kihei/i-0e446c270466448da
by SadServersMore by SadServers
drwxr-xr-x 2 admin root 4096 Sep 17 17:28 data -rw-r--r-- 1 root root 5368709120 Sep 17 17:28 datafile -rwxr-xr-x 1 admin root 2207109 Sep 17 17:28 kihei admin@i-0847c56ed353b4fb9:~$ sudo -l Matching Defaults entries for admin on i-0847c56ed353b4fb9: env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sn User admin may run the following commands on i-0847c56ed353b4fb9: (ALL : ALL) ALL (ALL) NOPASSWD: ALL (ALL) NOPASSWD: ALL (ALL) NOPASSWD: ALL (ALL) NOPASSWD: /sbin/shutdown admin@i-0847c56ed353b4fb9:~$ rm .bash
kihei/i-0847c56ed353b4fb9 00:43
by SadServersdrwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-0607715dd43c3c574:~$ sudo vi webserver.py We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: sudo: a password is required admin@i-0607715dd43c3c574:~$ curl localhost:5000 Unauthorizedadmin@i-0607715dd43c3c574:~$ curl localhost:5000
paris/i-0607715dd43c3c574 01:22
by SadServersadmin@i-03e7f50dfa07833fa:~$ python bash: python: command not found admin@i-03e7f50dfa07833fa:~$ python3 Python 3.9.2 (default, Feb 28 2021, 17:03:44) [GCC 10.2.1 20210110] on linux Type "help", "copyright", "credits" or "license" for more information. >>> import requests >>> requests.get("localho")
paris/i-03e7f50dfa07833fa 00:59
by SadServersadmin@i-0fa82171f11fb6464:~$ whereis mc mc: /usr/bin/mc admin@i-0fa82171f11fb6464:~$ cd /usr/local/ bin/ etc/ games/ include/ lib/ man/ sbin/ share/ src/ admin@i-0fa82171f11fb6464:~$ cd /usr/local/bin/ admin@i-0fa82171f11fb6464:/usr/local/bin$ ls flask admin@i-0fa82171f11fb6464:/usr/local/bin$ ls -ah . .. flask admin@i-0fa82171f11fb6464:/usr/local/bin$ ls -lah total 12K drwxr-xr-x 2 root root 4.0K Sep 24 23:20 . drwxr-xr-x 10 root root 4.0K Sep 20 15:53 .. -rwxr-xr-x 1 root root 208 Sep 24 23:20 flask admin@i-0fa82171f11fb6464:/usr/local/bin$ where ping