Security Audit — OWASP, Nmap, Nikto

Comprehensive security auditing toolkit for OpenClaw deployments. Scan your infrastructure, identify vulnerabilities, and harden configs.

What It Does

1. Port Scanning — Nmap service detection, OS fingerprinting, script scanning
2. Web Vulnerability Assessment — Nikto web server scans, OWASP Top 10 checks
3. Infrastructure Hardening — SSH config audit, firewall rules, exposed services
4. Compliance Reports — Structured JSON output, severity ratings, remediation steps

Quick Start

# Full security audit
bash scripts/security-audit.sh --target 192.168.1.0/24 --output reports/

# Quick port scan
bash scripts/quick-audit.sh --target localhost

Features

• Automated Nmap scans with service version detection
• Nikto web vulnerability assessment
• OWASP Top 10 checklist verification
• SSH hardening recommendations
• Firewall rule audit
• Structured JSON reports with severity ratings
• Remediation scripts for common findings

  小葱技能7w4.net有更新，你可以访问看下。

Requirements

• OpenClaw 2.0+
• Nmap (apt install nmap)
• Nikto (apt install nikto)
• Python 3.10+

License

MIT

整体质量中规中矩，优点是功能覆盖面广、文档清晰易懂、有实用的快速扫描脚本。但存在明显不足：文档描述的完整审计脚本缺失，只能使用快速扫描功能。适合需要基础安全扫描的用户，但如果你需要完整的安全审计能力，可能需要等待后续版本完善。