command-line-murders/i-0e7e19fc51ecec0ae
by SadServersMore by SadServers
irc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologinobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin _apt:x:100:65534::/nonexistent:/usr/sbin/nologin messagebus:x:101:101::/nonexistent:/usr/sbin/nologin uuidd:x:102:102::/run/uuidd:/usr/sbin/nologin tcpdump:x:103:103::/nonexistent:/usr/sbin/nologin _chrony:x:104:104:Chrony daemon,,,:/var/lib/chrony:/usr/sbin/nologin systemd-network:x:105:106:systemd Network Management,,,:/run/systemd:/usr/sbin/nsystemd-resolve:x:106:107:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin sshd:x:107:65534::/run/sshd:/usr/sbin/nologin systemd-timesync:x:999:999:systemd Time Synchronization:/:/usr/sbin/nologin systemd-coredump:x:998:998:systemd Core Dumper:/:/usr/sbin/nologin admin:x:1000:1000:Debian:/home/admin:/bin/bash admin@i-09dd7a16c1516f9c8:~$ sudo cat /etc/passwd\
kihei/i-09dd7a16c1516f9c8 05:30
by SadServersudev 221828 0 221828 0% /dev tmpfs 46636 368 46268 1% /run /dev/nvme0n1p1 8026128 6354488 1242384 84% / tmpfs 233168 12 233156 1% /dev/shm tmpfs 5120 0 5120 0% /run/lock /dev/nvme0n1p15 126678 6016 120662 5% /boot/efi admin@i-0ed3208f72b7149da:~$ df -i Filesystem Inodes IUsed IFree IUse% Mounted on udev 55457 307 55150 1% /dev tmpfs 58292 441 57851 1% /run /dev/nvme0n1p1 516096 32800 483296 7% / tmpfs 58292 4 58288 1% /dev/shm tmpfs 58292 3 58289 1% /run/lock /dev/nvme0n1p15 0 0 0 - /boot/efi admin@i-0ed3208f72b7149da:~$
kihei/i-0ed3208f72b7149da 00:13
by SadServersdrwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config drwxr-xr-x 3 admin admin 4096 Dec 24 11:10 .local -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh -rw-r--r-- 1 admin admin 1024 Dec 24 11:10 .webserver.py.swp drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-042a55932de644732:~$ su - Password: su: Authentication failure admin@i-042a55932de644732:~$ su - Password: su: Authentication failure admin@i-042a55932de644732:~$ ^C admin@i-042a55932de644732:~$ curl