command-line-murders/i-028e23eb2fb68fed0
by SadServersMore by SadServers
goroutine 1 [running]: main.main() ./main.go:64 +0x47d admin@i-0aeb40e1867803400:~$ ls agent data datafile kihei admin@i-0aeb40e1867803400:~$ df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-0aeb40e1867803400:~$ ./str
kihei/i-0aeb40e1867803400 03:37
by SadServersadmin@i-000c40fb3f665fed1:/etc/apache2/conf-available$ ls javascript-common.conf admin@i-000c40fb3f665fed1:/etc/apache2/conf-available$ cd admin@i-000c40fb3f665fed1:~$ curl -IL localhost:5000 HTTP/1.1 200 OK Server: Werkzeug/2.3.7 Python/3.9.2 Date: Mon, 09 Oct 2023 12:33:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12 Connection: close admin@i-000c40fb3f665fed1:~$ ls agent webserver.py admin@i-000c40fb3f665fed1:~$ vi webserver.py admin@i-000c40fb3f665fed1:~$ ls
paris/i-000c40fb3f665fed1 03:47
by SadServers_chrony 602 0.0 0.7 10856 3596 ? S 19:12 0:00 /usr/sbin/chrroot 609 0.0 3.7 26612 17272 ? Ss 19:12 0:00 /usr/bin/pyth-upgrades/unattended-upgrad _chrony 611 0.0 0.1 10724 552 ? S 19:12 0:00 /usr/sbin/chrroot 913 0.0 0.0 0 0 ? I 19:17 0:00 [kworker/1:1-admin 916 0.0 0.7 5920 3624 pts/0 S<s+ 19:18 0:00 bash -l admin 918 0.2 4.1 98188 19372 pts/0 R<l+ 19:18 0:00 /usr/bin/pythc -t kihei/i-058f99da3418f9 admin 921 0.0 3.2 24456 14984 pts/0 S<+ 19:18 0:00 /usr/bin/pythc -t kihei/i-058f99da3418f9 admin 922 0.0 0.1 2480 568 pts/1 S<s 19:18 0:00 sh -c /bin/baadmin 923 0.0 1.0 6952 4880 pts/1 S< 19:18 0:00 /bin/bash root 947 0.0 0.0 0 0 ? I 19:18 0:00 [kworker/0:0-admin 1046 0.0 0.7 8648 3268 pts/1 R<+ 19:19 0:00 ps waux admin@i-058f99da3418f95da:~$
kihei/i-058f99da3418f95da 06:55
by SadServers> GET / HTTP/1.1 > Host: sth:5000 > User-Agent: curl/7.74.0 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < Server: Werkzeug/2.3.7 Python/3.9.2 < Date: Wed, 18 Dec 2024 19:41:10 GMT < Content-Type: text/html; charset=utf-8 < Content-Length: 12 < Connection: close < * Closing connection 0 Unauthorizedadmin@i-0e74e27947cf1a85c:~$ curl sth:5000/[0-]