A full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache

A grab-bag of small sysadmin scripts I reach for often — disk/network benchmarks, checksums, rootkit checks (chkrootkit/rkhunter), login alerts, and SSH fixups, in shell, Python, and Perl.

Install and configure Chkrootkit

A script with a workflow straight from the BTFM, for performing triage/autopsy on a compromised system.

RKHUNTER LIVE is an immersive, interactive training platform for learning rootkit detection and malware forensics on Linux systems. Featuring a fully simulated rkhunter, chkrootkit, AIDE, and Lynis environment, this platform allows security professionals and students to practice identifying kernel rootkits, rootkits, userland rootkits🕵🏿.

Thread detection and generate security audit report with multi tools

Security scanner for Ubuntu — runs rootkit checks and makes sense of the results.

Kernel-level Linux rootkit · 4.17–6.x · x86_64 · ftrace hooks (24) · Google C2 · Zero non-Google traffic · Self-rebuilds on kernel upgrade · Evades chkrootkit, rkhunter, and unhide

Basic rootkit checker based on existing tools like chkrootkit and rkhunter. These are not foolproof.