command-line-murders/i-0fbbfd9b9ea1f4a7a
by SadServersMore by SadServers
-rw-r--r-- 1 root root 5.0G Sep 17 17:28 datafile -rwxr-xr-x 1 admin root 2.2M Sep 17 17:28 kihei admin@i-0a6e70fd4f94f9e89:~$ du -h 11M ./agent 4.0K ./.ansible/tmp 8.0K ./.ansible 4.0K ./data 8.0K ./.config/asciinema 12K ./.config 8.0K ./.ssh 5.1G . admin@i-0a6e70fd4f94f9e89:~$ chmod 777 datafile chmod: changing permissions of 'datafile': Operation not permitted admin@i-0a6e70fd4f94f9e89:~$ sudo chmod 777 datafile (reverse-i-search)`/': lsof /home/admin/datafile
kihei/i-0a6e70fd4f94f9e89 04:26
by SadServers566 admin 5 -15 1007204 10668 7116 S 0.0 2.3 0:00.09 sadagent 569 root 20 0 5636 2656 2444 S 0.0 0.6 0:00.00 cron 574 message+ 20 0 7864 3700 3352 S 0.0 0.8 0:00.02 dbus-daem 581 root 20 0 107132 28384 9372 S 0.0 6.1 0:00.34 python3 582 root 20 0 220796 4336 3368 S 0.0 0.9 0:00.02 rsyslogd 587 root 20 0 13492 6656 5872 S 0.0 1.4 0:00.09 systemd-l 590 root 20 0 13352 7152 6256 S 0.0 1.5 0:00.02 sshd 591 root 20 0 2872 1688 1572 S 0.0 0.4 0:00.12 agetty
paris/i-0d51fea5d6da4c056 02:05
by SadServersDec 29 18:18:30 i-00b7b142f6d6bf77b ec2: ####################################### ^[[A^[[B ^Z [1]+ Stopped tail -f /var/log/*.log admin@i-00b7b142f6d6bf77b:/proc/574$ bg [1]+ tail -f /var/log/*.log & admin@i-00b7b142f6d6bf77b:/proc/574$ admin@i-00b7b142f6d6bf77b:/proc/574$ curl localhost:5000 Unauthorized ==> /var/log/daemon.log <== Dec 29 18:25:47 i-00b7b142f6d6bf77b python3[574]: 127.0.0.1 - - [29/Dec/2023 18:admin@i-00b7b142f6d6bf77b:/proc/574$
paris/i-00b7b142f6d6bf77b 03:52
by SadServers[pid 871] <... futex resumed>) = ? [pid 869] <... futex resumed>) = ? [pid 871] +++ exited with 2 +++ [pid 870] <... futex resumed>) = ? [pid 869] +++ exited with 2 +++ [pid 868] <... nanosleep resumed> <unfinished ...>) = ? [pid 870] +++ exited with 2 +++ [pid 868] +++ exited with 2 +++ +++ exited with 2 +++ admin@i-0b023b3f4c45754c6:~$ ^C admin@i-0b023b3f4c45754c6:~$ ls agent data datafile kihei admin@i-0b023b3f4c45754c6:~$ ll bash: ll: command not found admin@i-0b023b3f4c45754c6:~$