command-line-murders/i-03caff25977c01b2a
by SadServersMore by SadServers
total 52 drwxr-xr-x 6 admin admin 4096 Jan 29 01:18 . drwxr-xr-x 3 root root 4096 Sep 17 2023 .. drwx------ 3 admin admin 4096 Sep 20 2023 .ansible -rw------- 1 admin admin 655 Jan 29 01:20 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 2023 .config -rw------- 1 admin admin 35 Jan 29 01:18 .lesshst -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile -rw------- 1 admin admin 12 Jan 29 01:17 .python_history drwx------ 2 admin admin 4096 Sep 17 2023 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py admin@i-08df73095031700ec:/proc/579$ ls -la ~/
paris/i-08df73095031700ec 05:25
by SadServersadmin@i-0990a16ca6f06cf40:~$ chmod 777 web.py chmod: changing permissions of 'web.py': Operation not permitted admin@i-0990a16ca6f06cf40:~$ ls agent mysolution web.py admin@i-0990a16ca6f06cf40:~$ mv web.py we^C admin@i-0990a16ca6f06cf40:~$ cp web.py webserver.py cp: cannot open 'web.py' for reading: Permission denied admin@i-0990a16ca6f06cf40:~$ ls agent mysolution web.py admin@i-0990a16ca6f06cf40:~$ ls agent mysolution web.py admin@i-0990a16ca6f06cf40:~$ curl localhost:50000 curl: (7) Failed to connect to localhost port 50000: Connection refused admin@i-0990a16ca6f06cf40:~$ curl localhost:5000 Unauthorizedadmin@i-0990a16ca6f06cf40:~$ curl localhost:5000
paris/i-0990a16ca6f06cf40 03:53
by SadServersadmin@i-0139974abc9a432af:~$ ls -lah total 5.1G drwxr-xr-x 7 admin admin 4.0K Oct 24 12:11 . drwxr-xr-x 3 root root 4.0K Sep 17 2023 .. drwx------ 3 admin admin 4.0K Sep 17 2023 .ansible -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3.5K Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4.0K Oct 24 12:11 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4.0K Sep 17 2023 .ssh drwxr-xr-x 2 admin root 4.0K Sep 17 2023 agent drwxr-xr-x 2 admin root 4.0K Oct 24 12:19 data -rw-r--r-- 1 admin admin 5.0G Sep 17 2023 datafile -rwxr-xr-x 1 admin root 2.2M Sep 17 2023 kihei admin@i-0139974abc9a432af:~$ ls -lah
kihei/i-0139974abc9a432af 04:15
by SadServers[:delay_enter=DELAY][:delay_exit=DELAY][:when=WHEN], --inject=SET[:error=ERRNO|:retval=VALUE][:signal=SIG][:syscall=SYSCALL] [:delay_enter=DELAY][:delay_exit=DELAY][:when=WHEN] perform syscall tampering for the syscalls in SET delay: microseconds or NUMBER{s|ms|us|ns} when: FIRST[..LAST][+[STEP]] -e fault=SET[:error=ERRNO][:when=WHEN], --fault=SET[:error=ERRNO][:when=WHEN] synonym for -e inject with default ERRNO set to ENOSYS. Miscellaneous: -d, --debug enable debug output to stderr -h, --help print help message --seccomp-bpf enable seccomp-bpf filtering -V, --version print version admin@i-054157b3157fdc4cd:~$ strace ./kihei -v