JXA_Proc_Tree

KO | EN

gitlite — search

#javascript #react #typescript #go #golang #android #machine-learning #linux #windows #kubernetes #vue #awesome-list #pytorch #mcp

(★ 14)

A JXA script for enumerating running processes, printed out in a json, parent-child tree.

JXA_Proc_Tree Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# JXA_Proc_Tree
A JXA script for enumerating running processes, printed out in a json, parent-child tree.
## What is this?
It is sort of a port of [Jaron Bradley's](https://github.com/themittenmac/TrueTree/commits?author=jbradley89) [TrueTree](https://github.com/themittenmac/TrueTree) (Swift tool over to JXA for use in an Apfell Agent, Mythic for [Mythic C2](https://github.com/its-a-feature/Mythic) by [Cody Thomas](https://github.com/its-a-feature)\
I recently implemented the Responsible pid functionality, so processes can now show the rpid as their real parent, rather than every process always having a ppid of 1 (launchd).
## Usage
1.  In Mythic, use `jsimport jxa_tree.js` and upload `jxa_tree.js`
    - [Apfell Agent jsimport Source code](https://github.com/MythicAgents/apfell/blob/master/Payload_Type/apfell/agent_code/jsimport.js)
2.  Use `jsimport_call{"command":"printTree('<TREE TYPE>')"}`
    - TREE TYPEs are either 'standard' for pid 1 (launchd) as the parent of all processes, or 'truetree' where the Responsible pid (rpid) is the parent process, if available.
    - This works best if you have a root callback, but it will work with a user context callback as well.
![alt text](https://github.com/antman1p/JXA_Proc_Tree/blob/main/Screen%20Shot%202021-04-19%20at%205.12.57%20PM.png?raw)
## TODO:
~~1.  Get the `getRpid(pid)` function to work~~
## Special Thanks
Thank you to my colleagues in Appsec for helping me figure out how to get around the struct issue!  JXA has a problem with structs.

JXA_Proc_Tree

JXA_Proc_Tree Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

JXA_Proc_Tree

JXA_Proc_Tree Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README