paris/i-030710a3e05c7b25d
by SadServersMore by SadServers
drwxr-xr-x 23 root root 680 Feb 13 18:17 run drwx------ 5 root root 4.0K Feb 13 18:24 root admin@i-05b98f7b26e35f62f:/$ cd admin@i-05b98f7b26e35f62f:~$ ls -Strlh total 5.1G -rw-r--r-- 1 root root 5.0G Sep 17 17:28 datafile -rwxr-xr-x 1 admin root 2.2M Sep 17 17:28 kihei drwxr-xr-x 2 admin root 4.0K Sep 17 17:28 agent drwxr-xr-x 2 admin root 4.0K Feb 13 18:24 data admin@i-05b98f7b26e35f62f:~$ cd data/ admin@i-05b98f7b26e35f62f:~/data$ ls admin@i-05b98f7b26e35f62f:~/data$ cd . admin@i-05b98f7b26e35f62f:~/data$ cd .. admin@i-05b98f7b26e35f62f:~$ mv datafile data admin@i-05b98f7b26e35f62f:~$ ./kihei
kihei/i-05b98f7b26e35f62f 07:19
by SadServersnt-Type: application/x-www-form-urlencoded' --data-urlencode 'password=" or 1=1'Access denied!admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localnt-Type: application/x-www-form-urlencoded' --data-urlencode 'password=" or "1"=Access denied!admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localnt-Type: application/x-www-form-urlencoded' --data-urlencode 'password=^Cor "1"=admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localhost:5000' \ --header 'Content-Type: application/x-www-form-urlencoded' \ --data-urlencode 'password='\'' or '\''1'\''='\''1' admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localhost:5000' \al--header 'Content-Type: application/x-www-form-urlencoded' \ --data-urlencode 'password=' admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localhost:5000' \al--form 'password="admin"' Access denied!admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'locald="admin"'
monaco/i-09f0e7c74e34fbdd9 05:55
by SadServersadmin@i-075f2b4944f673d35:~$ ss -tulpna | grep 5000 tcp LISTEN 0 128 127.0.0.1:5000 tcp TIME-WAIT 0 0 127.0.0.1:35450 admin@i-075f2b4944f673d35:~$ ls agent webserver.py admin@i-075f2b4944f673d35:~$ cat webserver.py cat: webserver.py: Permission denied admin@i-075f2b4944f673d35:~$ cd agent/ admin@i-075f2b4944f673d35:~/agent$ ls check.sh sadagent sadagent.txt admin@i-075f2b4944f673d35:~/agent$ cd .. admin@i-075f2b4944f673d35:~$