0x4D31 / Salt Scanner
Licence: other
Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration
Stars: ✭ 261
Programming Languages
python
139335 projects - #7 most used programming language
Labels
Projects that are alternatives of or similar to Salt Scanner
Lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Stars: ✭ 9,137 (+3400.77%)
Mutual labels: devops, devops-tools, security-tools, security-audit, vulnerability-scanners, security-scanner
Ossa
Open-Source Security Architecture | 开源安全架构
Stars: ✭ 796 (+204.98%)
Mutual labels: security-tools, security-audit, vulnerability-scanners, security-scanner
Kube Scan
kube-scan: Octarine k8s cluster risk assessment tool
Stars: ✭ 566 (+116.86%)
Mutual labels: devops, security-tools, security-audit, security-scanner
Vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Stars: ✭ 8,844 (+3288.51%)
Mutual labels: security-tools, security-audit, vulnerability-scanners, security-scanner
Patrowldocs
PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
Stars: ✭ 105 (-59.77%)
Mutual labels: security-tools, vulnerability-scanners, security-scanner
Purify
All-in-one tool for managing vulnerability reports from AppSec pipelines
Stars: ✭ 72 (-72.41%)
Mutual labels: security-tools, security-audit, vulnerability-scanners
Kubestriker
A Blazing fast Security Auditing tool for Kubernetes
Stars: ✭ 213 (-18.39%)
Mutual labels: devops, security-tools, security-audit
Minesweeper
A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
Stars: ✭ 162 (-37.93%)
Mutual labels: security-tools, security-audit, security-scanner
Rapidscan
🆕 The Multi-Tool Web Vulnerability Scanner.
Stars: ✭ 775 (+196.93%)
Mutual labels: security-tools, vulnerability-scanners, security-scanner
Reconnoitre
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
Stars: ✭ 1,824 (+598.85%)
Mutual labels: security-tools, security-audit, security-scanner
Cobra
Source Code Security Audit (源代码安全审计)
Stars: ✭ 2,802 (+973.56%)
Mutual labels: security-tools, security-audit, security-scanner
Burpa
Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).
Stars: ✭ 427 (+63.6%)
Mutual labels: devops, security-tools, security-scanner
Golang Tls
Simple Golang HTTPS/TLS Examples
Stars: ✭ 857 (+228.35%)
Mutual labels: security-tools, security-audit, security-scanner
Pytest Testinfra
With Testinfra you can write unit tests in Python to test actual state of
your servers configured by management tools like Salt, Ansible, Puppet,
Chef and so on.
Stars: ✭ 1,987 (+661.3%)
Mutual labels: saltstack, devops, devops-tools
Anteater
Anteater - CI/CD Gate Check Framework
Stars: ✭ 174 (-33.33%)
Mutual labels: devops, devops-tools, security-audit
Patrowlengines
PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
Stars: ✭ 162 (-37.93%)
Mutual labels: security-tools, vulnerability-scanners, security-scanner
Jok3r
Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
Stars: ✭ 645 (+147.13%)
Mutual labels: security-tools, security-audit, vulnerability-scanners
Inql
InQL - A Burp Extension for GraphQL Security Testing
Stars: ✭ 715 (+173.95%)
Mutual labels: security-tools, security-audit, security-scanner
Faraday
Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.
Stars: ✭ 3,198 (+1125.29%)
Mutual labels: devops, security-audit, vulnerability-scanners
Envkey App
Secure, human-friendly, cross-platform secrets and config.
Stars: ✭ 83 (-68.2%)
Mutual labels: devops, devops-tools, security-tools
salt-scanner
A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications and JIRA integration.
Features
- Slack notification and report upload
- JIRA integration
- OpsGenie integration
Requirements
- Salt Open 2016.11.x (salt-master, salt-minion)¹
- Python 2.7
- salt (you may need to install gcc, gcc-c++, python dev)
- slackclient
- jira
- opsgenie-sdk
Note: Salt Master and Minion versions should match. Salt-Scanner supports Salt version 2016.11.x. if you are using version 2017.7.x, replace "expr_form" with "tgt_type" in salt-scanner.py.
Usage
$ ./salt-scanner.py -h
==========================================================
Vulnerability scanner based on Vulners API and Salt Open
_____ _ _ _____
/ ___| | | | / ___|
\ `--. __ _| | |_ \ `--. ___ __ _ _ __ _ __ ___ _ __
`--. \/ _` | | __| `--. \/ __/ _` | '_ \| '_ \ / _ \ '__|
/\__/ / (_| | | |_ /\__/ / (_| (_| | | | | | | | __/ |
\____/ \__,_|_|\__| \____/ \___\__,_|_| |_|_| |_|\___|_|
Salt-Scanner 0.1 / by 0x4D31
==========================================================
usage: salt-scanner.py [-h] [-t TARGET_HOSTS] [-tF {glob,list,grain}]
[-oN OS_NAME] [-oV OS_VERSION]
optional arguments:
-h, --help show this help message and exit
-t TARGET_HOSTS, --target-hosts TARGET_HOSTS
-tF {glob,list,grain}, --target-form {glob,list,grain}
-oN OS_NAME, --os-name OS_NAME
-oV OS_VERSION, --os-version OS_VERSION
$ sudo SLACK_API_TOKEN="EXAMPLETOKEN" ./salt-scanner.py -t "*"
==========================================================
Vulnerability scanner based on Vulners API and Salt Open
_____ _ _ _____
/ ___| | | | / ___|
\ `--. __ _| | |_ \ `--. ___ __ _ _ __ _ __ ___ _ __
`--. \/ _` | | __| `--. \/ __/ _` | '_ \| '_ \ / _ \ '__|
/\__/ / (_| | | |_ /\__/ / (_| (_| | | | | | | | __/ |
\____/ \__,_|_|\__| \____/ \___\__,_|_| |_|_| |_|\___|_|
Salt-Scanner 0.1 / by 0x4D31
==========================================================
+ No default OS is configured. Detecting OS...
+ Detected Operating Systems:
- OS Name: centos, OS Version: 7
+ Getting the Installed Packages...
+ Started Scanning '10.10.10.55'...
- Total Packages: 357
- 6 Vulnerable Packages Found - Severity: Low
+ Started Scanning '10.10.10.56'...
- Total Packages: 392
- 6 Vulnerable Packages Found - Severity: Critical
+ Finished scanning 2 host (target hosts: '*').
2 Hosts are vulnerable!
+ Output file created: 20170622-093138_232826a7-983f-499b-ad96-7b8f1a75c1d7.txt
+ Full report uploaded to Slack
+ JIRA Issue created: VM-16
+ OpsGenie alert created
You can also use Salt Grains such as ec2_tags in target_hosts:
$ sudo ./salt-scanner.py --target-hosts "ec2_tags:Role:webapp" --target-form grain
Slack Alert
TODO
- Clean up the code and add some error handling
- Use Salt Grains for getting the OS info and installed packages
[1] Salt in 10 Minutes: https://docs.saltstack.com/en/latest/topics/tutorials/walkthrough.html
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].