CmdID / Programs / Linux and Unix
dstat
Versatile tool for generating system resource statistics. tldr-pages
GTFOBins inherit 1 documented command
How dstat is abused
inherit
--xxxEach abuse is GTFOBins's category and the options and words it uses; the full write-up is on GTFOBins's page for dstat.
1 documented command
inherit unprivileged, with sudo
dstat allows you to run arbitrary Python scripts loaded as "external plugins" if they are located in one of the directories, stated in the dstat man page under "FILES":
~/.dstat/(path of binary)/plugins//usr/share/dstat//usr/local/share/dstat/
Pick the one that you can write into. The plugin named xxx file name must be defined in the dstat_xxx.py file.
dstat --xxxThe command CmdID reads trips no Sigma process-creation rule. This command is, with GTFOBins’ notes, from GTFOBins, at commit acd524623f9c of 2026-05-27, under the GPL-3.0, with no warranty. Changed: Markdown is shown formatted. The source is in lolbas-gtfobins-commands.json.gz, and the full entry is on GTFOBins’s page for dstat. CmdID reads the line that runs dstat.