Package: rkhunter (1.4.6-5)

[ Source: rkhunter  ]

rootkit, backdoor, sniffer and exploit scanner

Rootkit Hunter scans systems for known and unknown rootkits, backdoors, sniffers and exploits.

It checks for:

 - SHA256 hash changes;
 - files commonly created by rootkits;
 - executables with anomalous file permissions;
 - suspicious strings in kernel modules;
 - hidden files in system directories;

and can optionally scan within files.

Using rkhunter alone does not guarantee that a system is not compromised. Running additional tests, such as chkrootkit, is recommended.

Tags: Implemented in: sh, bash, ksh, tcsh and other shells, User Interface: Command Line, Role: role::program, scope::utility, Security: Intrusion Detection, File Integrity, Purpose: use::checking, use::scanning

Other Packages Related to rkhunter

• dep: debconf (>= 0.5)

  Debian configuration management system

  or debconf-2.0

  virtual package provided by cdebconf, cdebconf-udeb, debconf

• dep: binutils

  GNU assembler, linker and binary utilities

• dep: file

  Recognize the type of data in a file using "magic" numbers

• dep: lsof

  utility to list open files

• dep: net-tools

  NET-3 networking toolkit

• dep: perl

  Larry Wall's Practical Extraction and Report Language

• dep: ucf (>= 0.28)

  Update Configuration File(s): preserve user changes to config files

• rec: bsd-mailx

  simple mail user agent

  or mailutils

  GNU mailutils utilities for handling mail

  or s-nail

  feature-rich BSD mail(1)

  or mailx

  virtual package provided by bsd-mailx, mailutils

• rec: default-mta

  virtual package provided by exim4-daemon-light

  or mail-transport-agent

  virtual package provided by citadel-server, courier-mta, dma, esmtp-run, exim4-daemon-heavy, exim4-daemon-light, msmtp-mta, nullmailer, opensmtpd, postfix, qmail-run, sendmail-bin

• rec: e2fsprogs

  ext2/ext3/ext4 file system utilities

• rec: iproute2

  networking and traffic control tools

• rec: unhide

  Forensic tool to find hidden processes and ports

• rec: unhide.rb

  Forensics tool to find processes hidden by rootkits

• rec: wget

  retrieves files from the web

  or curl

  command line tool for transferring data with URL syntax

• sug: liburi-perl

  module to manipulate and access URI strings

• sug: libwww-perl

  simple and consistent interface to the world-wide web

• sug: powermgmt-base

  common utils for power management

Download rkhunter

Download for all available architectures

Architecture	Package Size	Installed Size	Files
all	249.8 kB	1,081.0 kB	[list of files]