rkhunter
Rootkit Hunter integrity checker.
KaliParrotLinuxpassive
pkg: rkhunter
rkhunter checks for rootkits, backdoors and local exploits via signatures and file-integrity comparisons.
Syntax
rkhunter --check
Example
sudo rkhunter --check --sk
Runs all checks non-interactively and reports warnings.
Advantages
- Broad checks + integrity
- Good for IR baselining
Disadvantages
- Noisy warnings
- Signature-based
Tags
#rootkit#ir
Official docs: rkhunter ↗
Related commands
Frequently asked questions
What is rkhunter used for?
rkhunter checks for rootkits, backdoors and local exploits via signatures and file-integrity comparisons.
What is an example rkhunter command?
A common example is: sudo rkhunter --check --sk — Runs all checks non-interactively and reports warnings.
Is rkhunter part of Kali Linux?
Yes. rkhunter ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install rkhunter.
What category of security tool is rkhunter?
rkhunter is a Forensics tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.