m4y0u

3 ms·

1. 1.▲
   Detect live APT with this network monitoring tool(github.com)

   2 points by m4y0u 1y ago|1 comments
2. 2.▲
   by m4y0u 1y ago

   www.github.com/m10ust/nethtop.git What you do from the tool 1. Enumerate all ghost sockets and see where they are connected and status 2. Can start a pcap capture or any single connection 3. Can trace and resolve any single conn
3. 3.▲
   NetHtop++ – Real-time network socket tracker that catches ghost sockets(github.com)

   13 points by m4y0u 1y ago|1 comments
4. 4.▲
   by m4y0u 1y ago

   Hey HN I built NetHtop++, a network inspection tool for Linux/macOS that goes far beyond netstat or ss. It’s like htop but for sockets — with extra powers. From a single terminal screen, you can: • See all live sockets and ghost conn
5. 5.▲
   by m4y0u 1y ago

   I wonder how many Ghost Sockets the average user got. I am under an advanced APT (that I am reverse-engineering) and I got around 49 ghost sockets. Which is a lot. Press "o" in the tool to view ghost sockets or refer at the bottom
6. 6.▲
   by m4y0u 1y ago

   This is definitely going in the roadmap. Or if you want you can make a PR request and I will integrate the update. Thanks for the poweruser comment. Really appreciated!
7. 7.▲
   NetHtop++(github.com)

   3 points by m4y0u 1y ago|4 comments
8. 8.▲
   by m4y0u 1y ago

   The ultimate network monitoring army knife. If you are tired of switching between lsof, tcpdump, traceroute, netstat, ifconfig etc. this tool has it all. It even detect ghost sockets and has counter-measures baked in. This of it like a htop