From owner-cvs-all@FreeBSD.ORG Fri Mar 13 00:31:08 2009 Return-Path: <owner-cvs-all@FreeBSD.ORG> Delivered-To: cvs-all@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 20CA91065680; Fri, 13 Mar 2009 00:31:08 +0000 (UTC) (envelope-from wxs@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id D38958FC28; Fri, 13 Mar 2009 00:31:07 +0000 (UTC) (envelope-from wxs@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n2D0V7ho097870; Fri, 13 Mar 2009 00:31:07 GMT (envelope-from wxs@repoman.freebsd.org) Received: (from wxs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n2D0V7LN097869; Fri, 13 Mar 2009 00:31:07 GMT (envelope-from wxs) Message-Id: <200903130031.n2D0V7LN097869@repoman.freebsd.org> From: Wesley Shields <wxs@FreeBSD.org> Date: Fri, 13 Mar 2009 00:31:07 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/security/unhide Makefile distinfo pkg-descr ports/security/unhide/files patch-Makefile X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the entire tree <cvs-all.freebsd.org> List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>, <mailto:cvs-all-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/cvs-all> List-Post: <mailto:cvs-all@freebsd.org> List-Help: <mailto:cvs-all-request@freebsd.org?subject=help> List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>, <mailto:cvs-all-request@freebsd.org?subject=subscribe> X-List-Received-Date: Fri, 13 Mar 2009 00:31:12 -0000 wxs 2009-03-13 00:31:07 UTC FreeBSD ports repository Added files: security/unhide Makefile distinfo pkg-descr security/unhide/files patch-Makefile Log: Unhide is a forensic tool to find hidden processes and TCP/UDP ports by rootkits / LKMs or by another hidden technique. It consists of two programs: unhide and unhide-tcp. unhide detects hidden processes through: * Comparison of /proc vs /bin/ps output. * Comparison of info gathered from /bin/ps with info gathered from. * Syscalls (syscall scanning). * Full PIDs space ocupation (PIDs bruteforcing). unhide-tcp identifies TCP/UDP ports that are listening but not listed in /bin/netstat by doing brute forcing of all TCP/UDP ports availables. WWW: http://http://www.security-projects.com/?Unhide/ PR: ports/132131 Submitted by: Nikos Ntarmos <ntarmos@cs.uoi.gr> Revision Changes Path 1.1 +30 -0 ports/security/unhide/Makefile (new) 1.1 +3 -0 ports/security/unhide/distinfo (new) 1.1 +22 -0 ports/security/unhide/files/patch-Makefile (new) 1.1 +15 -0 ports/security/unhide/pkg-descr (new)