backdoorme
backdoorme copied to clipboard
Hide backdoors from ps
Even making it so other users couldn't find the backdoor would make it much more potent. Currently, it can be easy to find backdoors simply with ps -ax.
http://unix.stackexchange.com/questions/17164/how-to-make-a-process-invisible-to-other-users
Another way:
http://www.cyberciti.biz/faq/linux-hide-processes-from-other-users/
Absolutely love it! Would love to investigate something similar for netstat as well
Alternatively can poison ps or alias ps to filter out lines we want to hide
Poisoning ps would work, but there are plenty of other commands/services to find what's running... I'm gonna look into it for the next few hours