paris/i-0ff13c81e3a7b9d0a
by SadServersMore by SadServers
admin 680 0.1 4.1 98188 19460 pts/0 R<l+ 04:47 0:00 /usr/bin/pythc -t paris/i-02e1488c6b3b7615d -q -i 2 /var/log/cast/i-02e148 admin 683 0.0 3.1 24456 14808 pts/0 S<+ 04:47 0:00 /usr/bin/pythc -t paris/i-02e1488c6b3b7615d -q -i 2 /var/log/cast/i-02e148 admin 684 0.0 0.1 2480 512 pts/1 S<s 04:47 0:00 sh -c /bin/baadmin 685 0.0 1.0 7216 5060 pts/1 S< 04:47 0:00 /bin/bash admin 877 0.0 0.7 8648 3284 pts/1 R<+ 04:50 0:00 ps aux admin@i-02e1488c6b3b7615d:~$ pwd /home/admin admin@i-02e1488c6b3b7615d:~$ ls agent webserver.py admin@i-02e1488c6b3b7615d:~$ vim webserver.py admin@i-02e1488c6b3b7615d:~$ cat webserver.py cat: webserver.py: Permission denied admin@i-02e1488c6b3b7615d:~$
paris/i-02e1488c6b3b7615d 04:27
by SadServersPV UUID xTEa7y-sQcC-Tmjd-VSH2-MlAO-C2u2-sWZAXO "/dev/sdc" is a new physical volume of "1.00 GiB" --- NEW Physical volume --- PV Name /dev/sdc VG Name PV Size 1.00 GiB Allocatable NO PE Size 0 Total PE 0 Free PE 0 Allocated PE 0 PV UUID 9X9f4F-6vBb-Nan3-dd22-Qmcz-GoV2-5ftAX1 root@i-0af4ddd14bb1492e4:~# root@i-0af4ddd14bb1492e4:~#
kihei/i-0af4ddd14bb1492e4 07:38
by SadServers< * Closing connection 0 Unauthorizedadmin@i-0d6c8205647b0d23a:~$ cd /var/ admin@i-0d6c8205647b0d23a:/var$ ls backups cache lib local lock log mail opt run spool tmp admin@i-0d6c8205647b0d23a:/var$ cd admin@i-0d6c8205647b0d23a:~$ cd /etc/ admin@i-0d6c8205647b0d23a:/etc$ cd admin@i-0d6c8205647b0d23a:~$ cd /tmp/ admin@i-0d6c8205647b0d23a:/tmp$ ls -rtlh total 8.0K drwx------ 3 root root 4.0K Dec 19 19:01 systemd-private-c3458b1790024874be47c82drwx------ 3 root root 4.0K Dec 19 19:01 systemd-private-c3458b1790024874be47c82admin@i-0d6c8205647b0d23a:/tmp$ cd admin@i-0d6c8205647b0d23a:~$ echo authorized | m
paris/i-0d6c8205647b0d23a 07:22
by SadServerswrite(2, "(", 1() = 1 write(2, ")\n", 2) ) = 2 write(2, "\t", 1 ) = 1 write(2, "./main.go", 9./main.go) = 9 write(2, ":", 1:) = 1 write(2, "64", 264) = 2 write(2, " +", 2 +) = 2 write(2, "0x47d", 50x47d) = 5 write(2, "\n", 1 ) = 1 exit_group(2) = ? +++ exited with 2 +++ admin@i-0ba0e9134ae67be7e:~$ ls data admin@i-0ba0e9134ae67be7e:~$