grayddq / gscan Goto Github PK

是否可以考虑加busybox进去。

怎么才能让脚本扫描web目录下的文件啊

i run on python2.4

I tried to run GScan on the desktop version of Ubuntu 20.04 and 22.04, the instruction is:
sudo python3 GScan.py
The result both includes:
[1][风险] 黑客在未知时间，进行了SSHwrapper 后门植入,/usr/sbin/sshd被篡改,文件非可执行文件
But sshd file does not exist. See below:
ls -al /usr/sbin/sshd
ls: cannot access '/usr/sbin/sshd': No such file or directory
Is it a false alarm?

Hello,

My domain stillnorth.net is listed in this repository in "kazy.txt" and I assume this may be one of the reasons why my domain is being blocked by several antivirus softwares. Let me know what I can do to prove to you that this is not a malicious domain...

Have a nice day
Phanuel

Thankyou, Please add the function of sending reports by automatic mail,Task Sending Report.

downloads\gscan-master.zip360检测存在病毒： 后门程序(Backdoor.Win32.WebShell.C)

我们有一个基于CentOS7的小集群，有10个计算节点，/home是各节点共享目录之一。我在各节点使用GScan扫描的时候，很快各节点的内存都被耗尽（~160G），从晚上跑到第二天早上也一直卡在[4]各用户目录安全扫描。有什么解决办法？

我有一个用户home目录下文件过多，导致gscan卡住，而且我确定这个用户的home是安全的。
能不能设置跳过某个用户的home目录扫描？

I put a word Trojan to a test server,then I run your script, But It can't check a word Trojan. Why?

a word Trojan is:

Local scanning requires installation of running environment, which is sometimes troublesome.