2nd task

Security_Audit/security_audit.sh

@@ -0,0 +1,79 @@
+#!/bin/bash
+
+# -------------------------------
+# Security Audit Script
+# 1. Port Scan
+# 2. SSL Certificate Check
+# 3. Rate Limit Test
+# -------------------------------
+
+if [ $# -lt 3 ]; then
+    echo "Usage: $0 <IP_ADDRESS> <DOMAIN> <LOGIN_API_URL>"
+    echo "Example:"
+    echo "./security_audit.sh 192.168.1.10 ghaymah.systems https://ghaymah.systems/api/login"
+    exit 1
+fi
+
+TARGET_IP=$1
+DOMAIN=$2
+LOGIN_URL=$3
+
+OUTPUT="security_report.txt"
+
+echo "===================================" | tee $OUTPUT
+echo "      Security Audit Report         " | tee -a $OUTPUT
+echo "===================================" | tee -a $OUTPUT
+echo "" | tee -a $OUTPUT
+
+###################################################
+# 1. Port Scan
+###################################################
+
+echo "[1] Scanning Open Ports..." | tee -a $OUTPUT
+echo "-----------------------------------" | tee -a $OUTPUT
+
+nmap -p- -sV --open $TARGET_IP | tee -a $OUTPUT
+
+echo "" | tee -a $OUTPUT
+
+###################################################
+# 2. SSL Check
+###################################################
+
+echo "[2] Checking SSL Certificate..." | tee -a $OUTPUT
+echo "-----------------------------------" | tee -a $OUTPUT
+
+echo | openssl s_client \
+-connect ${DOMAIN}:443 \
+-servername ${DOMAIN} 2>/dev/null \
+| openssl x509 -noout -dates -issuer -subject \
+| tee -a $OUTPUT
+
+echo "" | tee -a $OUTPUT
+
+###################################################
+# 3. Rate Limit Test
+###################################################
+
+echo "[3] Testing Rate Limiting..." | tee -a $OUTPUT
+echo "-----------------------------------" | tee -a $OUTPUT
+
+for i in {1..20}
+do
+    RESPONSE=$(curl -s \
+        -o /dev/null \
+        -w "%{http_code}" \
+        -X POST "$LOGIN_URL" \
+        -H "Content-Type: application/json" \
+        -d '{"username":"test","password":"wrong_password"}')
+
+    echo "Request $i -> HTTP $RESPONSE" | tee -a $OUTPUT
+
+    sleep 0.1
+done
+
+echo "" | tee -a $OUTPUT
+echo "===================================" | tee -a $OUTPUT
+echo "Audit completed successfully."
+echo "Report saved as: $OUTPUT"
+echo "==================================="