[Plug-security] forensic analysis

sinck@ugive.com sinck@ugive.com
Thu, 28 Sep 2000 13:14:16 -0700


\_ 
\_ Well, you could make a command out of grep, ps, and cut, but then you
\_ have to wonder if grep and cut are safe.
\_ 
\_ kill -9 `ps a|cut -c 1-5|grep -v $$`

Wouldn't that shoot init (pid 1) and perhaps some of the kernel
threads that should stick around.

ooo ooo....compile a kernel module that self loads and is a kernel
level compromise for <hack-of-the-day>. 

Remember, use this power only for good.

David