[B! linux security] logfile_murakamiatsushiのブックマーク

Rootkit Hunter - Pocketstudio.jp Linux Wiki

Rootkit Hunter ¡Ê¥ë¡¼¥È¥¥Ã¥È¡¦¥Ï¥ó¥¿¡¼¡Ë¤Ã¤Æ²¿¡© † ¡¡¤Þ¤º¤Ï¤¸¤á¤Ë¡¢Rootkit¡Ê¥ë¡¼¥È¥¥Ã¥È¡Ë¤È¤¤¤¦¤Î¤Ï UNIX ¥·¥¹¥Æ¥à¤ËÉÔÀµ¥¢¥¯¥»¥¹¤ò¹Ô¤Ã¤¿¤ê¡¢ÆÃÄê¤Î¥×¥í¥»¥¹¤ò±£¤·¤¿¤ê¡¢Â¾¤Î¥Û¥¹¥È¤ò¥¹¥¥ã¥ó¤·¤¿¤ê¹¶·â¤·¤¿¤ê¤È¤¤¤Ã¤¿¡¢¤¤¤ï¤æ¤ë¥¯¥é¥Ã¥¥ó¥°ÍÑ¤Î¥Ä¡¼¥ëÁ´ÈÌ¤Î»ö¤ò»Ø¤·¤Þ¤¹¡£ ¡¡¤³¤Î Rootkit Hunter ¤ò»È¤¦¤³¤È¤Ç¡¢ÉÔÀµ¤ËÀßÃÖ¤µ¤ì¤¿¥Ä¡¼¥ë¤Î¸¡½Ð¤ä¡¢¥ª¥ê¥¸¥Ê¥ë¤Î¥Õ¥£¥ë²þãâ¡ÊÎã¤¨¤Ð ps ¤ä ls ¤Ç¥×¥í¥»¥¹¤ä¥Õ¥¡¥¤¥ë¤ò±£¤·¤¿

logfile_murakamiatsushi 2009/06/18

リンク

Rootkit Hunter/FAQ ÆüËÜ¸ìÈÇ - Pocketstudio.jp Linux Wiki

B3 - Rootkit Hunter ¤Î¥¤¥ó¥¹¥È¡¼¥ëÊýË¡¤Ï¡© † ¡¡¤Þ¤º¤Ï¤¸¤á¤Ë gzip ·Á¼°¤Ç°µ½Ì¤µ¤ì¤¿¥Õ¥¡¥¤¥ë(tarball¤Ç¤¹)¤ò¥À¥¦¥ó¥í¡¼¥É¤·¤Æ¡¢¥Õ¥¡¥¤¥ë¤òÅ¸³«¤·¡¢¥¤¥ó¥¹¥È¡¼¥ëÍÑ¥¹¥¯¥ê¥×¥È¤ò¼Â¹Ô¤·¤Þ¤¹¡£ ¡¡¥À¥¦¥ó¥í¡¼¥ÉÊýË¡¡§ # wget http://downloads.rootkit.nl/rkhunter-<¥Ð¡¼¥¸¥ç¥ó>.tar.gz &br; ¡¡¥á¥â¡§ tar ·Á¼°¤Î°µ½Ì¥Õ¥¡¥¤¥ë¤Ï¥µ¡¼¥ÐÆâ¤Î¤É¤³¤ËÃÖ¤¤¤Æ¤â¹½¤¤¤Þ¤»¤ó ¡¡Å¸³«ÊýË¡¡§ # tar zxf rkhunter-<¥Ð¡¼¥¸¥ç¥ó>.tar.gz&br; ¡¡¥¤¥ó¥

logfile_murakamiatsushi 2009/06/18

リンク

chkrootkit -- locally checks for signs of a rootkit

chkrootkit is a tool to locally check for signs of a rootkit. It contains: chkrootkit: shell script that checks system binaries for rootkit modification. ifpromisc.c: checks if the interface is in promiscuous mode. chklastlog.c: checks for lastlog deletions. chkwtmp.c: checks for wtmp deletions. check_wtmpx.c: checks for wtmpx deletions. (Solaris only) chkproc.c: checks for signs of LKM trojans. c