Commit Graph

6 Commits

Author SHA1 Message Date
cschantz 6273207c90 Fix ImunifyAV documentation - it's FREE, not paid
Corrections:
- ImunifyAV = FREE version (no license required)
- Imunify360 = Paid version (requires license)
- Updated installation guide with cPanel yum method
- Added cPanel UI plugin enablement step
- Removed misleading license key requirements
- Enhanced installation with proper cPanel integration

Installation methods:
1. cPanel method (preferred):
   - yum install imunify-antivirus imunify-antivirus-cpanel
   - Enable UI plugin for user access
2. Script method (fallback):
   - wget and run imav-deploy.sh

Thanks to user for catching this important distinction!
2025-11-11 19:19:16 -05:00
cschantz 2c139e90cd Major refactor: Toolkit as monitor, standalone for all scans
Architecture Changes:
- ALL scans now use standalone scanner (/opt deployment)
- Toolkit serves as monitor/manager, not executor
- Removed direct scanning from toolkit entirely

New Features:
- Bulk scanner installation (install all 3 at once)
- Scan status checker with live progress
- Session manager (delete individual or all completed scans)
- Enhanced menu structure with clear separation

Menu Organization:
1. Create New Scan (server/user/domain/custom) → generates standalone
2. Monitor & Manage (status/results/delete)
3. Configuration (install all/settings)

Removed Functions:
- scan_entire_server() - now via standalone
- scan_user_account() - now via standalone
- scan_domain() - now via standalone
- scan_custom_path() - now via standalone
- run_all_scanners() - embedded in standalone
- scan_imunify/clamav/maldet() - embedded in standalone

Benefits:
- Cleaner separation of concerns
- Consistent scan execution (all via standalone)
- Better resource management
- Toolkit can be deleted during scan
- Centralized scan monitoring
2025-11-11 19:16:16 -05:00
cschantz 42c2d7a3d2 Improve standalone malware scanner with screen fallback and results viewer
Enhancements:
- Auto-install screen when not available (yum/apt-get support)
- Nohup fallback option if user prefers no screen installation
- Enhanced view_scan_results to show standalone scanner sessions
- Display session status (running/completed) for standalone scans
- Show summary, infected files, and logs for each session
- Track PIDs for nohup-launched scans

Screen handling:
- Option 1: Auto-install screen (recommended)
- Option 2: Use nohup fallback (no dependencies)
- Option 3: Cancel operation

Results viewer improvements:
- Separate toolkit and standalone scan results
- List all /opt/malware-* sessions with status
- Show summary, infected files, and recent logs
- Provide commands to monitor ongoing scans

This ensures the standalone scanner works even on minimal
systems without screen pre-installed.
2025-11-11 19:07:01 -05:00
cschantz 6888335c8b Add standalone malware scanner with installation guide
Features:
- Standalone scanner generator that runs independently in /opt
- Launch in screen session for background execution
- Self-contained script with no toolkit dependencies
- Self-cleanup with user confirmation after completion
- Scanner installation guide for ImunifyAV, ClamAV, and Maldet
- Menu option 5: Launch standalone scanner
- Complete scan scope selection (server/user/domain/custom path)

Implementation:
- Added show_scanner_installation_guide() function
- Added launch_standalone_scanner_menu() function
- Enhanced generate_standalone_scanner() with screen integration
- Integrated with main malware scanner menu

Use case: Long-running scans can be launched independently,
allowing toolkit deletion while scans continue in background.
2025-11-11 19:03:21 -05:00
cschantz 488d36d1d1 Add automated multi-scanner support and result comparison
New Features:
- 'All Available Scanners' option in all scan modes (server/user/domain/custom)
- Runs ImunifyAV, ClamAV, and Maldet sequentially with progress tracking
- Creates consolidated multi-scanner session reports
- Shows [1/3], [2/3], [3/3] progress indicators
- 3-second wait between scanners to prevent system overload
- Session reports saved to logs/malware-scans/multiscan_*.txt
- Stores session IDs in reference database for cross-module access
- New 'Compare scanner results' option (menu option 6)
- View consolidated reports from multiple scanners

Workflow:
1. Select any scan scope (server/user/domain/path)
2. Choose 'All Available Scanners' option
3. All installed scanners run automatically one after another
4. Single consolidated report with all results
5. Use option 6 to compare/view latest multi-scanner session

Much more automated - no need to run each scanner separately!
2025-11-11 18:50:48 -05:00
cschantz 1ec855d38d Add comprehensive malware scanner module
Features:
- Multi-scanner support: ImunifyAV, ClamAV, Maldet (LMD)
- Scan scopes: Entire server, specific user, domain, or custom path
- Auto-detect control panel (cPanel, Plesk, Interworx)
- Smart docroot detection with subdirectory filtering
- Memory safety checks before large scans
- Organized scan logging and result viewing
- Integrates with user-manager and reference database

Menu path: Security & Threat Analysis → Analysis & Troubleshooting → Web Application Analysis → Malware Scanner

Based on provided malware scanning code with toolkit standardization.
2025-11-11 18:43:31 -05:00