{"_id":"@dongluliang/sec-baseline-win","name":"@dongluliang/sec-baseline-win","dist-tags":{"latest":"0.1.0"},"versions":{"0.1.0":{"name":"@dongluliang/sec-baseline-win","version":"0.1.0","description":"只读型 Windows 安全基线自查工具 - 企业终端/服务器运维场景","main":"dist/core/scanner.js","bin":{"sec-baseline-win":"dist/cli/index.js"},"scripts":{"build":"tsc","dev":"tsc --watch","start":"node dist/cli/index.js","test":"jest","prepublishOnly":"npm run build && npm test","pack:dry":"npm pack --dry-run"},"keywords":["security","baseline","windows","hardening","audit","cis","compliance"],"author":{"name":"dongluliang"},"license":"MIT","repository":{"type":"git","url":"git+https://github.com/dongluliang/sec-baseline.git"},"engines":{"node":">=20"},"devDependencies":{"@types/jest":"^29.5.0","@types/node":"^20.0.0","jest":"^29.7.0","ts-jest":"^29.1.0","typescript":"^5.3.0"},"_id":"@dongluliang/sec-baseline-win@0.1.0","types":"./dist/core/scanner.d.ts","bugs":{"url":"https://github.com/dongluliang/sec-baseline/issues"},"homepage":"https://github.com/dongluliang/sec-baseline#readme","_nodeVersion":"20.18.0","_npmVersion":"10.8.2","dist":{"integrity":"sha512-aMItnSQhdmjMIVrW7ceqCA4GVtb8ZN5xcv03q6c81dUtcHukOTedeKNLQ8lxR4C+FV86QlLNxICyAhfERgfwcQ==","shasum":"966d3f3872da83282882e9a08827126c2c5504b8","tarball":"https://registry.npmjs.org/@dongluliang/sec-baseline-win/-/sec-baseline-win-0.1.0.tgz","fileCount":72,"unpackedSize":189895,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIF/f04zxuwUilMRghE9JMzdDXC0CpJpOb3LxiFf3voyTAiEA+tN4NkNTXhdwCiJWX27Nx8qXVtO+5j0+sYulheL1m+g="}]},"_npmUser":{"name":"dongluliang","email":"dongluliang@gmail.com"},"directories":{},"maintainers":[{"name":"dongluliang","email":"dongluliang@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/sec-baseline-win_0.1.0_1787194746604_0.5276346502515932"},"_hasShrinkwrap":false}},"time":{"created":"2026-08-20T02:59:06.438Z","0.1.0":"2026-08-20T02:59:06.755Z","modified":"2026-08-20T02:59:06.956Z"},"maintainers":[{"name":"dongluliang","email":"dongluliang@gmail.com"}],"description":"只读型 Windows 安全基线自查工具 - 企业终端/服务器运维场景","homepage":"https://github.com/dongluliang/sec-baseline#readme","keywords":["security","baseline","windows","hardening","audit","cis","compliance"],"repository":{"type":"git","url":"git+https://github.com/dongluliang/sec-baseline.git"},"author":{"name":"dongluliang"},"bugs":{"url":"https://github.com/dongluliang/sec-baseline/issues"},"license":"MIT","readme":"---\nAIGC:\n  ContentProducer: '001191110102MAD55U9H0F10002'\n  ContentPropagator: '001191110102MAD55U9H0F10002'\n  Label: '1'\n  ProduceID: '6d1b0361-8e8c-452d-8bf1-0c488deeb5d9'\n  PropagateID: '6d1b0361-8e8c-452d-8bf1-0c488deeb5d9'\n  ReservedCode1: '12b37db4-1264-4a7c-8d02-ad96d63ba804'\n  ReservedCode2: '12b37db4-1264-4a7c-8d02-ad96d63ba804'\n---\n\n# @dongluliang/sec-baseline-win\n\n只读型 Windows 安全基线自查工具 - 面向企业终端、服务器和运维场景\n\n## 特性\n\n- **只读检查**：不会修改任何系统配置，禁止自动整改\n- **隐私保护**：不采集密码、Token、私钥等敏感内容\n- **离线运行**：默认不联网，所有数据仅保存在本机\n- **多版本支持**：Windows 10/11、Server 2016/2019/2022/2025\n- **多格式报告**：终端彩色输出 / JSON / CSV / HTML\n- **中英文兼容**：支持中文和英文 Windows 系统输出解析\n\n## 安装\n\n```bash\nnpm install -g @dongluliang/sec-baseline-win\n```\n\n或直接通过 npx 运行：\n\n```bash\nnpx @dongluliang/sec-baseline-win\n```\n\n## 使用\n\n### 基本用法\n\n```bash\nnpx @dongluliang/sec-baseline-win\n```\n\n### 输出 JSON 报告\n\n```bash\nnpx @dongluliang/sec-baseline-win --json --output report.json\n```\n\n### 输出 HTML 报告\n\n```bash\nnpx @dongluliang/sec-baseline-win --html --output report.html\n```\n\n### 完整参数列表\n\n| 参数 | 说明 |\n|------|------|\n| `--help, -h` | 显示帮助信息 |\n| `--version, -v` | 显示版本号 |\n| `--json` | 以 JSON 格式输出 |\n| `--csv` | 以 CSV 格式输出 |\n| `--html` | 以 HTML 格式输出 |\n| `--output, -o` | 输出到指定文件 |\n| `--quiet, -q` | 静默模式 |\n| `--verbose` | 详细模式 |\n| `--deep` | 深度扫描 |\n\n## 检查项\n\n### 系统基础信息\n- Windows 版本、架构、主机名、当前用户\n- 管理员权限检测\n- Windows Update 状态\n- Windows Defender / 第三方杀毒软件状态\n\n### 安全策略\n- 密码最小长度、密码复杂度、密码最长使用期限、密码历史\n- 账户锁定策略\n\n### 账户安全\n- Guest 账户状态\n- Administrator 账户状态\n- 本地管理员组成员\n\n### 网络与防火墙\n- Windows 防火墙 Domain / Private / Public Profile\n- RDP 是否开启、NLA、端口\n- WinRM\n- Remote Registry\n- SMBv1\n\n### 服务与端口\n- TCP 监听端口（FTP/SSH/Telnet/RPC/NetBIOS/SMB/MSSQL/Oracle/MySQL/RDP/PostgreSQL/VNC/Redis/Elasticsearch/MongoDB）\n- 高风险服务\n- 系统共享\n\n### 系统安全策略\n- UAC\n- 审计策略\n- Windows 日志配置\n- 自动登录配置\n- 明文凭据相关注册表配置\n- 匿名访问策略\n- 空密码限制\n- 不安全协议（TLS 1.0 等）\n\n## 风险等级\n\n| 等级 | 说明 |\n|------|------|\n| critical | 严重风险 |\n| high | 高风险 |\n| medium | 中风险 |\n| low | 低风险 |\n| info | 提示信息 |\n| pass | 检查通过 |\n| error | 检查出错 |\n\n## 安全声明\n\n- 默认只读，禁止自动整改\n- 禁止利用漏洞、破解密码、弱口令爆破\n- 禁止读取用户密码内容\n- 禁止上传检查结果\n- 禁止默认联网\n- 所有数据仅保存在本机\n\n## License\n\nMIT","readmeFilename":"README.md","_rev":"1-0e2f9d52b2a9ab485f2244c9e9c0f189"}