We have a hacker occasionally attempting to hack a site, and so far unsuccessful, but I would like a way to determine if the site has been compromised (i.e., files edited). The type of attacks are LFI and attempting to inject iFrames in some source files. What can I install on my Debian server to alert me via an e-mail if certain files or directories are modified?

1 Answer 1


You can install Tripwire and introduce a set of dicrectory to Tripwire, When a file has been changed, Tripwire notifies sysadmin.

  • Thank you @MohsenPahlevanzadeh. I will ask my sys admin to install. Feb 27, 2014 at 12:02
  • does TripWire require root access? According to my sysadmin they will not install software on the server that require root access? Feb 27, 2014 at 12:06
  • for installation yes, Feb 27, 2014 at 12:07
  • However i don't try to compile tell him/her to try compile it. Feb 27, 2014 at 12:08

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .