command-line-murders/i-0e4d69329e6248bf0
by SadServersMore by SadServers
drwxr-xr-x 7 admin admin 4096 Mar 4 19:57 . drwxr-xr-x 3 root root 4096 Sep 17 16:44 .. drwx------ 3 admin admin 4096 Sep 17 17:15 .ansible -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Mar 4 19:57 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4096 Sep 17 17:28 agent drwxr-xr-x 2 admin root 4096 Sep 17 17:28 data -rw-r--r-- 1 root root 5368709120 Sep 17 17:28 datafile -rwxr-xr-x 1 admin root 2207109 Sep 17 17:28 kihei admin@i-0b5d09343092a9fdd:~$ mv datafile temp admin@i-0b5d09343092a9fdd:~$ mv temp datafile admin@i-0b5d09343092a9fdd:~$
kihei/i-0b5d09343092a9fdd 00:26
by SadServerslsof 835 admin mem REG 259,1 61712-linux-gnu/libpcre2-8.so.0.10.1 lsof 835 admin mem REG 259,1 190153-linux-gnu/libc-2.31.so lsof 835 admin mem REG 259,1 16612-linux-gnu/libselinux.so.1 lsof 835 admin mem REG 259,1 17792-linux-gnu/ld-2.31.so lsof 835 admin 4r FIFO 0,11 0tlsof 835 admin 7w FIFO 0,11 0tadmin@i-00d15eebefe1eaf63:~$ lsof -nP -iTCP -sTCP:LISTEN COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME gotty 563 admin 6u IPv6 1900 0t0 TCP *:8080 (LISTEN) sadagent 564 admin 7u IPv6 1875 0t0 TCP *:6767 (LISTEN) admin@i-00d15eebefe1eaf63:~$ lsof -nP -i
paris/i-00d15eebefe1eaf63 01:35
by SadServersagent data kihei admin@i-05ff9733d7c5372c3:~$ ./kihei Done. admin@i-05ff9733d7c5372c3:~$ ls agent data kihei admin@i-05ff9733d7c5372c3:~$ admin@i-05ff9733d7c5372c3:~$ admin@i-05ff9733d7c5372c3:~$ ls data newdatafile admin@i-05ff9733d7c5372c3:~$ ls -l data total 1464848 -rw-r--r-- 1 admin admin 1500000000 Oct 27 10:20 newdatafile admin@i-05ff9733d7c5372c3:~$ file data/da data/da: cannot open `data/da' (No such file or directory) admin@i-05ff9733d7c5372c3:~$ file data/da