Public recordings
Sort by
bash: start: command not found admin@i-0f1e5ff82074e1a48:~$ runs /home/admin/kihei bash: runs: command not found admin@i-0f1e5ff82074e1a48:~$ /home/admin/kihei panic: exit status 1 goroutine 1 [running]: main.main() ./main.go:64 +0x47d admin@i-0f1e5ff82074e1a48:~$ ls -l /home/admin/kihei -rwxr-xr-x 1 admin root 2207109 Sep 17 17:28 /home/admin/kihei admin@i-0f1e5ff82074e1a48:~$ chown -R root:root /home/admin/kihei chown: changing ownership of '/home/admin/kihei': Operation not permitted admin@i-0f1e5ff82074e1a48:~$ sudo chown -R root:root /home/admin/kihei admin@i-0f1e5ff82074e1a48:~$
kihei/i-0f1e5ff82074e1a48 03:23
by SadServersmserver="http://storage.sadservers.com:9000" if curl --output /dev/null --silent --head --fail --max-time "$timeout" "$mser : else echo "ERROR: cannot reach storage server." exit fi fi /usr/bin/mc alias set sss $mserver v3QHHA7ARsKZLRycPrBf 6z1bawB9AnFyN0LMGJMagdPdrror --overwrite $castdir sss/screencasts --limit-upload 5M echo $? root@i-0e0312d6c2077de16:~# ls mc.sh root@i-0e0312d6c2077de16:~#
kihei/i-0e0312d6c2077de16 07:44
by SadServersContent-Type: text/plain; charset=utf-8 Connection: close cannot decode into nil map[int32]float64 given stream length: %vcannot decode ingiven stream length: %vcannot decode into nil map[string]string given stream lennil map[string]uint64 given stream length: %vcannot decode into nil map[uint64][: %vcannot decode into nil map[uint64]string given stream length: %vcannot decod64 given stream length: %vcannot decode into nil map[uint8]float64 given stream control frames in send queue, closing connectionhttp: request method or responsow bodyinternal error; sent too many window updates without decrements?json: invng to unmarshal %q into Numberbytes/string in stream can decode into array of byde into nil map[string]float64 given stream length: %vcannot decode into nil map@@@ 1641,157 60%
paris/i-082629608dd4c7a0b 08:36
by SadServers-L possibly with LWP and NLWP columns -m, m after processes -T possibly with SPID column For more details see ps(1). admin@i-06321e2dae7759c94:~$ sudo lsof -i -P -n | grep LISTEN We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin:
paris/i-06321e2dae7759c94 04:30
by SadServerscloud gdb ld.so.conf mtab rc2.d skel vim cloud-release groff ld.so.conf.d nanorc rc3.d ssh wgetrc cron.d group ldap netconfig rc4.d ssl xattr.conf cron.daily group- libaudit.conf network rc5.d subgid xdg cron.hourly grub.d lighttpd networks rc6.d subgid- xml cron.monthly gshadow locale.alias nsswitch.conf rcS.d subuid cron.weekly gshadow- locale.gen opt reportbug.conf subuid- admin@i-0ff8d9a1ece0ff594:/etc$ cd /var/w
paris/i-0ff8d9a1ece0ff594 02:14
by SadServersa.out agent webserver.py $ admin@i-072b43453825ba99a:~$ find / -perm -u=s -type f 2>/dev/null /usr/lib/openssh/ssh-keysign /usr/lib/dbus-1.0/dbus-daemon-launch-helper /usr/bin/chsh /usr/bin/umount /usr/bin/mount /usr/bin/passwd /usr/bin/newgrp /usr/bin/sudo /usr/bin/chfn /usr/bin/su /usr/bin/gpasswd admin@i-072b43453825ba99a:~$ ./a.out /usr/bin/su
paris/i-072b43453825ba99a 03:20
