Lynis is an auditing tool for Unix (specialists). It scans the system and available software, to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes.

This is a tool that might be useful for both penetration testers performing white box tests and system admins trying to secure their own systems.

This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems. It can be run without prior installation, so inclusion on read only storage is no problem (USB stick, cd/dvd).

Examples of audit tests:

Available authentication methods
Expired SSL certificates
Outdated software
User accounts without password
Incorrect file permissions
Firewall auditing

Download : Lynis v 1.2.9

Advertisements