command-line-murders/i-0184e9f2ccf52eb12
by SadServersMore by SadServers
-rw-r----- 1 root adm 17016 Dec 30 11:16 debug -rw-r--r-- 1 root root 15246 Sep 17 17:28 dpkg.log -rw-r--r-- 1 root root 32032 Sep 17 16:44 faillog drwxr-sr-x+ 3 root systemd-journal 4096 Sep 17 16:44 journal -rw-r----- 1 root adm 177288 Dec 30 11:16 kern.log -rw-rw-r-- 1 root utmp 292292 Sep 17 17:28 lastlog -rw-r----- 1 root adm 181036 Dec 30 11:16 messages -rw-r--r-- 1 root root 3952 Dec 30 11:34 minio.log drwx------ 2 root root 4096 Sep 17 16:44 private drwxr-xr-x 3 root root 4096 Sep 28 2021 runit -rw-r----- 1 root adm 324625 Dec 30 11:34 syslog drwxr-x--- 2 root adm 4096 Sep 17 16:44 unattended-upgrades -rw-r----- 1 root adm 19756 Dec 30 11:16 user.log -rw-rw-r-- 1 root utmp 46464 Dec 30 11:16 wtmp admin@i-079bce1478cc18499:/var/log$ jounr
kihei/i-079bce1478cc18499 03:58
by SadServersusers:(("sadagent",pid=562,fd=7)) LISTEN 0 4096 *:8080 users:(("gotty",pid=561,fd=6)) LISTEN 0 128 [::]:22 ESTAB 0 0 [::ffff:172.31.39.204]:8080 [:2 users:(("gotty",pid=561,fd=7)) admin@i-041eafe1d5ef8ef0a:~$ curl localhost:5000 Unauthorizedadmin@i-041eafe1d5ef8ef0a:~$ curl -X POST localhost:5000 <!doctype html> <html lang=en> <title>405 Method Not Allowed</title> <h1>Method Not Allowed</h1> <p>The method is not allowed for the requested URL.</p> admin@i-041eafe1d5ef8ef0a:~$
paris/i-041eafe1d5ef8ef0a 02:59
by SadServerstotal 44 drwxr-xr-x 6 admin admin 4096 Sep 24 2023 . drwxr-xr-x 3 root root 4096 Sep 17 2023 .. drwx------ 3 admin admin 4096 Sep 20 2023 .ansible -rw------- 1 admin admin 379 Nov 4 03:55 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 2023 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 2023 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py admin@i-0462cf041b08d8861:~$ chown -R admin:admin /home/admin/ chown: changing ownership of '/home/admin/webserver.py': Operation not permittedadmin@i-0462cf041b08d8861:~$ curl http