https://github.com/VainlyStrain/checkdoor
Simple sudo backdoor hunter written in Python.
https://github.com/VainlyStrain/checkdoor
backdoor backdoor-finder detect-backdoor linux security security-tools sudo unix
Last synced: over 1 year ago
JSON representation
Simple sudo backdoor hunter written in Python.
- Host: GitHub
- URL: https://github.com/VainlyStrain/checkdoor
- Owner: VainlyStrain
- License: gpl-3.0
- Created: 2020-03-19T17:58:44.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2020-10-27T17:30:53.000Z (over 5 years ago)
- Last Synced: 2024-10-24T02:31:23.450Z (over 1 year ago)
- Topics: backdoor, backdoor-finder, detect-backdoor, linux, security, security-tools, sudo, unix
- Language: Python
- Homepage:
- Size: 23.4 KB
- Stars: 2
- Watchers: 2
- Forks: 5
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# checkdoor
This simple Python script is designed to detect malicious bash aliases and functions overriding the `sudo` command (to steal the credentials etc). It can also find fake sudo binaries overriding the real one (whose path is before the real path in $PATH).
The tool also checks the permissions and ownership of the file.
[WARNING] This script DOES NOT guarantee the integrity of the real sudo binary; it only detects third binaries and functions hijacking the command flow. Use an IDS for that.