rkhunter
|
rkhunter on Mac OS X | |
| Stable release | 1.4.2 / 24 February 2014 |
|---|---|
| Written in | Bourne shell, Perl |
| Operating system | Unix-like |
| Type | rootkit detector |
| License | GNU General Public License |
| Website |
rkhunter |
rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing SHA-1 hashes of important files with known good ones in online databases, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules, and special tests for Linux and FreeBSD.
Development
Earlier in 2006, Rootkit Hunter initiator and developer Michael Boelen agreed to hand over development. Since that time eight people have been working to set up the project properly and work towards the much needed maintenance release. The project has since been moved to SourceForge.