rkhunter
rootkit, backdoor, sniffer and exploit scanner
Command lineSystem
Not tested on a device yet. What that means
Commands in the package
rkhunter
About rkhunter
From Debian's package description
Rootkit Hunter scans systems for known and unknown rootkits, backdoors, sniffers and exploits.
It checks for:
- SHA256 hash changes;
- files commonly created by rootkits;
- executables with anomalous file permissions;
- suspicious strings in kernel modules;
- hidden files in system directories;
and can optionally scan within files.
Using rkhunter alone does not guarantee that a system is not compromised. Running additional tests, such as chkrootkit, is recommended.
From Debian's description of the rkhunter package, under that package's license.
Dependencies
Depends on
Recommends
Related apps
- unhide.rbForensics tool to find processes hidden by rootkitsCommand line
- nut-servernetwork UPS tools - core systemCommand line
- testdiskPartition scanner and disk recovery tool, and PhotoRec file recovery toolCommand line
NmapSI4 - User modeIs a Qt4 interface for nmap scanner- chkrootkitrootkit detectorCommand line
- sane-utilsAPI library for scanners -- utilitiesCommand line
Sources and licenses
- Name: the Debian package name.
- Summary: Debian's short description of the rkhunter package, under that package's license.
- Description: Debian's description of the rkhunter package, under that package's license.
- Versions and sizes: Debian's archive for ARM64, as on packages.debian.org.
- Popularity: Debian Popularity Contest counts.
More in About the catalog.