freebsd-ports/security/unhide/distinfo

MD5 (unhide20080519.tgz) = 1194ec0f89c6f28e8eb64fb66836f70f
SHA256 (unhide20080519.tgz) = 631bc2fb09fa05351273021fd32483e5bf4187dcdc15222335fe2ddc5d146ae3
SIZE (unhide20080519.tgz) = 17104
Unhide is a forensic tool to find hidden processes and TCP/UDP ports by rootkits / LKMs or by another hidden technique. It consists of two programs: unhide and unhide-tcp. unhide detects hidden processes through: * Comparison of /proc vs /bin/ps output. * Comparison of info gathered from /bin/ps with info gathered from. * Syscalls (syscall scanning). * Full PIDs space ocupation (PIDs bruteforcing). unhide-tcp identifies TCP/UDP ports that are listening but not listed in /bin/netstat by doing brute forcing of all TCP/UDP ports availables. WWW: http://http://www.security-projects.com/?Unhide/ PR: ports/132131 Submitted by: Nikos Ntarmos <ntarmos@cs.uoi.gr> 2009-03-13 00:31:07 +00:00			`MD5 (unhide20080519.tgz) = 1194ec0f89c6f28e8eb64fb66836f70f`
			`SHA256 (unhide20080519.tgz) = 631bc2fb09fa05351273021fd32483e5bf4187dcdc15222335fe2ddc5d146ae3`
			`SIZE (unhide20080519.tgz) = 17104`