Targeted System Binaries And Directories
- System binaries:
- /bin/login
- /usr/etc/in.telnetd
- /usr/etc/in.ftpd
- /usr/etc/in.tftpd
- /usr/ucb/netstat
- /bin/ps
- /bin/ls
- /usr/sbin/ifconfig
- /bin/df
- /usr/lib/libc.a
- /usr/lib/*.so
- /usr/ucb/cc
- Files:
- /.rhosts
- /etc/hosts.equiv
- /bin/.rhosts
- /etc/passwd
- /etc/group
- /var/yp/* (nis maps)
- root environment files (.login, .cshrc, .profile, .forward)
- Hidden files:
- Starting with .
- /tmp
- /var/tmp
- /etc/tmp
- /usr/spool
- /usr/lib/cron
- Modified files:
- /var/log/messages
- /var/log/wtmp
- /var/log/lastlog
- /var/account/*