|
About:
chkrootkit is a tool to locally check for signs of a rootkit. It contains a chkrootkit: shell script that checks system binaries for rootkit modification. The following tests are made: aliens, asp, bindshell, lkm, rexedcs, sniffer, wted, z2, amd, basename, biff, chfn, chsh, cron, date, du, dirname, echo, egrep, env, find, fingerd, gpm, grep, hdparm, su, ifconfig, inetd, inetdconf, identd, killall, login, ls, mail, mingetty, netstat, named, passwd, pidof, pop2, pop3, ps, pstree, rpcinfo, rlogind, rshd, slogin, sendmail, sshd, syslogd, tar, tcpd, top, telnetd, timed, traceroute, and write. ifpromisc.c checks whether the interface is in promiscuous mode, chklastlog.c checks for lastlog deletions, chkwtmp.c checks for wtmp deletions, check_wtmpx.c checks for wtmpx deletions (Solaris only), and chkproc.c checks for signs of LKM trojans.
Author:
Nelson Murilo <nelson |at| pangeia |dot| com |dot| br>
[contact developer]
Homepage:
http://www.chkrootkit.org/
Tar/GZ:
ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
Changelog:
http://www.chkrootkit.org/README
Debian package:
http://packages.debian.org/chkrootkit
Mailing list archive:
http://marc.theaimsgroup.com/?l=chkrootkit-users&r=1&w=2
Trove categories:
[change]
Dependencies:
[change]
No dependencies filed
|
|
» Rating:
8.43/10.00
(Rank 310)
» Vitality: 0.21% (Rank 838)
» Popularity: 10.56% (Rank 200)
 
(click to enlarge graphs)
Record hits: 17,181
URL hits: 97,738
Subscribers: 365
|
|
