Debian-Hardener-Toolkit

A toolkit for automating Linux security hardening and compliance auditing

Features

• System configuration auditing
• Automated security configuration changes
• Compliance reporting

Installation

1. Clone the repository:

   git clone https://github.com/cwsecur1ty/Debian-Hardener-Toolkit.git
   cd Debian-Hardener-Toolkit

2. Ensure audit and hardening scripts are executable:

   chmod +x audits/*.sh
   chmod +x configs/*.sh
   chmod +x tests/*.sh
   chmod +x utils/common_functions.sh

Running Tests

You can run test scripts to verify everything works as expected ->

bash tests/test_audit_permissions.sh
bash tests/test_harden_permissions.sh
python3 tests/test_generate_report.py

Using the Toolkit

To use the toolkit, run main.py with any of these arguments:

python3 main.py --audit
python3 main.py --harden
python3 main.py --report

Summary of Each File

audits/

• audit_permissions.sh: Checks for world-writable files.
• audit_ssh_config.sh: Checks SSH Configuration for discrepancies and other issues.
• audit_users.sh: Checks for user accounts with no password set.
• audit_updates.sh: Checks for latest security patches.

configs/

• harden_fail2ban.sh: Installs and configures Fail2Ban to protect against brute force attacks.
• harden_permissions.sh: Removes world-writable permissions from files.
• harden_ssh_config.sh: Enforces secure settings in the SSH configuration.
• harden_users.sh: Enforces password policies and locks user accounts with no password.

reports/

• generate_report.py: Generates a JSON report based on the audit results.

tests/

• test_audit_permissions.sh: Tests the audit_permissions.sh script.
• test_harden_permissions.sh: Tests the harden_permissions.sh script.
• test_generate_report.py: Tests the generate_report.py script.

utils/

• common_functions.sh: Contains reusable functions such as checking for root privileges, logging messages, and backing up files.

Root Directory

• main.py: The script orchestrates the audit, hardening, and report generation processes.
• README.md: Project description, installation instructions, and usage examples.
• requirements.txt: Lists Python dependencies if any.