Monday, 22 August 2011

Cover Your Tracks After Hacking A UNIX Box

In the Monitoring User Login post, the commands and files that are related in tracking user activities are discussed.
Here are some ways of covering your fingerprints on a server using the files that monitors user logins.
We want to erase any trace that will show that we were inside the box. In doing so we’ll just:
cat /dev/null > Lastlog file

No comments:

Post a Comment