kihei/i-06078a63b0d535733
by SadServersMore by SadServers
> GET / HTTP/1.1 > Host: localhost:5000 > User-Agent: curl/7.74.0 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < Server: Werkzeug/2.3.7 Python/3.9.2 < Date: Tue, 06 Feb 2024 07:30:57 GMT < Content-Type: text/html; charset=utf-8 < Content-Length: 12 < Connection: close < * Closing connection 0 Unauthorizedadmin@i-03d5c3bada9b64230:~$
paris/i-03d5c3bada9b64230 03:12
by SadServers[sudo] password for admin: ^Csudo: 1 incorrect password attempt admin@i-09b7dc79be18d538a:~$ ^C admin@i-09b7dc79be18d538a:~$ netstat -an --tcp --program (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN tcp6 0 0 :::6767 :::* LISTEN tcp6 0 0 :::8080 :::* LISTEN tcp6 0 0 :::22 :::* LISTEN tcp6 0 249 172.31.37.243:8080 172.31.16.109:41784 ESTABLISHED admin@i-09b7dc79be18d538a:~$
paris/i-09b7dc79be18d538a 01:13
by SadServers2 2023-09-20T15:58:02 exit 3 2023-12-18T23:23:28 ls 4 2023-12-18T23:23:32 vim webserver.py 5 2023-12-18T23:23:35 ls -l 6 2023-12-18T23:23:37 sudo -l 7 2023-12-18T23:23:44 sudo view webserver.py 8 2023-12-18T23:24:00 ls 9 2023-12-18T23:24:02 ls agent 10 2023-12-18T23:24:08 view agent/check.sh 11 2023-12-18T23:24:22 netstat -nl4 12 2023-12-18T23:24:29 curl 127.0.0.1:5000 13 2023-12-18T23:24:40 curl -v 127.0.0.1:5000 14 2023-12-18T23:25:09 history admin@i-091ee8f6864cabf76:~$ view .bash_history admin@i-091ee8f6864cabf76:~$