31C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Checking Linux single user mode authentication\u001B[11C [ \u001B[1;31mWARNING\u001B[0m ]\n",
      "\u001B[2C- Determining default umask\u001B[32C\n",
      "\u001B[4C- umask (/etc/profile)\u001B[35C [ \u001B[1;33mNOT FOUND\u001B[0m ]\n",
      "\u001B[4C- umask (/etc/login.defs)\u001B[32C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[2C- LDAP authentication support\u001B[30C [ \u001B[1;37mNOT ENABLED\u001B[0m ]\n",
      "\u001B[2C- Logging failed login attempts\u001B[28C [ \u001B[1;32mENABLED\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mShells\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking shells from /etc/shells\u001B[25C\n",
      "\u001B[4CResult: found 4 shells (valid shells: 4).\u001B[16C\n",
      "\u001B[4C- Session timeout settings/tools\u001B[25C [ \u001B[1;33mNONE\u001B[0m ]\n",
      "\u001B[2C- Checking default umask values\u001B[28C\n",
      "\u001B[4C- Checking default umask in /etc/bash.bashrc\u001B[13C [ \u001B[1;33mNONE\u001B[0m ]\n",
      "\u001B[4C- Checking default umask in /etc/profile\u001B[17C [ \u001B[1;33mNONE\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mFile systems\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking mount points\u001B[36C\n",
      "\u001B[4C- Checking /home mount point\u001B[29C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- Checking /tmp mount point\u001B[30C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- Checking /var mount point\u001B[30C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[2C- Query swap partitions (fstab)\u001B[28C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Testing swap partitions\u001B[34C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Testing /proc mount (hidepid)\u001B[28C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[2C- Checking for old files in /tmp\u001B[27C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Checking /tmp sticky bit\u001B[33C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Checking /var/tmp sticky bit\u001B[29C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- ACL support root file system\u001B[29C [ \u001B[1;32mENABLED\u001B[0m ]\n",
      "\u001B[2C- Mount options of /\u001B[39C [ \u001B[1;33mNON DEFAULT\u001B[0m ]\n",
      "\u001B[2C- Mount options of /home\u001B[35C [ \u001B[1;33mNON DEFAULT\u001B[0m ]\n",
      "\u001B[2C- Checking Locate database\u001B[33C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- Disable kernel support of some filesystems\u001B[15C\n",
      "\u001B[4C- Discovered kernel modules: cramfs freevxfs jffs2 udf \u001B[2C\n",
      "\n",
      "[+] \u001B[1;33mUSB Devices\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking usb-storage driver (modprobe config)\u001B[12C [ \u001B[1;37mNOT DISABLED\u001B[0m ]\n",
      "\u001B[2C- Checking USB devices authorization\u001B[23C [ \u001B[1;33mENABLED\u001B[0m ]\n",
      "\u001B[2C- Checking USBGuard\u001B[40C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mStorage\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking firewire ohci driver (modprobe config)\u001B[10C [ \u001B[1;32mDISABLED\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mNFS\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Check running NFS daemon\u001B[33C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mName services\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking search domains\u001B[34C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- Checking /etc/resolv.conf options\u001B[24C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- Searching DNS domain name\u001B[32C [ \u001B[1;33mUNKNOWN\u001B[0m ]\n",
      "\u001B[2C- Checking /etc/hosts\u001B[38C\n",
      "\u001B[4C- Checking /etc/hosts (duplicates)\u001B[23C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- Checking /etc/hosts (hostname)\u001B[25C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- Checking /etc/hosts (localhost)\u001B[24C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- Checking /etc/hosts (localhost to IP)\u001B[18C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mPorts and packages\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Searching package managers\u001B[31C\n",
      "\u001B[4C- Searching dpkg package manager\u001B[25C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[6C- Querying package manager\u001B[29C\n",
      "\u001B[4C- Query unpurged packages\u001B[32C [ \u001B[1;33mFOUND\u001B[0m ]\n",
      "\u001B[2C- Checking security repository in sources.list file\u001B[8C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Checking APT package database\u001B[28C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Checking vulnerable packages\u001B[29C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Checking upgradeable packages\u001B[28C [ \u001B[1;37mSKIPPED\u001B[0m ]\n",
      "\u001B[2C- Checking package audit tool\u001B[30C [ \u001B[1;32mINSTALLED\u001B[0m ]\n",
      "\u001B[4CFound: apt-check\u001B[41C\n",
      "\n",
      "[+] \u001B[1;33mNetworking\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking IPv6 configuration\u001B[30C [ \u001B[1;37mENABLED\u001B[0m ]\n",
      "\u001B[6CConfiguration method\u001B[35C [ \u001B[1;37mAUTO\u001B[0m ]\n",
      "\u001B[6CIPv6 only\u001B[46C [ \u001B[1;37mNO\u001B[0m ]\n",
      "\u001B[2C- Checking configured nameservers\u001B[26C\n",
      "\u001B[4C- Testing nameservers\u001B[36C\n",
      "\u001B[8CNameserver: 127.0.0.53\u001B[31C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- Minimal of 2 responsive nameservers\u001B[20C [ \u001B[1;31mWARNING\u001B[0m ]\n",
      "\u001B[2C- Checking default gateway\u001B[33C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\u001B[2C- Getting listening ports (TCP/UDP)\u001B[24C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\u001B[6C* Found 40 ports\u001B[39C\n",
      "\u001B[2C- Checking promiscuous interfaces\u001B[26C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Checking waiting connections\u001B[29C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Checking status DHCP client\u001B[30C [ \u001B[1;37mRUNNING\u001B[0m ]\n",
      "\u001B[2C- Checking for ARP monitoring software\u001B[21C [ \u001B[1;33mNOT FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mPrinters and Spools\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking cups daemon\u001B[37C [ \u001B[1;32mRUNNING\u001B[0m ]\n",
      "\u001B[2C- Checking CUPS configuration file\u001B[25C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- File permissions\u001B[39C [ \u001B[1;31mWARNING\u001B[0m ]\n",
      "\u001B[2C- Checking CUPS addresses/sockets\u001B[26C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- Checking lp daemon\u001B[39C [ \u001B[1;37mNOT RUNNING\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mSoftware: e-mail and messaging\u001B[0m\n",
      "------------------------------------\n",
      "\n",
      "[+] \u001B[1;33mSoftware: firewalls\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking iptables kernel module\u001B[26C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Checking iptables policies of chains\u001B[19C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[6C- Checking chain INPUT (table: filter, policy )\u001B[8C [ \u001B[1;33mother\u001B[0m ]\n",
      "\u001B[4C- Checking for empty ruleset\u001B[29C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- Checking for unused rules\u001B[30C [ \u001B[1;33mFOUND\u001B[0m ]\n",
      "\u001B[2C- Checking host based firewall\u001B[29C [ \u001B[1;32mACTIVE\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mSoftware: webserver\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking Apache\u001B[42C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[2C- Checking nginx\u001B[43C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mSSH Support\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking running SSH daemon\u001B[30C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Searching SSH configuration\u001B[28C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- SSH option: AllowTcpForwarding\u001B[25C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- SSH option: ClientAliveCountMax\u001B[24C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- SSH option: ClientAliveInterval\u001B[24C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- SSH option: Compression\u001B[32C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- SSH option: FingerprintHash\u001B[28C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- SSH option: GatewayPorts\u001B[31C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- SSH option: IgnoreRhosts\u001B[31C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- SSH option: LoginGraceTime\u001B[29C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- SSH option: LogLevel\u001B[35C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- SSH option: MaxAuthTries\u001B[31C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- SSH option: MaxSessions\u001B[32C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- SSH option: PermitRootLogin\u001B[28C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- SSH option: PermitUserEnvironment\u001B[22C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- SSH option: PermitTunnel\u001B[31C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- SSH option: Port\u001B[39C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- SSH option: PrintLastLog\u001B[31C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- SSH option: Protocol\u001B[35C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[4C- SSH option: StrictModes\u001B[32C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- SSH option: TCPKeepAlive\u001B[31C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- SSH option: UseDNS\u001B[37C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- SSH option: UsePrivilegeSeparation\u001B[21C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[4C- SSH option: VerifyReverseMapping\u001B[23C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[4C- SSH option: X11Forwarding\u001B[30C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- SSH option: AllowAgentForwarding\u001B[23C [ \u001B[1;33mSUGGESTION\u001B[0m ]\n",
