metasploit-framework
https://github.com/rapid7/metasploit-framework
Ruby
Metasploit Framework
Msf::Post::Windows::Powershell#get_ps_pids
Get/compare list of current PS processes - nested execution can spawn many children doing checks before and after execution allows us to kill more children... This is a hack, better solutions are welcome since this could kill user spawned powershell windows created between comparisons.
Edit
git clone [email protected]:rapid7/metasploit-framework.git
cd metasploit-framework
open lib/msf/core/post/windows/powershell.rb
Contribute
# Make a new branchgit checkout -b -your-name--update-docs-Msf--Post--Windows--Powershell-get_ps_pids-for-pr
# Commit to gitgit add lib/msf/core/post/windows/powershell.rbgit commit -m "better docs for Msf::Post::Windows::Powershell#get_ps_pids"
# Open pull requestgem install hub # on a mac you can `brew install hub`
hub fork
git push <your name> -your-name--update-docs-Msf--Post--Windows--Powershell-get_ps_pids-for-pr
hub pull-request
# Celebrate!