[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How to know if a machine was hacked?



On Thursday 05 June 2003 08:09, Damir Dezeljin wrote:
> Hi.
>
> Is there any way to find out if a certain Debian Woody machine was hacked?
Sometimes it's very hard...

first go to www.chkrootkit, download, install and run it to check if you have 
rootkits in your machines. then go through /etc/passwd, /var/log/*, etc..

btw, why do you think you've been hacked. if something is looking suspicious, 
start searching from there.

Bye
-- 
Haim



Reply to: