command-line-murders/i-0bf76614e57fb72f6
by SadServersMore by SadServers
sudo: a password is required admin@i-02a189271ae7f8c79:~$ ls -lah total 44K drwxr-xr-x 6 admin admin 4.0K Sep 24 23:20 . drwxr-xr-x 3 root root 4.0K Sep 17 16:44 .. drwx------ 3 admin admin 4.0K Sep 20 15:52 .ansible -rw------- 1 admin admin 268 Jan 7 12:26 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3.5K Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4.0K Sep 20 15:56 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4.0K Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4.0K Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-02a189271ae7f8c79:~$
paris/i-02a189271ae7f8c79 01:32
by SadServersadmin@i-0eb97cd7b88e01b26:~$ ls agent webserver.py admin@i-0eb97cd7b88e01b26:~$ cd we bash: cd: we: No such file or directory admin@i-0eb97cd7b88e01b26:~$ ls agent/ check.sh sadagent sadagent.txt admin@i-0eb97cd7b88e01b26:~$ cd .. admin@i-0eb97cd7b88e01b26:/home$ ls
paris/i-0eb97cd7b88e01b26 00:43
by SadServersSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'cSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'fSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'sSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'aSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'dSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'vSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'pSep 17 16:44:46 i-0632cd9440ade6896 useradd[568]: add 'admin' to shadow group 'nSep 17 16:44:46 i-0632cd9440ade6896 dhclient[485]: XMT: Solicit on ens5, intervaSep 17 16:44:46 i-0632cd9440ade6896 passwd[575]: password for 'admin' changed bySep 17 16:44:47 i-0632cd9440ade6896 cloud-init[536]: Generating public/private rSep 17 16:44:47 i-0632cd9440ade6896 cloud-init[536]: Your identification has beeSep 17 16:44:47 i-0632cd9440ade6896 cloud-init[536]: Your public key has been saSep 17 16:44:47 i-0632cd9440ade6896 cloud-init[536]: The key fingerprint is: lines 601-640