      "\u001B[4C- SSH option: AllowUsers\u001B[33C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[4C- SSH option: AllowGroups\u001B[32C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mSNMP Support\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking running SNMP daemon\u001B[29C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mDatabases\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[4CNo database engines found\u001B[32C\n",
      "\n",
      "[+] \u001B[1;33mLDAP Services\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking OpenLDAP instance\u001B[31C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mPHP\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking PHP\u001B[45C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mSquid Support\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking running Squid daemon\u001B[28C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mLogging and files\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking for a running log daemon\u001B[24C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- Checking Syslog-NG status\u001B[30C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[4C- Checking systemd journal status\u001B[24C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Checking Metalog status\u001B[32C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[4C- Checking RSyslog status\u001B[32C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Checking RFC 3195 daemon status\u001B[24C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[4C- Checking minilogd instances\u001B[28C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[2C- Checking logrotate presence\u001B[30C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[2C- Checking log directories (static list)\u001B[19C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\u001B[2C- Checking open log files\u001B[34C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\u001B[2C- Checking deleted files in use\u001B[28C [ \u001B[1;33mFILES FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mInsecure services\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking inetd status\u001B[36C [ \u001B[1;32mNOT ACTIVE\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mBanners and identification\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- /etc/issue\u001B[47C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- /etc/issue contents\u001B[36C [ \u001B[1;33mWEAK\u001B[0m ]\n",
      "\u001B[2C- /etc/issue.net\u001B[43C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- /etc/issue.net contents\u001B[32C [ \u001B[1;33mWEAK\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mScheduled tasks\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking crontab/cronjob\u001B[33C [ \u001B[1;32mDONE\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mAccounting\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking accounting information\u001B[26C [ \u001B[1;33mNOT FOUND\u001B[0m ]\n",
      "\u001B[2C- Checking sysstat accounting data\u001B[25C [ \u001B[1;33mNOT FOUND\u001B[0m ]\n",
      "\u001B[2C- Checking auditd\u001B[42C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mTime and Synchronization\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- NTP daemon found: systemd (timesyncd)\u001B[20C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[2C- Checking for a running NTP daemon or client\u001B[14C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mCryptography\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking for expired SSL certificates [0/4]\u001B[14C [ \u001B[1;32mNONE\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mVirtualization\u001B[0m\n",
      "------------------------------------\n",
      "\n",
      "[+] \u001B[1;33mContainers\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[4C- Docker\u001B[49C\n",
      "\u001B[6C- Docker daemon\u001B[40C [ \u001B[1;32mRUNNING\u001B[0m ]\n",
      "\u001B[8C- Docker info output (warnings)\u001B[22C [ \u001B[1;33m1\u001B[0m ]\n",
      "\u001B[6C- Containers\u001B[43C\n",
      "\u001B[8C- Total containers\u001B[35C [ \u001B[1;31mUNKNOWN\u001B[0m ]\n",
      "\u001B[4C- File permissions\u001B[39C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mSecurity frameworks\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking presence AppArmor\u001B[31C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\u001B[4C- Checking AppArmor status\u001B[31C [ \u001B[1;32mENABLED\u001B[0m ]\n",
      "\u001B[2C- Checking presence SELinux\u001B[32C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[2C- Checking presence grsecurity\u001B[29C [ \u001B[1;37mNOT FOUND\u001B[0m ]\n",
      "\u001B[2C- Checking for implemented MAC framework\u001B[19C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mSoftware: file integrity\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking file integrity tools\u001B[28C\n",
      "\u001B[2C- Checking presence integrity tool\u001B[25C [ \u001B[1;33mNOT FOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mSoftware: System tooling\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking automation tooling\u001B[30C\n",
      "\u001B[2C- Automation tooling\u001B[39C [ \u001B[1;33mNOT FOUND\u001B[0m ]\n",
      "\u001B[2C- Checking for IDS/IPS tooling\u001B[29C [ \u001B[1;33mNONE\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mSoftware: Malware\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking chkrootkit\u001B[38C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mFile Permissions\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Starting file permissions check\u001B[26C\n",
      "\n",
      "[+] \u001B[1;33mHome directories\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Checking shell history files\u001B[29C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mKernel Hardening\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Comparing sysctl key pairs with scan profile\u001B[13C\n",
      "\u001B[4C- fs.protected_hardlinks (exp: 1)\u001B[24C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- fs.protected_symlinks (exp: 1)\u001B[25C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- fs.suid_dumpable (exp: 0)\u001B[30C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- kernel.core_uses_pid (exp: 1)\u001B[26C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- kernel.ctrl-alt-del (exp: 0)\u001B[27C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- kernel.dmesg_restrict (exp: 1)\u001B[25C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- kernel.kptr_restrict (exp: 2)\u001B[26C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- kernel.randomize_va_space (exp: 2)\u001B[21C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- kernel.sysrq (exp: 0)\u001B[34C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- kernel.yama.ptrace_scope (exp: 1 2 3)\u001B[18C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.all.accept_redirects (exp: 0)\u001B[12C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.all.accept_source_route (exp: 0)\u001B[9C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.all.bootp_relay (exp: 0)\u001B[17C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.all.forwarding (exp: 0)\u001B[18C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.all.log_martians (exp: 1)\u001B[16C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.all.mc_forwarding (exp: 0)\u001B[15C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.all.proxy_arp (exp: 0)\u001B[19C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.all.rp_filter (exp: 1)\u001B[19C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.all.send_redirects (exp: 0)\u001B[14C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.default.accept_redirects (exp: 0)\u001B[8C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.default.accept_source_route (exp: 0)\u001B[5C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.conf.default.log_martians (exp: 1)\u001B[12C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.icmp_echo_ignore_broadcasts (exp: 1)\u001B[10C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.icmp_ignore_bogus_error_responses (exp: 1)\u001B[4C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.tcp_syncookies (exp: 1)\u001B[23C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv4.tcp_timestamps (exp: 0 1)\u001B[21C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv6.conf.all.accept_redirects (exp: 0)\u001B[12C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- net.ipv6.conf.all.accept_source_route (exp: 0)\u001B[9C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\u001B[4C- net.ipv6.conf.default.accept_redirects (exp: 0)\u001B[8C [ \u001B[1;31mDIFFERENT\u001B[0m ]\n",
