command-line-murders/i-03ebd347a9253a962
by SadServersMore by SadServers
mmap(0x7f6d4f8a6000, 151552, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, mmap(0x7f6d4f8cb000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENY6d4f8cb000 mmap(0x7f6d4f8d1000, 848, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYM000 close(3) = 0 openat(AT_FDCWD, "/usr/lib/sudo/libpam.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (Nopenat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=17664, ...}) = 0 mmap(NULL, 17664, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f6d4f8e6000 close(3) = 0 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\2005\0\0\0\0\0\0"..., 83fstat(3, {st_mode=S_IFREG|0644, st_size=67584, ...}) = 0 :
kihei/i-0a8c0a88489f2c5dc 03:24
by SadServers-rw-r--r-- 1 root root 5.0G Sep 17 2023 datafile -rwxr-xr-x 1 admin root 2.2M Sep 17 2023 kihei admin@i-0ddd50f9df146da5c:~$ ls -lh /home total 4.0K drwxr-xr-x 7 admin admin 4.0K Mar 10 18:11 admin admin@i-0ddd50f9df146da5c:~$ stat /home/admin/datafile File: /home/admin/datafile Size: 5368709120 Blocks: 10485768 IO Block: 4096 regular file Device: 10303h/66307d Inode: 264701 Links: 1 Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2023-09-17 17:28:37.402800568 +0000 Modify: 2023-09-17 17:28:37.486796321 +0000 Change: 2023-09-17 17:28:37.486796321 +0000 Birth: 2023-09-17 17:28:37.402800568 +0000 admin@i-0ddd50f9df146da5c:~$
kihei/i-0ddd50f9df146da5c 02:27
by SadServersnvme0n1 259:0 0 8G 0 disk ├─nvme0n1p1 259:2 0 7.9G 0 part / ├─nvme0n1p14 259:3 0 3M 0 part └─nvme0n1p15 259:4 0 124M 0 part /boot/efi nvme2n1 259:1 0 1G 0 disk └─nvme2n1p1 259:6 0 1023M 0 part / nvme1n1 259:5 0 1G 0 disk └─nvme1n1p1 259:7 0 1023M 0 part / root@i-0078115fbaab7ba67:/home/admin# ./ .ansible/ .config/ .ssh/ agent/ data/ kihei root@i-0078115fbaab7ba67:/home/admin# ./ .ansible/ .config/ .ssh/ agent/ data/ kihei root@i-0078115fbaab7ba67:/home/admin# ./agent/ check.sh sadagent root@i-0078115fbaab7ba67:/home/admin# ./agent/check.sh