Packet Storm

chkrootkit-0.39a.tar.gz: Posted Feb 2, 2003; Authored by Nelson Murilo | Site chkrootkit.org; Chkrootkit v0.39a locally checks for signs of a rootkit. Chkrootkit includes ifpromisc.c to check and see if the interface is in promisc mode, chklastlog.c to check lastlog for deletions, and chkwtmp.c to check wtmp for deletions, strings.c for quick and dirty strings replacement, check_wtmpx.c to check for wtmpx deletions and the files chkproc.c and chkdirs.c to check for LKM trojans. Tested on Linux 2.0.x, 2.2.x and 2.4.x, FreeBSD 2.2.x, 3.x and 4.x, OpenBSD 2.6, 2.7, 2.8, 2.9, 3.0 and 3.1, NetBSD 1.5.2 and Solaris 2.5.1, 2.6 and 8.0.; Changes: Solaris bugs where fixed in chkdirs.c, HP-UX support was added to chkdirs.c, A new Adore version was added to chkproc.c, ps thread error fixed in chkproc.c, a Red Hat 8.0 bug was fixed in chkproc.c and detection for several Slapper variants is added to the package.; tags | tool, trojan, integrity, rootkit; systems | linux, netbsd, unix, solaris, freebsd, openbsd; SHA-256 | c6290a41059d4f3660b135a3cbecaae68e5ad29c3168843f77373a5d6691a710; Download | Favorite | View

Related Files

No related files