5l1v3r1 / bashscanner

A fast way to scan your server for outdated software and potential exploits.

Bash Scanner

Bash Scanner is a fast and reliable way to scan your server for outdated software and potential exploits.

Getting started

Install

The easiest way to install the Bash Scanner tool is by using wget to get the runnable shell script. This file is signed with a SHA 256 key and allows you to safely install the security monitor by following several simple steps.

wget https://raw.githubusercontent.com/PatrolServer/bash-scanner/master/patrolserver

In order to run the monitor tool, use the bash command to execute the shell script downloaded before.

bash patrolserver

Extended reports

After an initial scan, you will be asked to create an account on the PatrolServer dashboard (which is totally optional, you are free to use the tool without an account). The benefit of creating a sustainable account is detailed reporting, together with documentation on how to secure your server.

Continuous scanning

The script will ask you if it should set a cronjob, this simply means your server software will be in sync for daily scans. And you will be reported by email when your current software becomes outdated.

Supported software

The Bash Scanner currently detects the following software for updates (keep in mind, this list is an ongoing process and more software packages will be added in the future):

• Debian* + dotdeb
• Ubuntu*
• OpenSSL*
• OpenSSH*
• cPanel
• Nginx*
• Laravel
• Apache*
• PHP*
• BIND*
• Drupal + modules
• Composer modules
• Wordpress + plugins

*: This software also returns the exploits information.