Root Kit Detection

Since my little incident where I exposed my server (although be it behind a proxy and I’m not beating myself up about it) by dropping the firewall a few seconds for testing purposes (only to find I had tried to access an external link back to my personal web server through the same router which kicked off about it for some reason…) I thought I had better check my server for any hacks

I don’t have a browser or x windowing client of sorts available on this server so had to improvise. 

wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz

gets me a free rootkit checker. Don’t know how good it is and welcome feedback.

gubzip, untar and run ./chrootkit from the untarred folder.

Gives you a nice little report about what’s infected (or in my case) not infected.
 

Leave a Comment