NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
Processes, Memory, and the /proc Filesystem
Master Linux process management and memory analysis. Explore PIDs, the virtual /proc filesystem, and how attackers use ptrace for stealthy process injection.
Room tasks
1Process Lifecycle, States, and Signals
2The Magic of `/proc`
3Process Injection & ptrace
Frequently Asked Questions
What is the /proc filesystem?
/proc is a virtual filesystem that exposes live kernel and process information as files, such as command lines, memory maps, and open file descriptors.
What is ptrace?
Ptrace is a system call that lets one process observe and control another. Debuggers use it, and attackers can abuse it to inject code into running processes.
How do you inspect a suspicious process?
Check its PID, parent, command line, open files, and network connections through ps, lsof, and /proc. This free Codelivly room teaches these steps hands-on.