Hardscan is a local netstat replacement that scans for open ports the hard way: by binding to each of them and attempting to handshake with itself. It is meant to be useful in a situation where security may have been compromised, rendering the output of netstat and other security tools untrustworthy.
decloak is a utility that endeavors to find hidden processes via PID exhaustion. It exploits the linear manner in which PIDs are assigned to new processes to reveal unseen processes. When a process is found, the script checks a few functions such as getpriority, getsid, getpgid, and the contents of /proc/(pid)/cmdline and reports them.