Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #267669

Re: How to find system configuration vulnerabilities; was: Thank you Debian

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On February 21, 2024, at 4:08 PM, Michael Kjörling <2695bd53d63c@ewoof.net> wrote:

>On 21 Feb 2024 19:03 +0000, from andre@rodier.me (Andre Rodier):
>> - What is the best approach to check if there is any vulnerability in the
>> packages configuration ?
>> - Is there any service that could audit the deployment code or the
>> configuration files ?
>My understanding is that both Lynis and Vuls are popular for
>already-installed systems. If you have your configuration packaged as
>Ansible scripts, then deploying that onto a disposable VM based on a
>minimal Debian installation should be a reasonably practical way of
>auditing the deployment process itself for vulnerabilities.
>A web search for something like "linux local vulnerability scanner"
>will provide you with additional leads.
>Note that any automated tool will use some kind of heuristics so (a)
>may find things that are not actually vulnerabilities in your setup,
>and (b) might not find something which _is_ a vulnerability in your
>setup.
>-- 

You can install and run Tenable Nessus Vulnerability scanner. The free version can scan like 10 IPs. I use Nessus and it works well. 

Security Blanket is a Security hardening tool suite which is nice and not too expensive.


>Michael Kjörling                     🔗 https://michael.kjorling.se
>“Remember when, on the Internet, nobody cared that you were a dog?”

Back to linux.debian.user | Previous | Next | Find similar | Unroll thread

Thread

Re: How to find system configuration vulnerabilities; was: Thank you Debian Timothy Butterworth <timothy.m.butterworth@gmail.com> - 2024-02-21 22:40 +0100

csiph-web