BSD Portssecurity/unhide 20210124_1 FreeBSD
Forensic tool to find hidden processes and TCP/UDP ports
- System
- FreeBSD
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- License
- GPLv3
- Categories
- security
- Package size
- 292.9 KiB, 1255.2 KiB installed
Description
Unhide is a forensic tool to find hidden processes and TCP/UDP ports by rootkits / LKMs or by another hidden technique. It consists of two programs: unhide and unhide-tcp.
unhide detects hidden processes through: * Comparison of /proc vs /bin/ps output. * Comparison of info gathered from /bin/ps with info gathered from. * Syscalls (syscall scanning). * Full PIDs space ocupation (PIDs bruteforcing).
unhide-tcp identifies TCP/UDP ports that are listening but not listed in /bin/netstat by doing brute forcing of all TCP/UDP ports availables.
In the other systems
| System | Port | Version |
|---|---|---|
| FreeBSD | security/unhide | 20210124_1 |
| DragonFly | security/unhide | 20210124_1 |
Install
Binary package:
pkg install unhideFrom the ports tree:
cd /usr/ports/security/unhide/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= unhide>0:security/unhidePackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 20210124_1 | 20210124_1 | 20210124 | 20210124_1 | 20210124_1 |
| FreeBSD:14:quarterly | 20210124_1 | 20210124_1 | n/a | 20210124_1 | 20210124_1 |
| FreeBSD:15:latest | 20210124_1 | 20210124_1 | n/a | 20210124_1 | 20210124_1 |
| FreeBSD:15:quarterly | 20210124_1 | 20210124_1 | n/a | n/a | n/a |
| FreeBSD:16:latest | 20210124_1 | 20210124_1 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
The Makefile names none itself; they come from USES and USE_*.
The full lists below include those, and their dependencies in turn.
No port depends on this one.
Configuration
No options to configure.
- USES
- tar:tgz
- Service scripts
- none
Files
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| YJesus-Unhide-v20210124_GH0.tar.gz | 75982 | afd3923d7ff665c32f73a5178065843a608a1aaab36d2b21cc62182032d4b668 |
Commit history 0
No commits in the history this site was built from.