There are so many tools that able to check the hidden process and port, the tools are rootkits/lkms/unhide etc.
In this tutorial i will discuss something more simple to use and the tools is UNHIDE.

Unhide is a tool to find hidden processes and TCP/UDP ports by rootkits / LKMs or by another hidden technique. This tools works under both Linux / Unix, and MS-Windows operating systems.

It detects hidden processes using three techniques:

The proc technique consists of comparing /proc with the output of /bin/ps.
The sys technique consists of comparing information gathered from /bin/ps with information gathered from system calls.
The brute technique consists of bruteforcing the all process IDs. This technique is only available on Linux 2.6 kernels.

If you want to run some processes like backup , generate image thumbnail etc.. in the background.
The is an easy way to do this, we can using Crontab to handle this task so it will automatically do the job in your schedule task.

What is Crontab ?

Crontab is found in unix and unix-like O/S, cron derives from chronos greek time and it used to schedule command or execute it periodically.

How to Verify Crontab Running in The System ?

Login into your server and type this command below :

#crontab -l

How To Unlocked Brute Force System Cpanel

Today i just updated my cpanel server to the latest version but the strange thing is i misstyped my email password account few times and this will automatically detected as brute force in cpanel system that handle by cphulkd.

If i trying to login into the WHM / Cpanel it will show like below :

How To Remove USB Pen Device MBR

What is MBR ?
MBR is master boot recorded.

The question is how can we remove the MBR for USB device?
in DOS environtment we can just simply type fdisk/mbr command
but this is different, in LINUX/ UNIX please follow this step below :

Login into your server and type command below

[code]$dd if=/dev/zero of=/dev/sdc bs=512 count=1[/code]

YOu will see the output like below

1+0 records in
1+0 records out
512 bytes (512 B) copied, 0.00308483 s, 166 kB/s

Here is a sample or simple shell script to monitor every services in your server such as http, ssh, mail, dns, mysql, etc..

Feel free to modify it for your own use.

---------------------------------------------------------------------

After i've upgraded my PHP to the latest version, i found there is a problem with my PHP date function.

here is the error example :

"warning: date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function.

Here is the fastest way to fixed this issue.

Login as root into your server

Edit php.ini

#pico /usr/local/etc/php.ini

Login into the server with root access

#pico /usr/local/etc/nginx/nginx.conf

First add the following to your Nginx configuration file:

 location / {
   auth_basic            "Restricted";
   auth_basic_user_file  /etc/nginx/htpasswd;
 }


Then We need to create the htpasswd file

this be passwords format will be
=================================
thisbetheusername:thisbeencryptedpass

We will continue to setup / create a Xen Guest or Xen VPS server.
Previously we have setup Xen Hypervisor. If you searching about How To Install Xen Hypervisor then click the link.

What is Xen ?

Xen (pronounced /ˈzɛn/) is a virtual-machine monitor for IA-32, x86-64, Itanium and ARM architectures. It allows several guest operating systems to execute on the same computer hardware concurrently. The University of Cambridge Computer Laboratory developed the first versions of Xen; as of 2010[update], the Xen community develops and maintains Xen as free software, licensed under the GNU General Public License (GPLv2).

Xen systems have a structure with the Xen hypervisor as the lowest and most privileged layer.[1] Above this layer come one or more guest operating systems, which the hypervisor schedules across the physical CPUs. The first guest operating system, called in Xen terminology "domain 0" (dom0), boots automatically when the hypervisor boots and receives special management privileges and direct access to all physical hardware by default. The system administrator can log into dom0 in order to manage any further guest operating systems, called "domain U" (domU) in Xen terminology.

What is GeoIP

GeoIP® is the proprietary technology that drives MaxMind's IP geolocation data and services. GeoIP provides businesses with a non-invasive way to determine geographical and other information about their Internet visitors in real-time. When a person visits your website, GeoIP can determine which country, region, city, postal code, area code the visitor is coming from. Furthermore, GeoIP can provide information such as longitude/latitude, connection speed, ISP, company name, domain name, and whether the IP address is an anonymous proxy or satellite provider.