unhide 20110113 security =2

A forensic tool to find hidden processes and TCP/UDP ports
Maintained by: ntarmos@cs.uoi.gr
Port Added: 13 Mar 2009 00:32:24
License: not specified in port

Unhide is a forensic tool to find hidden processes and TCP/UDP ports by
rootkits / LKMs or by another hidden technique. It consists of two
programs: unhide and unhide-tcp.

unhide detects hidden processes through:
   * Comparison of /proc vs /bin/ps output.
   * Comparison of info gathered from /bin/ps with info gathered from.
   * Syscalls (syscall scanning).
   * Full PIDs space ocupation (PIDs bruteforcing).

unhide-tcp identifies TCP/UDP ports that are listening but not listed in
/bin/netstat by doing brute forcing of all TCP/UDP ports availables.


WWW: http://www.unhide-forensics.info/

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMonThere are no ports dependent upon this port

---

To install the port: cd /usr/ports/security/unhide/ && make install clean
To add the package: pkg_add -r unhide

---

Configuration Options

     No options to configure

---

Master Sites:

http://heanet.dl.sourceforge.net/project/unhide/

http://sunet.dl.sourceforge.net/project/unhide/

http://iweb.dl.sourceforge.net/project/unhide/

http://switch.dl.sourceforge.net/project/unhide/

http://surfnet.dl.sourceforge.net/project/unhide/

http://kent.dl.sourceforge.net/project/unhide/

http://freefr.dl.sourceforge.net/project/unhide/

http://voxel.dl.sourceforge.net/project/unhide/

http://jaist.dl.sourceforge.net/project/unhide/

http://osdn.dl.sourceforge.net/project/unhide/

http://nchc.dl.sourceforge.net/project/unhide/

http://ncu.dl.sourceforge.net/project/unhide/

http://transact.dl.sourceforge.net/project/unhide/

http://softlayer.dl.sourceforge.net/project/unhide/

http://internode.dl.sourceforge.net/project/unhide/

http://ufpr.dl.sourceforge.net/project/unhide/

http://waix.dl.sourceforge.net/project/unhide/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

- Update to 20110113

PR:             ports/163298
Submitted by:   Nikos Ntarmos <ntarmos@cs.uoi.gr> (maintainer)

-remove MD5

Update to 20100201

PR:             ports/147863
Submitted by:   maintainer
Approved by:    tabthorpe (mentor)
Feature safe:   yes

- fix install / mtree with custom PREFIX
- bump PORTREVISION

Submitted by:   maintainer
Reported by:    QATty

- Update WWW

PR:             133272
Submitted by:   Nikos Ntarmos <ntarmos@cs.uoi.gr> (maintainer)

Unhide is a forensic tool to find hidden processes and TCP/UDP ports by
rootkits / LKMs or by another hidden technique. It consists of two
programs: unhide and unhide-tcp.

unhide detects hidden processes through:
   * Comparison of /proc vs /bin/ps output.
   * Comparison of info gathered from /bin/ps with info gathered from.
   * Syscalls (syscall scanning).
   * Full PIDs space ocupation (PIDs bruteforcing).

unhide-tcp identifies TCP/UDP ports that are listening but not listed in
/bin/netstat by doing brute forcing of all TCP/UDP ports availables.

WWW: http://http://www.security-projects.com/?Unhide/

PR:             ports/132131
Submitted by:   Nikos Ntarmos <ntarmos@cs.uoi.gr>

14 vulnerabilities affecting 32 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities