2024-01-05 17:26:20 +01:00
|
|
|
# rkhunter
|
|
|
|
|
|
2024-01-05 17:26:22 +01:00
|
|
|
Rootkit Hunter scans for rootkits, backdoors and local exploits by running tests like:
|
|
|
|
|
|
|
|
|
|
- MD5 hash compare
|
|
|
|
|
- Look for default files used by rootkits
|
|
|
|
|
- Wrong file permissions for binaries
|
|
|
|
|
- Look for suspected strings in LKM and KLD modules
|
|
|
|
|
- Look for hidden files
|
|
|
|
|
- Optional scan within plaintext and binary files
|
|
|
|
|
|
