command-line-murders/i-0888cc2931629ba3a
by SadServersMore by SadServers
admin@i-0102423b4d32663a7:~$ curl 127.0.0.1:5000 Unauthorizedadmin@i-0102423b4d32663a7:~$ admin@i-0102423b4d32663a7:~$ admin@i-0102423b4d32663a7:~$ ls agent webserver.py admin@i-0102423b4d32663a7:~$ less webserver.py webserver.py: Permission denied admin@i-0102423b4d32663a7:~$ ll bash: ll: command not found admin@i-0102423b4d32663a7:~$ cat webserver.py cat: webserver.py: Permission denied admin@i-0102423b4d32663a7:~$ cd agent/ admin@i-0102423b4d32663a7:~/agent$ ls check.sh sadagent sadagent.txt admin@i-0102423b4d32663a7:~/agent$ ls
paris/i-0102423b4d32663a7 02:35
by SadServers12 2025-02-06T12:08:17 curl localhost:5000 13 2025-02-06T12:08:20 ls 14 2025-02-06T12:08:23 cat webserver.py 15 2025-02-06T12:08:31 ls -la 16 2025-02-06T12:08:49 history admin@i-06266520ce0c16bec:~$ sudo su We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin:
paris/i-06266520ce0c16bec 03:31
by SadServersdrwxr-xr-x 2 admin root 4.0K Oct 26 12:42 data -rw-r--r-- 1 admin admin 5.0M Sep 17 17:28 datafile.gz -rwxr-xr-x 1 admin root 2.2M Sep 17 17:28 kihei admin@i-0dabf03a12f2ad847:~$ df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 1.1G 6.2G 15% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-0dabf03a12f2ad847:~$ ./kihei Done. admin@i-0dabf03a12f2ad847:~$ mv datafile.gz datafile admin@i-0dabf03a12f2ad847:~$ strace ./k
kihei/i-0dabf03a12f2ad847 07:26
by SadServerswrite(2, "main.main", 9main.main) = 9 write(2, "(", 1() = 1 write(2, ")\n", 2) ) = 2 write(2, "\t", 1 ) = 1 write(2, "./main.go", 9./main.go) = 9 write(2, ":", 1:) = 1 write(2, "64", 264) = 2 write(2, " +", 2 +) = 2 write(2, "0x47d", 50x47d) = 5 write(2, "\n", 1 ) = 1 exit_group(2) = ? +++ exited with 2 +++ admin@i-0109112ade8b96d83:~$