decloak

decloak is a utility that endeavors to find hidden processes via PID exhaustion. It exploits the linear manner in which PIDs are assigned to new processes to reveal unseen processes. When a process is found, the script checks a few functions such as getpriority, getsid, getpgid, and the contents of /proc/(pid)/cmdline and reports them.