command-line-murders/i-0827732e1346206a3
by SadServersMore by SadServers
root 593 0.0 1.4 13488 6708 ? Ss 11:53 0:00 /lib/systemd/_chrony 597 0.0 0.7 10856 3636 ? S 11:53 0:00 /usr/sbin/chrroot 598 0.0 1.5 13348 7144 ? Ss 11:53 0:00 sshd: /usr/sbroot 599 0.0 0.3 2872 1684 tty1 Ss+ 11:53 0:00 /sbin/agetty root 600 0.0 0.4 4396 2100 ttyS0 Ss+ 11:53 0:00 /sbin/agetty _chrony 601 0.0 0.1 10724 548 ? S 11:53 0:00 /usr/sbin/chrroot 622 0.0 3.7 26612 17332 ? Ss 11:53 0:00 /usr/bin/pythroot 677 0.0 0.0 0 0 ? I 11:53 0:00 [kworker/1:4-admin 789 0.0 0.7 5920 3552 pts/0 S<s+ 11:57 0:00 bash -l admin 791 0.7 4.1 98188 19356 pts/0 R<l+ 11:57 0:00 /usr/bin/pythadmin 794 0.0 3.1 24456 14504 pts/0 S<+ 11:57 0:00 /usr/bin/pythadmin 795 0.0 0.1 2480 508 pts/1 S<s 11:57 0:00 sh -c /bin/baadmin 796 0.0 0.9 6820 4532 pts/1 S< 11:57 0:00 /bin/bash admin 799 0.0 0.6 8648 3180 pts/1 R<+ 11:57 0:00 ps aux admin@i-0f090ab9a046ad6f3:~$ ps aux | gtr
kihei/i-0f090ab9a046ad6f3 00:16
by SadServersroot 614 0.0 0.0 0 0 ? I 11:23 0:00 [kworker/0:3-root 678 0.0 0.0 0 0 ? I 11:23 0:00 [kworker/0:4-admin 709 0.0 0.9 6740 4376 pts/0 S<s+ 11:24 0:00 bash -l admin 714 0.2 4.1 98188 19364 pts/0 S<l+ 11:24 0:00 /usr/bin/pythadmin 717 0.0 3.1 24456 14504 pts/0 R<+ 11:24 0:00 /usr/bin/pythadmin 718 0.0 0.1 2480 508 pts/1 S<s 11:24 0:00 sh -c /bin/baadmin 719 0.0 0.9 6820 4612 pts/1 S< 11:24 0:00 /bin/bash admin 759 0.0 0.6 8648 3248 pts/1 R<+ 11:25 0:00 ps aux admin@i-0c3de957f9712f12c:~$ ls agent webserver.py admin@i-0c3de957f9712f12c:~$ less webserver.py webserver.py: Permission denied admin@i-0c3de957f9712f12c:~$ cat webserver.py cat: webserver.py: Permission denied admin@i-0c3de957f9712f12c:~$ ls -
paris/i-0c3de957f9712f12c 01:23
by SadServers[sudo] password for admin: Sorry, try again. [sudo] password for admin: sudo: 1 incorrect password attempt admin@i-0b5ae01707d129981:~$ ^Cdo cat webserver.py admin@i-0b5ae01707d129981:~$ ^C admin@i-0b5ae01707d129981:~$ ls -la webserver.py -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-0b5ae01707d129981:~$ ps aux | webserver bash: webserver: command not found admin@i-0b5ae01707d129981:~$ ps aux |grep webserver root 574 0.1 6.0 107132 28344 ? Ss 18:05 0:00 /usr/bin/pyth.py admin 804 0.0 0.1 5264 704 pts/1 S<+ 18:08 0:00 grep webserveadmin@i-0b5ae01707d129981:~$ systemctl st
paris/i-0b5ae01707d129981 03:24
by SadServerstmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-0d525feb31fad1b54:~$ ls /run agetty.reload crond.reboot initramfs sendsigs.omit.d udev blkid dbus lock shm unattended-upgradchrony dhclient.ens5.pid log sshd unattended-upgradchrony-dhcp dhclient6.ens5.pid lvm sshd.pid user cloud-init dmeventd-client mount sudo utmp credentials dmeventd-server network systemd uuidd crond.pid initctl screen tmpfiles.d admin@i-0d525feb31fad1b54:~$ df -h /proc Filesystem Size Used Avail Use% Mounted on proc 0 0 0 - /proc admin@i-0d525feb31fad1b54:~$