pspy
Watches processes, cron jobs, and file events in real time without root - perfect for catching privileged scripts and cron-triggered commands to hijack.
Tags: privesc, processes, cron, post-ex
- Category
- privesc
- Maintenance signal
- maintained
Use this when: Authorized host. Process listings belong on a machine you are authorized to assess.
Install
release
wget https://github.com/DominicBreuker/pspy/releases/latest/download/pspy64 && chmod +x pspy64Command templates
Monitor
./pspy64 -pf -i 1000