rkhunter

From Wikipedia, the free encyclopedia
(Redirected from Rootkit Hunter)
Jump to navigation Jump to search
rkhunter
Initial release2006; 20 years ago (2006)
Stable release
1.4.6 / 20 February 2018; 8 years ago (2018-02-20)
Repository
  • {{URL|example.com|optional display text}}Lua error in Module:EditAtWikidata at line 29: attempt to index field 'wikibase' (a nil value).
Written inBourne shell, Perl
Engine
    Lua error in Module:EditAtWikidata at line 29: attempt to index field 'wikibase' (a nil value).
    Operating systemUnix-like
    Typerootkit detector
    LicenseGNU General Public License
    Websitesourceforge.net/projects/rkhunter/

    rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits.[1] It does this by comparing SHA-1 hashes of important files with known good ones in online databases, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules, and special tests for Linux and FreeBSD. rkhunter is notable due to its inclusion in popular operating systems (Fedora,[2] Debian,[3] etc.)

    The tool has been written in Bourne shell, to allow for portability. It can run on almost all UNIX-derived systems.

    Development

    [edit | edit source]

    In 2003, developer Michael Boelen released the version of Rootkit Hunter. After several years of development, early 2006, he agreed to hand over development to a development team. Since that time eight people have been working to set up the project properly and work towards the much-needed maintenance release. The project has since been moved to SourceForge.

    Both the GitHub and the SourceForge web resources seem to be sponsored by 'dogsbody' while code work seems to be being carried out by John Horne. This appears to be 'work-in-progress' but caution for Website spoofing and similar should always be exercised.[4]

    See also

    [edit | edit source]

    Lua error in mw.title.lua at line 392: bad argument #2 to 'title.new' (unrecognized namespace name 'Portal').

    References

    [edit | edit source]
    1. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
    2. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
    3. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
    4. ^ https://us.norton.com/blog/malware/website-spoofing
    [edit | edit source]
    Stub icon

    This Unix-related article is a stub. You can help Wikipedia by expanding it.

    Retrieved from "http://70.231.62.181/index.php?title=Rkhunter&oldid=7109250"