process-hider v1.0.3

node-process-hider

A nodejs cli tool for hiding linux process.

Environment

1. Linux only
2. Make sure you have sudo privileges
3. GCC compiler

You can install gcc by typing:

# Debian
$ sudo apt install gcc

# Redhat
$ sudo yum install gcc

Usage

Install

$ npm i -g process-hider

Hide process

For example, i want to hide process ssserver.

[root@rp ~]# ps -ef | grep ssserver | grep -v grep
root  1582  1581  0 Jan06 ?  00:00:00 /usr/bin/python2 /usr/bin/ssserver -c /etc/shadowsocks.json
root  1607  1582  0 Jan06 ?  00:00:01 /usr/bin/python2 /usr/bin/ssserver -c /etc/shadowsocks.json
root  1608  1582  0 Jan06 ?  00:00:02 /usr/bin/python2 /usr/bin/ssserver -c /etc/shadowsocks.json
root  1609  1582  0 Jan06 ?  00:00:02 /usr/bin/python2 /usr/bin/ssserver -c /etc/shadowsocks.json
root  1610  1582  0 Jan06 ?  00:00:02 /usr/bin/python2 /usr/bin/ssserver -c /etc/shadowsocks.json

If you are not sure of the process name. You can use the following command to get process name by pid.

[root@rp ~]# ps -p 1582 -o comm=
ssserver

Hide process.

[root@rp ~]# sudo ph add ssserver
___  ____ ____ ____ ____ ____ ____ _  _ _ ___  ____ ____
|__] |__/ |  | |    |___ [__  [__  |__| | |  \ |___ |__/
|    |  \ |__| |___ |___ ___] ___] |  | | |__/ |___ |  \  v1.0.3

╔════╤══════════╤═════════════════════╗
║ ID │ FILTER   │ UPTIME              ║
╟────┼──────────┼─────────────────────╢
║ 0  │ ssserver │ 2020-01-07 10:51:26 ║
╚════╧══════════╧═════════════════════╝

Now you can find this process is hidden.

[root@rp ~]# ps -ef | grep ssserver | grep -v grep

Show process

If you don't want the process to be hidden any more, you can use the following command.

[root@rp ~]# sudo ph delete 0
___  ____ ____ ____ ____ ____ ____ _  _ _ ___  ____ ____
|__] |__/ |  | |    |___ [__  [__  |__| | |  \ |___ |__/
|    |  \ |__| |___ |___ ___] ___] |  | | |__/ |___ |  \  v1.0.3

╔════╤════════╤════════╗
║ ID │ FILTER │ UPTIME ║
╚════╧════════╧════════╝

Check!

[root@rp ~]# ps -ef | grep ssserver | grep -v grep
root  1582  1581  0 Jan06 ?  00:00:00 /usr/bin/python2 /usr/bin/ssserver -c /etc/shadowsocks.json
root  1607  1582  0 Jan06 ?  00:00:01 /usr/bin/python2 /usr/bin/ssserver -c /etc/shadowsocks.json
root  1608  1582  0 Jan06 ?  00:00:02 /usr/bin/python2 /usr/bin/ssserver -c /etc/shadowsocks.json
root  1609  1582  0 Jan06 ?  00:00:02 /usr/bin/python2 /usr/bin/ssserver -c /etc/shadowsocks.json
root  1610  1582  0 Jan06 ?  00:00:02 /usr/bin/python2 /usr/bin/ssserver -c /etc/shadowsocks.json

Full features

I will gradually complete the document. Please create an Issue if you have problems when using this tool.

[root@rp ~]# ph -h
___  ____ ____ ____ ____ ____ ____ _  _ _ ___  ____ ____
|__] |__/ |  | |    |___ [__  [__  |__| | |  \ |___ |__/
|    |  \ |__| |___ |___ ___] ___] |  | | |__/ |___ |  \  v1.0.3

Usage: ph [options] [command]

A nodejs module to hide linux process.

Options:
  -V, --version  output the version number
  -h, --help     output usage information

Commands:
  list           list process filters
  add [name]     add filter by process name
  delete [id]    delete filter by id
  logs [id]      show ps info when created filter
  clean          uinstall lib module and cache file

How it works

I have explained the principle of process hidden at the following article. ReadMore