Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Mon, 28 May 2012 07:26:12 GMT 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=2230011215&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=Files%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2FUNIX%2Faudit%2Fcuruncula.tgz%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.2230011215.1338189972.1338189972.1338189972.1%3B%2B__utmz%3D32867617.1338189972.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) http://packetstormsecurity.org/files/76953/curuncula.tgz http://packetstormsecurity.org/files/76953/curuncula.tgz http://packetstormsecurity.org/files/76953/Curuncula-Rootkit-Detection.html Thu, 23 Apr 2009 20:14:43 GMT Curuncula is a tool shipped as a loadable kernel module that aims to detect rootkits based on the Intel debugging support facilities. Rootkits that set the GD access flag are also detected. It makes use of the "last branch recording" mechanism provided by the Intel architecture. Support both the 2.4 and 2.6 Linux kernels.