command-line-murders/i-0b4c4cb3b31897cad
by SadServersMore by SadServers
et unix 2 [ ACC ] STREAM LISTENING 10712 - unix 2 [ ACC ] STREAM LISTENING 719 - unix 2 [ ACC ] STREAM LISTENING 721 - stemd.DynamicUser unix 2 [ ACC ] STREAM LISTENING 722 - nagedOOM unix 2 [ ACC ] STREAM LISTENING 9567 - s unix 2 [ ACC ] STREAM LISTENING 9575 - ut unix 2 [ ACC ] SEQPACKET LISTENING 9577 - unix 2 [ ACC ] STREAM LISTENING 9612 - ystemd.journal admin@i-00bc6276d68bc20cd:~$ netstat -lp | grep 8
paris/i-00bc6276d68bc20cd 01:20
by SadServers-L possibly with LWP and NLWP columns -m, m after processes -T possibly with SPID column For more details see ps(1). admin@i-06321e2dae7759c94:~$ sudo lsof -i -P -n | grep LISTEN We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin:
paris/i-06321e2dae7759c94 04:30
by SadServers< * Closing connection 0 Unauthorizedadmin@i-0d6c8205647b0d23a:~$ cd /var/ admin@i-0d6c8205647b0d23a:/var$ ls backups cache lib local lock log mail opt run spool tmp admin@i-0d6c8205647b0d23a:/var$ cd admin@i-0d6c8205647b0d23a:~$ cd /etc/ admin@i-0d6c8205647b0d23a:/etc$ cd admin@i-0d6c8205647b0d23a:~$ cd /tmp/ admin@i-0d6c8205647b0d23a:/tmp$ ls -rtlh total 8.0K drwx------ 3 root root 4.0K Dec 19 19:01 systemd-private-c3458b1790024874be47c82drwx------ 3 root root 4.0K Dec 19 19:01 systemd-private-c3458b1790024874be47c82admin@i-0d6c8205647b0d23a:/tmp$ cd admin@i-0d6c8205647b0d23a:~$ echo authorized | m