command-line-murders/i-02170998357369447
by SadServersMore by SadServers
drwx------ 5 root root 4096 Jan 25 19:49 root drwxr-xr-x 22 root root 620 Jan 25 19:49 run lrwxrwxrwx 1 root root 8 Sep 28 2021 sbin -> usr/sbin drwxr-xr-x 2 root root 4096 Sep 28 2021 srv dr-xr-xr-x 13 root root 0 Jan 25 19:48 sys drwxrwxrwt 9 root root 4096 Jan 25 19:49 tmp drwxr-xr-x 14 root root 4096 Sep 28 2021 usr drwxr-xr-x 11 root root 4096 Sep 28 2021 var admin@i-0f29e47a857c873d8:/$ ls opt admin@i-0f29e47a857c873d8:/$ ls run agetty.reload cloud-init dbus initramfs network sshblkid credentials dhclient.ens5.pid lock screen sshchrony crond.pid dhclient6.ens5.pid log sendsigs.omit.d sudchrony-dhcp crond.reboot initctl mount shm sysadmin@i-0f29e47a857c873d8:/$ cd run
paris/i-0f29e47a857c873d8 03:51
by SadServersadmin@i-004d80b97bf1201b1:~$ ls agent webserver.py admin@i-004d80b97bf1201b1:~$ nc localhost 5000 GET / curl --user-agent "whatever" localhost:5000 ^C admin@i-004d80b97bf1201b1:~$ curl --user-agent "whatever" localhost:5000 Welcome! Password is FDZPmh5AX3oiJtadmin@i-004d80b97bf1201b1:~$
paris/i-004d80b97bf1201b1 00:45
by SadServersdrwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config drwxr-xr-x 3 admin admin 4096 Dec 24 11:10 .local -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh -rw-r--r-- 1 admin admin 1024 Dec 24 11:10 .webserver.py.swp drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-042a55932de644732:~$ su - Password: su: Authentication failure admin@i-042a55932de644732:~$ su - Password: su: Authentication failure admin@i-042a55932de644732:~$ ^C admin@i-042a55932de644732:~$ curl