==============
| 9) Rootkit |
==============
Rootkit scanner is scanning tool to ensure you for about 99.9%* you're clean of nasty tools.
This tool scans for rootkits, backdoors and local exploits by running tests like:
-MD5 hash compare
-Look for default files used by rootkits
-Wrong file permissions for binaries
-Look for suspected strings in LKM and KLD modules
-Look for hidden files
-Optional scan within plaintext and binary files
Instalation:
Login into SSH and type
root@server [~]# cd /root/
root@server [~]# wget
http://downloads.rootkit.nl/rkhunter-1.2.7.tar.gz
root@server [~]# tar -zxvf rkhunter-1.2.7.tar.gz
root@server [~]# cd rkhunter-1.2.7
root@server [~rkhunter-1.2.7]# ./installer.sh
Scan the server with rkhunter
root@server [~]# rkhunter -c