How To Install unhide on CentOS 7
Introduction
In this tutorial we learn how to install unhide on CentOS 7.
What is unhide
Unhide is a forensic tool to find processes and TCP/UDP ports hidden by rootkits, Linux kernel modules or by other techniques. It includes two utilities Unhide detects hidden processes using three techniques - comparing the output of /proc and /bin/ps - comparing the information gathered from /bin/ps with the one gathered from system calls (syscall scanning) - full scan of the process ID space (PIDs bruteforcing) unhide-tcp identifies TCP/UDP ports that are listening but are not listed in /bin/netstat through brute forcing of all TCP/UDP ports available.
We can use yum or dnf to install unhide on CentOS 7. In this tutorial we discuss both methods but you only need to choose one of method to install unhide.
Install unhide on CentOS 7 Using yum
Update yum database with yum using the following command.
sudo yum makecache
After updating yum database, We can install unhide using yum by running the following command:
sudo yum -y install unhide
Install unhide on CentOS 7 Using dnf
If you don’t have dnf installed you can install DNF on CentOS 7 first.
Update yum database with dnf using the following command.
sudo dnf makecache
After updating yum database, We can install unhide using dnf by running the following command:
sudo dnf -y install unhide
How To Uninstall unhide on CentOS 7
To uninstall only the unhide package we can use the following command:
sudo dnf remove unhide
References
Summary
In this tutorial we learn how to install unhide on CentOS 7 using yum and dnf.