In this page i will try to provide some of the must have tools for linux OS. Some of these tools can also be used for FreeBsd:
ROOT KIT HUNTERS:
Installation how to
* CHKROOTKIT
* RKHUNTER
* ROOTCHECK
@RootCheck:
You can download the rootcheck latest version from the following URL:
http://www.ossec.net/rootcheck/files/
Installation how to:
tar -zxvf rootcheck-0.7.tar.gz ( whatever version you have downloded)
cd rootcheck-0.7
make all ( you have to answer some of the question that will be fired on you on this step )
This will install the two files on the same directory(ossec-rootcheck & rootcheck.conf).
Use any one of the commands to analyse you server:
ossec-rootcheck -c rootcheck.conf
OR
ossec-rootcheck -s ( to scan the entire system– I will suggest this option)
Check with the README file for any further query’s
-
Previous Post
Exim Command line arguments
-
Next Post
Run Database Servers Optimally
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc'kUpjsQRRAfeW
RglX
April 10, 2026quhc') AND EXTRACTVALUE(2484,CONCAT(0x5c,0x716b6a6b71,(SELECT (ELT(2484=2484,1))),0x7162716271)) AND ('Zlyp'='Zlyp
RglX
April 10, 2026quhc) AND EXTRACTVALUE(2484,CONCAT(0x5c,0x716b6a6b71,(SELECT (ELT(2484=2484,1))),0x7162716271)) AND (2723=2723
RglX
April 10, 2026quhc AND EXTRACTVALUE(2484,CONCAT(0x5c,0x716b6a6b71,(SELECT (ELT(2484=2484,1))),0x7162716271))
RglX
April 10, 2026quhc AND EXTRACTVALUE(2484,CONCAT(0x5c,0x716b6a6b71,(SELECT (ELT(2484=2484,1))),0x7162716271))-- FbPn
RglX
April 10, 2026quhc') AND 2809=CAST((CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113))||(SELECT (CASE WHEN (2809=2809) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)) AS NUMERIC) AND ('TeMQ'='TeMQ
RglX
April 10, 2026quhc' AND 2809=CAST((CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113))||(SELECT (CASE WHEN (2809=2809) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)) AS NUMERIC) AND 'gsCs'='gsCs
RglX
April 10, 2026quhc AND 2809=CAST((CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113))||(SELECT (CASE WHEN (2809=2809) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)) AS NUMERIC)
RglX
April 10, 2026quhc AND 2809=CAST((CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113))||(SELECT (CASE WHEN (2809=2809) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)) AS NUMERIC)-- xuBd
RglX
April 10, 2026quhc' AND 8047 IN (SELECT (CHAR(113)+CHAR(107)+CHAR(106)+CHAR(107)+CHAR(113)+(SELECT (CASE WHEN (8047=8047) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(98)+CHAR(113)+CHAR(98)+CHAR(113))) AND 'PobY'='PobY
RglX
April 10, 2026quhc) AND 8047 IN (SELECT (CHAR(113)+CHAR(107)+CHAR(106)+CHAR(107)+CHAR(113)+(SELECT (CASE WHEN (8047=8047) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(98)+CHAR(113)+CHAR(98)+CHAR(113))) AND (5158=5158
RglX
April 10, 2026quhc AND 8047 IN (SELECT (CHAR(113)+CHAR(107)+CHAR(106)+CHAR(107)+CHAR(113)+(SELECT (CASE WHEN (8047=8047) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(98)+CHAR(113)+CHAR(98)+CHAR(113)))
RglX
April 10, 2026quhc' AND 5301=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113)||(SELECT (CASE WHEN (5301=5301) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)||CHR(62))) FROM DUAL) AND 'JpRf'='JpRf
RglX
April 10, 2026quhc) AND 5301=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113)||(SELECT (CASE WHEN (5301=5301) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)||CHR(62))) FROM DUAL) AND (3153=3153
RglX
April 10, 2026quhc AND 5301=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113)||(SELECT (CASE WHEN (5301=5301) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)||CHR(62))) FROM DUAL)
RglX
April 10, 2026quhc AND 5301=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113)||(SELECT (CASE WHEN (5301=5301) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)||CHR(62))) FROM DUAL)-- MIbN
RglX
April 10, 2026quhc') ORDER BY 1-- HKpE
RglX
April 10, 2026quhc' ORDER BY 1-- GGID
RglX
April 10, 2026quhc) ORDER BY 1-- YGTK
RglX
April 10, 2026quhc ORDER BY 1-- hWBf
RglX’BcOBeF
April 10, 2026quhc
RglX’ AND EXTRACTVALUE(8425,CONCAT(0x5c,0x716b6a6b71,(SELECT (ELT(8425=8425,1))),0x7162716271)) AND ‘JcOk’=’JcOk
April 10, 2026quhc
RglX AND EXTRACTVALUE(8425,CONCAT(0x5c,0x716b6a6b71,(SELECT (ELT(8425=8425,1))),0x7162716271))
April 10, 2026quhc
RglX AND EXTRACTVALUE(8425,CONCAT(0x5c,0x716b6a6b71,(SELECT (ELT(8425=8425,1))),0x7162716271))– HzXo
April 10, 2026quhc
RglX’) AND 4964=CAST((CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113))||(SELECT (CASE WHEN (4964=4964) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)) AS NUMERIC) AND (‘JMaA’=’JMaA
April 10, 2026quhc
RglX’ AND 4964=CAST((CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113))||(SELECT (CASE WHEN (4964=4964) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)) AS NUMERIC) AND ‘LHpr’=’LHpr
April 10, 2026quhc
RglX) AND 4964=CAST((CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113))||(SELECT (CASE WHEN (4964=4964) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)) AS NUMERIC) AND (8061=8061
April 10, 2026quhc
RglX) AND 7763 IN (SELECT (CHAR(113)+CHAR(107)+CHAR(106)+CHAR(107)+CHAR(113)+(SELECT (CASE WHEN (7763=7763) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(98)+CHAR(113)+CHAR(98)+CHAR(113))) AND (4618=4618
April 10, 2026quhc
RglX AND 7763 IN (SELECT (CHAR(113)+CHAR(107)+CHAR(106)+CHAR(107)+CHAR(113)+(SELECT (CASE WHEN (7763=7763) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(98)+CHAR(113)+CHAR(98)+CHAR(113)))– WRzI
April 10, 2026quhc
RglX AND 9658=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(107)||CHR(106)||CHR(107)||CHR(113)||(SELECT (CASE WHEN (9658=9658) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113)||CHR(62))) FROM DUAL)
April 10, 2026quhc
RglX’) ORDER BY 1– VbRT
April 10, 2026quhc
RglX’ ORDER BY 1– FVHT
April 10, 2026quhc
RglX) ORDER BY 1– Zpgn
April 10, 2026quhc
RglX ORDER BY 1– PDjU
April 10, 2026quhc
RglX ORDER BY 1– Stwz
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc
RglX
April 10, 2026quhc