SadServers Joined on September 10, 2023
1675 public recordings by SadServers
rtt min/avg/max/mdev = 0.023/0.031/0.034/0.004 ms admin@i-06ccaf22127d79ccf:~$ curl localhost curl: (7) Failed to connect to localhost port 80: Connection refused admin@i-06ccaf22127d79ccf:~$ dig localhost bash: dig: command not found admin@i-06ccaf22127d79ccf:~$ apt install dig E: Could not open lock file /var/lib/dpkg/lock-frontend - open (13: Permission dE: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), are yadmin@i-06ccaf22127d79ccf:~$ netcat localhost netcat: missing port number admin@i-06ccaf22127d79ccf:~$ netcat localhost:5000 netcat: missing port number admin@i-06ccaf22127d79ccf:~$ ls agent webserver.py admin@i-06ccaf22127d79ccf:~$
paris/i-06ccaf22127d79ccf 01:33
by SadServersadmin@i-0f0fc0419b1540f81:~$ sudo pvcreate /dev/nvme1 nvme1 nvme1n1 admin@i-0f0fc0419b1540f81:~$ sudo pvcreate /dev/nvme1 nvme1 nvme1n1 admin@i-0f0fc0419b1540f81:~$ sudo pvcreate /dev/nvme1n1 /dev/nvme2 nvme2 nvme2n1 admin@i-0f0fc0419b1540f81:~$ sudo pvcreate /dev/nvme1n1 /dev/nvme2 nvme2 nvme2n1 admin@i-0f0fc0419b1540f81:~$ sudo pvcreate /dev/nvme1n1 /dev/nvme2n1 Physical volume "/dev/nvme1n1" successfully created. Physical volume "/dev/nvme2n1" successfully created. admin@i-0f0fc0419b1540f81:~$ vgcreate vg /dev/nvme1n1 /dev/nvme2n1 WARNING: Running as a non-root user. Functionality may be unavailable. /run/lock/lvm/P_global:aux: open failed: Permission denied admin@i-0f0fc0419b1540f81:~$
kihei/i-0f0fc0419b1540f81 02:07
by SadServers> GET / HTTP/1.1 > Host: localhost:5000 > User-Agent: curl/7.74.0 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < Server: Werkzeug/2.3.7 Python/3.9.2 < Date: Tue, 26 Nov 2024 07:04:49 GMT < Content-Type: text/html; charset=utf-8 < Content-Length: 12 < Connection: close < * Closing connection 0 Unauthorizedadmin@i-01e2944ab36dfdbe2:~$
paris/i-01e2944ab36dfdbe2 01:05
by SadServersfind: ‘/var/cache/private’: Permission denied find: ‘/var/cache/ldconfig’: Permission denied find: ‘/var/cache/apt/archives/partial’: Permission denied find: ‘/var/cache/apparmor/c08a2770.0’: Permission denied find: ‘/var/spool/rsyslog’: Permission denied find: ‘/var/spool/cron/crontabs’: Permission denied find: ‘/var/tmp/systemd-private-9f2badbbb91d448495163a36e0cc284b-chrony.service-find: ‘/var/tmp/systemd-private-9f2badbbb91d448495163a36e0cc284b-systemd-logind.enied find: ‘/var/log/private’: Permission denied find: ‘/var/log/chrony’: Permission denied find: ‘/var/lib/private’: Permission denied find: ‘/var/lib/apt/lists/partial’: Permission denied find: ‘/var/lib/chrony’: Permission denied admin@i-0f010295ecb30725e:~$ find / -type f | grep webse
paris/i-0f010295ecb30725e 02:33
by SadServerstotal 5245084 drwxr-xr-x 7 admin admin 4096 Nov 24 05:54 . drwxr-xr-x 3 root root 4096 Sep 17 2023 .. drwx------ 3 admin admin 4096 Sep 17 2023 .ansible -rw------- 1 admin admin 65 Nov 24 05:54 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Nov 24 05:49 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 2023 .ssh drwxr-xr-x 2 admin root 4096 Sep 17 2023 agent drwxr-xr-x 2 admin root 4096 Nov 24 05:56 data -rw-r--r-- 1 root root 5368709120 Sep 17 2023 datafile -rwxr-xr-x 1 admin root 2207109 Sep 17 2023 kihei admin@i-0196ce4cef0e287bd:~$ cat k
kihei/i-0196ce4cef0e287bd 01:17
by SadServers83 -q -i 2 /var/log/cast/i-0df1765d3 admin 681 0.0 3.0 24456 14444 pts/0 R<+ 02:55 0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d3 admin 682 0.0 0.1 2480 572 pts/1 S<s 02:55 0:00 sh -c /bin/baadmin 683 0.0 0.9 6820 4536 pts/1 S< 02:55 0:00 /bin/bash admin 716 0.0 0.6 8648 3136 pts/1 R<+ 02:56 0:00 ps -aux admin@i-0df1765d381c3a083:~$ ps -aux | grep kihei admin 678 0.4 4.1 98188 19260 pts/0 S<l+ 02:55 0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d381c3a083 admin 681 0.0 3.0 24456 14444 pts/0 S<+ 02:55 0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d381c3a083 admin 718 0.0 0.1 5264 704 pts/1 S<+ 02:56 0:00 grep kihei admin@i-0df1765d381c3a083:~$ ls agent data datafile kihei admin@i-0df1765d381c3a083:~$
kihei/i-0df1765d381c3a083 00:56
