command-line-murders/i-0b9de22b0fdff8353
by SadServersMore by SadServers
unix 3 [ ] STREAM CONNECTED 11297 - unix 3 [ ] SEQPACKET CONNECTED 11367 - unix 3 [ ] STREAM CONNECTED 11437 - et unix 3 [ ] STREAM CONNECTED 10838 - unix 3 [ ] STREAM CONNECTED 10827 - unix 3 [ ] STREAM CONNECTED 10839 - et unix 3 [ ] STREAM CONNECTED 11473 - ut admin@i-01253b0100cbaa15e:~$ netstat -anp | grep 5000 (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN admin@i-01253b0100cbaa15e:~$ ps -ef | G
paris/i-01253b0100cbaa15e 01:07
by SadServersMain PID: 579 (python3) Tasks: 1 (limit: 521) Memory: 21.9M CPU: 329ms CGroup: /system.slice/flaskapp.service └─579 /usr/bin/python3 /home/admin/webserver.py Nov 29 16:17:05 i-0658b8fdee95eb0b6 systemd[1]: Started Flask Application. Nov 29 16:17:06 i-0658b8fdee95eb0b6 python3[579]: * Serving Flask app 'webserveNov 29 16:17:06 i-0658b8fdee95eb0b6 python3[579]: * Debug mode: off Nov 29 16:17:06 i-0658b8fdee95eb0b6 python3[579]: WARNING: This is a developmentNov 29 16:17:06 i-0658b8fdee95eb0b6 python3[579]: * Running on http://127.0.0.1Nov 29 16:17:06 i-0658b8fdee95eb0b6 python3[579]: Press CTRL+C to quit Nov 29 16:17:35 i-0658b8fdee95eb0b6 python3[579]: 127.0.0.1 - - [29/Nov/2023 16:admin@i-0658b8fdee95eb0b6:~$ > /home/admin/.bash_history
paris/i-0658b8fdee95eb0b6 00:51
by SadServersLISTEN 0 4096 *:6767 users:(("sadagent",pid=565,fd=7)) LISTEN 0 4096 *:8080 users:(("gotty",pid=564,fd=6)) ESTAB 0 0 [::ffff:172.31.33.75]:8080 [::ffff users:(("gotty",pid=564,fd=7)) admin@i-0fefafcf5226688e9:/proc/576$ watch 'ss -antp' admin@i-0fefafcf5226688e9:/proc/576$ cd ~ admin@i-0fefafcf5226688e9:~$ ls -l total 8 drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py admin@i-0fefafcf5226688e9:~$ find / -perm ^C admin@i-0fefafcf5226688e9:~$