by SadServersflect.Typego.itab.*flag.durationValue,flag.Valuego.itab.*flag.float64Value,flag.alue,flag.Valuego.itab.*flag.int64Value,flag.Valuego.itab.*flag.stringValue,flagtValue,flag.Valuego.itab.*flag.uint64Value,flag.Valuego.itab.*strings.Builder,ioerrorString,errorgo.itab.*fmt.wrapError,errorgo.itab.*fmt.pp,fmt.Statego.itab.*o.syscall.Signal,os.Signalgo.itab.*io/fs.PathError,errorgo.itab.*os.SyscallError,rno,errorgo.itab.os.onlyWriter,io.Writergo.itab.*os.fileStat,io/fs.FileInfogo.it.Readergo.itab.*os.File,io.Closergo.itab.*os/exec.ExitError,errorgo.itab.*os/exeufio.Reader,io.Readergo.itab.os/user.UnknownUserIdError,errorgo.itab.*internal/ral/reflectlite.Typego.itab.time.fileSizeError,errorgo.itab.*internal/fmtsort.Sor.itab.runtime.errorString,error_cgo_init_cgo_thread_start_cgo_notify_runtime_iniyield_cgo_mmap_cgo_munmap_cgo_sigactionruntime.mainPCgo.itab.*internal/poll.Deadgo.itab.internal/poll.errNetClosing,errorruntime.defaultGOROOT.strruntime.buildVroot@i-0d4c9c9f8cfc1d5ed:/home/admin# ./kihei Error: This program cannot be run as the 'root' superuser. root@i-0d4c9c9f8cfc1d5ed:/home/admin#
kihei/i-0d4c9c9f8cfc1d5ed 00:55
by SadServersSaving to: ‘index.html’ index.html 100%[=====================================>] 12 2024-01-15 05:10:43 (1.55 MB/s) - ‘index.html’ saved [12/12] admin@i-0d60756cd4edc8643:~$ ls agent index.html webserver.py admin@i-0d60756cd4edc8643:~$ cat index.html Unauthorizedadmin@i-0d60756cd4edc8643:~$ telnet localhost 5000 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. GET /
paris/i-0d60756cd4edc8643 01:25
by SadServersroot@i-02092f036fead2d0b:~# mkfs-.ext4 /dev/sad_servers/sad_servers bash: mkfs-.ext4: command not found root@i-02092f036fead2d0b:~# mkfs.ext4 /dev/sad_servers/sad_servers mke2fs 1.46.2 (28-Feb-2021) Creating filesystem with 393216 4k blocks and 98304 inodes Filesystem UUID: d3e1d407-1b26-4059-8d11-8a5e5ce2ca4e Superblock backups stored on blocks: 32768, 98304, 163840, 229376, 294912 Allocating group tables: done Writing inode tables: done Creating journal (8192 blocks): done Writing superblocks and filesystem accounting information: done root@i-02092f036fead2d0b:~#
kihei/i-02092f036fead2d0b 04:37
by SadServerstmpfs 228M 24K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi root@i-0c46d1eed562eeeb0:/home/admin# Filesystem Size Used Avail Use% Mouudev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 24K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi root@i-0c46d1eed562eeeb0:/home/admin# eexxiitt exit exit admin@i-0c46d1eed562eeeb0:~$
kihei/i-0c46d1eed562eeeb0 06:38
by SadServersadmin@i-094407eb5173ca7f2:~$ telnet loaclhost 5000 telnet: could not resolve loaclhost/5000: Name or service not known admin@i-094407eb5173ca7f2:~$ telnet localhost 5000 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. GET / Welcome! Password is FDZPmh5AX3oiJtConnection closed by foreign host. admin@i-094407eb5173ca7f2:~$ curl --insecure --anyauth -u admin:passowrd -X GET Unauthorizedadmin@i-094407eb5173ca7f2:~$ curl --insecure --anyauth -u admin:pass admin@i-094407eb5173ca7f2:~$ admin@i-094407eb5173ca7f2:~$ admin@i-094407eb5173ca7f2:~$ curl --insecure --anyauth -u admin:FDZPmh5AX3oiJt -