An open API service indexing awesome lists of open source software.

https://github.com/VainlyStrain/checkdoor

Simple sudo backdoor hunter written in Python.
https://github.com/VainlyStrain/checkdoor

backdoor backdoor-finder detect-backdoor linux security security-tools sudo unix

Last synced: over 1 year ago
JSON representation

Simple sudo backdoor hunter written in Python.

Awesome Lists containing this project

README

          

# checkdoor

This simple Python script is designed to detect malicious bash aliases and functions overriding the `sudo` command (to steal the credentials etc). It can also find fake sudo binaries overriding the real one (whose path is before the real path in $PATH).

The tool also checks the permissions and ownership of the file.

[WARNING] This script DOES NOT guarantee the integrity of the real sudo binary; it only detects third binaries and functions hijacking the command flow. Use an IDS for that.