imported>mutante mNo edit summary |
imported>mutante m (RootkitHunters moved to rootkit hunters) |
(No difference)
|
Revision as of 22:22, 21 November 2006
Rootkit Hunter scans files and systems for known and unknown rootkits, backdoors, and sniffers. The package contains one shell script, a few text-based databases, and optional Perl modules. It should run on almost every Unix clone.
http://freshmeat.net/projects/rkhunter/
chkrootkit is a tool to locally check for signs of a rootkit. It contains:
chkrootkit: shell script that checks system binaries for rootkit modification.
http://staff.washington.edu/dittrich/talks/blackhat/blackhat/antirootkit.html