unhide 20080519_1 security =2

A forensic tool to find hidden processes and TCP/UDP ports
Maintained by: ntarmos@cs.uoi.gr
Port Added: 13 Mar 2009 00:32:24

---

---

Unhide is a forensic tool to find hidden processes and TCP/UDP ports by
rootkits / LKMs or by another hidden technique. It consists of two
programs: unhide and unhide-tcp.

unhide detects hidden processes through:
   * Comparison of /proc vs /bin/ps output.
   * Comparison of info gathered from /bin/ps with info gathered from.
   * Syscalls (syscall scanning).
   * Full PIDs space ocupation (PIDs bruteforcing).

unhide-tcp identifies TCP/UDP ports that are listening but not listed in
/bin/netstat by doing brute forcing of all TCP/UDP ports availables.


WWW: http://www.security-projects.com/?Unhide

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMon

---

To install the port: cd /usr/ports/security/unhide/ && make install clean
To add the package: pkg_add -r unhide

---

Configuration Options

     No options to configure

---

Master Sites:

http://www.security-projects.com/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

- fix install / mtree with custom PREFIX
- bump PORTREVISION

Submitted by:   maintainer
Reported by:    QATty

- Update WWW

PR:             133272
Submitted by:   Nikos Ntarmos <ntarmos@cs.uoi.gr> (maintainer)

Unhide is a forensic tool to find hidden processes and TCP/UDP ports by
rootkits / LKMs or by another hidden technique. It consists of two
programs: unhide and unhide-tcp.

unhide detects hidden processes through:
   * Comparison of /proc vs /bin/ps output.
   * Comparison of info gathered from /bin/ps with info gathered from.
   * Syscalls (syscall scanning).
   * Full PIDs space ocupation (PIDs bruteforcing).

unhide-tcp identifies TCP/UDP ports that are listening but not listed in
/bin/netstat by doing brute forcing of all TCP/UDP ports availables.

WWW: http://http://www.security-projects.com/?Unhide/

PR:             ports/132131
Submitted by:   Nikos Ntarmos <ntarmos@cs.uoi.gr>

5 vulnerabilities affecting 16 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities