kihei/i-083b7578bfc6bea16
by SadServersMore by SadServers
4.0K ./var/lib/dpkg/updates 32K ./var/lib/dpkg/triggers 176K ./var/lib/dpkg/alternatives 12M ./var/lib/dpkg/info 13M ./var/lib/dpkg 140M ./var/lib 4.0K ./var/local 4.0K ./var/opt 4.0K ./var/mail 274M ./var 4.0K ./srv 4.0K ./opt 4.0K ./mnt 6.1G . admin@i-0abbf3344370ffdae:/$ du -a
kihei/i-0abbf3344370ffdae 01:36
by SadServers# The program is typically sudo, sudoers.so, sudoreplay or visudo. # # Subsystems vary based on the program; "all" matches all subsystems. # Priority may be crit, err, warn, notice, diag, info, trace or debug. # Multiple subsystem@priority may be specified, separated by a comma. # #Debug sudo /var/log/sudo_debug all@debug #Debug sudoers.so /var/log/sudoers_debug all@debug admin@i-020f08eb573cc1e85:~$ ls agent webserver.py admin@i-020f08eb573cc1e85:~$ cat /etc/sudo sudo.conf sudo_logsrvd.conf sudoers sudoers.d/ admin@i-020f08eb573cc1e85:~$ cat /etc/sudoers cat: /etc/sudoers: Permission denied admin@i-020f08eb573cc1e85:~$
paris/i-020f08eb573cc1e85 06:02
by SadServerstcp ESTAB 0 0 [::ffff:172.31. [::ffff:172.31.16.109]:49770 timer:(keepalive,3.216ms,0) admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ lsof -i:5000 admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ lsof -i COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME gotty 558 admin 6u IPv6 10895 0t0 TCP *:http-alt (LISTEN) gotty 558 admin 7u IPv6 12340 0t0 TCP ip-172-31-40-35.us-east-2.co>ip-172-31-16-109.us-east-2.compute.internal:49770 (ESTABLISHED) sadagent 559 admin 7u IPv6 1958 0t0 TCP *:6767 (LISTEN) admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$
paris/i-0bce630416db45b25 03:00
by SadServerscat: /usr/bin/python3/home/admin/webserver.py: Not a directory admin@i-0daf7211d0c2a006e:~$ cd /usr/bin/python3/home/admin/webserver.py bash: cd: /usr/bin/python3/home/admin/webserver.py: Not a directory admin@i-0daf7211d0c2a006e:~$ vim /usr/bin/python3/home/admin/webserver.py admin@i-0daf7211d0c2a006e:~$ ion ]; thenmpletiontion ]; then/profile:locus=01:qu