ivujivik/i-0e9e32b899d3395da
by SadServersMore by SadServers
[:delay_enter=DELAY][:delay_exit=DELAY][:when=WHEN], --inject=SET[:error=ERRNO|:retval=VALUE][:signal=SIG][:syscall=SYSCALL] [:delay_enter=DELAY][:delay_exit=DELAY][:when=WHEN] perform syscall tampering for the syscalls in SET delay: microseconds or NUMBER{s|ms|us|ns} when: FIRST[..LAST][+[STEP]] -e fault=SET[:error=ERRNO][:when=WHEN], --fault=SET[:error=ERRNO][:when=WHEN] synonym for -e inject with default ERRNO set to ENOSYS. Miscellaneous: -d, --debug enable debug output to stderr -h, --help print help message --seccomp-bpf enable seccomp-bpf filtering -V, --version print version admin@i-054157b3157fdc4cd:~$ strace ./kihei -v
kihei/i-054157b3157fdc4cd 01:21
by SadServerswrite(2, "\t", 1 ) = 1 write(2, "./main.go", 9./main.go) = 9 write(2, ":", 1:) = 1 write(2, "64", 264) = 2 write(2, " +", 2 +) = 2 write(2, "0x47d", 50x47d) = 5 write(2, "\n", 1 ) = 1 exit_group(2) = ? +++ exited with 2 +++ admin@i-0cf4052df7f7472c2:~$ strace -v /home/admin/kihei > strace.txt^C admin@i-0cf4052df7f7472c2:~$ cat strace.txt admin@i-0cf4052df7f7472c2:~$ strace^C admin@i-0cf4052df7f7472c2:~$ ^C admin@i-0cf4052df7f7472c2:~$
kihei/i-0cf4052df7f7472c2 06:53
by SadServers<meta name="viewport" content="width=device-width, initial-scale=1"> </head> <body> <div id="terminal"></div> <script src="./auth_token.js"></script> <script src="./config.js"></script> <script src="./js/gotty.js"></script> </body> </html>admin@i-01458a02fd7896dbc:~$ curl localhost:323 curl: (7) Failed to connect to localhost port 323: Connection refused admin@i-01458a02fd7896dbc:~$ curl localhost:68 curl: (7) Failed to connect to localhost port 68: Connection refused admin@i-01458a02fd7896dbc:~$
paris/i-01458a02fd7896dbc 03:27
by SadServers-rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-093333d0150041494:~$ cd .. admin@i-093333d0150041494:/home$ find / -perm -4000 -type f 2>/dev/null /usr/lib/openssh/ssh-keysign /usr/lib/dbus-1.0/dbus-daemon-launch-helper /usr/bin/chsh /usr/bin/umount /usr/bin/mount /usr/bin/passwd /usr/bin/newgrp /usr/bin/sudo /usr/bin/chfn /usr/bin/su /usr/bin/gpasswd admin@i-093333d0150041494:/home$