|
|
lug-bg: rootkit
- Subject: lug-bg: rootkit
- From: focus@xxxxxxxxxxxxxxx (focus@xxxxxxxxxxxxxxx)
- Date: Mon, 18 Feb 2002 13:26:51 +0200
Zdraveite , administriram ot niakolko dni rh 7.2 server zabeliazah
otvoren 199 (smux) port smetnah go za stranno poneje smux e obsolette
protocol a i service-a ne se vikashe v nikoi init scriptove. Na
server-a biaha pusnati rpc.statd telnet webmin predpolagam 4e hackera
e probil ot tam. Sushto mrejovite interface-i sa nastroeni v promisc
mode.Ifconfiga e precompiliran poneje adva vseki nov iface v promisc
rejim. Smenih root parolata , filtrirah 199 port , razkarah telnet
webmin etc .. . Chkrootkit pokaza 4e ima 1 skrit file i 1 skrit
process. Svalih kstat za da vidia koi kernel moduli se zarejdat a
sushto i da vidia vsi4ki procesi no za sujalenie kstat ne iska da se
compilira na RH 7.2 a homepage-a na kstat http://s0ftpj.org e down .
Ako niakoi moje da mi pomogne kato mi preporu4a niakakuv podoben tool
ili da mi dade nasoka za budeshti deistivia shte sum izklu4itelno
blagodaren.
===========================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara Zagora
|
|
|