command-line-murders/i-082f839add9dc8559
by SadServersMore by SadServers
We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: Sorry, try again. [sudo] password for admin: Sorry, try again. [sudo] password for admin: sudo: 3 incorrect password attempts admin@i-040ec55e8e002101c:~$ find / -name webserver
paris/i-040ec55e8e002101c 02:48
by SadServersroot 685 2 0 23:37 ? 00:00:00 [kworker/0:4-events] admin 687 563 0 23:37 pts/0 00:00:00 bash -l admin 691 687 0 23:37 pts/0 00:00:00 /usr/bin/python3 /usr/bin/asadmin 694 691 0 23:37 pts/0 00:00:00 /usr/bin/python3 /usr/bin/asadmin 695 691 0 23:37 pts/1 00:00:00 sh -c /bin/bash admin 696 695 0 23:37 pts/1 00:00:00 /bin/bash root 704 2 0 23:37 ? 00:00:00 [kworker/u4:4-events_unboundadmin 957 696 0 23:43 pts/1 00:00:00 ps -ef admin@i-0c6e74f29b5339b88:~$ ps -ef | grep web root 580 1 0 23:37 ? 00:00:00 /usr/bin/python3 /home/adminadmin 960 696 0 23:43 pts/1 00:00:00 grep web admin@i-0c6e74f29b5339b88:~$ cat /proc/580/mem cat: /proc/580/mem: Permission denied admin@i-0c6e74f29b5339b88:~$ ^Ct /proc/580/mem admin@i-0c6e74f29b5339b88:~$ cd /
paris/i-0c6e74f29b5339b88 06:10
by SadServerslatest revision: https://github.com/lsof-org/lsof latest FAQ: https://github.com/lsof-org/lsof/blob/master/00FAQ latest (non-formatted) man page: https://github.com/lsof-org/lsof/blob/master/L usage: [-?abhKlnNoOPRtUvVX] [+|-c c] [+|-d s] [+D D] [+|-E] [+|-e s] [+|-f[gG]] [-F [f]] [-g [s]] [-i [i]] [+|-L [l]] [+m [m]] [+|-M] [-o [o]] [-p s] [+|-r [t]] [-s [p:s]] [-S [t]] [-T [t]] [-u s] [+|-w] [-x [fl]] [--] [names] Use the ``-h'' option to get more help information. admin@i-0d46f6faaf9ff441c:~$ lsof -n -i :5000 admin@i-0d46f6faaf9ff441c:~$ netstat -tulpn | grep 5000 (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN admin@i-0d46f6faaf9ff441c:~$ nc localhost 5000 ^C admin@i-0d46f6faaf9ff441c:~$ tel