Archive for the tag 'Scan'

Quick Security Scan For WHM version 11.28

This feature disables operating system-level services that are not necessary for your web server.

The services that will be disabled are:

* portmap — Maps network drives.
* atd — The “at” daemon, similar to cron jobs.
* cups — Used for printing.
* Console mouse services — Provides Linux mouse support.
* xfs — X font server; allows a server running the X Window System to communicate with a font renderer.
* NIS — Network information service.
* NFS statd — Used for network file system (NFS) mounting.
* RPC idmapd — Used for running an NFS server.

Note: A [FAILED] error message means that the service was not running when the scanner attempted to turn it off. This service will still be prevented from starting in the future.

Reference: http://cpanel.net

SBDavid

Installing Rootcheck

Rootcheck is an open source rootkit detection and system auditing software.

How to use it

Download from :

http://www.ossec.net/rootcheck/files/rootcheck-2.0.tar.gz

* rootcheck requires the Perl Modules IO::Interface.

Rootcheck is a very simple software. Just unpack, compile and execute it. It will scan the system and print if it found or not anything.

  1. wget http://www.ossec.net/rootcheck/files/rootcheck-2.0.tar.gz
  2. tar -zxvf rootcheck-2.0.tar.gz
  3. cd rootcheck-2.0
  4. make all
  5. ./ossec-rootcheck

Rootkit detection

Criminals (also known as hackers) want to hide their actions, but using rootkit detection you can be notified when they (or trojans, viruses, etc) change your system in this way.

Active response

Take immediate and automatic responses when something happens. Why wait for hours when you can alert your admin and block an attack right way?

How To Scan the System

  1. ./rootcheck.pl


RootCheck. is an extremely useful open source software for servers since it scans the server and finds any problems on it.