WHAT IS IT?
HnTool is an open source (GPLv2) hardening tool for Unix. It scans your system for vulnerabilities or problems in configuration files allowing you to get a quick overview of the security status of your system.
Some of the features are:
- Scan your system looking for authentication problems
- Can harden your apache configuration
- Can harden your ssh configuration
- Can harden your postgres configuration
- Modules for mysql, named, postfix and others servers soon
To use HnTool download it and run:
# ./hntool
Here's a sample output:

Also, you can have a html output using:
# hntool -t html > report.html:

For more information (and options) you can check HnTool's manual page by typing "man hntool" at the command line or see the usage help:
$ hntool -h
SUPPORTED SYSTEMS
HnTool was already tested and is working on:
- Arch Linux
- CentOS
- Debian
- Fedora
- Ubuntu
If you are using HnTool on a system that is not listed above, please, let us know.
DOWNLOAD
HnTool is licensed under the General Public License (GPLv2).
You can download HnTool from Google Code.
The latest source code is available through the mercurial source control system:
$ hg clone https://hntool.googlecode.com/hg/ hntool
ATTENTION: HnTool is still under heavy development and at a very early development stage.
MAILING LIST
We have a mailing list for this project. You can use it to ask for help, report a bug, send patches and get in touch with the developers.
If you prefer, you can check the archive of this mailing list.
HOW CAN I HELP?
There are several ways that you can contribute and help HnTool's development. You can contribute with code, patchs, bugs and feature requests.
To report a bug, a patch or a feature request for HnTool, please, file a issue in Google Code. If you're reporting a bug, please give concrete examples of how and where the problem occurs.
AUTHORS
- Hugo Doria: mail at hugodoria.org
- Rafael Gomes: rafaelgomes at techfree.com.br
- Alexandro Silva: alexoslabs at gmail.com
- Aurélio Heckert: aurium at gmail.com
- Candido Vieira: cvieira.br at gmail.com
- Elton Pereira: eltonplima at gmail.com
- Késsia Pinheiro: kessiapinheiro at gmail.com
- Rafael Gonçalves Martins: rafael at rafaelmartins.eng.br
- Sebastian SWC: mail at sebastianswc.net