The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
1answer
98 views

rkhunter /usr/bin/ssh && /usr/sbin/sshd [Warning]

My last rkhuter scan reported a couple of warnings that deserve to be checked(for my noob eyes). Main reason for my suspect is that i wasn't on the machine at (03-Apr-2014 01:12:12) ->AM I googled ...
2
votes
1answer
38 views

Verifying Debian/Ubuntu packages integrity when booting from a read-only DVD?

Is there an easy way to boot a Debian-based Linux system from a read-only medium (say a Live Linux read-only DVD) and then use Debian's .deb checksums / signatures (?) to verify that the files ...
2
votes
1answer
193 views

I need find 1 simple rootkit to test chkrootkit in centos?

I want to find 1 simple rootkit to test chkrootkit (a tool used to detect rootkit). Please recommend to me 1 rootkit and show me how to set it up or install it.
4
votes
2answers
2k views

rkhunter warn me about root.rules

I run : :~$ sudo rkhunter --checkall --report-warnings-only One of the warnings I've got : Warning: Suspicious file types found in /dev: /dev/.udev/rules.d/root.rules: ASCII text and ...
0
votes
2answers
217 views

chkrootkit throws Signal 13 when searching through /var/tmp

On my debian squeeze server in the chkrootkit log I get loads of these errors: /usr/bin/find: Prozeß "head" wurde durch das Signal 13 abgebrochen. /usr/bin/find: Prozeß "head" wurde durch das Signal ...
2
votes
2answers
334 views

Chkrootkit warning about infected port 600

I run the Tiger Automatic Auditor on my Debian Linux system, and recently got emailed the following: # Running chkrootkit (/usr/sbin/chkrootkit) to perform further checks... OLD: --ALERT-- ...
2
votes
1answer
570 views

How to install a shared library in Linux

As part of my research work I have to study a rootkit. So I downloaded ncom rootkit and tried installing. It didnt have any installion files. Please help me in installing it.
2
votes
2answers
468 views

Cannot understand chkrootkit's result

I couldn't understand the output of chkrootkit command: $ chkrootkit -q -r / /usr/lib/.libssl.so.10.hmac /usr/lib/.libfipscheck.so.1.hmac /usr/lib/firefox-3.6/.autoreg ...