A tool that scans for rootkits, backdoors and local exploits by running several tests
http://www.rootkit.nl/projects/rootkit_hunter.html
README.md | ||
rkhunter.spec |
rkhunter
Rootkit Hunter scans for rootkits, backdoors and local exploits by running tests like:
- MD5 hash compare
- Look for default files used by rootkits
- Wrong file permissions for binaries
- Look for suspected strings in LKM and KLD modules
- Look for hidden files
- Optional scan within plaintext and binary files