by SadServers.itab.*reflect.rtype,reflect.Typego.itab.*flag.durationValue,flag.Valuego.itab.*lue,flag.Valuego.itab.*flag.intValue,flag.Valuego.itab.*flag.int64Value,flag.Valg.stringValue,flag.Valuego.itab.*flag.uintValue,flag.Valuego.itab.*flag.uint64Vago.itab.*strings.Builder,io.Writergo.itab.*errors.errorString,errorgo.itab.*fmt.rgo.itab.*fmt.pp,fmt.Statego.itab.*os.File,io.Readergo.itab.syscall.Signal,os.Sio/fs.PathError,errorgo.itab.*os.SyscallError,errorgo.itab.syscall.Errno,errorgo.iter,io.Writergo.itab.*os.fileStat,io/fs.FileInfogo.itab.*io.LimitedReader,io.Res.File,io.Closergo.itab.*os/exec.ExitError,errorgo.itab.*os/exec.Error,errorgo.ider,io.Readergo.itab.os/user.UnknownUserIdError,errorgo.itab.*internal/reflectlinal/reflectlite.Typego.itab.time.fileSizeError,errorgo.itab.*internal/fmtsort.Sonterfacego.itab.runtime.errorString,error_cgo_init_cgo_thread_start_cgo_notify_rne_cgo_callers_cgo_yield_cgo_mmap_cgo_munmap_cgo_sigactionruntime.mainPCgo.itab..DeadlineExceededError,errorgo.itab.internal/poll.errNetClosing,errorruntime.defruntime.buildVersion.strruntime.modinfo.strtype.*runtime.textsectionmaproot@i-0b3:/home/admin#
kihei/i-0b0ceabb4b4dd0e83 00:40
by SadServersCGroup: /system.slice/flaskapp.service └─574 /usr/bin/python3 /home/admin/webserver.py Nov 22 20:13:43 i-0cda4f62b9b5220f9 systemd[1]: Started Flask Application. Nov 22 20:13:44 i-0cda4f62b9b5220f9 python3[574]: * Serving Flask app 'webserveNov 22 20:13:44 i-0cda4f62b9b5220f9 python3[574]: * Debug mode: off Nov 22 20:13:44 i-0cda4f62b9b5220f9 python3[574]: WARNING: This is a development a production deployment. Use a production WSGI server instead. Nov 22 20:13:44 i-0cda4f62b9b5220f9 python3[574]: * Running on http://127.0.0.1Nov 22 20:13:44 i-0cda4f62b9b5220f9 python3[574]: Press CTRL+C to quit Nov 22 20:15:37 i-0cda4f62b9b5220f9 python3[574]: 127.0.0.1 - - [22/Nov/2024 20:00 - admin@i-0cda4f62b9b5220f9:~$ ps -aux | grep flask admin 959 0.0 0.1 5264 640 pts/1 S<+ 20:20 0:00 grep flask admin@i-0cda4f62b9b5220f9:~$ ps -aux | grep flask
paris/i-0cda4f62b9b5220f9 04:19
by SadServersroot@i-00cd16d1d6b62ecaf:~# vgcreate data /dev/nvme1n1 /dev/nvme2n1 Volume group "data" successfully created root@i-00cd16d1d6b62ecaf:~# vgs VG #PV #LV #SN Attr VSize VFree data 2 0 0 wz--n- 1.99g 1.99g root@i-00cd16d1d6b62ecaf:~# df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 384K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 24K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi tmpfs 46M 0 46M 0% /run/user/0 root@i-00cd16d1d6b62ecaf:~# ko
kihei/i-00cd16d1d6b62ecaf 02:32
by SadServers-rw-r--r-- 1 root root 5368709120 Sep 17 2023 datafile -rwxr-xr-x 1 admin root 2207109 Sep 17 2023 kihei admin@i-0c7a28e3a2fe0be8b:~$ ls -la data total 8 drwxr-xr-x 2 admin root 4096 Nov 22 13:46 . drwxr-xr-x 7 admin admin 4096 Nov 22 13:45 .. admin@i-0c7a28e3a2fe0be8b:~$ df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-0c7a28e3a2fe0be8b:~$
kihei/i-0c7a28e3a2fe0be8b 02:41
by SadServersgoroutine 1 [running]: main.main() ./main.go:64 +0x47d admin@i-0e446c270466448da:~$ ls agent data datafile kihei admin@i-0e446c270466448da:~$ head datafile | od 0000000 000000 000000 000000 000000 000000 000000 000000 000000 * ^C admin@i-0e446c270466448da:~$ head datafile | less admin@i-0e446c270466448da:~$ od datafile | less admin@i-0e446c270466448da:~$ head -c 1024 datafile | less
kihei/i-0e446c270466448da 04:26
by SadServersDisk identifier: 0xb43838c3 Device Boot Start End Sectors Size Id Type /dev/nvme2n1p1 2048 2097151 2095104 1023M 8e Linux LVM admin@i-0e9eb0be2a0842a52:~$ pvcreate /dev/nvme1n1p1 WARNING: Running as a non-root user. Functionality may be unavailable. /run/lock/lvm/P_global:aux: open failed: Permission denied admin@i-0e9eb0be2a0842a52:~$ sudo pvcreate /dev/nvme1n1p1 /dev/nvme2n1p1 Physical volume "/dev/nvme1n1p1" successfully created. Physical volume "/dev/nvme2n1p1" successfully created. admin@i-0e9eb0be2a0842a52:~$ sudo pvs PV VG Fmt Attr PSize PFree /dev/sdb1 lvm2 --- 1023.00m 1023.00m /dev/sdc1 lvm2 --- 1023.00m 1023.00m admin@i-0e9eb0be2a0842a52:~$ vgcreate