unhide

Forensic tool to find hidden processes and ports

Platforms: Linux · Last verified September 6, 2026

Unhide is a forensic tool to find processes and TCP/UDP ports hidden by rootkits, Linux kernel modules or by other techniques. It includes two utilities: unhide and unhide-tcp.

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

See the official Kali tool page and upstream homepage linked above for installation and usage details.

Commonly preinstalled on

Kali Linux

Debian-based distribution built for penetration testing and security auditing