Hunting for Rootkits
Posted Mar 1, 2007 9:14 UTC (Thu) by Los__D
In reply to: Hunting for Rootkits
Parent article: Hunting for Rootkits
AFAIK it requires changing the length (because the same MD5 is found by padding the file). If the length of the files is also stored, it'll suddenly get a whole lot harder to create the right MD5 sum.(But of course, if the new content of the file is much shorter than the old content, there's quite a bit of space for doing padding).
to post comments)