command-line-murders/i-0590d66c97d8a150a
by SadServersMore by SadServers
admin@i-0215c6153f5619eae:~$ ls -a .ansible/tmp/ . .. admin@i-0215c6153f5619eae:~$ ls -a agent/ . .. check.sh sadagent sadagent.txt admin@i-0215c6153f5619eae:~$ ls -a agent/sadagent agent/sadagent admin@i-0215c6153f5619eae:~$ ls -a agent/sadagent sadagent sadagent.txt admin@i-0215c6153f5619eae:~$ ls -a agent/sadagent sadagent sadagent.txt admin@i-0215c6153f5619eae:~$ less agent/check.sh admin@i-0215c6153f5619eae:~$ less agent/sadagent.txt admin@i-0215c6153f5619eae:~$ less agent/sadagent "agent/sadagent" may be a binary file. See it anyway? admin@i-0215c6153f5619eae:~$ sudo echo '
paris/i-0215c6153f5619eae 05:50
by SadServers[:delay_enter=DELAY][:delay_exit=DELAY][:when=WHEN], --inject=SET[:error=ERRNO|:retval=VALUE][:signal=SIG][:syscall=SYSCALL] [:delay_enter=DELAY][:delay_exit=DELAY][:when=WHEN] perform syscall tampering for the syscalls in SET delay: microseconds or NUMBER{s|ms|us|ns} when: FIRST[..LAST][+[STEP]] -e fault=SET[:error=ERRNO][:when=WHEN], --fault=SET[:error=ERRNO][:when=WHEN] synonym for -e inject with default ERRNO set to ENOSYS. Miscellaneous: -d, --debug enable debug output to stderr -h, --help print help message --seccomp-bpf enable seccomp-bpf filtering -V, --version print version admin@i-054157b3157fdc4cd:~$ strace ./kihei -v
kihei/i-054157b3157fdc4cd 01:21
by SadServersDisk /dev/nvme1n1: 1 GiB, 1073741824 bytes, 2097152 sectors Disk model: Amazon Elastic Block Store Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 4096 bytes / 4096 bytes Disk /dev/nvme2n1: 1 GiB, 1073741824 bytes, 2097152 sectors Disk model: Amazon Elastic Block Store Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 4096 bytes / 4096 bytes admin@i-06e4118a8793fca70:~$
kihei/i-06e4118a8793fca70 08:46
by SadServerssystemd-coredump:x:998:998:systemd Core Dumper:/:/usr/sbin/nologin admin:x:1000:1000:Debian:/home/admin:/bin/bash admin@i-0f800ac9579c95f93:~$ sudo su We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: sudo: no password was provided sudo: a password is required admin@i-0f800ac9579c95f93:~$