Listps is a compact Linux software that displays a comprehensive list of active processes on a system, including the ones operating in the background.
Listps is a Linux program that allows you to view running processes, including hidden ones. This software only functions with the /proc filesystem. Listps can explicitly list hidden processes running on systems compromised with various rootkits, such as suckit 1.3e. It achieves this by explicitly querying the /proc filesystem for process IDs between 1 and 33000. Swapped-out processes are shown in paranthesis.
In the example output session below, suckit 1.3e is installed on a Linux box, and we hide two processes (crond and smbd) and use listps to demonstrate that they are indeed hidden. The user installs suckit 1.3e, and then proceeds to hide crond and smbd (PIDs 577 and 613) using ./sksu. They provide the command "listps" to list each process.
The release notes for the latest software version include the following improvements: the program was rewritten in plain ANSI C, parameters to specify PID ranges were added, and a "configure" install script was included.
In the example output session below, suckit 1.3e is installed on a Linux box, and we hide two processes (crond and smbd) and use listps to demonstrate that they are indeed hidden. The user installs suckit 1.3e, and then proceeds to hide crond and smbd (PIDs 577 and 613) using ./sksu. They provide the command "listps" to list each process.
The release notes for the latest software version include the following improvements: the program was rewritten in plain ANSI C, parameters to specify PID ranges were added, and a "configure" install script was included.
What's New
Version 0.9.0: N/A