ivujivik/i-09c5441a6537c2c35
by SadServersMore by SadServers
admin 795 691 0 13:08 pts/1 00:00:00 ps -ef admin@i-0f74600404c71b126:~$ admin@i-0f74600404c71b126:~$ admin@i-0f74600404c71b126:~$ ls agent webserver.py admin@i-0f74600404c71b126:~$ vi webserver.py admin@i-0f74600404c71b126:~$ cd agent/ admin@i-0f74600404c71b126:~/agent$ ls check.sh sadagent sadagent.txt admin@i-0f74600404c71b126:~/agent$ cd admin@i-0f74600404c71b126:~$ ls -rtl total 8 -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent admin@i-0f74600404c71b126:~$ curl localh
paris/i-0f74600404c71b126 01:48
by SadServerslrwxrwxrwx 1 root root 10 Sep 28 2021 libx32 -> usr/libx32 drwx------ 2 root root 16384 Sep 28 2021 lost+found drwxr-xr-x 2 root root 4096 Sep 28 2021 media drwxr-xr-x 2 root root 4096 Sep 28 2021 mnt drwxr-xr-x 2 root root 4096 Sep 28 2021 opt dr-xr-xr-x 137 root root 0 Jan 8 20:37 proc drwx------ 4 root root 4096 Jan 8 20:38 root drwxr-xr-x 23 root root 680 Jan 8 20:38 run lrwxrwxrwx 1 root root 8 Sep 28 2021 sbin -> usr/sbin drwxr-xr-x 2 root root 4096 Sep 28 2021 srv dr-xr-xr-x 13 root root 0 Jan 8 20:37 sys drwxrwxrwt 9 root root 4096 Jan 8 20:38 tmp drwxr-xr-x 14 root root 4096 Sep 28 2021 usr drwxr-xr-x 11 root root 4096 Sep 28 2021 var admin@i-02c2ff6f34069647e:/$ df -h
kihei/i-02c2ff6f34069647e 00:48
by SadServersile="unconfined" name="/usr/bin/man" pid=336 comm="apparmor_parser" [ 4.839178] audit: type=1400 audit(1739149489.855:5): apparmor="STATUS" operaile="unconfined" name="man_filter" pid=336 comm="apparmor_parser" [ 4.853673] audit: type=1400 audit(1739149489.855:6): apparmor="STATUS" operaile="unconfined" name="man_groff" pid=336 comm="apparmor_parser" [ 4.870219] audit: type=1400 audit(1739149489.891:7): apparmor="STATUS" operaile="unconfined" name="tcpdump" pid=338 comm="apparmor_parser" [ 4.884118] audit: type=1400 audit(1739149489.907:8): apparmor="STATUS" operaile="unconfined" name="/usr/sbin/chronyd" pid=339 comm="apparmor_parser" [ 4.884121] audit: type=1400 audit(1739149489.927:9): apparmor="STATUS" operaile="unconfined" name="lsb_release" pid=337 comm="apparmor_parser" [ 56.427427] IPv6: ADDRCONF(NETDEV_CHANGE): ens5: link becomes ready [ 58.862552] device-mapper: uevent: version 1.0.3 [ 58.867273] device-mapper: ioctl: 4.43.0-ioctl (2020-10-01) initialised: dm-dadmin@i-0db84b7794affbe97:~$
kihei/i-0db84b7794affbe97 02:31
by SadServersa.out agent webserver.py $ admin@i-072b43453825ba99a:~$ find / -perm -u=s -type f 2>/dev/null /usr/lib/openssh/ssh-keysign /usr/lib/dbus-1.0/dbus-daemon-launch-helper /usr/bin/chsh /usr/bin/umount /usr/bin/mount /usr/bin/passwd /usr/bin/newgrp /usr/bin/sudo /usr/bin/chfn /usr/bin/su /usr/bin/gpasswd admin@i-072b43453825ba99a:~$ ./a.out /usr/bin/su