command-line-murders/i-0b38cc81ad5880059
by SadServersMore by SadServers
file"] /var/log/cast/i-008b0220d06b61fa7:[297.457658, "o", "\b\b\b\b\b\b\b\b\b\b\b-name/var/log/cast/i-008b0220d06b61fa7:[301.266025, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\/var/log -name newdatafile"] /var/log/cast/i-008b0220d06b61fa7:[339.22969, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\btafile /var/log"] /var/log/cast/i-008b0220d06b61fa7:[339.527642, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\file"] /var/log/cast/i-008b0220d06b61fa7:[340.82254, "o", "\b\b\b\b\b\b\b\b\b\b\b-name /var/log/cast/i-008b0220d06b61fa7:[347.397351, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\atafile /var/log"] grep: /var/log/btmp: Permission denied grep: /var/log/private: Permission denied grep: /var/log/chrony: Permission denied admin@i-008b0220d06b61fa7:~$ /home/admin/kihei
kihei/i-008b0220d06b61fa7 06:01
by SadServers4 ./data 8 ./.config/asciinema 12 ./.config 8 ./.ssh 5256228 . admin@i-0eda2bc33bbba2475:~$ du -h . 11M ./agent 4.0K ./.ansible/tmp 8.0K ./.ansible 4.0K ./data 8.0K ./.config/asciinema 12K ./.config 8.0K ./.ssh 5.1G . admin@i-0eda2bc33bbba2475:~$ lsblk -l
kihei/i-0eda2bc33bbba2475 05:31
by SadServersadmin@i-098403fc39803a851:~$ curl localhost:5000 Unauthorizedadmin@i-098403fc39803a851:~$ nc localhost 5000 GET / admin@i-098403fc39803a851:~$ admin@i-098403fc39803a851:~$ nc -v localhost 5000 Connection to localhost (127.0.0.1) 5000 port [tcp/*] succeeded! GET / Welcome! Password is FDZPmh5AX3oiJt admin@i-098403fc39803a851:~$ curl -u FDZPmh5AX3oiJt localhost:5000 Enter host password for user 'FDZPmh5AX3oiJt':
paris/i-098403fc39803a851 01:49
by SadServers</body> </html> Connection closed by foreign host. admin@i-06cd2f2879efb2fb1:~$ nmap localhost Starting Nmap 7.80 ( https://nmap.org ) at 2024-02-28 12:40 UTC Nmap scan report for localhost (127.0.0.1) Host is up (0.00022s latency). Not shown: 997 closed ports PORT STATE SERVICE 22/tcp open ssh 5000/tcp open upnp 8080/tcp open http-proxy Nmap done: 1 IP address (1 host up) scanned in 0.09 seconds admin@i-06cd2f2879efb2fb1:~$ telnet localhost 5000