TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Endangered Technique: Using Environment Variables to Find Escaped Processes

1 pointsby tardismechanicover 2 years ago

1 comment

eesmithover 2 years ago
What about changing the process title?<p>Eg, <a href="https:&#x2F;&#x2F;github.com&#x2F;dvarrazzo&#x2F;py-setproctitle" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;dvarrazzo&#x2F;py-setproctitle</a> .<p>&gt; The setproctitle module allows a process to change its title (as displayed by system tools such as ps, top or MacOS Activity Monitor).<p>&gt; Changing the title is mostly useful in multi-process systems, for example when a master process is forked: changing the children&#x27;s title allows to identify the task each process is busy with. ...<p>&gt; Note that on Windows there is no way to change the process string: what the module does is to create a Named Object whose value can be read using a tool such as Process Explorer