403Webshell
Server IP : 212.114.33.6  /  Your IP : 216.73.217.30
Web Server : Apache
System : Linux ger18 6.12.94+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.94-1 (2026-06-20) x86_64
User : immotrainerde ( 2287)
PHP Version : 8.2.32
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /sbin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /sbin/unhide_rb
ELF>@)@R@8@@@@�����   11@@@$
$
hLh\h\�xLx\x\��PPP  ppp$$JJJ  S�tdPPP  P�td@H@H@H<<Q�tdR�tdhLh\h\��GNU��GNU9ނ*��԰����a�/lib64/ld-linux-x86-64.so.20�0(��e�m�AX��E- Ps�Q��#��rxkv�I K�=�`4.��F�X �4�����`"fgetsstrcpystrncpy__strcpy_chk__stack_chk_fail__printf_chkfreeexitstat__isoc23_fscanfsched_rr_get_intervalclosedirfflushfopenstrlen__ctype_b_locstrstrfeof__isoc23_strtolsysinforeadlinkstdout__sprintf_chkmallocpclose__libc_start_maingetpgid__strcat_chkgetsid__cxa_finalizepopenstrerrorreaddirgetpriorityfclosesched_getschedulermemsetfputssched_getparamopendir__snprintf_chkgetuid__errno_locationsched_getaffinity__strncat_chklibc.so.6GLIBC_2.3GLIBC_2.33GLIBC_2.4GLIBC_2.38GLIBC_2.34GLIBC_2.2.5GLIBC_2.3.4_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTable�ii
�����ii
��������
ui	ti	!h\ *p\�)`` `NA(`QA0`XA8`eA@`rAH`{AP`�AX`�A``�Ah`�Ap`�A�_�_	�_�_*�_1�`0�^�^�^�^�^�^�^�^
�^�^�^
�^�^�^�^�^____ _(_0_8_@_H_P_X_`_ h_!p_"x_#�_$�_%�_&�_'�_(�_)�_+�_,�_-�_.�_/H��H��?H��t��H����5J>�%L>@�%J>h����%B>h�����%:>h����%2>h����%*>h����%">h����%>h����%>h�p����%
>h�`����%>h	�P����%�=h
�@����%�=h�0����%�=h� ����%�=h
�����%�=h�����%�=h���%�=h����%�=h�����%�=h����%�=h����%�=h����%�=h����%�=h����%�=h�p����%�=h�`����%�=h�P����%z=h�@����%r=h�0����%j=h� ����%b=h�����%Z=h�����%R=h���%J=h ����%B=h!�����%:=h"����%2=h#����%*=h$����%"=h%����%=h&����%=h'�p����%
=h(�`����%=h)�P����%�<h*�@����%=f���AV��AUATU��SH�JH��H�ĀdL�$%(L�d$xI��H�5Y�O���H������H���H��H)�H�5�-���H�����H���H��H)�H�5(����H�����H���H��H)�H�56���H���a���H���H��H)�H�5<����H���?���H���H��H)�H�5����H������H���H��H)�H�5@���H�����H���H��H)�H�5N�a���H������H���H��H)�H�5T�?���H�����H���H��H)�H�5b����H�����H���H��H)�H�5����H���s���H���H��H)�H�5����H���Q���H���H��H)�H�5����H���/���H���H��H)�H�5����H���
���H���H��H)�H�5��s���H�����H���H��H)�H�5��Q���H������H���H��H)�H�5��/���H�����H���H��H)�H�5* �
���H�����H���H��H)�H�51���H���c���H���H��H)�H�5 ����H���A���H���H��H)�H�5L ���H������H���H��H)�H�5R ���H�����H���H��H)�H�5� �c���H������H���H��H)�H�5� �A���H�����H���H��H)�H�5� ����H�����H���H��H)�H�5� ���H�5�9H���gL���H�=�9�K����v������aH�=!����H�=�9�&����@9��~@H��L�-AB1�H��L��L�%2B�}���H��1�L���p���H�-BH��1�H���\�����H���:����D$P;o9tIH�=� ����[9H�5�1�������T$P�1�H�5����H�=	9�t���H�=��8���������^�-x8A�ƅ�����L�-tA1�H��L��L�%dAH�����1�H��L�����A������~lH�-9A�@I�|�H��t�Q���I�D�I�<�H��t
