Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is it a false alarm - /usr/sbin/sshd被篡改 ? #14

Open
greendow opened this issue Aug 9, 2022 · 1 comment
Open

Is it a false alarm - /usr/sbin/sshd被篡改 ? #14

greendow opened this issue Aug 9, 2022 · 1 comment

Comments

@greendow
Copy link

greendow commented Aug 9, 2022

I tried to run GScan on the desktop version of Ubuntu 20.04 and 22.04, the instruction is:
sudo python3 GScan.py
The result both includes:
[1][风险] 黑客在未知时间,进行了SSHwrapper 后门植入,/usr/sbin/sshd被篡改,文件非可执行文件
But sshd file does not exist. See below:
ls -al /usr/sbin/sshd
ls: cannot access '/usr/sbin/sshd': No such file or directory
Is it a false alarm?

@grayddq
Copy link
Owner

grayddq commented Sep 9, 2022

感谢,我没在这个系统上测试过,应该是个系统bug,我抽时间修改下。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants