Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Adding script powershell version #1

Open
wants to merge 15 commits into
base: master
Choose a base branch
from
Open

Adding script powershell version #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
54ec8e3
Update MYSQLAudit.sh
Monsieur-Chat Nov 27, 2023
1781c19
Create MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 27, 2023
0c5c5ab
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 27, 2023
388b9f8
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 28, 2023
53a5ece
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 28, 2023
792d9f8
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 28, 2023
cc31733
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 28, 2023
46aed53
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 28, 2023
086f27c
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 28, 2023
9a92761
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 28, 2023
58c26d9
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 28, 2023
b8bcca3
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 28, 2023
91327ba
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 28, 2023
7c4a1cf
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 28, 2023
cdd2fa5
Update MYSQL-CIS-Audit.ps1
Monsieur-Chat Nov 29, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
270 changes: 270 additions & 0 deletions MYSQL-CIS-Audit.ps1
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,270 @@
# SecureLayer7 MYSQL Audit Script
# Developed and Modified By Sandeep Kamble for the official purpose only
# This configuration review script is developed according to specific needs.
# Last Update Data: 7 July, 2016
# Use following command to run this script
# Set-ExecutionPolicy Unrestricted
# ./MYSQL-CIS-Audit.ps1

Write-Host "Enter your username for mysql (root recommended)"
$username = Read-Host

Write-Host "Databse ip adress"
$ipaddr = Read-Host

Write-Host "Enter name database :"
$dbname = Read-Host

Write-Host "Enter database port :"
$port = Read-Host

Write-Host "Enter password (password will show on prompt)"
$password = Read-Host

# CREATING DIRECTORIES: RESULTS
Write-Host "CREATING DIRECTORIES : RESULTS"
New-Item -ItemType Directory -Path "results_$dbname" -Force | Out-Null

# General Information for MYSQL Audit
Write-Host "SecureLayer7 MYSQL Audit Started"

$connectionString = "mysql -h $ipaddr -u $username -p$password -P$port $dbname -e"
Write-Host $connectionString

# Time and Date
Add-Content -Path "results_$dbname/System_info.txt" -Value "Time and Date"
Invoke-Expression "$connectionString `"`SELECT NOW()`"" | Out-File -Append -FilePath "results_$dbname/System_info.txt"

# MYSQL VERSION
Add-Content -Path "results_$dbname/System_info.txt" -Value "MYSQL VERSION"
Invoke-Expression "$connectionString `"`show variables like '%version%'`""| Out-File -Append -FilePath "results_$dbname/System_info.txt"

# USERS
Add-Content -Path "results_$dbname/Users.txt" -Value "USERS"
Invoke-Expression "$connectionString `"`select user,host from mysql.user`""| Out-File -Append -FilePath "results_$dbname/Users.txt"

# CURRENT USERS
Add-Content -Path "results_$dbname/Users.txt" -Value "CURRENT USERS"
Invoke-Expression "$connectionString `"`show processlist`"" | Out-File -Append -FilePath "results_$dbname/Users.txt"

# ALL VARIABLES
Add-Content -Path "results_$dbname/All_variables.txt" -Value "ALL VARIABLES"
Invoke-Expression "$connectionString `"`show variables`"" | Out-File -Append -FilePath "results_$dbname/All_variables.txt"

# DATABASES
Add-Content -Path "results_$dbname/Databases.txt" -Value "DATABASES"
Invoke-Expression "$connectionString `"`show databases`""| Out-File -Append -FilePath "results_$dbname/Databases.txt"
Invoke-Expression "$connectionString `"`show databases`""| Select-String -Pattern "Database" -NotMatch | Out-File -FilePath "results_$dbname/mysql_databases.txt"

# TLS VERSION
Add-Content -Path "results_$dbname/Databases.txt" -Value "TLS VERSION"
Invoke-Expression "$connectionString `"`select @@tls_version`""| Out-File -Append -FilePath "results_$dbname/Databases.txt"

# ALL TABLES FROM ALL DATABASES
Add-Content -Path "results_$dbname/Tables_from_databases.txt" -Value "ALL TABLES FROM ALL DATABASES"
Invoke-Expression "$connectionString `"`select table_schema, table_name from information_schema.tables`""| Out-File -Append -FilePath "results_$dbname/Tables_from_databases.txt"
Invoke-Expression "$connectionString `"`select table_schema, table_name from information_schema.tables`""| Out-File -Append -FilePath "results_$dbname/mysql_tables.txt"