      "\u001B[4C- net.ipv6.conf.default.accept_source_route (exp: 0)\u001B[5C [ \u001B[1;32mOK\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mHardening\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[4C- Installed compiler(s)\u001B[34C [ \u001B[1;31mFOUND\u001B[0m ]\n",
      "\u001B[4C- Installed malware scanner\u001B[30C [ \u001B[1;32mFOUND\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;33mCustom Tests\u001B[0m\n",
      "------------------------------------\n",
      "\u001B[2C- Running custom tests... \u001B[33C [ \u001B[1;37mNONE\u001B[0m ]\n",
      "\n",
      "[+] \u001B[1;35mPlugins (phase 2)\u001B[0m\n",
      "------------------------------------\n",
      "\n",
      "================================================================================\n",
      "\n",
      "  -[ \u001B[1;37mLynis 2.6.2 Results\u001B[0m ]-\n",
      "\n",
      "  \u001B[1;31mWarnings\u001B[0m (3):\n",
      "  \u001B[1;37m----------------------------\u001B[0m\n",
      "  \u001B[1;31m!\u001B[0m Version of Lynis is very old and should be updated [LYNIS] \n",
      "      https://cisofy.com/controls/LYNIS/\n",
      "\n",
      "  \u001B[1;31m!\u001B[0m No password set for single mode [AUTH-9308] \n",
      "      https://cisofy.com/controls/AUTH-9308/\n",
      "\n",
      "  \u001B[1;31m!\u001B[0m Couldn't find 2 responsive nameservers [NETW-2705] \n",
      "      https://cisofy.com/controls/NETW-2705/\n",
      "\n",
      "  \u001B[1;33mSuggestions\u001B[0m (49):\n",
      "  \u001B[1;37m----------------------------\u001B[0m\n",
      "  \u001B[1;33m*\u001B[0m Install libpam-tmpdir to set $TMP and $TMPDIR for PAM sessions [CUST-0280] \n",
      "      \u001B[0;37mhttps://your-domain.example.org/controls/CUST-0280/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install libpam-usb to enable multi-factor authentication for PAM sessions [CUST-0285] \n",
      "      \u001B[0;37mhttps://your-domain.example.org/controls/CUST-0285/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install apt-listbugs to display a list of critical bugs prior to each APT installation. [CUST-0810] \n",
      "      \u001B[0;37mhttps://your-domain.example.org/controls/CUST-0810/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install apt-listchanges to display any significant changes prior to any upgrade via APT. [CUST-0811] \n",
      "      \u001B[0;37mhttps://your-domain.example.org/controls/CUST-0811/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install debian-goodies so that you can run checkrestart after upgrades to determine which services are using old versions of libraries and need restarting. [CUST-0830] \n",
      "      \u001B[0;37mhttps://your-domain.example.org/controls/CUST-0830/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install needrestart, alternatively to debian-goodies, so that you can run needrestart after upgrades to determine which daemons are using old versions of libraries and need restarting. [CUST-0831] \n",
      "      \u001B[0;37mhttps://your-domain.example.org/controls/CUST-0831/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install debsecan to generate lists of vulnerabilities which affect this installation. [CUST-0870] \n",
      "      \u001B[0;37mhttps://your-domain.example.org/controls/CUST-0870/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install debsums for the verification of installed package files against MD5 checksums. [CUST-0875] \n",
      "      \u001B[0;37mhttps://your-domain.example.org/controls/CUST-0875/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install fail2ban to automatically ban hosts that commit multiple authentication errors. [DEB-0880] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/DEB-0880/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Set a password on GRUB bootloader to prevent altering boot configuration (e.g. boot in single user mode without password) [BOOT-5122] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/BOOT-5122/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install a PAM module for password strength testing like pam_cracklib or pam_passwdqc [AUTH-9262] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/AUTH-9262/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Configure minimum password age in /etc/login.defs [AUTH-9286] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/AUTH-9286/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Configure maximum password age in /etc/login.defs [AUTH-9286] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/AUTH-9286/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Set password for single user mode to minimize physical access attack surface [AUTH-9308] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/AUTH-9308/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Default umask in /etc/login.defs could be more strict like 027 [AUTH-9328] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/AUTH-9328/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m To decrease the impact of a full /tmp file system, place /tmp on a separated partition [FILE-6310] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/FILE-6310/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m To decrease the impact of a full /var file system, place /var on a separated partition [FILE-6310] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/FILE-6310/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Disable drivers like USB storage when not used, to prevent unauthorized storage or data theft [STRG-1840] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/STRG-1840/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Check DNS configuration for the dns domain name [NAME-4028] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/NAME-4028/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Purge old/removed packages (106 found) with aptitude purge or dpkg --purge command. This will cleanup old configuration files, cron jobs and startup scripts. [PKGS-7346] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/PKGS-7346/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install debsums utility for the verification of packages with known good database. [PKGS-7370] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/PKGS-7370/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install package apt-show-versions for patch management purposes [PKGS-7394] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/PKGS-7394/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Check your resolv.conf file and fill in a backup nameserver if possible [NETW-2705] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/NETW-2705/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider running ARP monitoring software (arpwatch,arpon) [NETW-3032] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/NETW-3032/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Access to CUPS configuration could be more strict. [PRNT-2307] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/PRNT-2307/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Check iptables rules to see which rules are currently not used [FIRE-4513] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/FIRE-4513/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : \u001B[0;36mAllowTcpForwarding (YES --> NO)\u001B[0m\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/SSH-7408/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : \u001B[0;36mClientAliveCountMax (3 --> 2)\u001B[0m\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/SSH-7408/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : \u001B[0;36mCompression (YES --> (DELAYED|NO))\u001B[0m\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/SSH-7408/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : \u001B[0;36mLogLevel (INFO --> VERBOSE)\u001B[0m\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/SSH-7408/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : \u001B[0;36mMaxAuthTries (6 --> 2)\u001B[0m\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/SSH-7408/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : \u001B[0;36mMaxSessions (10 --> 2)\u001B[0m\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/SSH-7408/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : \u001B[0;36mPermitRootLogin (WITHOUT-PASSWORD --> NO)\u001B[0m\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/SSH-7408/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : \u001B[0;36mPort (22 --> )\u001B[0m\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/SSH-7408/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : \u001B[0;36mTCPKeepAlive (YES --> NO)\u001B[0m\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/SSH-7408/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : \u001B[0;36mX11Forwarding (YES --> NO)\u001B[0m\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/SSH-7408/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : \u001B[0;36mAllowAgentForwarding (YES --> NO)\u001B[0m\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/SSH-7408/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Check what deleted files are still in use and why. [LOGG-2190] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/LOGG-2190/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Add a legal banner to /etc/issue, to warn unauthorized users [BANN-7126] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/BANN-7126/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Add legal banner to /etc/issue.net, to warn unauthorized users [BANN-7130] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/BANN-7130/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Enable process accounting [ACCT-9622] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/ACCT-9622/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Enable sysstat to collect accounting (no results) [ACCT-9626] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/ACCT-9626/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Enable auditd to collect audit information [ACCT-9628] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/ACCT-9628/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Run 'docker info' to see warnings applicable to Docker daemon [CONT-8104] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/CONT-8104/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Test output of both 'docker ps -a' and 'docker info', to determine why they report a different amount of containers [CONT-8106] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/CONT-8106/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Install a file integrity tool to monitor changes to critical and sensitive files [FINT-4350] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/FINT-4350/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Determine if automation tools are present for system management [TOOL-5002] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/TOOL-5002/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m One or more sysctl values differ from the scan profile and could be tweaked [KRNL-6000] \n",
      "    - Solution : Change sysctl value or disable test (skip-test=KRNL-6000:<sysctl-key>)\n",
      "      \u001B[0;37mhttps://cisofy.com/controls/KRNL-6000/\u001B[0m\n",
      "\n",
      "  \u001B[1;33m*\u001B[0m Harden compilers like restricting access to root user only [HRDN-7222] \n",
      "      \u001B[0;37mhttps://cisofy.com/controls/HRDN-7222/\u001B[0m\n",
      "\n",
      "  \u001B[0;36mFollow-up\u001B[0m:\n",
      "  \u001B[1;37m----------------------------\u001B[0m\n",
      "  \u001B[1;37m-\u001B[0m Show details of a test (lynis show details TEST-ID)\n",
      "  \u001B[1;37m-\u001B[0m Check the logfile for all details (less /var/log/lynis.log)\n",
      "  \u001B[1;37m-\u001B[0m Read security controls texts (https://cisofy.com)\n",
      "  \u001B[1;37m-\u001B[0m Use --upload to upload data to central system (Lynis Enterprise users)\n",
      "\n",
      "================================================================================\n",
      "\n",
      "  \u001B[1;37mLynis security scan details\u001B[0m:\n",
      "\n",
      "  \u001B[0;36mHardening index\u001B[0m : \u001B[1;37m60\u001B[0m [\u001B[1;33m############\u001B[0m        ]\n",
      "  \u001B[0;36mTests performed\u001B[0m : \u001B[1;37m225\u001B[0m\n",
      "  \u001B[0;36mPlugins enabled\u001B[0m : \u001B[1;37m1\u001B[0m\n",
      "\n",
      "  \u001B[1;37mComponents\u001B[0m:\n",
      "  - Firewall               [\u001B[1;32mV\u001B[0m]\n",
      "  - Malware scanner        [\u001B[1;32mV\u001B[0m]\n",
      "\n",
      "  \u001B[1;33mLynis Modules\u001B[0m:\n",
      "  - Compliance Status      [\u001B[1;33m?\u001B[0m]\n",
      "  - Security Audit         [\u001B[1;32mV\u001B[0m]\n",
      "  - Vulnerability Scan     [\u001B[1;32mV\u001B[0m]\n",
      "\n",
      "  \u001B[1;33mFiles\u001B[0m:\n",
      "  - Test and debug information      : \u001B[1;37m/var/log/lynis.log\u001B[0m\n",
      "  - Report data                     : \u001B[1;37m/var/log/lynis-report.dat\u001B[0m\n",
      "\n",
      "================================================================================\n",
      "  \u001B[1;33mNotice: \u001B[1;37mLynis update available\u001B[0m\n",
      "  Current version : \u001B[1;37m262\u001B[0m    Latest version : \u001B[1;37m308\u001B[0m\n",
      "================================================================================\n",
      "\n",
      "  \u001B[1;37mLynis\u001B[0m 2.6.2\n",
      "\n",
      "  Auditing, system hardening, and compliance for UNIX-based systems\n",
      "  (Linux, macOS, BSD, and others)\n",
      "\n",
      "  2007-2018, CISOfy - https://cisofy.com/lynis/\n",
      "  \u001B[1;37mEnterprise support available (compliance, plugins, interface and tools)\u001B[0m\n",
      "\n",
      "================================================================================\n",
      "\n",
      "  \u001B[0;44m[TIP]\u001B[0m: \u001B[0;94mEnhance Lynis audits by adding your settings to custom.prf (see /etc/lynis/default.prf for all settings)\u001B[0m\n",
      "\n",
      "\n"
     ]
    }
   ],
   "source": [
    "warnings_start = False\n",
    "suggestions_start = False\n",
    "\n",
    "warnings = []\n",
    "suggestions = []\n",
    "\n",
    "for n, i in enumerate(audit_op.split(\"\\n\")):\n",
    "    try:\n",
    "        # i = i.encode('ascii', errors='ignore')\n",
    "        ''.join(s for s in i if ord(s)>31 and ord(s)<126)\n",
    "        print(i)\n",
    "    except:\n",
    "        pass\n",
    "    if \"Warnings (\" in i:\n",
    "        print(\"Started_Warning....\")\n",
    "        warnings_start = True\n",
    "        suggestions_start = False\n",
    "\n",
    "    if \"Suggestions (\" in i:\n",
    "        warnings_start = False\n",
    "        suggestions_start = True\n",
    "\n",
    "    if \"Follow-up:\" in i:\n",
    "        warnings_start = False\n",
    "        suggestions_start = False\n",
    "        break\n",
    "\n",
    "\n",
    "    if warnings_start and not suggestions_start:\n",
    "        warnings.append(i)\n",
    "\n",
    "    if suggestions_start and not warnings_start:\n",
    "        suggestions.append(i)\n",
    "\n"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 277,
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "\n",
      "[1;37m[ Lynis 2.6.2 ][0m\n",
      "\n",
      "################################################################################\n",
      "  Lynis comes with ABSOLUTELY NO WARRANTY. This is free software, and you are\n",
      "  welcome to redistribute it under the terms of the GNU General Public License.\n",
      "  See the LICENSE file for details about using this software.\n",
      "\n",
      "  2007-2018, CISOfy - https://cisofy.com/lynis/\n",
      "  Enterprise support available (compliance, plugins, interface and tools)\n",
      "################################################################################\n",
      "\n",
      "\n",
      "[+] [1;33mInitializing program[0m\n",
      "------------------------------------\n",
      "[2C- Detecting OS... [41C [ [1;32mDONE[0m ]\n",
      "[2C- Checking profiles...[37C [ [1;32mDONE[0m ]\n",
      "\n",
      "  ---------------------------------------------------\n",
      "  Program version:           2.6.2\n",
      "  Operating system:          Linux\n",
      "  Operating system name:     Ubuntu Linux\n",
      "  Operating system version:  18.04\n",
      "  Kernel version:            5.4.0\n",
      "  Hardware platform:         x86_64\n",
      "  Hostname:                  linuxadmin-System-Product-Name\n",
      "  ---------------------------------------------------\n",
      "  Profiles:                  /etc/lynis/default.prf\n",
      "  Log file:                  /var/log/lynis.log\n",
      "  Report file:               /var/log/lynis-report.dat\n",
      "  Report version:            1.0\n",
      "  Plugin directory:          /etc/lynis/plugins\n",
      "  ---------------------------------------------------\n",
      "  Auditor:                   [Not Specified]\n",
      "  Language:                  en\n",
      "  Test category:             all\n",
      "  Test group:                all\n",
      "  ---------------------------------------------------\n",
      "[2C- Program update status... [32C [ [1;31mWARNING[0m ]\n",
      "\n",
      "      ===============================================================================\n",
      "        [0;36mLynis update available[0m\n",
      "      ===============================================================================\n",
      "\n",
      "        [1;33mCurrent version is more than 4 months old[0m\n",
      "\n",
