Rootkit Hunter favicon

Rootkit Hunter

Rootkit Hunter is a POSIX system scanner for rootkits, backdoors and local exploits by running tests like:

  • MD5 hash compare
  • Look for default files used by rootkits
  • Wrong file permissions for binaries
  • Look for suspected strings in LKM and KLD modules
  • Look for hidden files
  • Optional scan within plaintext and binary files Rootkit Hunter is released as GPL licensed project and free for everyone to use. Can be installed on macOS via Homebrew.
Chkrootkit

Chkrootkit

Chkrootkit is a Linux tool to locally check for signs of a rootkit. It contains:

  • chkrootkit: shell script that checks system ...
Tiger

Tiger

Tiger is a Linux security tool that can be use both as a security audit and intrusion detection system. Tiger can be used as a ...

RootkitRevealer

RootkitRevealer

RootkitRevealer is an advanced rootkit detection utility. It runs on Windows NT 4 and higher and its output lists Registry and ...