unhide-1.0-11.gf.el5.20121229.i386.rpm


Advertisement

Description

unhide - Tool to find hidden processes and TCP/UDP ports from rootkits

Property Value
Distribution CentOS 5
Repository Ghettoforge i386
Package name unhide
Package version 1.0
Package release 11.gf.el5.20121229
Package architecture i386
Package type rpm
Installed size 119.32 KB
Download size 50.32 KB
Official Mirror mirror.ghettoforge.org
Unhide is a forensic tool to find processes and TCP/UDP ports hidden by
rootkits, Linux kernel modules or by other techniques. It includes two
utilities: unhide and unhide-tcp.
Unhide detects hidden processes using three techniques:
- comparing the output of /proc and /bin/ps
- comparing the information gathered from /bin/ps with the one gathered
from system calls (syscall scanning)
- full scan of the process ID space (PIDs bruteforcing)
unhide-tcp identifies TCP/UDP ports that are listening but are not listed
in /bin/netstat through brute forcing of all TCP/UDP ports available.

Alternatives

Package Version Architecture Repository
unhide-20130526-4.el5.art.i386.rpm 20130526 i386 Atomic
unhide-20130526-4.el5.art.x86_64.rpm 20130526 x86_64 Atomic
unhide-20130428-3.el5.art.i386.rpm 20130428 i386 Atomic
unhide-20100201-1.el5.i386.rpm 20100201 i386 FlexBox
unhide-20100201-1.el5.x86_64.rpm 20100201 x86_64 FlexBox
unhide-1.0-11.gf.el5.20121229.x86_64.rpm 1.0 x86_64 Ghettoforge
unhide-0.0.20110113-1.el5.rf.i386.rpm 0.0.20110113 i386 Repoforge (RPMforge)
unhide-0.0.20110113-1.el5.rf.x86_64.rpm 0.0.20110113 x86_64 Repoforge (RPMforge)
unhide-0.0.20080519-1.el5.rf.i386.rpm 0.0.20080519 i386 Repoforge (RPMforge)
unhide-0.0.20080519-1.el5.rf.x86_64.rpm 0.0.20080519 x86_64 Repoforge (RPMforge)
unhide - - -

Requires

Name Value
libc.so.6 -
libc.so.6(GLIBC_2.0) -
libc.so.6(GLIBC_2.1) -
libc.so.6(GLIBC_2.3) -
libc.so.6(GLIBC_2.3.4) -
libc.so.6(GLIBC_2.4) -
libpthread.so.0 -
libpthread.so.0(GLIBC_2.0) -
libpthread.so.0(GLIBC_2.1) -
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rtld(GNU_HASH) -

Provides

Name Value
unhide = 1.0-11.gf.el5.20121229

Download

Type URL
Binary Package unhide-1.0-11.gf.el5.20121229.i386.rpm
Source Package unhide-1.0-11.gf.el5.20121229.src.rpm

Install Howto

  1. Download latest gf-release rpm from
    http://mirror.ghettoforge.org/distributions/gf/archive/el/5/gf/i386/
  2. Install gf-release rpm:
    # rpm -Uvh gf-release*rpm
  3. Install unhide rpm package:
    # yum --enablerepo=gf install unhide

Files

Path
/usr/sbin/unhide
/usr/sbin/unhide-tcp
/usr/sbin/unhide_rb
/usr/share/doc/unhide-1.0/COPYING
/usr/share/doc/unhide-1.0/NEWS
/usr/share/doc/unhide-1.0/README.txt
/usr/share/doc/unhide-1.0/changelog
/usr/share/doc/unhide-1.0/sanity-tcp.sh
/usr/share/doc/unhide-1.0/sanity.sh
/usr/share/man/man8/unhide-tcp.8.gz
/usr/share/man/man8/unhide.8.gz

Changelog

2013-11-01 - John R. Dennison <jrd@gerdesas.com> - 1.0-11.20121229
- rebuilt
2013-08-23 - John R. Dennison <jrd@ghettoforge.org> - 1.0-10.20121229
- Added EL5 compatibility patch so it builds under EL5 properly
2013-07-26 - Parag <paragn AT fedoraproject DOT org> - 1.0-10.20121229
- Update to new version
2013-02-15 - Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0-9.20100201
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
2012-07-22 - Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0-8.20100201
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
2012-01-14 - Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0-7.20100201
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
2011-02-07 - Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0-6.20100201
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
2010-05-03 - Rakesh Pandit <rakesh@fedoraproject.org> 1.0-5.20100201
- Updated to 20100201
2009-12-04 - Rakesh Pandit <rakesh@fedoraproject.org> 1.0-5.20090810
- Updated to 20090810
2009-07-26 - Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0-4.20080519
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
Advertisement
Advertisement