paris/i-0f9d17817910b720d
by SadServersMore by SadServers
admin@i-0ef39eb9f44fc6704:~/agent$ ls check.sh sadagent sadagent.txt admin@i-0ef39eb9f44fc6704:~/agent$ cat check.sh #!/bin/bash expected_checksum="d8bee9d7f830d5fb59b89e1e120cce8e" actual_checksum=$(md5sum /home/admin/mysolution | awk '{print $1}') if [[ "$actual_checksum" == "$expected_checksum" ]]; then echo -n "OK" else echo -n "NO" fiadmin@i-0ef39eb9f44fc6704:~/agent$ cat sa
paris/i-0ef39eb9f44fc6704 01:37
by SadServers-upgrades/unattended-upgrade-shutdown -- root 685 0.0 0.0 0 0 ? I 04:20 0:00 [kworker/1:4-admin 687 0.0 0.9 6740 4512 pts/0 S<s+ 04:20 0:00 bash -l admin 691 0.5 4.1 98188 19348 pts/0 S<l+ 04:20 0:00 /usr/bin/pythc -t paris/i-0cea73f15d68f034f -q -i 2 / admin 694 0.0 3.0 24456 14436 pts/0 S<+ 04:20 0:00 /usr/bin/pythc -t paris/i-0cea73f15d68f034f -q -i 2 / admin 695 0.0 0.1 2480 572 pts/1 S<s 04:20 0:00 sh -c /bin/baadmin 696 0.0 1.0 6952 4724 pts/1 S< 04:20 0:00 /bin/bash admin 709 0.0 0.6 8648 3240 pts/1 R<+ 04:20 0:00 ps aux admin@i-0cea73f15d68f034f:~$ ps aux|grep -i web root 574 0.5 6.0 107132 28320 ? Ss 04:20 0:00 /usr/bin/pyth.py admin 712 0.0 0.1 5132 640 pts/1 S<+ 04:20 0:00 grep -i web admin@i-0cea73f15d68f034f:~$
paris/i-0cea73f15d68f034f 00:54
by SadServerschmod: changing permissions of './webserver.py': Operation not permitted admin@i-0fe5db61e982e9777:~$ chmod -R 755 . chmod: changing permissions of './webserver.py': Operation not permitted admin@i-0fe5db61e982e9777:~$ grep -ri 'password' | /etc/apache2/* bash: /etc/apache2/conf-available: Is a directory grep: agent/sadagent: binary file matches grep: webserver.py: Permission denied admin@i-0fe5db61e982e9777:~$ grep -ri 'password' | /etc/apache2/conf-available bash: /etc/apache2/conf-available: Is a directory grep: agent/sadagent: binary file matches grep: webserver.py: Permission denied grep: write error: Broken pipe admin@i-0fe5db61e982e9777:~$ admin@i-0fe5db61e982e9777:~$ grep -ri 'password' /etc/apache2/conf-available admin@i-0fe5db61e982e9777:~$