bash scanner: find outdated software and potential exploits
Bash Scanner is a fast and reliable way to scan your server for outdated software and potential exploits.
Supported software
The Bash Scanner currently detects the following software for updates (keep in mind, this list is an ongoing process and more software packages will be added in the future):
Debian* + dotdeb
Ubuntu*
OpenSSL*
OpenSSH*
cPanel
Nginx*
Laravel
Apache*
PHP*
BIND*
Drupal + modules
Composer modules
Wordpress + plugins
Install
The easiest way to install the Bash Scanner tool is by using wget to get the runnable shell script. This file is signed with an SHA 256 key and allows you to safely install the security monitor by following several simple steps.
wget https://raw.githubusercontent.com/PatrolServer/bash-scanner/master/patrolserver
In order to run the monitor tool, use the bash command to execute the shell script downloaded before.
bash patrolserver
Extended reports
After an initial scan, you will be asked to create an account on the PatrolServer dashboard (which is totally optional, you are free to use the tool without an account). The benefit of creating a sustainable account is detailed reporting, together with documentation on how to secure your server.
Continuous scanning
The script will ask you if it should set a cronjob, this simply means your server software will be in sync for daily scans. And you will be reported by email when your current software becomes outdated.
Source: https://github.com/PatrolServer/