kihei/i-06053c8a5aeec1e0f
by SadServersMore by SadServers
(Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) admin@i-0b9f3cd0094de1d6e:~$ netstat -anlp|grep 172 (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) tcp 0 0 172.31.42.227:59464 172.31.21.181:9000 TIME_WAIT tcp 0 0 172.31.42.227:59462 172.31.21.181:9000 TIME_WAIT tcp 0 0 172.31.42.227:59460 172.31.21.181:9000 TIME_WAIT tcp6 0 0 172.31.42.227:8080 172.31.16.109:54422 ESTABLISHED admin@i-0b9f3cd0094de1d6e:~$ curl ^C admin@i-0b9f3cd0094de1d6e:~$ nmap -sV 172.31.21.181 -p 9000 Starting Nmap 7.80 ( https://nmap.org ) at 2023-10-01 16:08 UTC Note: Host seems down. If it is really up, but blocking our ping probes, try -PnNmap done: 1 IP address (0 hosts up) scanned in 4.87 seconds admin@i-0b9f3cd0094de1d6e:~$ ip a
taipei/i-0b9f3cd0094de1d6e 04:20
by SadServersadmin 681 0.0 0.9 6740 4532 pts/0 S<s+ 17:03 0:00 bash -l admin 685 0.0 4.1 98188 19252 pts/0 R<l+ 17:03 0:00 /usr/bin/pythadmin 688 0.0 3.0 24456 14384 pts/0 S<+ 17:03 0:00 /usr/bin/pythadmin 689 0.0 0.1 2480 572 pts/1 S<s 17:03 0:00 sh -c /bin/baadmin 690 0.0 1.0 6952 4716 pts/1 S< 17:03 0:00 /bin/bash admin 834 0.0 0.6 8648 3240 pts/1 R<+ 17:07 0:00 ps -aux admin@i-0855e77fc64d64a54:~$ cat /home/admin/webserver cat: /home/admin/webserver: No such file or directory admin@i-0855e77fc64d64a54:~$ ls /home/admin/ agent webserver.py admin@i-0855e77fc64d64a54:~$ cat /home/admin/webserver.py cat: /home/admin/webserver.py: Permission denied admin@i-0855e77fc64d64a54:~$ ls -l /home/admin/webserver.py -rwxrwx--- 1 root root 360 Sep 24 2023 /home/admin/webserver.py admin@i-0855e77fc64d64a54:~$
paris/i-0855e77fc64d64a54 02:42
by SadServersrm: cannot remove 'libmpfr6_4.1.0-3_amd64.deb': Permission denied rm: cannot remove 'libpython3.9_3.9.2-1_amd64.deb': Permission denied rm: cannot remove 'libsource-highlight-common_3.1.9-3_all.deb': Permission denierm: cannot remove 'libsource-highlight4v5_3.1.9-3+b1_amd64.deb': Permission denirm: cannot remove 'libunwind8_1.3.2-2_amd64.deb': Permission denied rm: cannot remove 'lock': Permission denied rm: cannot remove 'lsof_4.93.2+dfsg-1.1_amd64.deb': Permission denied rm: cannot remove 'lua-lpeg_1.0.2-1_amd64.deb': Permission denied rm: cannot remove 'lvm2_2.03.11-2.1_amd64.deb': Permission denied rm: cannot remove 'nmap-common_7.91+dfsg1+really7.80+dfsg1-2_all.deb': Permissiorm: cannot remove 'nmap_7.91+dfsg1+really7.80+dfsg1-2_amd64.deb': Permission denrm: cannot remove 'partial': Permission denied rm: cannot remove 'strace_5.10-1_amd64.deb': Permission denied rm: cannot remove 'thin-provisioning-tools_0.9.0-1_amd64.deb': Permission deniedadmin@i-0f67f02eee8a35fb3:/var/cache/apt/archives$ sudo rm