Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
You may already be hacked.
Jon Lasser, 2001-07-25

Rootkits help hackers play hide-and-seek.

Comments Mode:
LOVE YOU MAN!!! 2001-07-25
elliptic (5 replies)
Ports 2001-07-26
Zer0
LOVE YOU MAN!!! 2001-08-01
cds@hotmail.com
LOVE YOU MAN!!! 2001-08-02
logarithm
LOVE YOU MAN!!! 2001-08-07
Anonymous
LOVE YOU MAN!!! 2001-08-13
Dark Spaniel
Fuq1n l0zer 2001-07-26
gr4nd 1nqu1z1t0r (1 replies)
mmm? 2002-02-08
Anonymous
bugs 2001-07-30
walterp@fuse.net
Why surf as root 2001-08-03
Rodrigo Ramos <ramos@ipad.com.br>
great article. 2001-08-05
Gonçalo Gomes
what about strace 2001-08-10
arne.peer@appelmoes.xs4all.be
Hi,

when i get a customer who want me to check for rootkits, i allway run the program with strace... if I see that the program access'es strange /dev/xxx or other files, I'm almost sure there is a rootkit. Many rootkits just use some /dev/xxx files to hide the information that is in those files...

to reply... remove the .peer and the appelmoes. from my email

arne


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/12/6657#6657







 

Privacy Statement
Copyright 2009, SecurityFocus