# TABLES FROM ALL DATABASES EXCEPT INTERNAL
Add-Content -Path "results_$dbname/Not_system_tables.txt" -Value "TABLES FROM ALL DATABASES EXCEPT INTERNAL"
Invoke-Expression "$connectionString `"`SELECT table_schema, table_name FROM information_schema.tables WHERE table_schema NOT IN ('information_schema', 'performance_schema', 'mysql')`""| Out-File -Append -FilePath "results_$dbname/Not_system_tables.txt"

# Operating System Level Configuration
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Starting of MYSQL Audit"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.1"
Invoke-Expression "$connectionString `"`show variables where variable_name = 'datadir'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"

# Auditing Guidance for section 3.2
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.2"
Invoke-Expression "$connectionString `"`show variables like 'log_bin_basename'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"

# Auditing Guidance for section 2.2
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 2.2"
Invoke-Expression "$connectionString `"`show variables like 'basedir'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Logging
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Logging"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 3.3
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.3"
Invoke-Expression "$connectionString `"`show variables like 'log_error'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 3.3
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.3"
Invoke-Expression "$connectionString `"`show variables like 'log_bin'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 3.4
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.4"
Invoke-Expression "$connectionString `"`show variables like 'slow_query_log'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 3.5
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.5"
Invoke-Expression "$connectionString `"`show variables like 'relay_log_basename'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 4.9
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 4.9"
Invoke-Expression "$connectionString `"`SHOW VARIABLES LIKE 'sql_mode'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 7.5
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 7.5"
Invoke-Expression "$connectionString `"`SHOW VARIABLES LIKE 'default_password_lifetime'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 7.6
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 7.6"
Invoke-Expression "$connectionString `"`SHOW VARIABLES LIKE 'validate_password%'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 4.5
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 4.5"
Invoke-Expression "$connectionString `"`select user from mysql.user where user = 'root'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 4.9
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 4.9"
Invoke-Expression "$connectionString `"`select user from mysql.user where host = '%'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 4.10
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 4.10"
Invoke-Expression "$connectionString `"`select user, password from mysql.user where length(password) = 0 or password is null`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 4.11
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 4.11"
Invoke-Expression "$connectionString `"`select user from mysql.user where user = ''`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# MySQL Permissions
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "MySQL Permissions"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 5.1
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.1"
Invoke-Expression "$connectionString `"`select user, host from mysql.user where (Select_priv = 'Y') or (Insert_priv = 'Y') or (Update_priv = 'Y') or (Delete_priv = 'Y') or (Create_priv = 'Y') or (Drop_priv = 'Y')`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Invoke-Expression "$connectionString `"`select user, host from mysql.db where db = 'mysql' and ((Select_priv = 'Y') or (Insert_priv = 'Y') or (Update_priv = 'Y') or (Delete_priv = 'Y') or (Create_priv = 'Y') or (Drop_priv = 'Y'))`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 5.2
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.2"
Invoke-Expression "$connectionString `"`select user, host from mysql.user where File_priv = 'Y'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 5.3
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.3"
Invoke-Expression "$connectionString `"`select user, host from mysql.user where Process_priv = 'Y'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 5.4
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.4"
Invoke-Expression "$connectionString `"`select user, host from mysql.user where Super_priv = 'Y'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 5.5
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.5"
Invoke-Expression "$connectionString `"`select user, host from mysql.user where Shutdown_priv ='Y'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"

# Blank line
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.6 "
Invoke-Expression "$connectionString `"`select user, host from mysql.user where Create_user_priv = 'Y'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# MySQL Configuration
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "MySQL Configuration"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 6.2
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.2"
Invoke-Expression "$connectionString `"`show variables like 'local_infile'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 6.3
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.3"
Invoke-Expression "$connectionString `"`show variables like 'old_passwords'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 6.4
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.4"
Invoke-Expression "$connectionString `"`show variables like 'safe_show_database'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 6.5
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.5"
Invoke-Expression "$connectionString `"`show variables like 'secure_auth'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 6.6
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.6"
Invoke-Expression "$connectionString `"`show variables like 'skip_grant_table'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 6.7
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.7"
Invoke-Expression "$connectionString `"`show variables like 'have_merge_engin'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 6.8
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.8"
Invoke-Expression "$connectionString `"`show variables like skip_networking'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 6.10
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.10"
Invoke-Expression "$connectionString `"`show variables like 'have_symlink'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# SSL Configuration
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "SSL Configuration"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " "

# Auditing Guidance for section 7.2
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 7.2"
Invoke-Expression "$connectionString `"`show variables like 'have_openssl'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Invoke-Expression "$connectionString `"`show variables like 'ssl_key'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Invoke-Expression "$connectionString `"`show variables like 'ssl_ca'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt"
Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "##################END AUDIT##############"
Write-Host "##################END MYSQL AUDIT##############"
Write-Host "ZIP the result folder and email to consultant"
Loading