Skip to content

Instantly share code, notes, and snippets.

@thcipriani
Created February 5, 2014 18:39
Show Gist options
  • Save thcipriani/8830291 to your computer and use it in GitHub Desktop.
Save thcipriani/8830291 to your computer and use it in GitHub Desktop.
Ebury rootkit detect
#!/usr/bin/env bash
ipcs=$(ipcs -m | grep root | grep -c 666)
if (( $ipcs > 1 )); then
echo "ROOT KIT DETECTED" | mail -s "ROOTKIT ON CCREMIX" thcipriani@gmail.com
else
echo "we're cool"
fi
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment