SLAD - Security Local Auditing Daemon V2
SLAD is a tool for performing local security checks against GNU/Linux systems and is published
entirely under the GPL. SLAD has been primarily
developed for the BOSS project to work together with Nessus to
enhance its local scanning capabilities. For example, scanning for weak passwords with a tool like
John-the-Ripper is something that simply cannot be achieved by a network scan.
Therefore, SLAD is required to be installed on every GNU/Linux system where local auditing
needs to be done. SLAD can then be used as a stand-alone application or more conveniently through
Nessus. For usage with Nessus two NASL plugins are provided for interfacing between Nessus and SLAD
The Version 2.0 provides a XML Interface for Parameters and easy integration of
additional audit-parameters and tools. To help the administrator to integrate a new
feature-set, a development-documentation is provided with the cvs.
SLAD has been tested and verified on the following platforms:
- RedHat Fedora Core 5
- SuSe 10
- Debian 3.0 (woody)
- Debian 3.1 (sarge)
- Gentoo Linux 2006.1
SLAD is implemented in Perl and provides an extendable plugin architecture allowing to use various
GPL-based security scanners and auditing tools under one common framework. Currently, SLAD comes packaged
with
As a result SLAD delivers reports of these locally installed auditing and analysis tools.
When used with Nessus the individual reports are wrapped into a standard Nessus report.
SLAD as well as the SLAD NASL Plugins can be downloaded from this Website in their
current stable release V2.0.
Installation
You can use our "easy-to-use" GTK installer, this installer downloads the lastest SLAD Release Binary,
and install it on the target system.
You only need to provide the login for the traget system.
Usage
For details on how to use SLAD as a stand-alone application see the INSTALL and readme.txt
documents that come packaged which SLAD. After successful installation these files are located in
the main SLAD directory /opt/slad/share/doc. Additional information can be found in the
SLAD developer's and admininstrator's guide.
For information regarding how to use SLAD in connection with Nessus see the NASL
section of this web site.
