gustavo-iniguez-goya/decloaker
View on GitHub ↗ ★ 16 C
A simple tool to uncover files, directories, and connections hidden by malware.
3 mentions on Hacker News by 1 person: 0 stories, 3 comments · first 2025-12-23 · latest 2026-10-20
20082026
-
…help in these attacks. decloaker, chkrootkit, unhide... can help to analyze an infected system. [0] https://github.com/gustavo-iniguez-goya/decloaker [1] https://chkrootkit.org
comment by gus_ · 2026-10-20 · in Plex vulnerabilities being exploited in the wild to drop a cryptominer -
…malware campaign, the malware contained a rootkit which hid precisely some of its activity: https://github.com/gustavo-iniguez-goya/decloaker/discussion...
comment by gus_ · 2026-06-20 · in AURpocalypse now: a look at the recent AUR attacks -
…processes, so I think detecting beacons, inspecting traffic, etc, is out of the scope. Resources: https://github.com/gustavo-iniguez-goya/decloaker User-space library rootkits revisited: Are user-space detection mechanisms futile? -…
comment by gus_ · 2025-12-23 · in Snitch – A friendlier ss/netstat