SadServers Joined on September 10, 2023
1958 public recordings by SadServers
unix 3 [ ] STREAM CONNECTED 11453 unix 3 [ ] STREAM CONNECTED 10664 unix 2 [ ] DGRAM 11425 unix 3 [ ] STREAM CONNECTED 10681 unix 3 [ ] SEQPACKET CONNECTED 11434 unix 3 [ ] STREAM CONNECTED 11349 /run/systemd/journal/unix 3 [ ] STREAM CONNECTED 11478 /run/systemd/journal/unix 2 [ ] DGRAM 10394 admin@i-0b15957f6074fd500:~$ netstat -tuln | grep LISTEN tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN tcp6 0 0 :::22 :::* LISTEN tcp6 0 0 :::6767 :::* LISTEN tcp6 0 0 :::8080 :::* LISTEN admin@i-0b15957f6074fd500:~$ curl 127.0.0.1:
paris/i-0b15957f6074fd500 01:37
by SadServerspop3 POP3 protocol options post HTTP Post specific options proxy All options related to proxies scp SCP protocol options sftp SFTP protocol options smtp SMTP protocol options ssh SSH protocol options telnet TELNET protocol options tftp TFTP protocol options tls All TLS/SSL related options upload All options for uploads verbose Options related to any kind of command line output of curl admin@i-0e66fd296bbb878b4:~$ curl --header 'Authorization: Bearer token' localhoUnauthorizedadmin@i-0e66fd296bbb878b4:~$ curl --header 'Authorization: root' locUnauthorizedadmin@i-0e66fd296bbb878b4:~$ curl --header 'Authorization: Broot' lo
paris/i-0e66fd296bbb878b4 02:26
by SadServersudev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-051941ba15b672aa1:~$ du -shx 5.1G . admin@i-051941ba15b672aa1:~$ ls -l total 5245048 drwxr-xr-x 2 admin root 4096 Sep 17 2023 agent drwxr-xr-x 2 admin root 4096 Oct 22 10:34 data -rw-r--r-- 1 root root 5368709120 Sep 17 2023 datafile -rwxr-xr-x 1 admin root 2207109 Sep 17 2023 kihei admin@i-051941ba15b672aa1:~$
kihei/i-051941ba15b672aa1 00:53
by SadServers[Unit] Description=Flask Application After=network.target [Service] ExecStart=/usr/bin/python3 /home/admin/webserver.py [Install] WantedBy=multi-user.target admin@i-031b3c138eab9863b:~$ ls -la/etc/systemd/system/flaskapp.service ls: invalid option -- '/' Try 'ls --help' for more information. admin@i-031b3c138eab9863b:~$ ls -la /etc/systemd/system/flaskapp.service -rw-r--r-- 1 root root 159 Sep 24 2023 /etc/systemd/system/flaskapp.service admin@i-031b3c138eab9863b:~$
paris/i-031b3c138eab9863b 03:41
by SadServersudev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-0c435ed64c4447867:~$ lsblk -l NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT nvme0n1 259:0 0 8G 0 disk nvme2n1 259:1 0 1G 0 disk nvme1n1 259:2 0 1G 0 disk nvme0n1p1 259:3 0 7.9G 0 part / nvme0n1p14 259:4 0 3M 0 part nvme0n1p15 259:5 0 124M 0 part /boot/efi admin@i-0c435ed64c4447867:~$ sudo pvcreate /de
kihei/i-0c435ed64c4447867 05:29
by SadServers-i, --include Include protocol response headers in the output -o, --output <file> Write to file instead of stdout -O, --remote-name Write output to a file named as the remote file -s, --silent Silent mode -T, --upload-file <file> Transfer local FILE to destination -u, --user <user:password> Server user and password -A, --user-agent <name> Send User-Agent <name> to server -v, --verbose Make the operation more talkative -V, --version Show version number and quit This is not the full help, this menu is stripped into categories. Use "--help category" to get an overview of all categories. For all options use the manual or "--help all". admin@i-0ebadfe95bbd0eb1b:~$ curl -A 'whatever' localhost:5000 Welcome! Password is FDZPmh5AX3oiJtadmin@i-0ebadfe95bbd0eb1b:~$
