command-line-murders/i-011b8b1858445fdeb
by SadServersMore by SadServers
admin@i-0ce4088ffc36025b0:~$ sudo netstat -ntlup We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: Sorry, try again. [sudo] password for admin: sudo: 1 incorrect password attempt admin@i-0ce4088ffc36025b0:~$ ^C admin@i-0ce4088ffc36025b0:~$
paris/i-0ce4088ffc36025b0 01:09
by SadServers_chrony 594 0.0 0.1 10724 548 ? S 08:12 0:00 \_ /usr/sbinroot 592 0.0 0.3 2872 1628 tty1 Ss+ 08:12 0:00 /sbin/agetty y1 linux root 593 0.0 0.4 4396 2036 ttyS0 Ss+ 08:12 0:00 /sbin/agetty 115200,57600,38400,9600 ttyS0 root 609 0.0 3.7 26612 17396 ? Ss 08:12 0:00 /usr/bin/pythd-upgrades/unattended-upgrade admin@i-02ca60cf550cfe05f:/opt$ /home/admin/webserver.py bash: /home/admin/webserver.py: Permission denied admin@i-02ca60cf550cfe05f:/opt$ cd admin@i-02ca60cf550cfe05f:~$ cp webserver.py df.py cp: cannot open 'webserver.py' for reading: Permission denied admin@i-02ca60cf550cfe05f:~$ crontab -l no crontab for admin admin@i-02ca60cf550cfe05f:~$ cd /va
paris/i-02ca60cf550cfe05f 03:34
by SadServers2 2023-09-20T15:58:02 exit 3 2023-12-18T23:23:28 ls 4 2023-12-18T23:23:32 vim webserver.py 5 2023-12-18T23:23:35 ls -l 6 2023-12-18T23:23:37 sudo -l 7 2023-12-18T23:23:44 sudo view webserver.py 8 2023-12-18T23:24:00 ls 9 2023-12-18T23:24:02 ls agent 10 2023-12-18T23:24:08 view agent/check.sh 11 2023-12-18T23:24:22 netstat -nl4 12 2023-12-18T23:24:29 curl 127.0.0.1:5000 13 2023-12-18T23:24:40 curl -v 127.0.0.1:5000 14 2023-12-18T23:25:09 history admin@i-091ee8f6864cabf76:~$ view .bash_history admin@i-091ee8f6864cabf76:~$