Linux Security Audit
10-point security check for Linux servers.
Quick Scan
# Open ports
ss -tlnp
# Failed SSH logins
grep "Failed password" /var/log/auth.log | wc -l
# Sudo users
grep -Po '^sudo:.*$' /etc/group
# World-writable files
find / -perm -2 -type f 2>/dev/null | wc -l
# Users with shells
cat /etc/passwd | grep -E '/(bash|sh|zsh)$'