SadServers Joined on September 10, 2023

1955 public recordings by SadServers

admin@i-0c86aaede796dd0fb:~$ ды                                                 bash: ды: command not found                                                     admin@i-0c86aaede796dd0fb:~$ ls                                                 agent  webserver.py                                                             admin@i-0c86aaede796dd0fb:~$ ls -l                                              total 8                                                                         drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent                                 -rwxrwx--- 1 root  root  360 Sep 24 23:20 webserver.py                          admin@i-0c86aaede796dd0fb:~$ curl localhost:5000                                Unauthorizedadmin@i-0c86aaede796dd0fb:~$                                        admin@i-0c86aaede796dd0fb:~$ curl localhost:5000

paris/i-0c86aaede796dd0fb 00:38

by SadServers 
u_str ESTAB 0      0                                 * 11417                    u_str ESTAB 0      0       /run/systemd/journal/stdout 10756                    u_str ESTAB 0      0       /run/systemd/journal/stdout 10757                    u_str ESTAB 0      0                                 * 10588                    u_str ESTAB 0      0                                 * 8888                     u_str ESTAB 0      0       /run/systemd/journal/stdout 8911                     u_str ESTAB 0      0                                 * 10605                    u_str ESTAB 0      0                                 * 10597                    u_str ESTAB 0      0                                 * 10587                    u_str ESTAB 0      0                                 * 10571                    u_str ESTAB 0      0       /run/systemd/journal/stdout 10747                    u_str ESTAB 0      0       /run/systemd/journal/stdout 10770                    u_str ESTAB 0      0       /run/systemd/journal/stdout 10771                    tcp   ESTAB 0      0            [::ffff:172.31.46.140]:http-alt   [::ffff:172.31admin@i-05640abf76c220ed1:~$ netstat -tulp

paris/i-05640abf76c220ed1 00:50

by SadServers 
  <link rel="icon" href="icon.svg" type="image/svg+xml">                          <link rel="stylesheet" href="./css/index.css" />                                <link rel="stylesheet" href="./css/xterm.css" />                                <link rel="stylesheet" href="./css/xterm_customize.css" />                      <meta name="viewport" content="width=device-width, initial-scale=1">          </head>                                                                                                                                                         <body>                                                                            <div id="terminal"></div>                                                       <script src="./auth_token.js"></script>                                         <script src="./config.js"></script>                                             <script src="./js/gotty.js"></script>                                         </body>                                                                                                                                                         </html>admin@i-0994a038ccb66d5c6:~$

paris/i-0994a038ccb66d5c6 02:58

by SadServers 
admin@i-08a1941667a15b5b6:/home$ cd /var/log/                                   admin@i-08a1941667a15b5b6:/var/log$ ls                                          alternatives.log    auth.log.2.gz  cloud-init-output.log  debug       faillog   te      unattended-upgrades                                                     alternatives.log.1  btmp           cloud-init.log         debug.1     journal           user.log                                                                apt                 btmp.1         daemon.log             debug.2.gz  kern.log  g       user.log.1                                                              auth.log            cast           daemon.log.1           dpkg.log    kern.log.1g.1     user.log.2.gz                                                           auth.log.1          chrony         daemon.log.2.gz        dpkg.log.1  kern.log.2g.2.gz  wtmp                                                                    admin@i-08a1941667a15b5b6:/var/log$ less messages                               admin@i-08a1941667a15b5b6:/var/log$ less syslog                                 admin@i-08a1941667a15b5b6:/var/log$ c

paris/i-08a1941667a15b5b6 03:08

by SadServers 
ss           ssh          ssh-add      ssh-agent    ssh-argv0    ssh-copy-id  ssadmin@i-0aa042ade078e1d14:~$ ss -tulnp | grep :5000                             tcp   LISTEN 0      128                          127.0.0.1:5000      0.0.0.0:*  admin@i-0aa042ade078e1d14:~$ ps ax | grep 128                                       845 pts/1    R<+    0:00 grep 128                                           admin@i-0aa042ade078e1d14:~$                                                    admin@i-0aa042ade078e1d14:~$                                                    admin@i-0aa042ade078e1d14:~$                                                    admin@i-0aa042ade078e1d14:~$ ls /etc/                                           Display all 153 possibilities? (y or n)                                         admin@i-0aa042ade078e1d14:~$ ls /etc/n                                          nanorc         netconfig      network/       networks       nsswitch.conf       admin@i-0aa042ade078e1d14:~$ ls /etc/n                                          nanorc         netconfig      network/       networks       nsswitch.conf       admin@i-0aa042ade078e1d14:~$ ls /etc/

paris/i-0aa042ade078e1d14 03:02

by SadServers 
admin@i-0ba063de908116e06:~$ curl -A 'agent

paris/i-0ba063de908116e06 00:11

by SadServers 
admin@i-0eb3b6c9b06538fd3:~$ nc localhost 5000                                  GET /

paris/i-0eb3b6c9b06538fd3 00:12

by SadServers 
admin@i-09ab8a8b9d764d718:~$ ls -la                                             total 44                                                                        drwxr-xr-x 6 admin admin 4096 Sep 24 23:20 .                                    drwxr-xr-x 3 root  root  4096 Sep 17 16:44 ..                                   drwx------ 3 admin admin 4096 Sep 20 15:52 .ansible                             -rw------- 1 admin admin  485 Nov 13 22:00 .bash_history                        -rw-r--r-- 1 admin admin  220 Aug  4  2021 .bash_logout                         -rw-r--r-- 1 admin admin 3526 Aug  4  2021 .bashrc                              drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config                              -rw-r--r-- 1 admin admin  807 Aug  4  2021 .profile                             drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh                                 drwxr-xr-x 2 admin root  4096 Sep 24 23:20 agent                                -rwxrwx--- 1 root  root   360 Sep 24 23:20 webserver.py                         admin@i-09ab8a8b9d764d718:~$ less .bash_history                                 admin@i-09ab8a8b9d764d718:~$

