Linux RootKit

what is rootkil ?

• Protect malicious code or software like a backdoor
• Its purpose is to give root level access to an attacker
• the most important thing about this is it hides itself

Checking rootkit in kali linux

• By default kali linux comes with root checker
  • chkroot kit - is pre-install
    • If not

    apt-get install chkrootkit

  • To get help

  chkrootkit -h 

  • To run the chkroot

  chkrootkit 

Installing rkhunter

• To install rkhunter

apt-get install rkhunter

• Basic check of rkhunter

   rkhunter -c

Installing custom linux kernal

• Complete docs