taipei/i-0fe60fd5038ba7352
by SadServersMore by SadServers
#2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: sudo: a password is required admin@i-0e74c6feeef89a0ae:~$ for i in $(seq 1 65536); do echo -n "." nmap -PS $i localhost > /dev/null output=$(curl --silent localhost) echo $output | egrep -v "^Who is there\?$" && echo "yay - $i" done . yay - 1 ................... admin@i-0e74c6feeef89a0ae:~$ nmap -PS 1
taipei/i-0e74c6feeef89a0ae 00:54
by SadServersadmin@i-0b117fa6b5ba9fe7f:~$ curl localhost:5000 Unauthorizedadmin@i-0b117fa6b5ba9fe7f:~$ netstat -ano | grep 5000 tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:58914 127.0.0.1:5000 TIME_WAIT admin@i-0b117fa6b5ba9fe7f:~$ curl localhost:58914 curl: (7) Failed to connect to localhost port 58914: Connection refused admin@i-0b117fa6b5ba9fe7f:~$ netstat -ano | grep 5000 tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:58914 127.0.0.1:5000 TIME_WAIT admin@i-0b117fa6b5ba9fe7f:~$ ls agent webserver.py admin@i-0b117fa6b5ba9fe7f:~$ cat
paris/i-0b117fa6b5ba9fe7f 03:03
by SadServersfind: ‘./var/cache/apparmor/c08a2770.0’: Permission denied find: ‘./var/spool/rsyslog’: Permission denied find: ‘./var/spool/cron/crontabs’: Permission denied find: ‘./var/tmp/systemd-private-648cc96b50ab42589914a79776d72300-chrony.serviceed find: ‘./var/tmp/systemd-private-648cc96b50ab42589914a79776d72300-systemd-logindion denied find: ‘./var/log/private’: Permission denied find: ‘./var/log/chrony’: Permission denied find: ‘./var/lib/private’: Permission denied find: ‘./var/lib/apt/lists/partial’: Permission denied find: ‘./var/lib/chrony’: Permission denied admin@i-08c7e6569481c6e82:/$ admin@i-08c7e6569481c6e82:/$ admin@i-08c7e6569481c6e82:/$ cd /usr/share