There are so many tools that able to check the hidden process and port, the tools are rootkits/lkms/unhide etc.
In this tutorial i will discuss something more simple to use and the tools is UNHIDE.

Unhide is a tool to find hidden processes and TCP/UDP ports by rootkits / LKMs or by another hidden technique. This tools works under both Linux / Unix, and MS-Windows operating systems.

It detects hidden processes using three techniques:

The proc technique consists of comparing /proc with the output of /bin/ps.
The sys technique consists of comparing information gathered from /bin/ps with information gathered from system calls.
The brute technique consists of bruteforcing the all process IDs. This technique is only available on Linux 2.6 kernels.

If you want to run some processes like backup , generate image thumbnail etc.. in the background.
The is an easy way to do this, we can using Crontab to handle this task so it will automatically do the job in your schedule task.

What is Crontab ?

Crontab is found in unix and unix-like O/S, cron derives from chronos greek time and it used to schedule command or execute it periodically.

How to Verify Crontab Running in The System ?

Login into your server and type this command below :

#crontab -l

How To Unlocked Brute Force System Cpanel

Today i just updated my cpanel server to the latest version but the strange thing is i misstyped my email password account few times and this will automatically detected as brute force in cpanel system that handle by cphulkd.

If i trying to login into the WHM / Cpanel it will show like below :

How To Remove USB Pen Device MBR

What is MBR ?
MBR is master boot recorded.

The question is how can we remove the MBR for USB device?
in DOS environtment we can just simply type fdisk/mbr command
but this is different, in LINUX/ UNIX please follow this step below :

Login into your server and type command below

[code]$dd if=/dev/zero of=/dev/sdc bs=512 count=1[/code]

YOu will see the output like below

1+0 records in
1+0 records out
512 bytes (512 B) copied, 0.00308483 s, 166 kB/s

Here is a sample or simple shell script to monitor every services in your server such as http, ssh, mail, dns, mysql, etc..

Feel free to modify it for your own use.

---------------------------------------------------------------------

After i've upgraded my PHP to the latest version, i found there is a problem with my PHP date function.

here is the error example :

"warning: date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function.

Here is the fastest way to fixed this issue.

Login as root into your server

Edit php.ini

#pico /usr/local/etc/php.ini

Login into the server with root access

#pico /usr/local/etc/nginx/nginx.conf

First add the following to your Nginx configuration file:

 location / {
   auth_basic            "Restricted";
   auth_basic_user_file  /etc/nginx/htpasswd;
 }


Then We need to create the htpasswd file

this be passwords format will be
=================================
thisbetheusername:thisbeencryptedpass

What is GeoIP

GeoIP® is the proprietary technology that drives MaxMind's IP geolocation data and services. GeoIP provides businesses with a non-invasive way to determine geographical and other information about their Internet visitors in real-time. When a person visits your website, GeoIP can determine which country, region, city, postal code, area code the visitor is coming from. Furthermore, GeoIP can provide information such as longitude/latitude, connection speed, ISP, company name, domain name, and whether the IP address is an anonymous proxy or satellite provider.

When installing PHP 5.2.14 from source and then installing PEAR libraries, I got the following error when executing pear:

pear.php.net is using a unsupported protocol - This should never happen.
install failed

so How to fixed this ?

#rm -rf /usr/local/lib/php/.channels

and then re execute pear channels again

#pear update-channels

This should fixed your problem.

What is Postfixadmin Squirellmail Plugins ?

This plugin is used to help postfix user to be able to change their password, autovacation and forwarding via squirellmail webmail without need to asking admin to change their needs.

Prepare anything to start

1. Zend Framework Minimal. We can download it from this URL http://framework.zend.com/releases/ZendFramework-1.10.8/ZendFramework-1....

2. We need to recompile / install php to support XMLRPC