chkrootkit -- locally checks for signs of a rootkit

2024-07-07

chkrootkit locally checks for signs of a rootkit. Includes ifpromisc.c to check if the interface is in promiscuous mode, chklastlog.c and chkwtmp.c to check for lastlog and wtmp deletions and chkproc.c for signs of LKM trojans.

Provides open source application to check for presence of rootkits installed on Linux/Unix machines. Links to security related sites.

Chkrootkit