by zeppoo
Zeppoo allows you to detect rootkits on i386 and x86_64 architecture under Linux, by using /dev/kmem and /dev/mem. Moreover it can also detect hidden tasks, connections, corrupted symbols, system calls... and so many other things.
Anonymous created the Fails to read kmem on x86-64 artifact
Red Hat and Ubuntu are supported with the -r option. MD5 is used. AMD64 is supported. /proc/kallsyms was added. Many bugs were fixed.
zeppoo commented on the RE: [-] Unable to resolve proc_root !! forum thread
hjubal created the [-] Unable to resolve proc_root !! forum thread
zeppoo commented on the RE: /dev/kmem: read :: Operation not permitte forum thread
Anonymous commented on the RE: /dev/kmem: read :: Operation not permitte forum thread
Anonymous commented on the RE: /dev/kmem: read :: Operation not permitte forum thread
Anonymous created the /dev/kmem: read :: Operation not permitted forum thread
zeppoo commented on the RE: Unable to resolve init_task ??? forum thread
allpar commented on the RE: Unable to resolve init_task ??? forum thread
Copyright © 2009 SourceForge, Inc. All rights reserved. Terms of Use