command-line-murders/i-0764e1fa79a97f2a3
by SadServersMore by SadServers
admin@i-05d27a7439a0e6399:~$ ls agent data datafile kihei admin@i-05d27a7439a0e6399:~$ file kihei kihei: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, G7tVbey9uC58oKsR, not stripped admin@i-05d27a7439a0e6399:~$ ps aux | grep "kihei" admin 704 0.6 4.1 98188 19192 pts/0 S<l+ 10:38 0:00 /usr/bin/pythi-05d27a7439a0e6399 admin 707 0.0 3.0 24456 14448 pts/0 S<+ 10:38 0:00 /usr/bin/pythi-05d27a7439a0e6399 admin 715 0.0 0.1 5264 704 pts/1 S<+ 10:38 0:00 grep kihei admin@i-05d27a7439a0e6399:~$
kihei/i-05d27a7439a0e6399 00:26
by SadServersadmin@i-0583765cb8fe8fe00:~$ du -sh /home/admin/* 0 /home/admin/��E@�@8@@@@@@����@�@dd@@�R 11M /home/admin/agent 4.0K /home/admin/data 5.1G /home/admin/datafile 2.2M /home/admin/kihei admin@i-0583765cb8fe8fe00:~$ lsblk -l NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT nvme0n1 259:0 0 8G 0 disk nvme1n1 259:1 0 1G 0 disk nvme0n1p1 259:2 0 7.9G 0 part / nvme0n1p14 259:3 0 3M 0 part nvme0n1p15 259:4 0 124M 0 part /boot/efi nvme2n1 259:5 0 1G 0 disk admin@i-0583765cb8fe8fe00:~$ pvcreate /dev/nvme
kihei/i-0583765cb8fe8fe00 08:13
by SadServersadmin@i-0e3126c91f22b8e7e:~$ cd /home/admin/ admin@i-0e3126c91f22b8e7e:~$ ls agent data datafile kihei admin@i-0e3126c91f22b8e7e:~$ ps aux | grep kihei admin 733 0.4 4.1 98188 19420 pts/0 S<l+ 21:13 0:00 /usr/bin/pyth-t kihei/i-0e3126c91f22b8e7e -q -i 2 /var/log/cast/i-0e3126c91f22b8e7e admin 736 0.0 3.0 24456 14364 pts/0 S<+ 21:13 0:00 /usr/bin/pyth-t kihei/i-0e3126c91f22b8e7e -q -i 2 /var/log/cast/i-0e3126c91f22b8e7e admin 747 0.0 0.1 5264 696 pts/1 S<+ 21:14 0:00 grep kihei admin@i-0e3126c91f22b8e7e:~$ chmod -R a-w /var/log/cast/ admin@i-0e3126c91f22b8e7e:~$