command-line-murders/i-008c573babd232d7c
by SadServersMore by SadServers
var/log/cast/i-0ab6a2520fcfc7895 admin 722 0.0 0.1 5264 700 pts/1 S<+ 13:46 0:00 grep kihei admin@i-0ab6a2520fcfc7895:~$ ./kihei panic: exit status 1 goroutine 1 [running]: main.main() ./main.go:64 +0x47d admin@i-0ab6a2520fcfc7895:~$ ps aux | grep "kihei" admin 705 0.2 4.1 98188 19220 pts/0 S<l+ 13:46 0:00 /usr/bin/pythvar/log/cast/i-0ab6a2520fcfc7895 admin 708 0.0 3.0 24456 14448 pts/0 S<+ 13:46 0:00 /usr/bin/pythvar/log/cast/i-0ab6a2520fcfc7895 admin 759 0.0 0.1 5264 632 pts/1 R<+ 13:47 0:00 grep kihei admin@i-0ab6a2520fcfc7895:~$ ls
kihei/i-0ab6a2520fcfc7895 01:01
by SadServersadmin@i-01dd903cae99da8dd:~$ ls -la /home/admin/kihei -rwxr-xr-x 1 admin root 2207109 Sep 17 2023 /home/admin/kihei admin@i-01dd903cae99da8dd:~$ lsof /home/admin/kihei admin@i-01dd903cae99da8dd:~$ lsof /home/admin/ COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME gotty 571 admin cwd DIR 259,3 4096 272476 /home/admin bash 681 admin cwd DIR 259,3 4096 272476 /home/admin asciinema 683 admin cwd DIR 259,3 4096 272476 /home/admin asciinema 686 admin cwd DIR 259,3 4096 272476 /home/admin sh 687 admin cwd DIR 259,3 4096 272476 /home/admin bash 688 admin cwd DIR 259,3 4096 272476 /home/admin lsof 733 admin cwd DIR 259,3 4096 272476 /home/admin lsof 734 admin cwd DIR 259,3 4096 272476 /home/admin admin@i-01dd903cae99da8dd:~$ lsof /home/admin/^C admin@i-01dd903cae99da8dd:~$ ps aux /
kihei/i-01dd903cae99da8dd 02:09
by SadServersUnauthorizedadmin@i-01f465ecb0e6b6e62:~$ curl localhost:5000 Unauthorizedadmin@i-01f465ecb0e6b6e62:~$ ls agent webserver.py admin@i-01f465ecb0e6b6e62:~$ nano webserver.py admin@i-01f465ecb0e6b6e62:~$ sudo nano webserver.py We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: