chkrootkit
Check a system for known rootkits.
KaliParrotLinuxpassive
pkg: chkrootkit
chkrootkit scans a Linux host for signs of known rootkits and trojaned binaries.
Syntax
chkrootkit
Example
sudo chkrootkit
Runs all rootkit checks against the local system.
Advantages
- Quick rootkit triage
- No setup
Disadvantages
- Signature-based (misses new)
- False positives
Tags
#rootkit#ir
Official docs: chkrootkit ↗
Related commands
Frequently asked questions
What is chkrootkit used for?
chkrootkit scans a Linux host for signs of known rootkits and trojaned binaries.
What is an example chkrootkit command?
A common example is: sudo chkrootkit — Runs all rootkit checks against the local system.
Is chkrootkit part of Kali Linux?
Yes. chkrootkit ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install chkrootkit.
What category of security tool is chkrootkit?
chkrootkit is a Forensics tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.