command-line-murders/i-0748fca43280bcdc4
by SadServersMore by SadServers
ls: cannot access '/pid/579': No such file or directory admin@i-02fded2ca795f43ce:~$ ls /proc/579 ls: cannot read symbolic link '/proc/579/cwd': Permission denied ls: cannot read symbolic link '/proc/579/root': Permission denied ls: cannot read symbolic link '/proc/579/exe': Permission denied arch_status cgroup coredump_filter environ gid_map map_files mountattr clear_refs cpu_resctrl_groups exe io maps mountautogroup cmdline cpuset fd limits mem net auxv comm cwd fdinfo loginuid mountinfo ns admin@i-02fded2ca795f43ce:~$ ls /proc/579^C admin@i-02fded2ca795f43ce:~$ ^C admin@i-02fded2ca795f43ce:~$ ^C admin@i-02fded2ca795f43ce:~$ /proc/579/root curl localhost:5000 bash: /proc/579/root: Permission denied admin@i-02fded2ca795f43ce:~$
paris/i-02fded2ca795f43ce 03:41
by SadServersadmin@i-07594f4388b113ffb:~/agent$ cd .. admin@i-07594f4388b113ffb:~$ ls -la total 44 drwxr-xr-x 6 admin admin 4096 Sep 24 23:20 . drwxr-xr-x 3 root root 4096 Sep 17 16:44 .. drwx------ 3 admin admin 4096 Sep 20 15:52 .ansible -rw------- 1 admin admin 484 Nov 2 18:40 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-07594f4388b113ffb:~$
paris/i-07594f4388b113ffb 02:04
by SadServers988 pts/1 R<+ 0:00 ps ax admin@i-0748faed17a21b9f5:~/agent$ ls check.sh sadagent sadagent.txt admin@i-0748faed17a21b9f5:~/agent$ cd .. admin@i-0748faed17a21b9f5:~$ ls agent webserver.py admin@i-0748faed17a21b9f5:~$ ls -l total 8 drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py admin@i-0748faed17a21b9f5:~$ cd /var/lib/ admin@i-0748faed17a21b9f5:/var/lib$ ls apt cloud dhcp grub man-db pam private sgml-base systemd uchrony dbus dpkg logrotate misc polkit-1 python sudo ucf vadmin@i-0748faed17a21b9f5:/var/lib$ cd