unhide 20080519-2 (ia64 binary) in ubuntu intrepid
Unhide is a forensic tool to find processes and TCP/UDP ports hidden by
rootkits, Linux kernel modules or by other techniques. It includes two
utilities: unhide and unhide-tcp.
.
unhide detects hidden processes using three techniques:
- comparing the output of /proc and /bin/ps
- comparing the information gathered from /bin/ps with the one gathered
from system calls (syscall scanning)
- full scan of the process ID space (PIDs bruteforcing)
.
unhide-tcp identifies TCP/UDP ports that are listening but are not listed in
/bin/netstat through brute forcing of all TCP/UDP ports available.
.
This package can be used by rkhunter in its daily scans.
Details
- Package version:
- 20080519-2
- Status:
- Obsolete
- Component:
- universe
- Priority:
- Extra
Downloadable files
ia64 build of unhide 20080519-2 in ubuntu intrepid RELEASE produced
these files:
- unhide_20080519-2_ia64.deb (1.1 MiB)
Package relationships
- Suggests: