https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=265167
Bug ID: 265167
Summary: netstat on Linux has a flag to find hte program that
does portbinding, FreeBSD does not
Product: Base System
Version: Unspecified
Hardware: Any
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: gnu
Assignee: b...@freebsd.org
Reporter: microla...@gmail.com
netstat on Linux has a flag that allows you to identify the program that is
binding to the port, you can run "netstat -pan" and the -p flag tells you the
program that makes the portbinding. This can be used to find reverse shells
which I have witnessed being used by state threat actors. It is very hard to
find a reverse shell on FreeBSD because this flag is missing, and if you look
at the man page there is no correlating flag that does the same thing. I
realized this is a feature request but the Freebsd source code is the basis of
super-secure OpenBSD and MacOS, and so it makes sense to push the change to
improve netstat analysis to FreeBSD and let the others follow course.
Thank you,
Michael Lazin
--
You are receiving this mail because:
You are the assignee for the bug.
