/HideRT

Hide Red Team Activity

Primary LanguageShell

HideRT

Hide Red Team Activity

Currently skips root user

  • This must be manually changed prior to running setup in "HideRT.sh" on line #24

Setup

After cloning this repo, run:

sudo ./setup.sh

Sit back relax and pwn Blue Team now that they can't see connections or activity

Script Summary

This script was built for the GDDC (Great Dane Defense Competition), specifically to be used by the Red Team players.

The idea is to "hide" activity from the Blue Team, this is accomplished by mounting processes to a temporary directory.

Processes mounted can no longer be seen with 'ps aux', 'top', etc..

This will also hide from 'w', not showing what tty or pts Red Team is on!

Blue Team

Blue Team can begin seeing "NEW" processes again if a team runs the command umount /tmp. This will allow them to see processes before the HideRT service runs again. This can be mitigated by removing the temporary command, or disabling the service.