command-line-murders/i-0522c5e3ba4bdf4e7
by SadServersMore by SadServers
|pts/0ts/0admin107.179.135.94D�e�� k��|pts/0D�e�� k��|pts/0F�e y|pts/0ts/0admin107.179.135.94F�e8�k��|pts/0G�eɘ|pts/0ts/0admin1/0H�e:�~~~shutdown5.10.0-25-cloud-amd64Y�e ~~~reboot5.10.0-25-cloud-amd64� e��5~~N/dev/tty1tty1NG� e��Ntty1tty1tty1LOGINNG� e��admin@i-0d2a132facede947e:/var/logi-0d2a132facede947e admin@i-0d2a132facede947e:/var/log$ ls alternatives.log auth.log btmp chrony daemon.log journal kern.log.2.gz messages.1 private syslog.1 user.lalternatives.log.1 auth.log.1 btmp.1 cloud-init-output.log daemon.log.1 kern.log lastlog messages.2.gz runit syslog.2.gz user.lapt auth.log.2.gz cast cloud-init.log daemon.log.2.g kern.log.1 messages minio.log syslog unattended-upgrades user.ladmin@i-0d2a132facede947e:/var/log$ ls ^C admin@i-0d2a132facede947e:/var/log$
paris/i-0d2a132facede947e 08:25
by SadServerspipe2([5, 6], O_NONBLOCK|O_CLOEXEC) = 0 epoll_ctl(4, EPOLL_CTL_ADD, 5, {EPOLLIN, {u32=5871088, u64=5871088}}) = 0 epoll_ctl(4, EPOLL_CTL_ADD, 3, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=157228read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1540 close(3) = 0 write(1, "Error: This program cannot be ru"..., 59Error: This program cannot be ) = 59 exit_group(1) = ? +++ exited with 1 +++ root@i-0a33e9937e66b67a2:/var/log# exit exit admin@i-0a33e9937e66b67a2:~$ cd admin@i-0a33e9937e66b67a2:~$ bash kihei kihei: kihei: cannot execute binary file admin@i-0a33e9937e66b67a2:~$ stra
kihei/i-0a33e9937e66b67a2 05:11
by SadServers--help Show this help -H --halt Halt the machine -P --poweroff Power-off the machine -r --reboot Reboot the machine -h Equivalent to --poweroff, overridden by --halt -k Don't halt/power-off/reboot, just send warnings --no-wall Don't send wall message before halt/power-off/reboot -c Cancel a pending shutdown See the shutdown(8) man page for details. admin@i-01318c13a92295c75:/etc/systemd/system$ sudo shutdown -^C admin@i-01318c13a92295c75:/etc/systemd/system$ cd admin@i-01318c13a92295c75:~$ ls a.py agent admin@i-01318c13a92295c75:~$
paris/i-01318c13a92295c75 01:11
by SadServersadmin 801 0.0 4.1 98188 19424 pts/0 S<l+ 10:11 0:00 /usr/bin/pythec -t kihei/i-025570eb46de4c5ab -q -i 2 /var/log/cast/i-025570eb46de4c5ab admin 804 0.0 3.0 24456 14368 pts/0 S<+ 10:11 0:00 /usr/bin/pythec -t kihei/i-025570eb46de4c5ab -q -i 2 /var/log/cast/i-025570eb46de4c5ab admin 953 0.0 0.1 5264 640 pts/1 S<+ 10:16 0:00 grep kihei admin@i-025570eb46de4c5ab:~$ kill 801 admin@i-025570eb46de4c5ab:~$ ps aux | grep kihei admin 987 2.0 4.1 98188 19436 pts/0 S<l+ 10:16 0:00 /usr/bin/pythec -t kihei/i-025570eb46de4c5ab --append -q -i 2 /var/log/cast/i-025570eb46de4c5admin 990 0.0 3.1 24456 14872 pts/0 S<+ 10:16 0:00 /usr/bin/pythec -t kihei/i-025570eb46de4c5ab --append -q -i 2 /var/log/cast/i-025570eb46de4c5admin 996 0.0 0.1 5264 640 pts/1 S<+ 10:16 0:00 grep kihei admin@i-025570eb46de4c5ab:~$ ls -al /var/log/cast/i-025570eb46de4c5ab -rw-r--r-- 1 admin admin 19241 Nov 5 10:17 /var/log/cast/i-025570eb46de4c5ab admin@i-025570eb46de4c5ab:~$ l /var/log/cast/i-025570eb46de4c5ab