Knowledgebase

Check for possible existing exploits

sh
for x in "/dev/shm /tmp /usr/local/apache/proxy /var/spool /var/tmp"; do ls -loAFR $x 2>&- | grep -E "^$|^/| apache | nobody | unknown | www | web " | grep -E "^$|^/|/$|*$|.pl$" | tee exploits.txt; done; echo -e "nnPossible Exploit Files and Directories: `grep -Ev "^$|^/" exploits.txt | wc -l | tr -d ' '`" | tee -a exploits.txt
exit

Lines ending with an asterisk '*', '.pl', or a slash '/' are possible exploit files or directories which should be investigated and removed followed by rebooting the server to kill any running exploit processes. You can refer to the exploits.txt file generated by the above commands for later reference.

Add to Favourites

Print this Article

Also Read

Yum fail to update python on x86_64 server (Views: 838)

Restart a frozen or Crashed Linux X Desktop (Views: 595)

Install Awstats on Directadmin Server (Views: 1568)

Rkhunter - install and run (Views: 622)

Zone-transfer test for allowed any host (Views: 621)