command-line-murders/i-0857e01cf0352a183
by SadServersMore by SadServers
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin _apt:x:100:65534::/nonexistent:/usr/sbin/nologin messagebus:x:101:101::/nonexistent:/usr/sbin/nologin uuidd:x:102:102::/run/uuidd:/usr/sbin/nologin tcpdump:x:103:103::/nonexistent:/usr/sbin/nologin _chrony:x:104:104:Chrony daemon,,,:/var/lib/chrony:/usr/sbin/nologin systemd-network:x:105:106:systemd Network Management,,,:/run/systemd:/usr/sbin/nsystemd-resolve:x:106:107:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin sshd:x:107:65534::/run/sshd:/usr/sbin/nologin systemd-timesync:x:999:999:systemd Time Synchronization:/:/usr/sbin/nologin systemd-coredump:x:998:998:systemd Core Dumper:/:/usr/sbin/nologin admin:x:1000:1000:Debian:/home/admin:/bin/bash admin@i-0033d221d79134049:~$ cat ~.profile cat: '~.profile': No such file or directory admin@i-0033d221d79134049:~$
paris/i-0033d221d79134049 04:02
by SadServers559 ? S<sl 0:00 /home/admin/agent/sadagent 562 ? Ss 0:00 /usr/sbin/cron -f 563 ? Ss 0:00 /usr/bin/dbus-daemon --system --address=systemd: -- 575 ? Ss 0:00 /usr/bin/python3 /home/admin/webserver.py 576 ? Ssl 0:00 /usr/sbin/rsyslogd -n -iNONE 582 ? Ss 0:00 /lib/systemd/systemd-logind 584 ? Ss 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 star 585 tty1 Ss+ 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux 586 ttyS0 Ss+ 0:00 /sbin/agetty -o -p -- \u --keep-baud 115200,57600,3 588 ? S 0:00 /usr/sbin/chronyd -F 1 589 ? S 0:00 \_ /usr/sbin/chronyd -F 1 606 ? Ss 0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unaadmin@i-04f25c68fa11fb6a2:~$ curl -A "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5it/537.36 (KHTML, like Gecko) Chrome/W.X.Y.Z Mobile Safari/537.36 (compatible; G.google.com/bot.html)"
paris/i-04f25c68fa11fb6a2 00:29
by SadServerstotal 5.1G -rw-r--r-- 1 root root 5.0G Sep 17 2023 datafile drwxr-xr-x 2 admin root 4.0K Sep 17 2023 data drwxr-xr-x 2 admin root 4.0K Sep 17 2023 agent -rwxr-xr-x 1 admin root 2.2M Dec 3 14:28 kihei admin@i-028aa18574b00296c:~$ su -sh * su: user agent does not exist or the user entry does not contain all the requireadmin@i-028aa18574b00296c:~$ s\du -sh * bash: sdu: command not found admin@i-028aa18574b00296c:~$ du -sh * 11M agent 4.0K data 5.1G datafile 2.2M kihei admin@i-028aa18574b00296c:~$