1

We have a hacker occasionally attempting to hack a site, and so far unsuccessful, but I would like a way to determine if the site has been compromised (i.e., files edited). The type of attacks are LFI and attempting to inject iFrames in some source files. What can I install on my Debian server to alert me via an e-mail if certain files or directories are modified?

Improve this question

1 Answer 1

Reset to default
6

You can install Tripwire and introduce a set of dicrectory to Tripwire, When a file has been changed, Tripwire notifies sysadmin.

Improve this answer
4
  • Thank you @MohsenPahlevanzadeh. I will ask my sys admin to install.
    – Kobus Myburgh
    Feb 27, 2014 at 12:02
  • does TripWire require root access? According to my sysadmin they will not install software on the server that require root access?
    – Kobus Myburgh
    Feb 27, 2014 at 12:06
  • for installation yes,
    – PersianGulf
    Feb 27, 2014 at 12:07
  • However i don't try to compile tell him/her to try compile it.
    – PersianGulf
    Feb 27, 2014 at 12:08

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .