Ubuntu CIS Phase-3 Template

[Th3l0newolf]

more templates

Template / PR Information

Phase 3 Ubuntu CIS template for Ubuntu 24.04 LTS

• ftp-client-check
• inactive-password-lock-default-check
• ldap-client-check
• nis-client-check
• password-expiration-check
• password-min-days-check
• password-warn-age-check
• ssh-rsh-client-check
• strong-password-hashing-check
• talk-client-check
• telnet-client-check

Template Validation

I've validated this template locally?

• YES

Additional Details (leave it blank if not applicable)

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server

[princechaddha]

Automated PR Review (Experimental)

---

Thank you for your contribution, Th3l0newolf! You can join our Discord server. It's a great place to connect with fellow contributors and stay updated with the latest developments. Thank you once again.

Required Fixes

• In the id field for the rsh-client-check template, change the identifier from ssh-rsh-client-check to rsh-client-check to match the filename.

Other Suggestions

1. Consider adding more context in the description fields for the templates. Although they provide a brief summary of security risks, a little more detail about why these specific checks are important might enhance understanding for users unfamiliar with the topics.
2. It may be helpful to include self-contained: true only if it can be run in isolation without dependencies on external files or configurations, ensure that usage matches this requirement.
3. For consistency and clarity, keep an eye on capitalization — “CIS_PASS” and “CIS_FAIL” are capitalized throughout, which is good. Just ensure it's consistent in similar fields across all templates.
4. Review all the severity levels to ensure they align correctly with the impact. For instance, make sure "medium" and "high" ratings reflect their actual risk levels as per best practices or available CVSS scores.
5. Consider briefly mentioning any potential impact in the remediation sections for a deeper understanding of the actions users should take.

As a side note, I am an AI Template bot, and the team will review the PR shortly. Happy coding!