[WBEL-users] ROOTKIT checking software

Michael Falzon nozy@mozysswamp.org
Mon, 15 Nov 2004 11:07:31 +1100 

--=-OIoTQjV7yRwJ8oWi93iL
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

Hi Denis 
        this maybe to late but dags network has a good root kit tester 

http://dag.wieers.com/packages/


On Thu, 2004-11-11 at 21:53, Denis Croombs wrote:

> I have just taken over admin for approx 20 Linux systems (RH9.0) and need to 
> check that they have not been rootkit'd (for my own piece of mind) anybody 
> had experience of good toolkits for finding out of a system has been 
> compromised ?
> 
> That is before I prepare a plan to change them to Whitebox over the coming 
> weeks/months.
> 
> Thanks
> 
> Denis 
> 
> _______________________________________________
> Whitebox-users mailing list
> Whitebox-users@beau.org
> http://beau.org/mailman/listinfo/whitebox-users


See BUG.  "That's not a bug, it's a feature!"  
A bug can be changed to a feature by documenting it.


Michael Falzon (RHCT) 
Mozy's Swamp BBs & Red Dwarf BBs
http://mozysswamp.org
Registered LFS User   #406
Registered Linux User #204397

--=-OIoTQjV7yRwJ8oWi93iL
Content-Type: text/html; charset=utf-8

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
  <META NAME="GENERATOR" CONTENT="GtkHTML/3.0.9">
</HEAD>
<BODY>
Hi Denis <BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; this maybe to late but dags network has a good root kit tester <BR>
<BR>
<A HREF="http://dag.wieers.com/packages/">http://dag.wieers.com/packages/</A><BR>
<BR>
<BR>
On Thu, 2004-11-11 at 21:53, Denis Croombs wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE><FONT COLOR="#737373"><I>I have just taken over admin for approx 20 Linux systems (RH9.0) and need to 
check that they have not been rootkit'd (for my own piece of mind) anybody 
had experience of good toolkits for finding out of a system has been 
compromised ?

That is before I prepare a plan to change them to Whitebox over the coming 
weeks/months.

Thanks

Denis 

_______________________________________________
Whitebox-users mailing list
Whitebox-users@beau.org</FONT>
<A HREF="http://beau.org/mailman/listinfo/whitebox-users"><U>http://beau.org/mailman/listinfo/whitebox-users</U></I></A></PRE>
</BLOCKQUOTE>
<PRE><TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<FONT COLOR="#000033"><TT><BR>
See BUG.&nbsp; &quot;That's not a bug, it's a feature!&quot;&nbsp; <BR>
A bug can be changed to a feature by documenting it.</TT></FONT><BR>
<BR>
<PRE>Michael Falzon (RHCT) 
Mozy's Swamp BBs &amp; Red Dwarf BBs
http://mozysswamp.org
Registered LFS User   #406
Registered Linux User #204397</PRE>
</TD>
</TR>
</TABLE>
</PRE>
</BODY>
</HTML>

--=-OIoTQjV7yRwJ8oWi93iL--