command-line-murders/i-09b87c15485fbf9f2
by SadServersMore by SadServers
udev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-06f14f1acdd48bc0a:~$ df -ih Filesystem Inodes IUsed IFree IUse% Mounted on udev 55K 307 54K 1% /dev tmpfs 57K 442 57K 1% /run /dev/nvme0n1p1 504K 33K 472K 7% / tmpfs 57K 4 57K 1% /dev/shm tmpfs 57K 3 57K 1% /run/lock /dev/nvme0n1p15 0 0 0 - /boot/efi admin@i-06f14f1acdd48bc0a:~$
kihei/i-06f14f1acdd48bc0a 03:49
by SadServersadmin@i-090340fbfd6fc2419:~$ ls agent webserver.py admin@i-090340fbfd6fc2419:~$ admin@i-090340fbfd6fc2419:~$ curl localhost:5000 Unauthorizedadmin@i-090340fbfd6fc2419:~$ admin@i-090340fbfd6fc2419:~$ curl http://localhost:5000 Unauthorizedadmin@i-090340fbfd6fc2419:~$ curl https://localhost:5000 curl: (35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number admin@i-090340fbfd6fc2419:~$ admin@i-090340fbfd6fc2419:~$ curl localhost:5000/?auth=true Unauthorizedadmin@i-090340fbfd6fc2419:~$ admin@i-090340fbfd6fc2419:~$
paris/i-090340fbfd6fc2419 02:04
by SadServers[sudo] password for admin: Sorry, try again. [sudo] password for admin: sudo: 1 incorrect password attempt admin@i-01ce4f2450e9d777d:~$ curl localhost curl: (7) Failed to connect to localhost port 80: Connection refused admin@i-01ce4f2450e9d777d:~$ iptables -L -v -n iptables v1.8.7 (nf_tables): Could not fetch rule set generation id: Permission admin@i-01ce4f2450e9d777d:~$ exec 3<>/dev/tcp/localhost/80 bash: connect: Connection refused bash: /dev/tcp/localhost/80: Connection refused admin@i-01ce4f2450e9d777d:~$ admin@i-01ce4f2450e9d777d:~$ admin@i-01ce4f2450e9d777d:~$ :> /dev/tcp/ya.ru/80 && echo $?
paris/i-01ce4f2450e9d777d 04:53
by SadServerslocal-fs-pre.target static - local-fs.target static - multi-user.target static - network-online.target static - admin@i-046eb98bd90d24c4a:~$ sudo -l Matching Defaults entries for admin on i-046eb98bd90d24c4a: env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bi User admin may run the following commands on i-046eb98bd90d24c4a: (ALL : ALL) ALL (ALL) NOPASSWD: /sbin/shutdown admin@i-046eb98bd90d24c4a:~$ sudo /sbin/shutdown Shutdown scheduled for Fri 2024-02-23 19:06:27 UTC, use 'shutdown -c' to cancel.admin@i-046eb98bd90d24c4a:~$