paris/i-09ab8a8b9d764d718 02:46

by SadServers 
 will not be shown, you would have to be root to see it all.)                   tcp        0      0 127.0.0.1:5000          0.0.0.0:*               LISTEN      admin@i-0c165f3a208accd57:~$ sudo netstat -tulnp | grep 5000                                                                                                    We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                      Sorry, try again.                                                               [sudo] password for admin:

paris/i-0c165f3a208accd57 02:26

by SadServers 
ca-certificates.conf    group            locale.gen       passwd          screenchrony                  group-           localtime        passwd-         securicloud                   grub.d           logcheck         perl            selinucloud-release           gshadow          login.defs       pm              serviccron.d                  gshadow-         logrotate.conf   ppp             sgml  cron.daily              gss              logrotate.d      profile         shadowcron.hourly             host.conf        machine-id       profile.d       shadowcron.monthly            hostname         magic            protocols       shellscron.weekly             hosts            magic.mime       python3         skel  crontab                 hosts.allow      manpath.config   python3.9       ssh   dbus-1                  hosts.deny       mime.types       rc0.d           ssl   debconf.conf            init.d           mke2fs.conf      rc1.d           subgiddebian_version          initramfs-tools  modprobe.d       rc2.d           subgidadmin@i-0041b2d33536d0a4a:~$ curl --user-agent "whatever" localhost:5000        Welcome! Password is FDZPmh5Aecho "somepassword" > ~/mysolution echo "somepasswo

paris/i-0041b2d33536d0a4a 01:54

by SadServers 
/dev/nvme0n1p1   7.7G  6.1G  1.2G  84% /                                        tmpfs            228M   12K  228M   1% /dev/shm                                 tmpfs            5.0M     0  5.0M   0% /run/lock                                /dev/nvme0n1p15  124M  5.9M  118M   5% /boot/efi                                admin@i-0a86b1018e815bbc6:~$ ls -l                                              total 5245048                                                                   drwxr-xr-x 2 admin root       4096 Sep 17 17:28 agent                           drwxr-xr-x 2 admin root       4096 Nov 13 19:35 data                            -rw-r--r-- 1 root  root 5368709120 Sep 17 17:28 datafile                        -rwxr-xr-x 1 admin root    2207109 Sep 17 17:28 kihei                           admin@i-0a86b1018e815bbc6:~$ cd data                                            admin@i-0a86b1018e815bbc6:~/data$ ls -l                                         total 0                                                                         admin@i-0a86b1018e815bbc6:~/data$ cd ..                                         admin@i-0a86b1018e815bbc6:~$ du -sh da

kihei/i-0a86b1018e815bbc6 02:22

by SadServers 
    222 ?        00:00:00 systemd-udevd                                             407 ?        00:00:00 dhclient                                                  483 ?        00:00:00 dhclient                                                  578 ?        00:00:00 gotty                                                     579 ?        00:00:00 sadagent                                                  592 ?        00:00:00 cron                                                      593 ?        00:00:00 dbus-daemon                                               595 ?        00:00:00 rsyslogd                                                  599 ?        00:00:00 chronyd                                                   600 ?        00:00:00 systemd-logind                                            613 ?        00:00:00 sshd                                                      621 tty1     00:00:00 agetty                                                    622 ttyS0    00:00:00 agetty                                                    623 ?        00:00:00 unattended-upgr                                       admin@i-03188ede5817cd0b3:~$ ps --ppid 1

kihei/i-03188ede5817cd0b3 04:28

by SadServers 
                                                                                Allocating group tables: done                                                   Writing inode tables: done                                                      Creating journal (8192 blocks): done                                            Writing superblocks and filesystem accounting information: done                                                                                                 admin@i-0ee543fd5d502e892:~$ df -h                                              Filesystem       Size  Used Avail Use% Mounted on                               udev             217M     0  217M   0% /dev                                     tmpfs             46M  372K   46M   1% /run                                     /dev/nvme0n1p1   7.7G  6.1G  1.2G  84% /                                        tmpfs            228M   12K  228M   1% /dev/shm                                 tmpfs            5.0M     0  5.0M   0% /run/lock                                /dev/nvme0n1p15  124M  5.9M  118M   5% /boot/efi                                admin@i-0ee543fd5d502e892:~$

kihei/i-0ee543fd5d502e892 01:32

by SadServers 
fsck from util-linux 2.36.1                                                     e2fsck 1.46.2 (28-Feb-2021)                                                     ext2fs_open2: Bad magic number in super-block                                   fsck.ext2: Superblock invalid, trying backup blocks...                          fsck.ext2: Bad magic number in super-block while trying to open /dev/nvme2n1p1                                                                                  The superblock could not be read or does not describe a valid ext2/ext3/ext4    filesystem.  If the device is valid and it really contains an ext2/ext3/ext4    filesystem (and not swap or ufs or something else), then the superblock         is corrupt, and you might try running e2fsck with an alternate superblock:          e2fsck -b 8193 <device>                                                      or                                                                                 e2fsck -b 32768 <device>                                                                                                                                    admin@i-0eacfe699faffbd49:~$

kihei/i-0eacfe699faffbd49 05:33

by SadServers