chkrootkit
Sign in to savechkrootkit (Check Rootkit) is a Unix-based program intended to help system administrators check their system for local signs of known rootkits. It is a shell script using common UNIX/Linux tools like the strings and grep commands to search core system programs for signatures and for comparing a traversal of the /proc filesystem with the output of the ps (process status) command to look for discrepancies.
Wikidata facts
- Official website
- www.chkrootkit.org
- Image
- Chkrootkit en Linux.png
Show 2 more facts
- source code repository URL
- ftp://chkrootkit.org/pub/seg/pac/
- software version identifier
- 0.57
Sources (3)
via Wikidata · CC0
~1 min read
Article
3 sectionsContents
- See also
- References
- External links
chkrootkit (Check Rootkit) is a Unix-based program intended to help system administrators check their system for local signs of known rootkits. It is a shell script using common UNIX/Linux tools like the strings and grep commands to search core system programs for signatures and for comparing a traversal of the /proc filesystem with the output of the ps (process status) command to look for discrepancies.
It can be used from a rescue disc (typically a live CD) or it can optionally use an alternative directory from which to run all of its commands. These techniques allow chkrootkit to trust the commands upon which it depends a bit more.