./security/chkrootkit, Locally checks for signs of a rootkit

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2015Q4, Version: 0.50nb1, Package name: chkrootkit-0.50nb1, Maintainer: pkgsrc-users

chkrootkit is a tool to locally check for signs of a rootkit. It
contains:

* chkrootkit: a shell script that checks system binaries for
rootkit modification.
* ifpromisc.c: checks if the network interface is in promiscuous
mode.
* chklastlog.c: checks for lastlog deletions.
* chkwtmp.c: checks for wtmp deletions.
* check_wtmpx.c: checks for wtmpx deletions. (Solaris only)
* chkproc.c: checks for signs of LKM trojans.
* chkdirs.c: checks for signs of LKM trojans.
* strings.c: quick and dirty strings replacement.

Master sites:

SHA1: 0c3f40b2919d25421a90533c2fe6cca81321232c
RMD160: c038cc6ddbc0cf30d3492545bc02b1c95df973f1
Filesize: 37.711 KB

Version history: (Expand)