rkhunter
« Back to VersTracker
Description:
Rootkit hunter
Type: Formula  |  Tracked Since: Dec 28, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: security rootkit auditing scanner system-utility
Install: brew install rkhunter
About:
Rkhunter (Rootkit Hunter) is a Unix-based tool designed to scan for rootkits, backdoors, and local exploits. It compares file hashes against known good versions and checks for default directories with incorrect permissions. This provides administrators with a vital layer of defense against unauthorized system modifications.
Key Features:
  • System binary verification and checksumming
  • Local and remote rootkit detection
  • Permission and hidden file checks
  • Email alert notifications on detection
Use Cases:
  • Routine security auditing of Linux/Unix servers
  • Incident response and forensics investigation
  • Verifying system file integrity after updates
Alternatives:
  • chkrootkit – Rkhunter performs deeper file integrity checks, while chkrootkit focuses more on running process analysis.
  • Tripwire – Tripwire is a comprehensive file integrity monitoring system, whereas Rkhunter is a lighter, script-based scanner.
Version History
Detected Version Rev Change Commit
Sep 14, 2024 12:46am 0 VERSION_BUMP 8bd0a57b