Portal Home > Knowledgebase > Articles Database > How I can do shell scan in my server
How I can do shell scan in my server
| Posted by SAFAGOLD, 06-11-2010, 09:39 PM |
| Hello,
I have server ( CentOS ) and i want to do shell scan and delete the shell
I want the way to do it please.
Any good tools help me on this?!
Thanks,
|
| Posted by eth00, 06-11-2010, 10:53 PM |
| Are you talking about php shells? You could try something like RFXN's malware detect, that should find them.
|
| Posted by LVPSHosting, 06-12-2010, 12:55 AM |
| Can you please be more specific?
Thanks,
|
| Posted by SAFAGOLD, 06-12-2010, 07:56 AM |
| I'm talking about PHP Shell (c99 or r57)!
|
| Posted by spdfox, 06-12-2010, 09:45 AM |
| http://www.webhostingtalk.com/showthread.php?t=890712
|
| Posted by SAFAGOLD, 06-12-2010, 09:06 PM |
| I can't find good solutions for this problem
|
| Posted by boonchuan, 06-12-2010, 09:22 PM |
| Install something like rkhunter? Or get an experienced web administrator to clean it for you. I had that and worse a few years ago, and Steve Rack911 did a fantastic job for me.
|
| Posted by SSD-Greg, 06-12-2010, 09:53 PM |
| Hire a experienced web administrator to clean it out for you, They wont charge that much. Thats the way i'll do it but you could also go on google and find a way how to do it your self if you aren't too lazy.
|
| Posted by SimplexWebs, 07-02-2010, 12:42 PM |
| I know this thread is a couple weeks old, however wanted to post the following. The find command is very useful for searching for files within your server or specific folders. An example of using find and grep together could be
You can run the above command and it will return any files containing the text "HELLOWORLD" with a .php extension. I guess this could be useful for searching for shells that aren't encrypted, for example
to find files containing the text 'mulcish'.
OR
to find files using the 'shell_exec' function.
Of course shells can be hidden inside images, encrypted etc but that's merely a quick way of searching for certain files that meet specified criteria.
Last edited by SimplexWebs; 07-02-2010 at 12:48 PM.
|
Add to Favourites 
Print this Article
Also Read
