rkhunter

From Wikipedia, the free encyclopedia

rkhunter
rkhunter on Mac OS X
Latest release	1.3.2 / 27 February 2008
OS	Cross-platform
Genre	rootkit detector
License	GNU General Public License
Website	http://rkhunter.sourceforge.net/

rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing MD5 hashes of important files with known good ones in online database, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules, and special tests for Linux and FreeBSD.

[edit] Development

Earlier in 2006 Rootkit Hunter initiator and developer Michael Boelen agreed to hand over development. Since that time the eight people have been working hard to set up the project properly and work towards the much needed maintenance release. The project has since been moved to SourceForge.