Closed 630036435 closed 6 years ago
replace #define PF_INVISIBLE 0x10000000 ? 0x10000000 is a pid ?
@630036435 looks like the syscall kill() is overwritten, so, in theory, after load this kernel module, you just have to send a signal from the terminal by using the kill command and the SIGINVIS signal (31).
Something like: $ kill -31 pid
. =)
how Hide/unhide any process?