command-line-murders/i-071c8194e55528ee9
by SadServersMore by SadServers
* Closing connection 0 Unauthorizedadmin@i-0250e23e35d81792d:~$ admin@i-0250e23e35d81792d:~$ admin@i-0250e23e35d81792d:~$ sudo su We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: ^Csudo: 1 incorrect password attempt admin@i-0250e23e35d81792d:~$ vi exploi
paris/i-0250e23e35d81792d 02:48
by SadServersadmin@i-0d3a11c0c70c20cf9:~$ lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT nvme0n1 259:0 0 8G 0 disk ├─nvme0n1p1 259:2 0 7.9G 0 part / ├─nvme0n1p14 259:3 0 3M 0 part └─nvme0n1p15 259:4 0 124M 0 part /boot/efi nvme2n1 259:1 0 1G 0 disk nvme1n1 259:5 0 1G 0 disk admin@i-0d3a11c0c70c20cf9:~$ vgcreate dd /dev/nvme1n1 /dev/nvme2n1 WARNING: Running as a non-root user. Functionality may be unavailable. /run/lock/lvm/P_global:aux: open failed: Permission denied admin@i-0d3a11c0c70c20cf9:~$ sudo vgcreate dd /dev/nvme1n1 /dev/nvme2n1 Volume group "dd" successfully created admin@i-0d3a11c0c70c20cf9:~$ sudo lvcreate ap
kihei/i-0d3a11c0c70c20cf9 05:22
by SadServers│ └─594 /sbin/agetty -o -p -- \u --noclear tty1 linux ├─systemd-logind.service │ └─585 /lib/systemd/systemd-logind └─gotty.service ├─565 /usr/local/gotty --permit-write --reconnect --max-connectio ├─690 bash -l ├─695 /usr/bin/python3 /usr/bin/asciinema rec -t paris/i-0541fd78og/cast/i-0541fd782d91559ca ├─698 /usr/bin/python3 /usr/bin/asciinema rec -t paris/i-0541fd78og/cast/i-0541fd782d91559ca ├─699 sh -c /bin/bash ├─700 /bin/bash ├─982 systemctl status └─983 less admin@i-0541fd782d91559ca:~$
paris/i-0541fd782d91559ca 05:09
by SadServersadmin@i-0215c6153f5619eae:~$ ls -a .ansible/tmp/ . .. admin@i-0215c6153f5619eae:~$ ls -a agent/ . .. check.sh sadagent sadagent.txt admin@i-0215c6153f5619eae:~$ ls -a agent/sadagent agent/sadagent admin@i-0215c6153f5619eae:~$ ls -a agent/sadagent sadagent sadagent.txt admin@i-0215c6153f5619eae:~$ ls -a agent/sadagent sadagent sadagent.txt admin@i-0215c6153f5619eae:~$ less agent/check.sh admin@i-0215c6153f5619eae:~$ less agent/sadagent.txt admin@i-0215c6153f5619eae:~$ less agent/sadagent "agent/sadagent" may be a binary file. See it anyway? admin@i-0215c6153f5619eae:~$ sudo echo '