3 ms·
What rootkit? This is OS X, not Windows. You can't hide processes here the same way, or even to the same extent, you can under ntoskrnl.
by hackermom 16y ago
What rootkit? This is OS X, not Windows. You can't hide processes here the same way, or even to the same extent, you can under ntoskrnl.
- X-Istence 16y agoSure you can. If you have root access to Mac OS X and can thus load stuff into the kernel you can easily disguise applications that are running by modifying the process tables, or replacing the ps binary by one that does filtering. Look at some of the BSD rootkits for inspiration on how to accomplish a task like that.