      "        Current version : [1;33m262[0m   Latest version : [1;32m308[0m\n",
      "\n",
      "        [1;37mPlease update to the latest version.[0m\n",
      "        New releases include additional features, bug fixes, tests, and baselines.[0m\n",
      "\n",
      "        Download the latest version:\n",
      "\n",
      "        Packages (DEB/RPM) -  https://packages.cisofy.com\n",
      "        Website (TAR)      -  https://cisofy.com/downloads/\n",
      "        GitHub (source)    -  https://github.com/CISOfy/lynis\n",
      "\n",
      "      ===============================================================================\n",
      "\n",
      "\n",
      "[+] [1;33mSystem Tools[0m\n",
      "------------------------------------\n",
      "[2C- Scanning available tools...[30C\n",
      "[2C- Checking system binaries...[30C\n",
      "\n",
      "[+] [1;35mPlugins (phase 1)[0m\n",
      "------------------------------------\n",
      "[0CNote: plugins have more extensive tests and may take several minutes to complete[0C\n",
      "[0C [0C\n",
      "[2C- [0;36mPlugin[0m: [1;37mdebian[0m[21C\n",
      "    [\n",
      "[+] [1;33mDebian Tests[0m\n",
      "------------------------------------\n",
      "[2C- Checking for system binaries that are required by Debian Tests...[0C\n",
      "[4C- Checking /bin... [38C [ [1;32mFOUND[0m ]\n",
      "[4C- Checking /sbin... [37C [ [1;32mFOUND[0m ]\n",
      "[4C- Checking /usr/bin... [34C [ [1;32mFOUND[0m ]\n",
      "[4C- Checking /usr/sbin... [33C [ [1;32mFOUND[0m ]\n",
      "[4C- Checking /usr/local/bin... [28C [ [1;32mFOUND[0m ]\n",
      "[4C- Checking /usr/local/sbin... [27C [ [1;32mFOUND[0m ]\n",
      "[2C- Authentication:[42C\n",
      "[4C- PAM (Pluggable Authentication Modules):[16C\n",
      "[6C- libpam-tmpdir[40C [ [1;31mNot Installed[0m ]\n",
      "[6C- libpam-usb[43C [ [1;31mNot Installed[0m ]\n",
      "[2C- File System Checks:[38C\n",
      "[4C- DM-Crypt, Cryptsetup & Cryptmount:[21C\n",
      "[2C- Software:[48C\n",
      "[4C- apt-listbugs[43C [ [1;31mNot Installed[0m ]\n",
      "[4C- apt-listchanges[40C [ [1;31mNot Installed[0m ]\n",
      "[4C- checkrestart[43C [ [1;31mNot Installed[0m ]\n",
      "[4C- needrestart[44C [ [1;31mNot Installed[0m ]\n",
      "[4C- debsecan[47C [ [1;31mNot Installed[0m ]\n",
      "[4C- debsums[48C [ [1;31mNot Installed[0m ]\n",
      "[4C- fail2ban[47C [ [1;31mNot Installed[0m ]\n",
      "]\n",
      "\n",
      "[+] [1;33mBoot and services[0m\n",
      "------------------------------------\n",
      "[2C- Service Manager[42C [ [1;32msystemd[0m ]\n",
      "[2C- Checking UEFI boot[39C [ [1;37mDISABLED[0m ]\n",
      "[2C- Checking presence GRUB2[34C [ [1;32mFOUND[0m ]\n",
      "[4C- Checking for password protection[23C [ [1;31mWARNING[0m ]\n",
      "[2C- Check running services (systemctl)[23C [ [1;32mDONE[0m ]\n",
      "[8CResult: found 39 running services[20C\n",
      "[2C- Check enabled services at boot (systemctl)[15C [ [1;32mDONE[0m ]\n",
      "[8CResult: found 61 enabled services[20C\n",
      "[2C- Check startup files (permissions)[24C [ [1;32mOK[0m ]\n",
      "\n",
      "[+] [1;33mKernel[0m\n",
      "------------------------------------\n",
      "[2C- Checking default runlevel[32C [ [1;32mrunlevel 5[0m ]\n",
      "[2C- Checking CPU support (NX/PAE)[28C\n",
      "[4CCPU support: PAE and/or NoeXecute supported[14C [ [1;32mFOUND[0m ]\n",
      "[2C- Checking kernel version and release[22C [ [1;32mDONE[0m ]\n",
      "[2C- Checking kernel type[37C [ [1;32mDONE[0m ]\n",
      "[2C- Checking loaded kernel modules[27C [ [1;32mDONE[0m ]\n",
      "[6CFound 132 active modules[31C\n",
      "[2C- Checking Linux kernel configuration file[17C [ [1;32mFOUND[0m ]\n",
      "[2C- Checking default I/O kernel scheduler[20C [ [1;37mNOT FOUND[0m ]\n",
      "[2C- Checking for available kernel update[21C [ [1;32mOK[0m ]\n",
      "[2C- Checking core dumps configuration[24C [ [1;32mDISABLED[0m ]\n",
      "[4C- Checking setuid core dumps configuration[15C [ [1;32mPROTECTED[0m ]\n",
      "[2C- Check if reboot is needed[32C [ [1;32mNO[0m ]\n",
      "\n",
      "[+] [1;33mMemory and Processes[0m\n",
      "------------------------------------\n",
      "[2C- Checking /proc/meminfo[35C [ [1;32mFOUND[0m ]\n",
      "[2C- Searching for dead/zombie processes[22C [ [1;32mOK[0m ]\n",
      "[2C- Searching for IO waiting processes[23C [ [1;32mOK[0m ]\n",
      "\n",
      "[+] [1;33mUsers, Groups and Authentication[0m\n",
      "------------------------------------\n",
      "[2C- Administrator accounts[35C [ [1;32mOK[0m ]\n",
      "[2C- Unique UIDs[46C [ [1;32mOK[0m ]\n",
      "[2C- Consistency of group files (grpck)[23C [ [1;32mOK[0m ]\n",
      "[2C- Unique group IDs[41C [ [1;32mOK[0m ]\n",
      "[2C- Unique group names[39C [ [1;32mOK[0m ]\n",
      "[2C- Password file consistency[32C [ [1;32mOK[0m ]\n",
      "[2C- Query system users (non daemons)[25C [ [1;32mDONE[0m ]\n",
      "[2C- NIS+ authentication support[30C [ [1;37mNOT ENABLED[0m ]\n",
      "[2C- NIS authentication support[31C [ [1;37mNOT ENABLED[0m ]\n",
      "[2C- sudoers file[45C [ [1;32mFOUND[0m ]\n",
      "[4C- Check sudoers file permissions[25C [ [1;32mOK[0m ]\n",
      "[2C- PAM password strength tools[30C [ [1;33mSUGGESTION[0m ]\n",
      "[2C- PAM configuration files (pam.conf)[23C [ [1;32mFOUND[0m ]\n",
      "[2C- PAM configuration files (pam.d)[26C [ [1;32mFOUND[0m ]\n",
      "[2C- PAM modules[46C [ [1;32mFOUND[0m ]\n",
      "[2C- LDAP module in PAM[39C [ [1;37mNOT FOUND[0m ]\n",
      "[2C- Accounts without expire date[29C [ [1;32mOK[0m ]\n",
      "[2C- Accounts without password[32C [ [1;32mOK[0m ]\n",
      "[2C- Checking user password aging (minimum)[19C [ [1;33mDISABLED[0m ]\n",
      "[2C- User password aging (maximum)[28C [ [1;33mDISABLED[0m ]\n",
      "[2C- Checking expired passwords[31C [ [1;32mOK[0m ]\n",
      "[2C- Checking Linux single user mode authentication[11C [ [1;31mWARNING[0m ]\n",
      "[2C- Determining default umask[32C\n",
      "[4C- umask (/etc/profile)[35C [ [1;33mNOT FOUND[0m ]\n",
      "[4C- umask (/etc/login.defs)[32C [ [1;33mSUGGESTION[0m ]\n",
      "[2C- LDAP authentication support[30C [ [1;37mNOT ENABLED[0m ]\n",
      "[2C- Logging failed login attempts[28C [ [1;32mENABLED[0m ]\n",
      "\n",
      "[+] [1;33mShells[0m\n",
      "------------------------------------\n",
      "[2C- Checking shells from /etc/shells[25C\n",
      "[4CResult: found 4 shells (valid shells: 4).[16C\n",
      "[4C- Session timeout settings/tools[25C [ [1;33mNONE[0m ]\n",
      "[2C- Checking default umask values[28C\n",
      "[4C- Checking default umask in /etc/bash.bashrc[13C [ [1;33mNONE[0m ]\n",
      "[4C- Checking default umask in /etc/profile[17C [ [1;33mNONE[0m ]\n",
      "\n",
      "[+] [1;33mFile systems[0m\n",
      "------------------------------------\n",
      "[2C- Checking mount points[36C\n",
      "[4C- Checking /home mount point[29C [ [1;32mOK[0m ]\n",
      "[4C- Checking /tmp mount point[30C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- Checking /var mount point[30C [ [1;33mSUGGESTION[0m ]\n",
      "[2C- Query swap partitions (fstab)[28C [ [1;32mOK[0m ]\n",
      "[2C- Testing swap partitions[34C [ [1;32mOK[0m ]\n",
      "[2C- Testing /proc mount (hidepid)[28C [ [1;33mSUGGESTION[0m ]\n",
      "[2C- Checking for old files in /tmp[27C [ [1;32mOK[0m ]\n",
      "[2C- Checking /tmp sticky bit[33C [ [1;32mOK[0m ]\n",
      "[2C- Checking /var/tmp sticky bit[29C [ [1;32mOK[0m ]\n",
      "[2C- ACL support root file system[29C [ [1;32mENABLED[0m ]\n",
      "[2C- Mount options of /[39C [ [1;33mNON DEFAULT[0m ]\n",
      "[2C- Mount options of /home[35C [ [1;33mNON DEFAULT[0m ]\n",
      "[2C- Checking Locate database[33C [ [1;32mFOUND[0m ]\n",
      "[2C- Disable kernel support of some filesystems[15C\n",
      "[4C- Discovered kernel modules: cramfs freevxfs jffs2 udf [2C\n",
      "\n",
      "[+] [1;33mUSB Devices[0m\n",
      "------------------------------------\n",
      "[2C- Checking usb-storage driver (modprobe config)[12C [ [1;37mNOT DISABLED[0m ]\n",
      "[2C- Checking USB devices authorization[23C [ [1;33mENABLED[0m ]\n",
      "[2C- Checking USBGuard[40C [ [1;37mNOT FOUND[0m ]\n",
      "\n",
      "[+] [1;33mStorage[0m\n",
      "------------------------------------\n",
      "[2C- Checking firewire ohci driver (modprobe config)[10C [ [1;32mDISABLED[0m ]\n",
      "\n",
      "[+] [1;33mNFS[0m\n",
      "------------------------------------\n",
      "[2C- Check running NFS daemon[33C [ [1;37mNOT FOUND[0m ]\n",
      "\n",
      "[+] [1;33mName services[0m\n",
      "------------------------------------\n",
      "[2C- Checking search domains[34C [ [1;32mFOUND[0m ]\n",
      "[2C- Checking /etc/resolv.conf options[24C [ [1;32mFOUND[0m ]\n",
      "[2C- Searching DNS domain name[32C [ [1;33mUNKNOWN[0m ]\n",
      "[2C- Checking /etc/hosts[38C\n",
      "[4C- Checking /etc/hosts (duplicates)[23C [ [1;32mOK[0m ]\n",
      "[4C- Checking /etc/hosts (hostname)[25C [ [1;32mOK[0m ]\n",
      "[4C- Checking /etc/hosts (localhost)[24C [ [1;32mOK[0m ]\n",
      "[4C- Checking /etc/hosts (localhost to IP)[18C [ [1;32mOK[0m ]\n",
      "\n",
