** ** http://toolsyard.thehackernews.com/2013/02/unhide-forensic-tool-find-hidden.html<http://toolsyard.thehackernews.com/2013/02/unhide-forensic-tool-find-hidden.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+PenetrationTestingTools+%28Tools+Yard+%3A+Security%2C+Hacking+and+Penetration+Testing+Tools%29&_m=3n.009a.129.ld0aof429u.32o#_> **** Unhide Forensic Tool, Find hidden processes and ports<http://toolsyard.thehackernews.com/2013/02/unhide-forensic-tool-find-hidden.html> ****
**** **** *Unhide* is a forensic tool to find processes hidden by rootkits, Linux kernel modules or by other techniques. It detects hidden processes using six techniques:**** - Compare /proc vs /bin/ps output**** - Compare info gathered from /bin/ps with info gathered by walking thru the procfs. ONLY for Linux 2.6 version**** - Compare info gathered from /bin/ps with info gathered from syscalls (syscall scanning).**** - Full PIDs space ocupation (PIDs bruteforcing). ONLY for Linux 2.6 version**** - Compare /bin/ps output vs /proc, procfs walking and syscall. ONLY for Linux 2.6 version**** - Reverse search, verify that all thread seen by ps are also seen in the kernel.**** - 6- Quick compare /proc, procfs walking and syscall vs /bin/ps output. ONLY for Linux 2.6 version.**** - Unhide-TCP**** *unhide-tcp* is a forensic tool that identifies TCP/UDP ports that are listening but are not listed in /bin/netstat through brute forcing of all TCP/UDP ports available.**** [image: cid:[email protected]]**** *How to Use ?***** - -f Write a log file (unhide.log) in the current directory.**** - -h Display help**** - -m Do more checks. As of 2010-11-21 version, this option has only effect for the procfs, procall, checkopendir and checkchdir tests.**** - -r Use alternate version of sysinfo check in standard tests**** - -V Show version and exit**** - -v Be verbose, display warning message (default : don't display). This option may be repeated more than once.**** *Compiling :* gcc –static unhide.c -o unhide gcc -Wall -O2 –static unhide-tcp.c -o unhide-tcp gcc -Wall -O2 –static -pthread unhide-linux26.c -o unhide-linux26 gcc -Wall -O2 -static -o unhide_rb unhide_rb.c Available for Windows & Linux Platform. *Download latest Version : **Windows *<http://sourceforge.net/projects/unhide/files/latest/download?source=files> * or **Linux*<http://sourceforge.net/projects/unhide/files/unhide_20120222_beta.tgz/download> **** **** *Subscribe* to our Daily Newsletter via email<http://news.thehackernews.com/signup.php>- Be First to know about Security and Penetration testing tools. or Join our Huge *Hackers Community *on Facebook <https://www.facebook.com/thehackernews>, Google+ <https://plus.google.com/+TheHackerNews>and Twitter <https://twitter.com/TheHackersNews>.**** <http://toolsyard.thehackernews.com/2013/02/unhide-forensic-tool-find-hidden.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+PenetrationTestingTools+%28Tools+Yard+%3A+Security%2C+Hacking+and+Penetration+Testing+Tools%29&_m=3n.009a.129.ld0aof429u.32o#_> **** -- -- Thanks for being part of "PoliticalForum" at Google Groups. For options & help see http://groups.google.com/group/PoliticalForum * Visit our other community at http://www.PoliticalForum.com/ * It's active and moderated. Register and vote in our polls. * Read the latest breaking news, and more. --- You received this message because you are subscribed to the Google Groups "PoliticalForum" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
<<Untitled attachment 00289.jpg>>
