command-line-murders/i-0fb6bd339a6bff167
by SadServersMore by SadServers
Sorry, try again. [sudo] password for admin: sudo: 1 incorrect password attempt admin@i-03e132f618d80584c:~$ sudo curl localhost:5000 We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: sudo: a password is required admin@i-03e132f618d80584c:~$ ls
paris/i-03e132f618d80584c 01:36
by SadServersadmin@i-01dd903cae99da8dd:~$ ls -la /home/admin/kihei -rwxr-xr-x 1 admin root 2207109 Sep 17 2023 /home/admin/kihei admin@i-01dd903cae99da8dd:~$ lsof /home/admin/kihei admin@i-01dd903cae99da8dd:~$ lsof /home/admin/ COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME gotty 571 admin cwd DIR 259,3 4096 272476 /home/admin bash 681 admin cwd DIR 259,3 4096 272476 /home/admin asciinema 683 admin cwd DIR 259,3 4096 272476 /home/admin asciinema 686 admin cwd DIR 259,3 4096 272476 /home/admin sh 687 admin cwd DIR 259,3 4096 272476 /home/admin bash 688 admin cwd DIR 259,3 4096 272476 /home/admin lsof 733 admin cwd DIR 259,3 4096 272476 /home/admin lsof 734 admin cwd DIR 259,3 4096 272476 /home/admin admin@i-01dd903cae99da8dd:~$ lsof /home/admin/^C admin@i-01dd903cae99da8dd:~$ ps aux /
kihei/i-01dd903cae99da8dd 02:09
by SadServersadmin@i-02e1f7758a02de499:~$ ^C admin@i-02e1f7758a02de499:~$ ls -la total 44 drwxr-xr-x 6 admin admin 4096 Sep 24 23:20 . drwxr-xr-x 3 root root 4096 Sep 17 16:44 .. drwx------ 3 admin admin 4096 Sep 20 15:52 .ansible -rw------- 1 admin admin 1036 Oct 20 18:12 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-02e1f7758a02de499:~$ curl -vv "http://localhost:5000"