kihei/i-00ea3683be33c9605
by SadServersMore by SadServers
a.out agent webserver.py $ admin@i-072b43453825ba99a:~$ find / -perm -u=s -type f 2>/dev/null /usr/lib/openssh/ssh-keysign /usr/lib/dbus-1.0/dbus-daemon-launch-helper /usr/bin/chsh /usr/bin/umount /usr/bin/mount /usr/bin/passwd /usr/bin/newgrp /usr/bin/sudo /usr/bin/chfn /usr/bin/su /usr/bin/gpasswd admin@i-072b43453825ba99a:~$ ./a.out /usr/bin/su
paris/i-072b43453825ba99a 03:20
by SadServers0,38400,9600 ttyS0 vt220 root 599 0.0 1.5 13352 7020 ? Ss 20:50 0:00 sshd: /usr/sbtartups root 606 0.0 3.7 26612 17408 ? Ss 20:50 0:00 /usr/bin/pythunattended-upgrade-shutdown --wait-for-signal admin@i-0bae289e83951581b:~$ cat webserver.py cat: webserver.py: Permission denied admin@i-0bae289e83951581b:~$ su Password: su: Authentication failure admin@i-0bae289e83951581b:~$ su - Password: su: Authentication failure admin@i-0bae289e83951581b:~$ admin@i-0bae289e83951581b:~$ curl -v l
paris/i-0bae289e83951581b 02:47
by SadServerstotal 44 drwxr-xr-x 6 admin admin 4096 Sep 24 2023 . drwxr-xr-x 3 root root 4096 Sep 17 2023 .. drwx------ 3 admin admin 4096 Sep 20 2023 .ansible -rw------- 1 admin admin 496 Feb 5 00:09 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 2023 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 2023 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py admin@i-005e623c973fc92ea:~$ chown admin:admin webserver.py chown: changing ownership of 'webserver.py': Operation not permitted admin@i-005e623c973fc92ea:~$ cp -pr webserver.py test