How to use rkhunter to Scan for Rootkits, backdoors and Exploits Using in Linux

Rkhunter “Rootkit Hunter”. it can find about 58 known rootkits and some sniffer and backdoor programs. It performs a series of test scripts to confirm whether the server has been infected with rootkits, such as checking the basic files used by rootkits, wrong file permissions for executable binaries, detecting kernel modules, and so on. In official information, RKHunter can do:

• the MD5 checksum test, detects whether there are changes file
• binary files and system tools used for detecting rootkit
• signature detection Trojan
• the detection procedure used is abnormal file attributes
• the detection system associated test
• Detect hidden files
• Detect suspicious core module LKM
• Detect the monitoring port that the system has started