[CentOS] SSHD rootkit in the wild/compromise for CentOS 5/6?

Sat Feb 23 04:52:39 UTC 2013
Karanbir Singh <mail-lists at karan.org>

On 02/22/2013 09:35 PM, Leon Fauster wrote:
> i use following script to scan top level 
> directories for files that are not packaged: 
> 


If you trust your rpm-db, then something like my syscleanup script might
also come in handy :
https://www.gitorious.org/syscleanup/syscleanup/trees/master

I highly recommend reading the README.txt file

- KB
-- 
Karanbir Singh
+44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh
GnuPG Key : http://www.karan.org/publickey.asc