�:���I��H�|�H��t�#���H�D�H��9�7������E��uH�=��h���1�H�T$xdH+%(��H��[]A\A]A^�A��u�H�=��3������=r7~��E1�H�-q@�H�|�t���1��t*�F7H��9�ރ��g���L�->@L�%7@���H�=+<A����H�=y7�������I�$H�5��1����H�=O7�����0���1�I��^H��H���PTE1�1�H�=�����w6�f.�@H�=7H��6H9�tH�V6H��t	�����H�=�6H�5�6H)�H��H��?H��H�H�tH�%6H��t��fD�����=�6u+UH�=6H��tH�=6�����d����u6]������w������H�/proc/AWAVAUATUS1�H���|$H��$�dH�%(H��$�1�H��$��>H��$�DŽ$�oc/�H�H��$�H��H�$�I���I��fDL������H��H�����{u���H�SH��H��DPt�H�����1�L��$�I��H�
L������H�<$H�5��%���I��H��t:L�l$ �fDL�⾀L���P���H����L���O�����t�L�����L��I��H�
�1����L��$��M���H�<$L�5�=�]���I��f.�L���(���H����H�HH�U�DJt�H�XL�$�L��1�I��H�
=�����L��L�����H���t��|$�@1�H�ߺ
���H�
=L��H�����H���z���f�L���8���L��Ƅ$��x���H��H���`���ff.��L��H�-�L��$���H�5�H�����H���DH�ھ�L�����H����H������t�H���c�H��$�dH+%(�5H�Ę[]A\A]A^A_�f.�A�}ppidƄ$��3���A�}:�(����
H�|$%1���H��;Hcȉ�����@1��
H��A�H�D$�_�H�L$H�D$H�y�l�H�T$1�H��H�
�;H�Ѻ
�-�H�
�;L��H�<������D��$�
Ƅ$���1�L��
���L��$�H��L��I�����H��������2�|$tMc�H�;J��������L������I�D�H��	�
H��s�H����� v�L��Mc���L�hH�$L���z�H�
�:A��H�$J��s7A��uQE���/�����$��A������E��C�T/�fB�T(�����E��H��L��K�L/�J�L(�����H������$�E��C�T/�B�T(�������AW��A��AVAUATUSH���|$4dH�%(H��$�1�����H��$L�D$P�T$0Mc�H�D$H�D$LH�l$`L��$�H�D$H��$��D$(H��$�L�D$ H�D$L��M��I��ff.�H��9H��E��E��J�<���2E����H�
����D$`1���H�t$H������u��$(%�=@���D$dH�9H�59J�<�B�������D$h�������t�D��D$l��D��������D$p��D�����1����D$t�/�H�t$D��������D$x���H�T$��D��������D$|��D���������$���H�t$ D���������$��1��������������$�H������t=H��I9��_���u�����t��u݃�tH��I9��;����tȃ�u�E��L�-�3E1�1�H�
*���L���w�H�\$8L��D�d$4L�t$(�H���H����H��.E��L����L��H��H�
��LD�H��H�/PH�=X;1����H�5E;L���M�XZH��H��tOD�t�A���t���.A����y���H���\���H�7J�4�H���\����LH�=�.����F����|$4�L�t$(H�\$8���D$(DI��D9|$0�!���H��$�dH+%(�R�D$(H��[]A\A]A^A_�@�2H�5w
H���D$d�t���H�5X6H�������t=H�5D6H��H��$��������H� 6J�4�H�������r���H�unknown DŽ$�exeH��$�����H��$����fo�H��$�H�5��D$PH��)�$�fo��$���H��H���QL�D$PH��H�5�1�L������uR�D$P��~J�X,H��� ��J,H�5��1��T$�C��T$�D$(A����x����.���I����1�H�-9L���H����H�5S,H�����L����L�`H�D$(L����H��4A��H�L$(J��s:A��uRE��������0�A������E��C�T%�fB�T ����@E���H��L��K�T%�J�T ��H�����\0E��C�T%�B�T ��{����3���H�78�8��H�߹�L��I�����1��-�H�5f+H���.����H��H���%s/statusrppid:%s/task/%s%s/exeps axhHo lwp,cmdSeen byNot seen bypid_max : %0d
/proc/%d
  %s %s %sSuspicious PID %5d:Unhide_rb 20240509
WARNING : 
 This was evidently false:
 - and so on.
You must be root to run %s !
  ps: %d processes
  sysinfo(): %d processes
Phase 1...Phase 2...No hidden processes found!ps/proc /proc_tasks /proc_parentgetsid()getpgid()getpriority()sched_getparam()sched_getaffinity()sched_getscheduler()sched_rr_get_interval()[*] Error: cannot get current maximum PID: %s
[*] cannot get current maximum PID: Error parsing %s format
Copyright © 2013-2024 Yago Jesus & Patrick Gouin
License GPLv3+ : GNU GPL version 3 or later
http://www.unhide-forensics.info

