#!/bin/bash

echo "============================"
echo "Security Audit Script"
echo "============================"

echo
echo "[1] Checking Open Ports..."
ss -tuln

echo
echo "[2] Checking SSL Certificate..."
openssl s_client -connect localhost:443 </dev/null 2>/dev/null | openssl x509 -noout -dates

echo
echo "[3] Checking Sensitive File Permissions..."
ls -l /etc/passwd
ls -l /etc/shadow

echo
echo "Audit Completed."