Diagnosing a Hacked Linux Server

Thread Rating:

0 Vote(s) - 0 Average
1
2
3
4
5

Threaded Mode | Linear Mode

Diagnosing a Hacked Linux Server

08-25-2007, 02:09 PM,

Post: #1

Kristijntje Offline

Super Moderator

Posts: 1,200
Likes Given: 0
Likes Received: 0 in 0 posts
Joined: Oct 2005
Reputation: 0

Diagnosing a Hacked Linux Server

Quote:So the box has been compromised, backdoor installed and it's been converted to a zombie. The attacker made several mistakes allowing him to be detected:

* Forgot to wipe out root's .bash_history.
* Wiped out everything under "/var/log/*", including directories which several programs relied on and thereby refusing to start. Now, why did he do that? This certainly was stupid.
* Changed the root-password. Another bummer. Never ever change the root-password. This surely will catch the attention of a sysadmin...

full article: http://blog.gnist.org/article.php?story=...ayCracking

Al draagt een aap een gouden ring, het is en blijft een lelijk ding

« Next Oldest | Next Newest »

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	Morons on Display at Boston University: Major Web Server Security Screwup	bargainbloodhound	5	4,136	01-27-2012, 12:30 AM Last Post: bargainbloodhound
	50 Open Source Network and Server Security Tools	mandy	0	2,293	11-11-2008, 10:30 AM Last Post: mandy
	Hacker Safe certified ecommerce website hacked	mandy	0	2,609	01-14-2008, 12:29 PM Last Post: mandy
	Protecting your Web Server from Attacks: Why Web applications are at High Risk	mandy	0	2,163	02-26-2007, 11:11 AM Last Post: mandy
	How to improve the security of your OpenSSH server installations	mandy	1	2,586	05-27-2006, 08:30 AM Last Post: mandy
	Web Site Owners Discover Terrorists Secretly Hacked their Crafts Web Site	mandy	0	2,217	05-09-2006, 09:56 AM Last Post: mandy
	Secure Your Linux Server	regic	0	2,074	03-25-2006, 05:52 PM Last Post: regic
	Test your server for vulnerabilities with Nikto	misteroriginal	2	3,119	02-25-2006, 04:10 AM Last Post: misteroriginal

Forum Jump:

Users browsing this thread: 1 Guest(s)