command-line-murders/i-0ac011fbc7498252b
by SadServersMore by SadServers
Dec 16 19:58:09 i-087a04010afc840a2 sudo[686]: pam_unix(sudo:session): session o) by (uid=1000) root@i-087a04010afc840a2:/home/admin# ^C root@i-087a04010afc840a2:/home/admin# tail -f /etc/systemd/system/gotty.service [Service] User=admin Group=admin ExecStart=/usr/local/gotty --permit-write --reconnect --max-connection 5 bash -lWorkingDirectory=/home/admin Restart=on-failure Nice=-20 [Install] WantedBy=multi-user.target
kihei/i-087a04010afc840a2 00:58
by SadServersdrwxr-xr-x 3 root root 4.0K Sep 17 16:44 .. drwx------ 3 admin admin 4.0K Sep 17 17:15 .ansible -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3.5K Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4.0K Nov 27 15:07 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4.0K Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4.0K Sep 17 17:28 agent drwxr-xr-x 2 admin root 4.0K Nov 27 15:09 data -rw-r--r-- 1 root root 0 Nov 27 15:10 datafile -rw-r--r-- 1 admin admin 50K Nov 27 15:09 err -rwxr-xr-x 1 admin root 2.2M Sep 17 17:28 kihei admin@i-01e2ca92cea14238f:~$ du -sh data 4.0K data admin@i-01e2ca92cea14238f:~$
kihei/i-01e2ca92cea14238f 01:52
by SadServers2 2023-09-20T15:58:02 exit 3 2023-12-18T23:23:28 ls 4 2023-12-18T23:23:32 vim webserver.py 5 2023-12-18T23:23:35 ls -l 6 2023-12-18T23:23:37 sudo -l 7 2023-12-18T23:23:44 sudo view webserver.py 8 2023-12-18T23:24:00 ls 9 2023-12-18T23:24:02 ls agent 10 2023-12-18T23:24:08 view agent/check.sh 11 2023-12-18T23:24:22 netstat -nl4 12 2023-12-18T23:24:29 curl 127.0.0.1:5000 13 2023-12-18T23:24:40 curl -v 127.0.0.1:5000 14 2023-12-18T23:25:09 history admin@i-091ee8f6864cabf76:~$ view .bash_history admin@i-091ee8f6864cabf76:~$
paris/i-091ee8f6864cabf76 02:11
by SadServers--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=676, si_uid=1000, si_s=0} --- admin@i-0802244d9b873596f:~$ admin@i-0802244d9b873596f:~$ admin@i-0802244d9b873596f:~$ admin@i-0802244d9b873596f:~$ pvcreate /dev/nvme1n1 /dev/nvme2n1 WARNING: Running as a non-root user. Functionality may be unavailable. /run/lock/lvm/P_global:aux: open failed: Permission denied admin@i-0802244d9b873596f:~$ sudo pvcreate /dev/nvme1n1 /dev/nvme2n1 Physical volume "/dev/nvme1n1" successfully created. Physical volume "/dev/nvme2n1" successfully created. admin@i-0802244d9b873596f:~$ admin@i-0802244d9b873596f:~$ admin@i-0802244d9b873596f:~$ admin@i-0802244d9b873596f:~$ suod