command-line-murders/i-012d95c0a53c464f2
by SadServersMore by SadServers
agent webserver.py admin@i-04dca6e1ae246a837:~$ curl localhost:5000 Unauthorizedadmin@i-04dca6e1ae246a837:~$ history | grep sudo 5 2025-03-28T01:12:44 sudo cat webserver.py 8 2025-03-28T01:14:06 history | grep sudo admin@i-04dca6e1ae246a837:~$ sudo udo grep -r "password" /etc/ We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin:
paris/i-04dca6e1ae246a837 01:41
by SadServersvg/ vga_arbiter admin@i-0d9668085bc026fc4:~$ ls /dev/vg vg/ vga_arbiter admin@i-0d9668085bc026fc4:~$ ls /dev/vg/lv /dev/vg/lv admin@i-0d9668085bc026fc4:~$ ls /dev/vg/lv ^C admin@i-0d9668085bc026fc4:~$ mount ^C admin@i-0d9668085bc026fc4:~$ sudo mount /dev/vg/lv ^C admin@i-0d9668085bc026fc4:~$ ^C admin@i-0d9668085bc026fc4:~$ ls agent data datafile kihei admin@i-0d9668085bc026fc4:~$ pwd /home/admin admin@i-0d9668085bc026fc4:~$ mkdir lv admin@i-0d9668085bc026fc4:~$ sudo mount /dev/vg/lv
kihei/i-0d9668085bc026fc4 05:04
by SadServers) = 1 [pid 1299] exit_group(2) = ? [pid 1302] <... futex resumed>) = ? [pid 1301] <... futex resumed>) = ? [pid 1300] <... futex resumed>) = ? [pid 1300] +++ exited with 2 +++ [pid 1303] <... futex resumed>) = ? [pid 1302] +++ exited with 2 +++ [pid 1301] +++ exited with 2 +++ [pid 1303] +++ exited with 2 +++ +++ exited with 2 +++ admin@i-0b55e00bc204a4de1:~$ ls -l /home/admin/data total 16 drwx------ 2 root root 16384 Mar 10 18:50 lost+found admin@i-0b55e00bc204a4de1:~$