paris/i-0ebadfe95bbd0eb1b 01:49
by SadServersadmin@i-006f0e9a73bb6b96a:~/.ansible$ cd tmp/ admin@i-006f0e9a73bb6b96a:~/.ansible/tmp$ ls admin@i-006f0e9a73bb6b96a:~/.ansible/tmp$ ls -lah total 8.0K drwx------ 2 admin admin 4.0K Sep 24 2023 . drwx------ 3 admin admin 4.0K Sep 20 2023 .. admin@i-006f0e9a73bb6b96a:~/.ansible/tmp$ chage -l admin Last password change : Sep 17, 2023 Password expires : never Password inactive : never Account expires : never Minimum number of days between password change : 0 Maximum number of days between password change : 99999 Number of days of warning before password expires : 7 admin@i-006f0e9a73bb6b96a:~/.ansible/tmp$ cd /etc
paris/i-006f0e9a73bb6b96a 03:24
by SadServerscheck.sh sadagent sadagent.txt admin@i-095ed92c0df54793b:~$ cat agent/ check.sh sadagent sadagent.txt admin@i-095ed92c0df54793b:~$ cat agent/sadagent.txt | tr -cd "[:print:]" admin@i-095ed92c0df54793b:~$ admin@i-095ed92c0df54793b:~$ admin@i-095ed92c0df54793b:~$ admin@i-095ed92c0df54793b:~$ apt install strings E: Could not open lock file /var/lib/dpkg/lock-frontend - open (13: Permission dE: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), are yadmin@i-095ed92c0df54793b:~$ telnet localhost 5000 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'.
paris/i-095ed92c0df54793b 01:27
by SadServersls: cannot access '/pid/579': No such file or directory admin@i-02fded2ca795f43ce:~$ ls /proc/579 ls: cannot read symbolic link '/proc/579/cwd': Permission denied ls: cannot read symbolic link '/proc/579/root': Permission denied ls: cannot read symbolic link '/proc/579/exe': Permission denied arch_status cgroup coredump_filter environ gid_map map_files mountattr clear_refs cpu_resctrl_groups exe io maps mountautogroup cmdline cpuset fd limits mem net auxv comm cwd fdinfo loginuid mountinfo ns admin@i-02fded2ca795f43ce:~$ ls /proc/579^C admin@i-02fded2ca795f43ce:~$ ^C admin@i-02fded2ca795f43ce:~$ ^C admin@i-02fded2ca795f43ce:~$ /proc/579/root curl localhost:5000 bash: /proc/579/root: Permission denied admin@i-02fded2ca795f43ce:~$
paris/i-02fded2ca795f43ce 03:41
by SadServerstmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-0189e4926341da6e5:~$ ls -lrt /home/admin/kihei -rwxr-xr-x 1 admin root 2207109 Sep 17 2023 /home/admin/kihei admin@i-0189e4926341da6e5:~$ /home/admin/kihei panic: exit status 1 goroutine 1 [running]: main.main() ./main.go:64 +0x47d admin@i-0189e4926341da6e5:~$ cd /home/admin admin@i-0189e4926341da6e5:~$ ls agent data datafile kihei admin@i-0189e4926341da6e5:~$ strace
kihei/i-0189e4926341da6e5 01:15
by SadServersroot@i-0347f0aa3131a44e8:/home/admin# mount /dev/vg/lv /home/admin/data root@i-0347f0aa3131a44e8:/home/admin# mount /dev/vg/lv /home/admin/data mount: /home/admin/data: /dev/mapper/vg-lv already mounted on /home/admin/data. root@i-0347f0aa3131a44e8:/home/admin# ~/kihei bash: /root/kihei: No such file or directory root@i-0347f0aa3131a44e8:/home/admin# exit exit admin@i-0347f0aa3131a44e8:~$ ~/kihei panic: remove /home/admin/data/newdatafile: no such file or directory goroutine 1 [running]: main.main() ./main.go:62 +0x465 admin@i-0347f0aa3131a44e8:~$