kihei/i-060ebfc99f2bb2560
by SadServersMore by SadServers
linux-gnu/libpthread-2.31.so lsof 769 admin mem REG 259,1 1868linux-gnu/libdl-2.31.so lsof 769 admin mem REG 259,1 61712linux-gnu/libpcre2-8.so.0.10.1 lsof 769 admin mem REG 259,1 190153linux-gnu/libc-2.31.so lsof 769 admin mem REG 259,1 16612linux-gnu/libselinux.so.1 lsof 769 admin mem REG 259,1 17792linux-gnu/ld-2.31.so lsof 769 admin 4r FIFO 0,11 0tlsof 769 admin 7w FIFO 0,11 0tadmin@i-059fb7e158508f014:~$ lsof |grep webserver admin@i-059fb7e158508f014:~$ lsof |grep .pyu
paris/i-059fb7e158508f014 01:33
by SadServersroot 594 0.0 3.7 26612 17396 ? Ss 17:08 0:00 /usr/bin/pyth_chrony 596 0.0 0.7 10852 3604 ? S 17:08 0:00 /usr/sbin/chr_chrony 598 0.0 0.1 10724 548 ? S 17:08 0:00 /usr/sbin/chrroot 680 0.0 0.0 0 0 ? I 17:08 0:00 [kworker/1:4-admin 683 0.0 0.9 6740 4460 pts/0 S<s+ 17:09 0:00 bash -l admin 687 0.1 4.1 98188 19320 pts/0 R<l+ 17:09 0:00 /usr/bin/pythadmin 690 0.0 3.0 24456 14420 pts/0 R<+ 17:09 0:00 /usr/bin/pythadmin 691 0.0 0.1 2480 500 pts/1 S<s 17:09 0:00 sh -c /bin/baadmin 692 0.0 1.0 6952 4756 pts/1 S< 17:09 0:00 /bin/bash admin 793 0.0 0.6 8648 3244 pts/1 R<+ 17:11 0:00 ps aux admin@i-01ae2ccb494fc3a25:~$ nc -zv 5000 nc: missing port number admin@i-01ae2ccb494fc3a25:~$ nc -zv localhost 5000 Connection to localhost (127.0.0.1) 5000 port [tcp/*] succeeded! admin@i-01ae2ccb494fc3a25:~$ ps aux
paris/i-01ae2ccb494fc3a25 02:35
by SadServers-rw------- 1 admin admin 269 Jan 2 11:38 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 2023 .config drwxr-xr-x 3 admin admin 4096 Jan 2 11:37 .local -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 2023 .ssh -rw-r--r-- 1 admin admin 1024 Jan 2 11:37 .webserver.py.swp drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py admin@i-0f995f369ab3b4d0d:~$ ls .config/ asciinema admin@i-0f995f369ab3b4d0d:~$ less .webserver.py.swp ".webserver.py.swp" may be a binary file. See it anyway? admin@i-0f995f369ab3b4d0d:~$ cat .bashr