[KSTAT] Kernel Security Therapy Anti-Trolls

Bruce F Lucca lucca at Buffalo.com
Wed Apr 18 06:54:31 EDT 2001

KSTAT - Kernel Security Therapy Anti-Trolls
by S0ftproject2000 Team
Platforms: Linux
Relevant URL: <http://www.securityfocus.com/tools/1995>

Tool useful to find an attacker in your system by a direct analysis of the
kernel through [/dev/kmem] and bypassing the hiding techniques of the
intruder (kernel static recompilation/use of LKMs). 

[Kstat] can find the syscalls which were modified by a LKM, list the linked
LKMs, query one or all the network interfaces of the system, list all the
processes and much more.

More information about the nflug mailing list