[–] chubot 12y ago ↗ As mentioned in the article, this doesn't hide processes from statically linked executables because he's using LD_PRELOAD.And busybox is a common statically linked executable, so you can trivially discover this with /bin/busybox ps or /bin/busybox top. [–] gighi 12y ago ↗ That's absolutely brilliant!
2 comments
[ 3.3 ms ] story [ 36.0 ms ] threadAnd busybox is a common statically linked executable, so you can trivially discover this with /bin/busybox ps or /bin/busybox top.