Rootkits Information

• Old rootkits
  
• Beastkit Rootkit
  
• TRK rootkit
  
• Suspicious files
  
• Knark rootkit
  
• TuxKit Rootkit
  
• LRK Rootkit
  
• Rpimp Backdoor
  
• Adore Worm
  
• Bashdoor Backdoor
  
• Illogic Rootkit
  
• Ovas0n Backdoor
  
• t0rn Rootkit
  
• Bob Kit Rootkit
  
• Lion Worm
  
• Ramen Worm
  
• BMBL Rootkit
  
• Rootedoor Rootkit
  
• Cback Linux worm
  
• Enye LKM rootkit
  

Case studies

• Beastkit analyze
• BobKit Analysis - by William Stearns
• Knark Analysis - by Toby Miller
• Linux Rootkit IV - by Lord Somer
• Ramen worm - by SANS
• Ramen worm 2 - by Symantec
• Rpimp Backdoor - By Daniel B. Cid
• Torn Rootkit analysis - by Toby Miller
• Tuxkit Rootkit analysis - by spoonfork

Links

• Undestanding rootkits
• Scanning for rootkits
• Example of rootkits
• Detecting and recovering from a rootkit attack
• Avoindng trojans and rootkits
• Traditional rootkits
• Linux Kernel rootkits explained
• Rootkit faq
• LKM Hacking
• Abuse of the Linux Kernel for Fun and Profit

Copyright (C) Daniel B. Cid OSSEC.net 2001-2006
Rootcheck, v0.6 2006/03/07, Daniel B. Cid