Skip to content

plugins/proclist: Implement a full-php way to get process list in Linux #154

@nil0x42

Description

@nil0x42

Current implementation of proclist plugin uses win32_ps_list_procs() php function on Windows host.

Therefore, linux implementation is a simple system("ps -a"), which is OPSEC unsafe, an would probably trigger EDR alerts.

A better implementation should avoid relying on system command execution.

Metadata

Metadata

Assignees

No one assigned

    Labels

    good first issueissue is good for first-time contributorsstealthimpacts stealthness and evasion capabilitiesto be documented

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions