Labs / Hashes and verification
Two system tools no longer match the image
Compare today’s hashes of core system binaries with the golden-image baseline, find the tools that changed without a package update, and read what was added to them.
Briefing
Every server is built from a golden image whose binary hashes are stored in /var/lib/fim/baseline.sha256. No packages have been updated on app-07 since it was built.
Attackers sometimes replace ps or ss so that their own process or port does not show up. A tool that lies to you can still be caught by hashing it.
app-07 · Hashes and verification
Type help for the command list and objectives for your tasks. Everything runs in this browser.
Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.