https://github.com/patrickmn/scrutinize
Misconfiguration scanner
https://github.com/patrickmn/scrutinize
Last synced: about 1 year ago
JSON representation
Misconfiguration scanner
- Host: GitHub
- URL: https://github.com/patrickmn/scrutinize
- Owner: patrickmn
- License: bsd-3-clause
- Created: 2011-06-03T22:15:15.000Z (about 15 years ago)
- Default Branch: master
- Last Pushed: 2011-07-15T13:57:01.000Z (almost 15 years ago)
- Last Synced: 2025-04-04T04:32:09.409Z (about 1 year ago)
- Language: Python
- Homepage: https://patrickmn.com/projects/scrutinize/
- Size: 113 KB
- Stars: 5
- Watchers: 2
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README
- License: LICENSE
Awesome Lists containing this project
README
Scrutinize is an extensible misconfiguration scanner--not a vulnerability scanner,
use Metasploit for that--written using Twisted. It checks for common misconfigurations
such as allowing DNS Zone Transfer for your domain, not having a PTR record, or
allowing read access to your configuration files.
Usage examples:
* python domainscan.py domain.com
* python domainscan.py domain1.com domain2.com [...]
* python hostscan.py host.domain.com
* python hostscan.py host1.domain.com host2.domain.com [...]
More information:
* python domainscan.py -h
* python hostscan.py -h
To improve performance, increase the throttle limit with the -t switch, or
set throttle in config.py. If you experience excessive connection timeouts,
lower it.
Extending:
Write a module in checks/, then add that to the top of either hostscan.py or
domainscan.py. (Improving this process is at the top of my to-do list.)