command-line-murders/i-04b37400b3b6266e3
by SadServersMore by SadServers
voluntary_ctxt_switches: 898 nonvoluntary_ctxt_switches: 81 admin@i-05ce3246527379f18:~$ cat /proc/575/ arch_status cwd mem patch_state attr/ environ mountinfo personality autogroup exe mounts projid_map auxv fd/ mountstats root cgroup fdinfo/ net/ sched clear_refs gid_map ns/ schedstat cmdline io numa_maps sessionid comm limits oom_adj setgroups coredump_filter loginuid oom_score smaps cpu_resctrl_groups map_files/ oom_score_adj smaps_rollup cpuset maps pagemap stack admin@i-05ce3246527379f18:~$ cat /proc/575/map
paris/i-05ce3246527379f18 08:31
by SadServersadmin@i-0f543fbc21a7f9861:~$ ls -al total 5245080 drwxr-xr-x 7 admin admin 4096 Feb 7 22:52 . drwxr-xr-x 3 root root 4096 Sep 17 16:44 .. drwx------ 3 admin admin 4096 Sep 17 17:15 .ansible -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Feb 7 22:52 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4096 Sep 17 17:28 agent drwxr-xr-x 2 admin root 4096 Feb 7 22:53 data -rw-r--r-- 1 root root 5368709120 Sep 17 17:28 datafile -rwxr-xr-x 1 admin root 2207109 Sep 17 17:28 kihei admin@i-0f543fbc21a7f9861:~$
kihei/i-0f543fbc21a7f9861 01:15
by SadServersroot 685 2 0 23:37 ? 00:00:00 [kworker/0:4-events] admin 687 563 0 23:37 pts/0 00:00:00 bash -l admin 691 687 0 23:37 pts/0 00:00:00 /usr/bin/python3 /usr/bin/asadmin 694 691 0 23:37 pts/0 00:00:00 /usr/bin/python3 /usr/bin/asadmin 695 691 0 23:37 pts/1 00:00:00 sh -c /bin/bash admin 696 695 0 23:37 pts/1 00:00:00 /bin/bash root 704 2 0 23:37 ? 00:00:00 [kworker/u4:4-events_unboundadmin 957 696 0 23:43 pts/1 00:00:00 ps -ef admin@i-0c6e74f29b5339b88:~$ ps -ef | grep web root 580 1 0 23:37 ? 00:00:00 /usr/bin/python3 /home/adminadmin 960 696 0 23:43 pts/1 00:00:00 grep web admin@i-0c6e74f29b5339b88:~$ cat /proc/580/mem cat: /proc/580/mem: Permission denied admin@i-0c6e74f29b5339b88:~$ ^Ct /proc/580/mem admin@i-0c6e74f29b5339b88:~$ cd /