command-line-murders/i-09dba9208bea48a63
by SadServersMore by SadServers
admin 680 0.1 4.1 98188 19460 pts/0 R<l+ 04:47 0:00 /usr/bin/pythc -t paris/i-02e1488c6b3b7615d -q -i 2 /var/log/cast/i-02e148 admin 683 0.0 3.1 24456 14808 pts/0 S<+ 04:47 0:00 /usr/bin/pythc -t paris/i-02e1488c6b3b7615d -q -i 2 /var/log/cast/i-02e148 admin 684 0.0 0.1 2480 512 pts/1 S<s 04:47 0:00 sh -c /bin/baadmin 685 0.0 1.0 7216 5060 pts/1 S< 04:47 0:00 /bin/bash admin 877 0.0 0.7 8648 3284 pts/1 R<+ 04:50 0:00 ps aux admin@i-02e1488c6b3b7615d:~$ pwd /home/admin admin@i-02e1488c6b3b7615d:~$ ls agent webserver.py admin@i-02e1488c6b3b7615d:~$ vim webserver.py admin@i-02e1488c6b3b7615d:~$ cat webserver.py cat: webserver.py: Permission denied admin@i-02e1488c6b3b7615d:~$
paris/i-02e1488c6b3b7615d 04:27
by SadServersSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'cSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'fSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'sSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'aSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'dSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'vSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'pSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'nSep 17 16:44:46 i-0632cd9440ade6896 dhclient[485]: XMT: Solicit on ens5, intervaSep 17 16:44:46 i-0632cd9440ade6896 passwd[575]: password for 'admin' changed bySep 17 16:44:47 i-0632cd9440ade6896 cloud-init[536]: Generating public/private rSep 17 16:44:47 i-0632cd9440ade6896 cloud-init[536]: Your identification has beeSep 17 16:44:47 i-0632cd9440ade6896 cloud-init[536]: Your public key has been saSep 17 16:44:47 i-0632cd9440ade6896 cloud-init[536]: The key fingerprint is: lines 601-640