al0ne/LinuxCheck

Health v2 · maintenance only

Adoption not part of the score

2096 stars · 430 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A shell-based Linux emergency response and information gathering tool that performs 70+ security checks across 13 categories, including rootkits, webshells, cryptominers, SSH backdoors, and supply chain poisoning. It generates a Markdown report of findings and can automatically upload reports to a webhook for bulk incident response across many machines.

Use cases

• check a compromised linux server for rootkits and backdoors
• detect webshells and cryptomining malware on a server
• collect system and network information during incident response
• audit cron jobs, users, and SSH configuration for suspicious changes
• run bulk security checks across many servers and upload reports
• scan for suspicious files, SUID binaries, and reverse shells

When to choose

• you need a fast, dependency-light shell script for Linux incident response
• you want a single tool covering rootkits, webshells, miners, and misconfigurations
• you need to triage many machines and collect Markdown reports centrally

When to avoid

• you need continuous runtime monitoring or alerting rather than point-in-time checks
• you need Windows or macOS host forensics
• you require a GUI dashboard or long-term agent-based EDR capabilities

Facets

cli-tool · maturity active

security vulnerability-scanning developer-tools monitoring security operating-systems cli incident-response forensics rootkit-detection webshell-detection shell-script security-audit malware-detection command-line devops linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="al0ne/LinuxCheck")