NOTE : This version of unhide_rb is for systems using Linux >= 2.6 

TL;DR : This tool is a P.O.F. (proof of fake).
        It's not maintained any more.

        DON'T USE IT for serious work.

 Back in time, the Dev of unhide.rb pretends that his tool, written in ruby
 do the same checks that unhide-linux, which is written in C, but is 10 times faster.
 - unhide.rb makes less tests,
 - unhide.rb tests are less accurate,
 - unhide.rb  only outputs minimal information about hidden processes,
 - unhide.rb finds lot of false positives when processes number is high,
 - unhide.rb finds lot of false positives when there are short live processes,
 - unhide.rb doesn't log results of tests,
 In order to verify assertion about speed, I backported unhide.rb to C language,
 in the more straight/dummy way:
 No optimisation, translation from line to line, exactly the same tests and treatments.
 The result is native unhide_rb.
 It is ONE THOUSAND times faster that the original ruby unhide.rb

 SO, DON'T RELY NEITHER ON UNHIDE.RB NOR ON UNHIDE_RB, THEY ARE JUST TOYS ! 
 For a quick but quite accurate test, use the command 'unhide-linux quick reverse'

Scanning for hidden processes...ps and sysinfo() process count mismatch:
/proc/sys/kernel/kernel/pid_max;<�����������x�X�����zRx���"zRx�$P���FJw�?;*3$"D���L\ ��P�B�B �B(�A0�A8�I�
�
8A0A(B BBBK\���7F�G�B �B(�A0�A8�G���H�c�A��
8A0A(B BBBED0��PF�G�B �A(�F0�N�^
0A(A BBBAGNU *�)� 
(5h\p\���o���
rh^�
��	���o���o`���o�o�
���ox\6 F V f v � � � � � � � � !!&!6!F!V!f!v!�!�!�!�!�!�!�!�!""&"6"F"V"f"v"�"�"�"�"�"�"`�NAQAXAeArA{A�A�A�A�A�A/usr/lib/debug/.dwz/x86_64-linux-gnu/unhide.debugc-	/X�w��O�X�de822a13acf3c097d4b08fddc2fb9561c4180b.debugCX<�.shstrtab.note.gnu.property.note.gnu.build-id.interp.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.got.text.fini.rodata.eh_frame_hdr.eh_frame.note.ABI-tag.init_array.fini_array.dynamic.data.bss.gnu_debugaltlink.gnu_debuglinkPP pp$1��9���o��(C���K��rS���o�
�
d`���o``�o���yB�
�
�  ~    ���"�"��"�"7�(5(5	�@@@�@H@H<��H�H��JJ �h\hL�p\pL�x\xL��h^hN��`Px ��`xP� �xPF
�P4�P

Youez - 2016 - github.com/yon3zu
LinuXploit