3 ms·
Itd be obvious if you really look, but i once discovered in Perl you can make your command look however you want when you run `ps`. I was able to make a process
by CableNinja 3y ago
Itd be obvious if you really look, but i once discovered in Perl you can make your command look however you want when you run `ps`. I was able to make a process appear to be a kernel process (one with `[]`). It was pretty hard to discover unless you were very familiar with what every kernel process did. Ive discovered other fun ways of hiding things too, such as creating `...` as a directory. The first time i encountered that, it took me a whole day to find that dir.
- matheusmoreira 3y agoNot just Perl. Any Linux process can do it. https://www.man7.org/linux/man-pages/man2/prctl.2.html https://www.man7.org/linux/man-pages/man2/prctl.2.html > PR_SET_NAME > Set the name of the calling thread
- CableNinja 3y agoYeah, it was just that id discovered it when i was using perl.