command-line-murders/i-0c8d35310541d1b69
by SadServersMore by SadServers
/home/admin/.ansible/tmp /home/admin/stuff /home/admin/.config /home/admin/.config/asciinema /home/admin/.config/asciinema/install-id /home/admin/.profile /home/admin/.ssh /home/admin/.ssh/authorized_keys /home/admin/.bash_logout /home/admin/.bashrc /home/admin/.bash_history /dev/pts/1 /dev/pts/0 /var/log/cast /var/log/cast/i-088c078b20497e4c0
paris/i-088c078b20497e4c0 04:19
by SadServersnt-Type: application/x-www-form-urlencoded' --data-urlencode 'password=" or 1=1'Access denied!admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localnt-Type: application/x-www-form-urlencoded' --data-urlencode 'password=" or "1"=Access denied!admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localnt-Type: application/x-www-form-urlencoded' --data-urlencode 'password=^Cor "1"=admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localhost:5000' \ --header 'Content-Type: application/x-www-form-urlencoded' \ --data-urlencode 'password='\'' or '\''1'\''='\''1' admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localhost:5000' \al--header 'Content-Type: application/x-www-form-urlencoded' \ --data-urlencode 'password=' admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localhost:5000' \al--form 'password="admin"' Access denied!admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'locald="admin"'
monaco/i-09f0e7c74e34fbdd9 05:55
by SadServersadmin@i-0990a16ca6f06cf40:~$ chmod 777 web.py chmod: changing permissions of 'web.py': Operation not permitted admin@i-0990a16ca6f06cf40:~$ ls agent mysolution web.py admin@i-0990a16ca6f06cf40:~$ mv web.py we^C admin@i-0990a16ca6f06cf40:~$ cp web.py webserver.py cp: cannot open 'web.py' for reading: Permission denied admin@i-0990a16ca6f06cf40:~$ ls agent mysolution web.py admin@i-0990a16ca6f06cf40:~$ ls agent mysolution web.py admin@i-0990a16ca6f06cf40:~$ curl localhost:50000 curl: (7) Failed to connect to localhost port 50000: Connection refused admin@i-0990a16ca6f06cf40:~$ curl localhost:5000 Unauthorizedadmin@i-0990a16ca6f06cf40:~$ curl localhost:5000