После настройки новой системы Kali в VB я решил выполнить chkrootkit для проверки файловой системы. Чкрооткит выявил много подозрительных файлов. Это ложный позитив или что-то, о чем нужно беспокоиться?
Были обнаружены следующие подозрительные файлы и каталоги:
/usr/lib/ruby/vendor_ruby/bundler/templates/newgem/.travis.yml.tt /usr/lib/ruby/vendor_ruby/libv8/.location.yml /usr/lib/python3/dist-packages/tabulate-0.7 .7.egg-инфо /.PKG-INFO.swp /usr/lib/python3/dist-packages/.hypothesis /usr/lib/python3/dist-packages/matplotlib/tests/baseline_images/.keep /usr /lib /python3 /dist-packages /PyQt4 /uic /widget-plugins /.noinit /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-mediawiki-e7970d1c6b56/.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-mediawiki-e7970d1c6b56 /.rspec /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-projects-2a56756753c4/.ruby-version /usr/lib/dradis/ruby/2.3.0/bundler/gems /dradis-projects-2a56756753c4 /.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-projects-2a56756753c4/.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems /dradis-brakeman-4d66e9cefa2f /.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-brakeman-4d66e9cefa2f/.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems /dradis-brakeman-4d66e9cefa2f /.rspec /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-calculator_cvss-5d5c765f53dc/.git /usr/lib/dradis/ruby/2.3.0/bundler/gems /dradis-calculator_cvss-5d5c765f53dc /.gitignore /usr /lib /dradis /ruby /2. 3.0 /bundler /gems /dradis-calculator_dread-41f9bbfee6b1 /.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-calculator_dread-41f9bbfee6b1/.gitignore /usr/lib/dradis/ruby 0 /bundler /gems /dradis-acunetix-3d71364306fc /.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-acunetix-3d71364306fc/.gitignore /usr/lib/dradis/ruby/2.3. 0 /bundler /gems /dradis-acunetix-3d71364306fc /.rspec /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-nessus-29282b0e8838/.git /usr/lib/dradis/ruby/2.3. 0 /bundler /gems /dradis-nessus-29282b0e8838 /.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-nessus-29282b0e8838/.rspec /usr/lib/dradis/ruby/2.3. 0 /bundler /gems /dradis-zap-350c69e4acbd /.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-vulndb-736afd98c8cd/.git /usr/lib/dradis/ruby/2.3. 0 /bundler /gems /dradis-vulndb-736afd98c8cd /.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-nexpose-ed7256c8cdb7/.git /usr/lib/dradis/ruby/2.3. 0 /bundler /gems /dradis-nexpose-ed7256c8cdb7 /.gitignore /usr/lib/dradis/ruby/2.3.0/b undler /gems /dradis-nexpose-ed7256c8cdb7 /.rspec /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-csv-0199fa1055bb/.git /usr/lib/dradis/ruby/2.3.0/bundler /gems /dradis-csv-0199fa1055bb /.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-csv-0199fa1055bb/.rspec /usr/lib/dradis/ruby/2.3.0/bundler /gems /dradis-ntospider-7f6d232f1fe6 /.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-ntospider-7f6d232f1fe6/.gitignore /usr/lib/dradis/ruby/2.3.0/bundler /gems /dradis-plugins-4405464bf845 /.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-plugins-4405464bf845/.gitignore /usr/lib/dradis/ruby/2.3.0/bundler /gems /dradis-plugins-4405464bf845 /.rspec /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-qualys-b3c68822761c/.git /usr/lib/dradis/ruby/2.3.0/bundler /gems /dradis-qualys-b3c68822761c /.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-qualys-b3c68822761c/spec/.keep /usr/lib/dradis/ruby/2.3. 0 /bundler /gems /dradis-qualys-b3c68822761c /.rspec /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-nmap-8 931fd001401 /.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-nmap-8931fd001401/.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-nmap- 8931fd001401 /.rspec /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-openvas-f9da3b0e222d/.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-openvas- f9da3b0e222d /.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-openvas-f9da3b0e222d/.rspec /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-ht_ 6ad8447a6ffd /.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-html_export-6ad8447a6ffd/.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-html_ex 6ad8447a6ffd /.rspec /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-html_export-6ad8447a6ffd/.travis.yml /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis- metasploit-4a5a6ad833cf /.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-metasploit-4a5a6ad833cf/.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis metasploit-4a5a6ad833cf /.rspec /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-bu rp-3fc2c7985c81 /.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-burp-3fc2c7985c81/.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis- burp-3fc2c7985c81 /.rspec /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-netsparker-0e9364dd80d1/.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis- netsparker-0e9364dd80d1 /.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-nikto-c39e165c5dbb/.git /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis- nikto-c39e165c5dbb /.gitignore /usr/lib/dradis/ruby/2.3.0/bundler/gems/dradis-nikto-c39e165c5dbb/.rspec /usr/lib/dradis/ruby/2.3.0/gems/mini_mime-1.0. 0 /.gitignore /usr/lib/dradis/ruby/2.3.0/gems/mini_mime-1.0.0/.travis.yml /usr/lib/dradis/ruby/2.3.0/gems/railties-5.1.5/lib /rails /generators /rails /generator /templates /templates /.empty_directory /usr/lib/dradis/ruby/2.3.0/gems/redis-3.3.5/test/db/.gitkeep /usr /lib /dradis /ruby /2.3.0 /gems /redis-3.3.5 /.travis /usr/lib/dradis/ruby/2.3.0/gems/redis-3.3.5/.gitignore /usr/lib/dradis/ruby/2.3. 0 /драгоценные камни /Redis-3.3.5 /.yardopts /usr/lib/dradis/ruby/2.3.0/gems/redis-3.3.5/.travis.yml /usr/lib/dradis/ruby/2.3.0/gems/sinatra-2.0.0/.yardopts /usr/lib/dradis/ruby/2.3.0/gems/paper_trail-6.0.2/.rubocop_todo.yml /usr/lib/dradis/ruby/2.3.0/gems/paper_trail-6.0.2/.gitignore /usr /lib/dradis/ruby/2.3.0/gems/paper_trail-6.0.2/.rubocop.yml /usr/lib/dradis/ruby/2.3.0/gems/paper_trail-6.0.2/.rspec /usr /lib /dradis/ruby/2.3.0/gems/paper_trail-6.0.2/.github /usr/lib/dradis/ruby/2.3.0/gems/paper_trail-6.0.2/.travis.yml /usr /lib /dradis /ruby/2.3.0/gems/crass-1.0.3/.gitignore /usr/lib/dradis/ruby/2.3.0/gems/crass-1.0.3/.yardopts /usr/lib/dradis/ruby/2.3 .0 /gems /crass-1.0.3 /.travis.yml /usr/lib/dradis/ruby/2.3.0/gems/websocket-driver-0.6.5/ext/websocket-driver/.RUBYARC
Тем не менее, я решил не копировать и вставлять их все, потому что их было много.