command-line-murders/i-065c9830a59996047
by SadServersMore by SadServers
tracefs on /sys/kernel/tracing type tracefs (rw,nosuid,nodev,noexec,relatime) fusectl on /sys/fs/fuse/connections type fusectl (rw,nosuid,nodev,noexec,relatimconfigfs on /sys/kernel/config type configfs (rw,nosuid,nodev,noexec,relatime) /dev/nvme0n1p15 on /boot/efi type vfat (rw,relatime,fmask=0022,dmask=0022,codepaadmin@i-0b26d5501c20c30f7:~$ touch tmp admin@i-0b26d5501c20c30f7:~$ la bash: la: command not found admin@i-0b26d5501c20c30f7:~$ ls agent data datafile kihei tmp admin@i-0b26d5501c20c30f7:~$ rm tmp admin@i-0b26d5501c20c30f7:~$ mkdir temp admin@i-0b26d5501c20c30f7:~$ mv datafile temp/^C (reverse-i-search)`': ^C admin@i-0b26d5501c20c30f7:~$ sudo mount /dev/vg/lv ./temp admin@i-0b26d5501c20c30f7:~$ mv datafile temp/
kihei/i-0b26d5501c20c30f7 05:10
by SadServers83 -q -i 2 /var/log/cast/i-0df1765d3 admin 681 0.0 3.0 24456 14444 pts/0 R<+ 02:55 0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d3 admin 682 0.0 0.1 2480 572 pts/1 S<s 02:55 0:00 sh -c /bin/baadmin 683 0.0 0.9 6820 4536 pts/1 S< 02:55 0:00 /bin/bash admin 716 0.0 0.6 8648 3136 pts/1 R<+ 02:56 0:00 ps -aux admin@i-0df1765d381c3a083:~$ ps -aux | grep kihei admin 678 0.4 4.1 98188 19260 pts/0 S<l+ 02:55 0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d381c3a083 admin 681 0.0 3.0 24456 14444 pts/0 S<+ 02:55 0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d381c3a083 admin 718 0.0 0.1 5264 704 pts/1 S<+ 02:56 0:00 grep kihei admin@i-0df1765d381c3a083:~$ ls agent data datafile kihei admin@i-0df1765d381c3a083:~$
kihei/i-0df1765d381c3a083 00:56
by SadServersdrwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-08d654c3783758f46:~$ vim webserver.py admin@i-08d654c3783758f46:~$ sudo vim webserver.py We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: sudo: a password is required admin@i-08d654c3783758f46:~$