      "[+] [1;33mPorts and packages[0m\n",
      "------------------------------------\n",
      "[2C- Searching package managers[31C\n",
      "[4C- Searching dpkg package manager[25C [ [1;32mFOUND[0m ]\n",
      "[6C- Querying package manager[29C\n",
      "[4C- Query unpurged packages[32C [ [1;33mFOUND[0m ]\n",
      "[2C- Checking security repository in sources.list file[8C [ [1;32mOK[0m ]\n",
      "[2C- Checking APT package database[28C [ [1;32mOK[0m ]\n",
      "[2C- Checking vulnerable packages[29C [ [1;32mOK[0m ]\n",
      "[2C- Checking upgradeable packages[28C [ [1;37mSKIPPED[0m ]\n",
      "[2C- Checking package audit tool[30C [ [1;32mINSTALLED[0m ]\n",
      "[4CFound: apt-check[41C\n",
      "\n",
      "[+] [1;33mNetworking[0m\n",
      "------------------------------------\n",
      "[2C- Checking IPv6 configuration[30C [ [1;37mENABLED[0m ]\n",
      "[6CConfiguration method[35C [ [1;37mAUTO[0m ]\n",
      "[6CIPv6 only[46C [ [1;37mNO[0m ]\n",
      "[2C- Checking configured nameservers[26C\n",
      "[4C- Testing nameservers[36C\n",
      "[8CNameserver: 127.0.0.53[31C [ [1;32mOK[0m ]\n",
      "[4C- Minimal of 2 responsive nameservers[20C [ [1;31mWARNING[0m ]\n",
      "[2C- Checking default gateway[33C [ [1;32mDONE[0m ]\n",
      "[2C- Getting listening ports (TCP/UDP)[24C [ [1;32mDONE[0m ]\n",
      "[6C* Found 40 ports[39C\n",
      "[2C- Checking promiscuous interfaces[26C [ [1;32mOK[0m ]\n",
      "[2C- Checking waiting connections[29C [ [1;32mOK[0m ]\n",
      "[2C- Checking status DHCP client[30C [ [1;37mRUNNING[0m ]\n",
      "[2C- Checking for ARP monitoring software[21C [ [1;33mNOT FOUND[0m ]\n",
      "\n",
      "[+] [1;33mPrinters and Spools[0m\n",
      "------------------------------------\n",
      "[2C- Checking cups daemon[37C [ [1;32mRUNNING[0m ]\n",
      "[2C- Checking CUPS configuration file[25C [ [1;32mOK[0m ]\n",
      "[4C- File permissions[39C [ [1;31mWARNING[0m ]\n",
      "[2C- Checking CUPS addresses/sockets[26C [ [1;32mFOUND[0m ]\n",
      "[2C- Checking lp daemon[39C [ [1;37mNOT RUNNING[0m ]\n",
      "\n",
      "[+] [1;33mSoftware: e-mail and messaging[0m\n",
      "------------------------------------\n",
      "\n",
      "[+] [1;33mSoftware: firewalls[0m\n",
      "------------------------------------\n",
      "[2C- Checking iptables kernel module[26C [ [1;32mFOUND[0m ]\n",
      "[4C- Checking iptables policies of chains[19C [ [1;32mFOUND[0m ]\n",
      "[6C- Checking chain INPUT (table: filter, policy )[8C [ [1;33mother[0m ]\n",
      "[4C- Checking for empty ruleset[29C [ [1;32mOK[0m ]\n",
      "[4C- Checking for unused rules[30C [ [1;33mFOUND[0m ]\n",
      "[2C- Checking host based firewall[29C [ [1;32mACTIVE[0m ]\n",
      "\n",
      "[+] [1;33mSoftware: webserver[0m\n",
      "------------------------------------\n",
      "[2C- Checking Apache[42C [ [1;37mNOT FOUND[0m ]\n",
      "[2C- Checking nginx[43C [ [1;37mNOT FOUND[0m ]\n",
      "\n",
      "[+] [1;33mSSH Support[0m\n",
      "------------------------------------\n",
      "[2C- Checking running SSH daemon[30C [ [1;32mFOUND[0m ]\n",
      "[4C- Searching SSH configuration[28C [ [1;32mFOUND[0m ]\n",
      "[4C- SSH option: AllowTcpForwarding[25C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- SSH option: ClientAliveCountMax[24C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- SSH option: ClientAliveInterval[24C [ [1;32mOK[0m ]\n",
      "[4C- SSH option: Compression[32C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- SSH option: FingerprintHash[28C [ [1;32mOK[0m ]\n",
      "[4C- SSH option: GatewayPorts[31C [ [1;32mOK[0m ]\n",
      "[4C- SSH option: IgnoreRhosts[31C [ [1;32mOK[0m ]\n",
      "[4C- SSH option: LoginGraceTime[29C [ [1;32mOK[0m ]\n",
      "[4C- SSH option: LogLevel[35C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- SSH option: MaxAuthTries[31C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- SSH option: MaxSessions[32C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- SSH option: PermitRootLogin[28C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- SSH option: PermitUserEnvironment[22C [ [1;32mOK[0m ]\n",
      "[4C- SSH option: PermitTunnel[31C [ [1;32mOK[0m ]\n",
      "[4C- SSH option: Port[39C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- SSH option: PrintLastLog[31C [ [1;32mOK[0m ]\n",
      "[4C- SSH option: Protocol[35C [ [1;37mNOT FOUND[0m ]\n",
      "[4C- SSH option: StrictModes[32C [ [1;32mOK[0m ]\n",
      "[4C- SSH option: TCPKeepAlive[31C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- SSH option: UseDNS[37C [ [1;32mOK[0m ]\n",
      "[4C- SSH option: UsePrivilegeSeparation[21C [ [1;37mNOT FOUND[0m ]\n",
      "[4C- SSH option: VerifyReverseMapping[23C [ [1;37mNOT FOUND[0m ]\n",
      "[4C- SSH option: X11Forwarding[30C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- SSH option: AllowAgentForwarding[23C [ [1;33mSUGGESTION[0m ]\n",
      "[4C- SSH option: AllowUsers[33C [ [1;37mNOT FOUND[0m ]\n",
      "[4C- SSH option: AllowGroups[32C [ [1;37mNOT FOUND[0m ]\n",
      "\n",
      "[+] [1;33mSNMP Support[0m\n",
      "------------------------------------\n",
      "[2C- Checking running SNMP daemon[29C [ [1;37mNOT FOUND[0m ]\n",
      "\n",
      "[+] [1;33mDatabases[0m\n",
      "------------------------------------\n",
      "[4CNo database engines found[32C\n",
      "\n",
      "[+] [1;33mLDAP Services[0m\n",
      "------------------------------------\n",
      "[2C- Checking OpenLDAP instance[31C [ [1;37mNOT FOUND[0m ]\n",
      "\n",
      "[+] [1;33mPHP[0m\n",
      "------------------------------------\n",
      "[2C- Checking PHP[45C [ [1;37mNOT FOUND[0m ]\n",
      "\n",
      "[+] [1;33mSquid Support[0m\n",
      "------------------------------------\n",
      "[2C- Checking running Squid daemon[28C [ [1;37mNOT FOUND[0m ]\n",
      "\n",
      "[+] [1;33mLogging and files[0m\n",
      "------------------------------------\n",
      "[2C- Checking for a running log daemon[24C [ [1;32mOK[0m ]\n",
      "[4C- Checking Syslog-NG status[30C [ [1;37mNOT FOUND[0m ]\n",
      "[4C- Checking systemd journal status[24C [ [1;32mFOUND[0m ]\n",
      "[4C- Checking Metalog status[32C [ [1;37mNOT FOUND[0m ]\n",
      "[4C- Checking RSyslog status[32C [ [1;32mFOUND[0m ]\n",
      "[4C- Checking RFC 3195 daemon status[24C [ [1;37mNOT FOUND[0m ]\n",
      "[4C- Checking minilogd instances[28C [ [1;37mNOT FOUND[0m ]\n",
      "[2C- Checking logrotate presence[30C [ [1;32mOK[0m ]\n",
      "[2C- Checking log directories (static list)[19C [ [1;32mDONE[0m ]\n",
      "[2C- Checking open log files[34C [ [1;32mDONE[0m ]\n",
      "[2C- Checking deleted files in use[28C [ [1;33mFILES FOUND[0m ]\n",
      "\n",
      "[+] [1;33mInsecure services[0m\n",
      "------------------------------------\n",
      "[2C- Checking inetd status[36C [ [1;32mNOT ACTIVE[0m ]\n",
      "\n",
      "[+] [1;33mBanners and identification[0m\n",
      "------------------------------------\n",
      "[2C- /etc/issue[47C [ [1;32mFOUND[0m ]\n",
      "[4C- /etc/issue contents[36C [ [1;33mWEAK[0m ]\n",
      "[2C- /etc/issue.net[43C [ [1;32mFOUND[0m ]\n",
      "[4C- /etc/issue.net contents[32C [ [1;33mWEAK[0m ]\n",
      "\n",
      "[+] [1;33mScheduled tasks[0m\n",
      "------------------------------------\n",
      "[2C- Checking crontab/cronjob[33C [ [1;32mDONE[0m ]\n",
      "\n",
      "[+] [1;33mAccounting[0m\n",
      "------------------------------------\n",
      "[2C- Checking accounting information[26C [ [1;33mNOT FOUND[0m ]\n",
      "[2C- Checking sysstat accounting data[25C [ [1;33mNOT FOUND[0m ]\n",
      "[2C- Checking auditd[42C [ [1;37mNOT FOUND[0m ]\n",
      "\n",
      "[+] [1;33mTime and Synchronization[0m\n",
      "------------------------------------\n",
      "[2C- NTP daemon found: systemd (timesyncd)[20C [ [1;32mFOUND[0m ]\n",
      "[2C- Checking for a running NTP daemon or client[14C [ [1;32mOK[0m ]\n",
      "\n",
      "[+] [1;33mCryptography[0m\n",
      "------------------------------------\n",
      "[2C- Checking for expired SSL certificates [0/4][14C [ [1;32mNONE[0m ]\n",
      "\n",
      "[+] [1;33mVirtualization[0m\n",
      "------------------------------------\n",
      "\n",
      "[+] [1;33mContainers[0m\n",
      "------------------------------------\n",
      "[4C- Docker[49C\n",
      "[6C- Docker daemon[40C [ [1;32mRUNNING[0m ]\n",
      "[8C- Docker info output (warnings)[22C [ [1;33m1[0m ]\n",
      "[6C- Containers[43C\n",
      "[8C- Total containers[35C [ [1;31mUNKNOWN[0m ]\n",
      "[4C- File permissions[39C [ [1;32mOK[0m ]\n",
      "\n",
      "[+] [1;33mSecurity frameworks[0m\n",
      "------------------------------------\n",
      "[2C- Checking presence AppArmor[31C [ [1;32mFOUND[0m ]\n",
      "[4C- Checking AppArmor status[31C [ [1;32mENABLED[0m ]\n",
      "[2C- Checking presence SELinux[32C [ [1;37mNOT FOUND[0m ]\n",
      "[2C- Checking presence grsecurity[29C [ [1;37mNOT FOUND[0m ]\n",
      "[2C- Checking for implemented MAC framework[19C [ [1;32mOK[0m ]\n",
      "\n",
      "[+] [1;33mSoftware: file integrity[0m\n",
      "------------------------------------\n",
      "[2C- Checking file integrity tools[28C\n",
