command-line-murders/i-06d49fb711db9521d
by SadServersMore by SadServers
drwxr-xr-x 2 admin root 4096 Sep 17 17:28 data -rw-r--r-- 1 root root 5368709120 Sep 17 17:28 datafile -rwxr-xr-x 1 admin root 2207109 Sep 17 17:28 kihei admin@i-0847c56ed353b4fb9:~$ sudo -l Matching Defaults entries for admin on i-0847c56ed353b4fb9: env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sn User admin may run the following commands on i-0847c56ed353b4fb9: (ALL : ALL) ALL (ALL) NOPASSWD: ALL (ALL) NOPASSWD: ALL (ALL) NOPASSWD: ALL (ALL) NOPASSWD: /sbin/shutdown admin@i-0847c56ed353b4fb9:~$ rm .bash
kihei/i-0847c56ed353b4fb9 00:43
by SadServersadmin@i-0139974abc9a432af:~$ ls -lah total 5.1G drwxr-xr-x 7 admin admin 4.0K Oct 24 12:11 . drwxr-xr-x 3 root root 4.0K Sep 17 2023 .. drwx------ 3 admin admin 4.0K Sep 17 2023 .ansible -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3.5K Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4.0K Oct 24 12:11 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4.0K Sep 17 2023 .ssh drwxr-xr-x 2 admin root 4.0K Sep 17 2023 agent drwxr-xr-x 2 admin root 4.0K Oct 24 12:19 data -rw-r--r-- 1 admin admin 5.0G Sep 17 2023 datafile -rwxr-xr-x 1 admin root 2.2M Sep 17 2023 kihei admin@i-0139974abc9a432af:~$ ls -lah
kihei/i-0139974abc9a432af 04:15
by SadServersargument should not have this leading character. Added in 7.53.0. --alt-svc <file name> (HTTPS) WARNING: this option is experimental. Do not use in produc This option enables the alt-svc parser in curl. If the file na alt-svc cache file, that will be used. After a completed transfer, to the file name again if it has been modified. Specify a "" file name (zero length) to avoid loading/saving and m cache in memory. Manual page curl(1) line 149 (press h for help or q to quit)
paris/i-0b4bad77f8faa1a1f 06:27
by SadServersfile"] /var/log/cast/i-008b0220d06b61fa7:[297.457658, "o", "\b\b\b\b\b\b\b\b\b\b\b-name/var/log/cast/i-008b0220d06b61fa7:[301.266025, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\/var/log -name newdatafile"] /var/log/cast/i-008b0220d06b61fa7:[339.22969, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\btafile /var/log"] /var/log/cast/i-008b0220d06b61fa7:[339.527642, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\file"] /var/log/cast/i-008b0220d06b61fa7:[340.82254, "o", "\b\b\b\b\b\b\b\b\b\b\b-name /var/log/cast/i-008b0220d06b61fa7:[347.397351, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\atafile /var/log"] grep: /var/log/btmp: Permission denied grep: /var/log/private: Permission denied grep: /var/log/chrony: Permission denied admin@i-008b0220d06b61fa7:~$ /home/admin/kihei