command-line-murders/i-008f5c9eebfd0c010
by SadServersMore by SadServers
admin@i-059b6f6d550bc2d25:~$ ls agent data datafile kihei admin@i-059b6f6d550bc2d25:~$ ls -l total 5245048 drwxr-xr-x 2 admin root 4096 Sep 17 17:28 agent drwxr-xr-x 2 admin root 4096 Sep 17 17:28 data -rw-r--r-- 1 root root 5368709120 Sep 17 17:28 datafile -rwxr-xr-x 1 admin root 2207109 Sep 17 17:28 kihei admin@i-059b6f6d550bc2d25:~$ ./kihei panic: exit status 1 goroutine 1 [running]: main.main() ./main.go:64 +0x47d admin@i-059b6f6d550bc2d25:~$
kihei/i-059b6f6d550bc2d25 00:16
by SadServerstcp LISTEN 0 4096 *:http-alt users:(("gotty",pid=605,fd=6)) admin@i-0f2c680030560b990:~$ curl 127.0.0.1 curl: (7) Failed to connect to 127.0.0.1 port 80: Connection refused admin@i-0f2c680030560b990:~$ vi test.txt admin@i-0f2c680030560b990:~$ bash text.txt bash: text.txt: No such file or directory admin@i-0f2c680030560b990:~$ ls agent test.txt admin@i-0f2c680030560b990:~$ cat test.txt for i in {1..65535} do nc 127.0.0.1 $i done admin@i-0f2c680030560b990:~$ vi test.txt admin@i-0f2c680030560b990:~$
taipei/i-0f2c680030560b990 02:30
by SadServers#2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: sudo: a password is required admin@i-0e74c6feeef89a0ae:~$ for i in $(seq 1 65536); do echo -n "." nmap -PS $i localhost > /dev/null output=$(curl --silent localhost) echo $output | egrep -v "^Who is there\?$" && echo "yay - $i" done . yay - 1 ................... admin@i-0e74c6feeef89a0ae:~$ nmap -PS 1
taipei/i-0e74c6feeef89a0ae 00:54
by SadServerstcp ESTAB 0 0 [::ffff:172.31. [::ffff:172.31.16.109]:49770 timer:(keepalive,3.216ms,0) admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ lsof -i:5000 admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ lsof -i COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME gotty 558 admin 6u IPv6 10895 0t0 TCP *:http-alt (LISTEN) gotty 558 admin 7u IPv6 12340 0t0 TCP ip-172-31-40-35.us-east-2.co>ip-172-31-16-109.us-east-2.compute.internal:49770 (ESTABLISHED) sadagent 559 admin 7u IPv6 1958 0t0 TCP *:6767 (LISTEN) admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$