command-line-murders/i-0544b94fc4e746107
by SadServersMore by SadServers
cron.daily/ hosts.deny mtab rpc cron.hourly/ init.d/ nanorc rsyslog.cron.monthly/ initramfs-tools/ netconfig rsyslog.cron.weekly/ inputrc network/ runit/ crontab iproute2/ networks sadscenadbus-1/ issue nsswitch.conf screenrcdebconf.conf issue.net opt/ securitydebian_version kernel/ os-release selinux/default/ kernel-img.conf pam.conf servicesdeluser.conf ld.so.conf pam.d/ sgml/ dhcp/ ld.so.conf.d/ passwd shadow dpkg/ ldap/ passwd- shadow- admin@i-01cf0f52ecf5df661:~$ ls agent webserver.py admin@i-01cf0f52ecf5df661:~$
paris/i-01cf0f52ecf5df661 03:04
by SadServersadmin@i-08320041ff966cd0f:~$ curl localhost curl: (7) Failed to connect to localhost port 80: Connection refused admin@i-08320041ff966cd0f:~$ sudo -s We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: sudo: a password is required admin@i-08320041ff966cd0f:~$
taipei/i-08320041ff966cd0f 00:54
by SadServersdrwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config drwxr-xr-x 3 admin admin 4096 Dec 24 11:10 .local -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh -rw-r--r-- 1 admin admin 1024 Dec 24 11:10 .webserver.py.swp drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-042a55932de644732:~$ su - Password: su: Authentication failure admin@i-042a55932de644732:~$ su - Password: su: Authentication failure admin@i-042a55932de644732:~$ ^C admin@i-042a55932de644732:~$ curl
paris/i-042a55932de644732 02:06
by SadServerswrite(2, "0x47d", 50x47d) = 5 write(2, "\n", 1 ) = 1 exit_group(2) = ? +++ exited with 2 +++ admin@i-05088a4f1fc43f619:~$ strace ./kihei 2>&1 | grep datafile newfstatat(AT_FDCWD, "/home/admin/data/newdatafile", 0xc00008e9f8, 0) = -1 ENOENunlinkat(AT_FDCWD, "/home/admin/data/newdatafile", 0) = 0 admin@i-05088a4f1fc43f619:~$ cd data admin@i-05088a4f1fc43f619:~/data$ ls -al total 8 drwxr-xr-x 2 admin root 4096 Dec 5 09:17 . drwxr-xr-x 7 admin admin 4096 Dec 5 09:12 .. admin@i-05088a4f1fc43f619:~/data$ touch newdatafile admin@i-05088a4f1fc43f619:~/data$ strace .../kihei 2>&1 | grep datafile