Skip to content
#

persistence

Here are 706 public repositories matching this topic...

phpsploit
nil0x42
nil0x42 commented Oct 3, 2020

Current implementation of proclist plugin uses win32_ps_list_procs() php function on Windows host.

Therefore, linux implementation is a simple system("ps -a"), which is OPSEC unsafe, an would probably trigger EDR alerts.

A better implementation should avoid relying on system command execution.

to be documented stealth impacts stealthness and evasion capabilities good first issue issue is good for first-time contributors

Improve this page

Add a description, image, and links to the persistence topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the persistence topic, visit your repo's landing page and select "manage topics."

Learn more