Look for hidden directories #67
Closed
halpomeranz
started this conversation in
Ideas
Replies: 1 comment
-
Ok, I will convert this into an issue. Thank you for all your suggestions! |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Outside of user home directories, directory names starting with "." are uncommon. But we'll often see attackers staging tools in directories like "/tmp/.ICEd-unix". How about adding a check to list hidden directories that are not in user profile directories?
find / -path /root -prune -o -path /home/\* -prune -o -type d -name .\* -print
Beta Was this translation helpful? Give feedback.
All reactions