An Intrusion Detection tool for Unix Clones

This is the website for rkhunter.sh a tool a command line utility to check computers running UNIX (or clones) for known root kits, other unwanted tools and changed files.

The project was started in 2003, by Michael Boelen, and from 2006 was continued by the Rootkit Hunter Development Team led by John Horne and unSpawn.

Since December 2023 it has been sponsored by Dogsbody Technology.

Docs

rkhunter documentation

Installation and usage guides, complete with copy and paste examples.

FAQ

rkhunter FAQs

Got a question? Chances are it's been answered already in the FAQ.

Issues

rkhunter GitHub Issues

Got a bug to report or other problem to raise? Raise an issue on GitHub.

Open Source

View the source, fork the code or submit your bug fixes. rkhunter is open and community led.

Want to contribute to rkhunter? Then get involved!

View rkhunter on GitHub

Free, free & free!

Released under GNU GPL v2.0, rkhunter respects all the freedoms that define Open Source software.

Oh, and don't forget it's free, as in 'free beer', too!

Read more about GNU GPL

Easy to use

As an easy to configure CLI tool, rkhunter is available for use almost everywhere.

Our documentation will get you started in no time!

View the rkhunter docs