      "[2C- Checking presence integrity tool[25C [ [1;33mNOT FOUND[0m ]\n",
      "\n",
      "[+] [1;33mSoftware: System tooling[0m\n",
      "------------------------------------\n",
      "[2C- Checking automation tooling[30C\n",
      "[2C- Automation tooling[39C [ [1;33mNOT FOUND[0m ]\n",
      "[2C- Checking for IDS/IPS tooling[29C [ [1;33mNONE[0m ]\n",
      "\n",
      "[+] [1;33mSoftware: Malware[0m\n",
      "------------------------------------\n",
      "[2C- Checking chkrootkit[38C [ [1;32mFOUND[0m ]\n",
      "\n",
      "[+] [1;33mFile Permissions[0m\n",
      "------------------------------------\n",
      "[2C- Starting file permissions check[26C\n",
      "\n",
      "[+] [1;33mHome directories[0m\n",
      "------------------------------------\n",
      "[2C- Checking shell history files[29C [ [1;32mOK[0m ]\n",
      "\n",
      "[+] [1;33mKernel Hardening[0m\n",
      "------------------------------------\n",
      "[2C- Comparing sysctl key pairs with scan profile[13C\n",
      "[4C- fs.protected_hardlinks (exp: 1)[24C [ [1;32mOK[0m ]\n",
      "[4C- fs.protected_symlinks (exp: 1)[25C [ [1;32mOK[0m ]\n",
      "[4C- fs.suid_dumpable (exp: 0)[30C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- kernel.core_uses_pid (exp: 1)[26C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- kernel.ctrl-alt-del (exp: 0)[27C [ [1;32mOK[0m ]\n",
      "[4C- kernel.dmesg_restrict (exp: 1)[25C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- kernel.kptr_restrict (exp: 2)[26C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- kernel.randomize_va_space (exp: 2)[21C [ [1;32mOK[0m ]\n",
      "[4C- kernel.sysrq (exp: 0)[34C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- kernel.yama.ptrace_scope (exp: 1 2 3)[18C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv4.conf.all.accept_redirects (exp: 0)[12C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv4.conf.all.accept_source_route (exp: 0)[9C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv4.conf.all.bootp_relay (exp: 0)[17C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv4.conf.all.forwarding (exp: 0)[18C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- net.ipv4.conf.all.log_martians (exp: 1)[16C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- net.ipv4.conf.all.mc_forwarding (exp: 0)[15C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv4.conf.all.proxy_arp (exp: 0)[19C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv4.conf.all.rp_filter (exp: 1)[19C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv4.conf.all.send_redirects (exp: 0)[14C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- net.ipv4.conf.default.accept_redirects (exp: 0)[8C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- net.ipv4.conf.default.accept_source_route (exp: 0)[5C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- net.ipv4.conf.default.log_martians (exp: 1)[12C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- net.ipv4.icmp_echo_ignore_broadcasts (exp: 1)[10C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv4.icmp_ignore_bogus_error_responses (exp: 1)[4C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv4.tcp_syncookies (exp: 1)[23C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv4.tcp_timestamps (exp: 0 1)[21C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv6.conf.all.accept_redirects (exp: 0)[12C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- net.ipv6.conf.all.accept_source_route (exp: 0)[9C [ [1;32mOK[0m ]\n",
      "[4C- net.ipv6.conf.default.accept_redirects (exp: 0)[8C [ [1;31mDIFFERENT[0m ]\n",
      "[4C- net.ipv6.conf.default.accept_source_route (exp: 0)[5C [ [1;32mOK[0m ]\n",
      "\n",
      "[+] [1;33mHardening[0m\n",
      "------------------------------------\n",
      "[4C- Installed compiler(s)[34C [ [1;31mFOUND[0m ]\n",
      "[4C- Installed malware scanner[30C [ [1;32mFOUND[0m ]\n",
      "\n",
      "[+] [1;33mCustom Tests[0m\n",
      "------------------------------------\n",
      "[2C- Running custom tests... [33C [ [1;37mNONE[0m ]\n",
      "\n",
      "[+] [1;35mPlugins (phase 2)[0m\n",
      "------------------------------------\n",
      "\n",
      "================================================================================\n",
      "\n",
      "  -[ [1;37mLynis 2.6.2 Results[0m ]-\n",
      "\n",
      "  [1;31mWarnings[0m (3):\n",
      "  [1;37m----------------------------[0m\n",
      "  [1;31m![0m Version of Lynis is very old and should be updated [LYNIS] \n",
      "      https://cisofy.com/controls/LYNIS/\n",
      "\n",
      "  [1;31m![0m No password set for single mode [AUTH-9308] \n",
      "      https://cisofy.com/controls/AUTH-9308/\n",
      "\n",
      "  [1;31m![0m Couldn't find 2 responsive nameservers [NETW-2705] \n",
      "      https://cisofy.com/controls/NETW-2705/\n",
      "\n",
      "  [1;33mSuggestions[0m (49):\n",
      "  [1;37m----------------------------[0m\n",
      "  [1;33m*[0m Install libpam-tmpdir to set $TMP and $TMPDIR for PAM sessions [CUST-0280] \n",
      "      [0;37mhttps://your-domain.example.org/controls/CUST-0280/[0m\n",
      "\n",
      "  [1;33m*[0m Install libpam-usb to enable multi-factor authentication for PAM sessions [CUST-0285] \n",
      "      [0;37mhttps://your-domain.example.org/controls/CUST-0285/[0m\n",
      "\n",
      "  [1;33m*[0m Install apt-listbugs to display a list of critical bugs prior to each APT installation. [CUST-0810] \n",
      "      [0;37mhttps://your-domain.example.org/controls/CUST-0810/[0m\n",
      "\n",
      "  [1;33m*[0m Install apt-listchanges to display any significant changes prior to any upgrade via APT. [CUST-0811] \n",
      "      [0;37mhttps://your-domain.example.org/controls/CUST-0811/[0m\n",
      "\n",
      "  [1;33m*[0m Install debian-goodies so that you can run checkrestart after upgrades to determine which services are using old versions of libraries and need restarting. [CUST-0830] \n",
      "      [0;37mhttps://your-domain.example.org/controls/CUST-0830/[0m\n",
      "\n",
      "  [1;33m*[0m Install needrestart, alternatively to debian-goodies, so that you can run needrestart after upgrades to determine which daemons are using old versions of libraries and need restarting. [CUST-0831] \n",
      "      [0;37mhttps://your-domain.example.org/controls/CUST-0831/[0m\n",
      "\n",
      "  [1;33m*[0m Install debsecan to generate lists of vulnerabilities which affect this installation. [CUST-0870] \n",
      "      [0;37mhttps://your-domain.example.org/controls/CUST-0870/[0m\n",
      "\n",
      "  [1;33m*[0m Install debsums for the verification of installed package files against MD5 checksums. [CUST-0875] \n",
      "      [0;37mhttps://your-domain.example.org/controls/CUST-0875/[0m\n",
      "\n",
      "  [1;33m*[0m Install fail2ban to automatically ban hosts that commit multiple authentication errors. [DEB-0880] \n",
      "      [0;37mhttps://cisofy.com/controls/DEB-0880/[0m\n",
      "\n",
      "  [1;33m*[0m Set a password on GRUB bootloader to prevent altering boot configuration (e.g. boot in single user mode without password) [BOOT-5122] \n",
      "      [0;37mhttps://cisofy.com/controls/BOOT-5122/[0m\n",
      "\n",
      "  [1;33m*[0m Install a PAM module for password strength testing like pam_cracklib or pam_passwdqc [AUTH-9262] \n",
      "      [0;37mhttps://cisofy.com/controls/AUTH-9262/[0m\n",
      "\n",
      "  [1;33m*[0m Configure minimum password age in /etc/login.defs [AUTH-9286] \n",
      "      [0;37mhttps://cisofy.com/controls/AUTH-9286/[0m\n",
      "\n",
      "  [1;33m*[0m Configure maximum password age in /etc/login.defs [AUTH-9286] \n",
      "      [0;37mhttps://cisofy.com/controls/AUTH-9286/[0m\n",
      "\n",
      "  [1;33m*[0m Set password for single user mode to minimize physical access attack surface [AUTH-9308] \n",
      "      [0;37mhttps://cisofy.com/controls/AUTH-9308/[0m\n",
      "\n",
      "  [1;33m*[0m Default umask in /etc/login.defs could be more strict like 027 [AUTH-9328] \n",
      "      [0;37mhttps://cisofy.com/controls/AUTH-9328/[0m\n",
      "\n",
      "  [1;33m*[0m To decrease the impact of a full /tmp file system, place /tmp on a separated partition [FILE-6310] \n",
      "      [0;37mhttps://cisofy.com/controls/FILE-6310/[0m\n",
      "\n",
      "  [1;33m*[0m To decrease the impact of a full /var file system, place /var on a separated partition [FILE-6310] \n",
      "      [0;37mhttps://cisofy.com/controls/FILE-6310/[0m\n",
      "\n",
      "  [1;33m*[0m Disable drivers like USB storage when not used, to prevent unauthorized storage or data theft [STRG-1840] \n",
      "      [0;37mhttps://cisofy.com/controls/STRG-1840/[0m\n",
      "\n",
      "  [1;33m*[0m Check DNS configuration for the dns domain name [NAME-4028] \n",
      "      [0;37mhttps://cisofy.com/controls/NAME-4028/[0m\n",
      "\n",
      "  [1;33m*[0m Purge old/removed packages (106 found) with aptitude purge or dpkg --purge command. This will cleanup old configuration files, cron jobs and startup scripts. [PKGS-7346] \n",
      "      [0;37mhttps://cisofy.com/controls/PKGS-7346/[0m\n",
      "\n",
      "  [1;33m*[0m Install debsums utility for the verification of packages with known good database. [PKGS-7370] \n",
