Show HN: HimitsuShell – Shell scripts invisible even to kernel tracing
By mushstory · 2026-08-05 · 2 points · 0 comments
https://github.com/HimitsuShell/HimitsuShell
shc simply wraps a shell script in C and turns it into a binary. As a result, if you monitor the kernel with tools like auditd or bpftrace, the shell script is still visible. I solved this by combining a shell interpreter (such as BusyBox) and the shell script into a single stat…
Open the full discussion on BetterNews