command-line-murders/i-03283cf0b5765461d
by SadServersMore by SadServers
> GET / HTTP/1.1 > Host: localhost:5000 > User-Agent: curl/7.74.0 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < Server: Werkzeug/2.3.7 Python/3.9.2 < Date: Sat, 25 Jan 2025 12:59:58 GMT < Content-Type: text/html; charset=utf-8 < Content-Length: 12 < Connection: close < * Closing connection 0 Unauthorizedadmin@i-07858c807135c8851:~$ curl -vvv localhost:5000
paris/i-07858c807135c8851 05:07
by SadServers# The program is typically sudo, sudoers.so, sudoreplay or visudo. # # Subsystems vary based on the program; "all" matches all subsystems. # Priority may be crit, err, warn, notice, diag, info, trace or debug. # Multiple subsystem@priority may be specified, separated by a comma. # #Debug sudo /var/log/sudo_debug all@debug #Debug sudoers.so /var/log/sudoers_debug all@debug admin@i-020f08eb573cc1e85:~$ ls agent webserver.py admin@i-020f08eb573cc1e85:~$ cat /etc/sudo sudo.conf sudo_logsrvd.conf sudoers sudoers.d/ admin@i-020f08eb573cc1e85:~$ cat /etc/sudoers cat: /etc/sudoers: Permission denied admin@i-020f08eb573cc1e85:~$
paris/i-020f08eb573cc1e85 06:02
by SadServers#!/bin/bash expected_checksum="d8bee9d7f830d5fb59b89e1e120cce8e" actual_checksum=$(md5sum /home/admin/mysolution | awk '{print $1}') if [[ "$actual_checksum" == "$expected_checksum" ]]; then echo -n "OK" else echo -n "NO" fiadmin@i-061454707f2cf9aeb:~/agent$ file sadagent sadagent: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linkeH6A8cVluPFUvaNojVwMi/C5t-5rNiA5GJLWeSm5Qz/KXfivG_lDFnrqPGrWEJo/K_OQEFevUZEPr4lPEadmin@i-061454707f2cf9aeb:~/agent$ .. bash: ..: command not found admin@i-061454707f2cf9aeb:~/agent$