command-line-murders/i-0f494e3a9cdf22a70
by SadServersMore by SadServers
sudo: 1 incorrect password attempt admin@i-05bde59437c3d6bbd:~$ ls -la total 44 drwxr-xr-x 6 admin admin 4096 Sep 24 23:20 . drwxr-xr-x 3 root root 4096 Sep 17 16:44 .. drwx------ 3 admin admin 4096 Sep 20 15:52 .ansible -rw------- 1 admin admin 569 Nov 2 08:37 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-05bde59437c3d6bbd:~$ cd
paris/i-05bde59437c3d6bbd 02:50
by SadServersadmin@i-0be5d169af42c0cb5:~$ admin@i-0be5d169af42c0cb5:~$ admin@i-0be5d169af42c0cb5:~$ admin@i-0be5d169af42c0cb5:~$ localhost:5000 bash: localhost:5000: command not found admin@i-0be5d169af42c0cb5:~$ curl localhost:5000 Unauthorizedadmin@i-0be5d169af42c0cb5:~$ curl localhost:5000? Unauthorizedadmin@i-0be5d169af42c0cb5:~$ curl localhost:5000?/ls Unauthorizedadmin@i-0be5d169af42c0cb5:~$ curl localhost:5000?/'' Unauthorizedadmin@i-0be5d169af42c0cb5:~$ curl localhost:5000?/\\ls Unauthorizedadmin@i-0be5d169af42c0cb5:~$ curl localhost:5000?/
paris/i-0be5d169af42c0cb5 01:02
by SadServers693 pts/1 00:00:00 sh 694 pts/1 00:00:00 bash 800 pts/1 00:00:00 ps admin@i-0b98d3e9a33585961:~$ netstat -an | grep 5000 tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN admin@i-0b98d3e9a33585961:~$ lsof -i :5000 admin@i-0b98d3e9a33585961:~$ lsof -i :5000 admin@i-0b98d3e9a33585961:~$ ss -lntu | grep 5000 tcp LISTEN 0 128 127.0.0.1:5000 0.0.0.0:* admin@i-0b98d3e9a33585961:~$ lsof -i :5000 admin@i-0b98d3e9a33585961:~$ netstat -tulnp | grep 5000 (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN admin@i-0b98d3e9a33585961:~$ netstat -tulnp | grep