Skip to content

/ProcessHider

Sample Mac OS X (Mountain Lion) kernel extension that demonstrates how to hide a process by modifying allproc and pidhashtbl.
  1. C 100.0%
Branch: master
Find File
Clone or download

Clone with HTTPS

Use Git or checkout with SVN using the web URL.

Open in Desktop Download ZIP

Launching GitHub Desktop...

If nothing happens, download GitHub Desktop and try again.

Launching GitHub Desktop...

If nothing happens, download GitHub Desktop and try again.

Launching Xcode...

If nothing happens, download Xcode and try again.

Launching Visual Studio...

If nothing happens, download the GitHub extension for Visual Studio and try again.

Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
ProcHider.xcodeproj
ProcHider
README.md

README.md

###README###

Sample kernel extension for Mac OS X Mountain Lion that demonstrates how to hide a process by modifying allproc and pidhashtbl. Necessary kernel symbols are resolved during module initializiation.

Bugz/ToDo:

  • process unhiding does not work (who needs unhiding anyway)
  • support for more advanced hiding tricks?!
You can’t perform that action at this time.