RKHunter is a scanning tool that scans for rootkits, backdoors, and local exploits by running tests like MD5 hash comparison, known rootkit files, incorrect permissions on binaries, suspect strings in LKM and LKD modules, and hidden files.