{"repo":"DominicBreuker/pspy","free":true,"listed":false,"github":"https://github.com/DominicBreuker/pspy","clone":"git clone https://github.com/DominicBreuker/pspy.git","description":"Monitor linux processes without root permissions","language":"Go","stars":6149,"topics":["ctf","pentesting","privesc","enumeration","golang","security"],"license":"GPL-3.0","category":"security-tools","readme_excerpt":"pspy - unprivileged Linux process snooping pspy is a command line tool designed to snoop on processes without need for root permissions. It allows you to see commands run by other users, cron jobs, etc. as they execute. Great for enumeration of Linux systems in CTFs. Also great to demonstrate your colleagues why passing secrets as arguments on the command line is a bad idea. The tool gathers the info from procfs scans. Inotify watchers placed on selected parts of the file system trigger these scans to catch short-lived processes. Getting started Download Get the tool onto the Linux machine you want to inspect. First get the binaries. Download the released binaries here: - 32 bit big, static version: pspy32 download - 64 bit big, static version: pspy64 download - 32 bit small version: pspy32s download - 64 bit small version: pspy64s download The statically compiled files should work on any Linux system but are quite huge ( 4MB). If size is an issue, try the smaller versions which depend on libc and are compressed with UPX ( 1MB). Build Either use Go installed on your system or run the Docker-based build process which ran to create the release. For the latter, ensure Docker is installed, and then run make build-build-image to build a Docker image, followed by make build to build the binaries with it. You can run pspy --help to learn about the flags and their meaning. The summary is as follows: - -p: enables printing commands to stdout (enabled by default) - -f: enables printing","default_branch":null,"files":null,"tree":[],"storefront":"/r/DominicBreuker","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/DominicBreuker/pspy/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}