4 ms·
BlockBlock 1.0.0 beta – rewritten and open source
- vipa123 6y agoWhat does this do?
- scanr 6y agoFound this: https://objective-see.com/products/blockblock.html https://objective-see.com/products/blockblock.html “Malware installs itself persistently, to ensure it's automatically re-executed at reboot. BlockBlock continually monitors common persistence locations and displays an alert whenever a persistent component is added to the OS.“
- mrtweetyhack 6y agoit's malware
- app4soft 6y agoIs there same thing for Linux?
- ASalazarMX 6y agoI can only think of rkhunter or chkrootkit, which are not the same.
- hoistbypetard 6y agoNo. But we should make a one for systemd now that it has provided similar common persistence mechanisms. Prior to the wide availability of user services, I'd have said that mechanisms for (especially non-root) persistence were too fragmented for a thing like this to be useful for Linux. One that did nothing but scan systemd would probably be worthwhile now, though.
- app4soft 6y ago> one for systemd Is it possible to create for non-systemd?
- hoistbypetard 6y agoYou could try and detect some percent of persistent installs. The linked item is scanning launchd. Systemd is very similar for Linux. Non-systemd things are so diverse (IMO) that an attempt would devolve into a generic IPS. Which exist already, kind of suck, and find crapware with varying degrees of success.
- danieldk 6y agoAlso, if you want something more passive, KnockKnock by the same developer is also great: https://objective-see.com/products/knockknock.html https://objective-see.com/products/knockknock.html