command-line-murders/i-0bcda99e72293538a
by SadServersMore by SadServers
222 ? 00:00:00 systemd-udevd 407 ? 00:00:00 dhclient 483 ? 00:00:00 dhclient 578 ? 00:00:00 gotty 579 ? 00:00:00 sadagent 592 ? 00:00:00 cron 593 ? 00:00:00 dbus-daemon 595 ? 00:00:00 rsyslogd 599 ? 00:00:00 chronyd 600 ? 00:00:00 systemd-logind 613 ? 00:00:00 sshd 621 tty1 00:00:00 agetty 622 ttyS0 00:00:00 agetty 623 ? 00:00:00 unattended-upgr admin@i-03188ede5817cd0b3:~$ ps --ppid 1
kihei/i-03188ede5817cd0b3 04:28
by SadServers-rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-093333d0150041494:~$ cd .. admin@i-093333d0150041494:/home$ find / -perm -4000 -type f 2>/dev/null /usr/lib/openssh/ssh-keysign /usr/lib/dbus-1.0/dbus-daemon-launch-helper /usr/bin/chsh /usr/bin/umount /usr/bin/mount /usr/bin/passwd /usr/bin/newgrp /usr/bin/sudo /usr/bin/chfn /usr/bin/su /usr/bin/gpasswd admin@i-093333d0150041494:/home$
paris/i-093333d0150041494 03:18
by SadServers/asn1.oidEncoder,encoding/asn1.encodergo.itab.encoding/asn1.stringEncoder,encodiitab.encoding/asn1.int64Encoder,encoding/asn1.encodergo.itab.encoding/asn1.setEnencodergo.itab.golang.org/x/text/internal/language.sortVariants,sort.Interfacego/text/internal/language.variantsSort,sort.Interfacego.itab.golang.org/x/text/intuage.Tag,golang.org/x/text/internal/language/compact.fullTaggo.itab.*encoding/gogobTypego.itab.*encoding/gob.arrayType,encoding/gob.gobTypego.itab.*encoding/gob.gobTypego.itab.*encoding/gob.CommonType,encoding/gob.gobType__errno_locationgaihabortpthread_cond_broadcastsigactionsetenvpthread_cond_waitmmapnanosleepfputcpttex_unlockmallocmunmapvfprintfunsetenvpthread_attr_destroysigismemberfwritestrerime.buildVersion.strruntime.modinfo.strtype.*runtime.textsectionmap^C admin@i-059172a6cbeaf621a:~/agent$ tail -300f sadagent.txt ^C admin@i-059172a6cbeaf621a:~/agent$ ls check.sh sadagent sadagent.txt admin@i-059172a6cbeaf621a:~/agent$