paris/i-05640abf76c220ed1
by SadServersMore by SadServers
-rw------- 1 admin admin 269 Jan 2 11:38 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 2023 .config drwxr-xr-x 3 admin admin 4096 Jan 2 11:37 .local -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 2023 .ssh -rw-r--r-- 1 admin admin 1024 Jan 2 11:37 .webserver.py.swp drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py admin@i-0f995f369ab3b4d0d:~$ ls .config/ asciinema admin@i-0f995f369ab3b4d0d:~$ less .webserver.py.swp ".webserver.py.swp" may be a binary file. See it anyway? admin@i-0f995f369ab3b4d0d:~$ cat .bashr
paris/i-0f995f369ab3b4d0d 01:44
by SadServersadmin@i-0c469078d13136d60:~$ sudo curl localhost:5000 We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: sudo: a password is required admin@i-0c469078d13136d60:~$ nc localhost5000 nc: missing port number admin@i-0c469078d13136d60:~$ nc localhost 5000 G
paris/i-0c469078d13136d60 01:28
by SadServersDload Upload Total Spent Left Speed 100 13 100 13 0 0 6500 0 --:--:-- --:--:-- --:--:-- 6500 . admin@i-0c0a57d40a96195b4:~$ output=$(curl localhost) > /dev/null % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 13 100 13 0 0 13000 0 --:--:-- --:--:-- --:--:-- 13000 admin@i-0c0a57d40a96195b4:~$ output=$(curl --silent localhost) admin@i-0c0a57d40a96195b4:~$ for i in $(seq 1 80); do echo -n "." nmap -PS $i localhost > /dev/null output=$(curl --silent localhost) echo $output | egrep -v "Who is there?" && echo "yay - $i" done .....................................................