command-line-murders/i-01a8d5164a5ec2b0d
by SadServersMore by SadServers
-rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 2023 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 2023 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py admin@i-0c7688c6e49a68923:~$ cd /var/log admin@i-0c7688c6e49a68923:/var/log$ ls alternatives.log auth.log btmp chrony daemon.log journal kern.log.2.gz messages.1 private syslog.1 user.lalternatives.log.1 auth.log.1 btmp.1 cloud-init-output.log daemon.log.1 kern.log lastlog messages.2.gz runit syslog.2.gz user.lapt auth.log.2.gz cast cloud-init.log daemon.log.2.g kern.log.1 messages minio.log syslog unattended-upgrades user.ladmin@i-0c7688c6e49a68923:/var/log$ less
paris/i-0c7688c6e49a68923 04:44
by SadServers[sudo] password for admin: sudo: 1 incorrect password attempt admin@i-04a84196af5c95871:~$ ^C admin@i-04a84196af5c95871:~$ ^C admin@i-04a84196af5c95871:~$ ls agent index.html mysolution webserver.py admin@i-04a84196af5c95871:~$ su root Password: su: Authentication failure admin@i-04a84196af5c95871:~$ su root Password: su: Authentication failure admin@i-04a84196af5c95871:~$ ls agent index.html mysolution webserver.py admin@i-04a84196af5c95871:~$ cat /var/ww
paris/i-04a84196af5c95871 07:17
by SadServersadmin@i-0649ad53cc05cfe4d:~$ curl localhost:5000 Unauthorizedadmin@i-0649ad53cc05cfe4d:~$ cd /etc/ng bash: cd: /etc/ng: No such file or directory admin@i-0649ad53cc05cfe4d:~$ netstat -tunlp | grep 5000 (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN admin@i-0649ad53cc05cfe4d:~$ ss -ntlp | grep 500