      "      [0;37mhttps://cisofy.com/controls/PKGS-7370/[0m\n",
      "\n",
      "  [1;33m*[0m Install package apt-show-versions for patch management purposes [PKGS-7394] \n",
      "      [0;37mhttps://cisofy.com/controls/PKGS-7394/[0m\n",
      "\n",
      "  [1;33m*[0m Check your resolv.conf file and fill in a backup nameserver if possible [NETW-2705] \n",
      "      [0;37mhttps://cisofy.com/controls/NETW-2705/[0m\n",
      "\n",
      "  [1;33m*[0m Consider running ARP monitoring software (arpwatch,arpon) [NETW-3032] \n",
      "      [0;37mhttps://cisofy.com/controls/NETW-3032/[0m\n",
      "\n",
      "  [1;33m*[0m Access to CUPS configuration could be more strict. [PRNT-2307] \n",
      "      [0;37mhttps://cisofy.com/controls/PRNT-2307/[0m\n",
      "\n",
      "  [1;33m*[0m Check iptables rules to see which rules are currently not used [FIRE-4513] \n",
      "      [0;37mhttps://cisofy.com/controls/FIRE-4513/[0m\n",
      "\n",
      "  [1;33m*[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : [0;36mAllowTcpForwarding (YES --> NO)[0m\n",
      "      [0;37mhttps://cisofy.com/controls/SSH-7408/[0m\n",
      "\n",
      "  [1;33m*[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : [0;36mClientAliveCountMax (3 --> 2)[0m\n",
      "      [0;37mhttps://cisofy.com/controls/SSH-7408/[0m\n",
      "\n",
      "  [1;33m*[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : [0;36mCompression (YES --> (DELAYED|NO))[0m\n",
      "      [0;37mhttps://cisofy.com/controls/SSH-7408/[0m\n",
      "\n",
      "  [1;33m*[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : [0;36mLogLevel (INFO --> VERBOSE)[0m\n",
      "      [0;37mhttps://cisofy.com/controls/SSH-7408/[0m\n",
      "\n",
      "  [1;33m*[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : [0;36mMaxAuthTries (6 --> 2)[0m\n",
      "      [0;37mhttps://cisofy.com/controls/SSH-7408/[0m\n",
      "\n",
      "  [1;33m*[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : [0;36mMaxSessions (10 --> 2)[0m\n",
      "      [0;37mhttps://cisofy.com/controls/SSH-7408/[0m\n",
      "\n",
      "  [1;33m*[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : [0;36mPermitRootLogin (WITHOUT-PASSWORD --> NO)[0m\n",
      "      [0;37mhttps://cisofy.com/controls/SSH-7408/[0m\n",
      "\n",
      "  [1;33m*[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : [0;36mPort (22 --> )[0m\n",
      "      [0;37mhttps://cisofy.com/controls/SSH-7408/[0m\n",
      "\n",
      "  [1;33m*[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : [0;36mTCPKeepAlive (YES --> NO)[0m\n",
      "      [0;37mhttps://cisofy.com/controls/SSH-7408/[0m\n",
      "\n",
      "  [1;33m*[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : [0;36mX11Forwarding (YES --> NO)[0m\n",
      "      [0;37mhttps://cisofy.com/controls/SSH-7408/[0m\n",
      "\n",
      "  [1;33m*[0m Consider hardening SSH configuration [SSH-7408] \n",
      "    - Details  : [0;36mAllowAgentForwarding (YES --> NO)[0m\n",
      "      [0;37mhttps://cisofy.com/controls/SSH-7408/[0m\n",
      "\n",
      "  [1;33m*[0m Check what deleted files are still in use and why. [LOGG-2190] \n",
      "      [0;37mhttps://cisofy.com/controls/LOGG-2190/[0m\n",
      "\n",
      "  [1;33m*[0m Add a legal banner to /etc/issue, to warn unauthorized users [BANN-7126] \n",
      "      [0;37mhttps://cisofy.com/controls/BANN-7126/[0m\n",
      "\n",
      "  [1;33m*[0m Add legal banner to /etc/issue.net, to warn unauthorized users [BANN-7130] \n",
      "      [0;37mhttps://cisofy.com/controls/BANN-7130/[0m\n",
      "\n",
      "  [1;33m*[0m Enable process accounting [ACCT-9622] \n",
      "      [0;37mhttps://cisofy.com/controls/ACCT-9622/[0m\n",
      "\n",
      "  [1;33m*[0m Enable sysstat to collect accounting (no results) [ACCT-9626] \n",
      "      [0;37mhttps://cisofy.com/controls/ACCT-9626/[0m\n",
      "\n",
      "  [1;33m*[0m Enable auditd to collect audit information [ACCT-9628] \n",
      "      [0;37mhttps://cisofy.com/controls/ACCT-9628/[0m\n",
      "\n",
      "  [1;33m*[0m Run 'docker info' to see warnings applicable to Docker daemon [CONT-8104] \n",
      "      [0;37mhttps://cisofy.com/controls/CONT-8104/[0m\n",
      "\n",
      "  [1;33m*[0m Test output of both 'docker ps -a' and 'docker info', to determine why they report a different amount of containers [CONT-8106] \n",
      "      [0;37mhttps://cisofy.com/controls/CONT-8106/[0m\n",
      "\n",
      "  [1;33m*[0m Install a file integrity tool to monitor changes to critical and sensitive files [FINT-4350] \n",
      "      [0;37mhttps://cisofy.com/controls/FINT-4350/[0m\n",
      "\n",
      "  [1;33m*[0m Determine if automation tools are present for system management [TOOL-5002] \n",
      "      [0;37mhttps://cisofy.com/controls/TOOL-5002/[0m\n",
      "\n",
      "  [1;33m*[0m One or more sysctl values differ from the scan profile and could be tweaked [KRNL-6000] \n",
      "    - Solution : Change sysctl value or disable test (skip-test=KRNL-6000:<sysctl-key>)\n",
      "      [0;37mhttps://cisofy.com/controls/KRNL-6000/[0m\n",
      "\n",
      "  [1;33m*[0m Harden compilers like restricting access to root user only [HRDN-7222] \n",
      "      [0;37mhttps://cisofy.com/controls/HRDN-7222/[0m\n",
      "\n",
      "  [0;36mFollow-up[0m:\n",
      "  [1;37m----------------------------[0m\n",
      "  [1;37m-[0m Show details of a test (lynis show details TEST-ID)\n",
      "  [1;37m-[0m Check the logfile for all details (less /var/log/lynis.log)\n",
      "  [1;37m-[0m Read security controls texts (https://cisofy.com)\n",
      "  [1;37m-[0m Use --upload to upload data to central system (Lynis Enterprise users)\n",
      "\n",
      "================================================================================\n",
      "\n",
      "  [1;37mLynis security scan details[0m:\n",
      "\n",
      "  [0;36mHardening index[0m : [1;37m60[0m [[1;33m############[0m        ]\n",
      "  [0;36mTests performed[0m : [1;37m225[0m\n",
      "  [0;36mPlugins enabled[0m : [1;37m1[0m\n",
      "\n",
      "  [1;37mComponents[0m:\n",
      "  - Firewall               [[1;32mV[0m]\n",
      "  - Malware scanner        [[1;32mV[0m]\n",
      "\n",
      "  [1;33mLynis Modules[0m:\n",
      "  - Compliance Status      [[1;33m?[0m]\n",
      "  - Security Audit         [[1;32mV[0m]\n",
      "  - Vulnerability Scan     [[1;32mV[0m]\n",
      "\n",
      "  [1;33mFiles[0m:\n",
      "  - Test and debug information      : [1;37m/var/log/lynis.log[0m\n",
      "  - Report data                     : [1;37m/var/log/lynis-report.dat[0m\n",
      "\n",
      "================================================================================\n",
      "  [1;33mNotice: [1;37mLynis update available[0m\n",
      "  Current version : [1;37m262[0m    Latest version : [1;37m308[0m\n",
      "================================================================================\n",
      "\n",
      "  [1;37mLynis[0m 2.6.2\n",
      "\n",
      "  Auditing, system hardening, and compliance for UNIX-based systems\n",
      "  (Linux, macOS, BSD, and others)\n",
      "\n",
      "  2007-2018, CISOfy - https://cisofy.com/lynis/\n",
      "  [1;37mEnterprise support available (compliance, plugins, interface and tools)[0m\n",
      "\n",
      "================================================================================\n",
      "\n",
      "  [0;44m[TIP][0m: [0;94mEnhance Lynis audits by adding your settings to custom.prf (see /etc/lynis/default.prf for all settings)[0m\n",
      "\n",
      "\n"
     ]
    }
   ],
   "source": [
    "import string\n",
    "\n",
    "for n, i in enumerate(audit_op.split(\"\\n\")):\n",
    "    printable = set(string.printable)\n",
    "    g = filter(lambda x: x in printable, i)\n",
    "    line_str = ''\n",
    "    for t in g:\n",
    "        line_str += t\n",
    "    print(line_str)"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 278,
   "outputs": [
    {
     "data": {
      "text/plain": "'127.0.1.1'"
     },
     "execution_count": 278,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "import socket\n",
    "socket.gethostbyname(socket.gethostname())"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 279,
   "outputs": [
    {
     "data": {
      "text/plain": "'linuxadmin-System-Product-Name'"
     },
     "execution_count": 279,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "socket.getfqdn()"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": 282,
   "outputs": [
    {
     "data": {
      "text/plain": "'172.16.233.155'"
     },
     "execution_count": 282,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "ip_cmd = \"ip -o -f inet addr show | awk '/scope global/ {print $4}'\"\n",
    "call_cmd(ip_cmd).split(\"\\n\")[0].split(\"/\")[0]"
   ],
   "metadata": {
    "collapsed": false
   }
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "outputs": [],
   "source": [],
   "metadata": {
    "collapsed": false
   }
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 2
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython2",
   "version": "2.7.6"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 0
}