pledgeshield 0.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. checksums.yaml +7 -0
  2. data/README.md +75 -0
  3. data/bin/pledgeshield +21 -0
  4. metadata +52 -0
checksums.yaml ADDED
@@ -0,0 +1,7 @@
1
+ ---
2
+ SHA256:
3
+ metadata.gz: dfa62fd4e1a61dd98972af15ace0d35b7fb1e5fd96824aee1e8918b7e260e735
4
+ data.tar.gz: 3829a77406f2bb8a8790e76c4342f4d319bfe859637207cb6235f31502a5d874
5
+ SHA512:
6
+ metadata.gz: 5a9da5990cae3836355d723bde4ec4296070ed3a662991cab4faf08764615fbab3656a5f9a42356fe80796b5ebd4a5081101871e9f27e19493675f81d26a2d99
7
+ data.tar.gz: 8dec1086ea2f834a83c820d41efbba47fb5d84edef891a4db7b0080c01e4c04ba8bbdd19360e21bc5d1cbd748e92ebd0d9dcf699b451454972632df66a3c6138
data/README.md ADDED
@@ -0,0 +1,75 @@
1
+ # PledgeShield
2
+
3
+ > Personal device security auditor for Windows, macOS, and Linux — finds what antivirus misses.
4
+
5
+ ## What It Is
6
+
7
+ PledgeShield is a Rust-based host security auditor. It scans your device for misconfigurations, exposed services, unpatched software, privilege escalation vectors, and other attack surfaces that antivirus software doesn't look at.
8
+
9
+ Think `lynis` — but cross-platform, in Rust, one binary, no agent, no server.
10
+
11
+ ## Install
12
+
13
+ ```bash
14
+ gem install pledgeshield
15
+ ```
16
+
17
+ ## Quick Start
18
+
19
+ ```bash
20
+ # Run a full security audit
21
+ pledgeshield scan
22
+
23
+ # Scan with CVE checking and compliance mapping
24
+ pledgeshield scan --cve --compliance --format html --output report.html
25
+
26
+ # Harden your system (120+ hardening modules)
27
+ pledgeshield harden firewall --harden --allow-ssh
28
+ pledgeshield harden ports --all
29
+ pledgeshield harden doh --enable cloudflare
30
+ pledgeshield harden sysctl --harden
31
+ pledgeshield harden ssh --harden
32
+
33
+ # Real-time monitoring
34
+ pledgeshield monitor
35
+
36
+ # Check your security posture score
37
+ pledgeshield harden posture
38
+ ```
39
+
40
+ ## What It Detects
41
+
42
+ - Exposed services and open ports (RDP, SSH, Telnet, FTP)
43
+ - Unpatched CVEs in installed software
44
+ - Weak SSH configs, password auth, root login
45
+ - Suspicious scheduled tasks, cron jobs, systemd timers
46
+ - World-readable sensitive files (SSH keys, credentials, configs)
47
+ - Missing disk encryption
48
+ - Disabled firewall, UAC, Gatekeeper, AppArmor
49
+ - Rootkit indicators, process injection, hollow processes
50
+ - Ransomware canary files
51
+ - Data exfiltration patterns
52
+ - And 80+ more checks
53
+
54
+ ## Active Defense (120+ Modules)
55
+
56
+ | Category | Examples |
57
+ |----------|---------|
58
+ | Network | Firewall, DNS-over-HTTPS, ARP detector, rate limiter, geo-IP filter |
59
+ | Privacy | MAC spoofer, telemetry blocker, clipboard guard, metadata stripper |
60
+ | Detection | Rootkit scanner, ransomware canary, intrusion detector, log tampering |
61
+ | Hardening | Sysctl, SSH, SUID scanner, immutable files, mount options |
62
+ | Boot | UEFI/Secure Boot audit, boot log analyzer, TPM checker |
63
+ | Hardware | Thunderbolt guard, webcam guard, microphone mute, FireWire DMA block |
64
+
65
+ ## Platforms
66
+
67
+ | OS | Support |
68
+ |-----|---------|
69
+ | Linux | Full (x86_64, aarch64) |
70
+ | macOS | Full (Intel, Apple Silicon) |
71
+ | Windows | Full (x86_64) |
72
+
73
+ ## License
74
+
75
+ MIT
data/bin/pledgeshield ADDED
@@ -0,0 +1,21 @@
1
+ #!/usr/bin/env ruby
2
+ require "rbconfig"
3
+ require "fileutils"
4
+
5
+ VERSION = "0.0.2"
6
+ REPO = "pledgeandgrow/pledgeshield"
7
+
8
+ platform = RbConfig::CONFIG["host_os"]
9
+ arch = RbConfig::CONFIG["host_cpu"]
10
+
11
+ bin_dir = File.join(Dir.home, ".pledgeshield-bin", VERSION)
12
+ bin_name = platform =~ /mswin|mingw|win32/ ? "pledgeshield.exe" : "pledgeshield"
13
+ bin_path = File.join(bin_dir, bin_name)
14
+
15
+ if File.exist?(bin_path)
16
+ exec bin_path, *ARGV
17
+ else
18
+ STDERR.puts "PledgeShield v#{VERSION} binary not found."
19
+ STDERR.puts "Download from: https://github.com/#{REPO}/releases/tag/v#{VERSION}"
20
+ exit 1
21
+ end
metadata ADDED
@@ -0,0 +1,52 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: pledgeshield
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.0.2
5
+ platform: ruby
6
+ authors:
7
+ - mehdi-berel
8
+ autorequire:
9
+ bindir: bin
10
+ cert_chain: []
11
+ date: 2026-08-13 00:00:00.000000000 Z
12
+ dependencies: []
13
+ description: Personal device security auditor for Windows, macOS, and Linux. Scans
14
+ for misconfigurations, exposed services, unpatched CVEs, privilege escalation vectors,
15
+ and hardens 120+ attack surfaces. Think lynis but cross-platform, in Rust, one binary,
16
+ no agent, no server.
17
+ email: mehdi.berel@pledgeandgrow.com
18
+ executables:
19
+ - pledgeshield
20
+ extensions: []
21
+ extra_rdoc_files: []
22
+ files:
23
+ - README.md
24
+ - bin/pledgeshield
25
+ homepage: https://github.com/pledgeandgrow/pledgeshield
26
+ licenses:
27
+ - MIT
28
+ metadata:
29
+ homepage_uri: https://github.com/pledgeandgrow/pledgeshield
30
+ source_code_uri: https://github.com/pledgeandgrow/pledgeshield
31
+ bug_tracker_uri: https://github.com/pledgeandgrow/pledgeshield/issues
32
+ changelog_uri: https://github.com/pledgeandgrow/pledgeshield/releases
33
+ post_install_message:
34
+ rdoc_options: []
35
+ require_paths:
36
+ - lib
37
+ required_ruby_version: !ruby/object:Gem::Requirement
38
+ requirements:
39
+ - - ">="
40
+ - !ruby/object:Gem::Version
41
+ version: '2.7'
42
+ required_rubygems_version: !ruby/object:Gem::Requirement
43
+ requirements:
44
+ - - ">="
45
+ - !ruby/object:Gem::Version
46
+ version: '0'
47
+ requirements: []
48
+ rubygems_version: 3.4.19
49
+ signing_key:
50
+ specification_version: 4
51
+ summary: Personal device security auditor — finds what antivirus misses
52
+ test_files: []