kihei/i-0d84045134fee46c3
by SadServersMore by SadServers
admin 740 0.0 0.1 2480 512 pts/1 S<s 03:27 0:00 sh -c /bin/baadmin 741 0.0 0.9 6820 4524 pts/1 S< 03:27 0:00 /bin/bash root 744 0.0 0.9 9336 4588 pts/1 S< 03:27 0:00 sudo su root 745 0.0 0.9 8672 4480 pts/1 S< 03:27 0:00 su root 747 0.1 1.6 15048 7636 ? Ss 03:27 0:00 /lib/systemd/root 748 0.0 0.5 101096 2640 ? S 03:27 0:00 (sd-pam) root 753 0.0 0.7 6052 3720 pts/1 S< 03:27 0:00 bash root 760 0.0 0.9 8672 4476 pts/1 S< 03:27 0:00 su admin admin 761 0.0 0.9 6824 4524 pts/1 S< 03:27 0:00 bash admin 770 0.0 0.6 8648 3164 pts/1 R<+ 03:28 0:00 ps aux admin@i-0f837dbf94cba2c30:~$ ls agent data datafile kihei admin@i-0f837dbf94cba2c30:~$ type kihei bash: type: kihei: not found admin@i-0f837dbf94cba2c30:~$ f
kihei/i-0f837dbf94cba2c30 01:20
by SadServersgoroutine 1 [running]: main.main() ./main.go:64 +0x47d admin@i-0f6d76d4e64ebbaa3:~$ less /home/admin/kihei "/home/admin/kihei" may be a binary file. See it anyway? admin@i-0f6d76d4e64ebbaa3:~$ admin@i-0f6d76d4e64ebbaa3:~$ df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-0f6d76d4e64ebbaa3:~$
kihei/i-0f6d76d4e64ebbaa3 00:29
by SadServersdrwxr-xr-x 7 admin admin 4096 Dec 6 15:59 . drwxr-xr-x 3 root root 4096 Sep 17 16:44 .. drwx------ 3 admin admin 4096 Sep 17 17:15 .ansible -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Dec 6 15:59 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4096 Sep 17 17:28 agent drwxr-xr-x 2 admin root 4096 Sep 17 17:28 data -rw-r--r-- 1 root root 5368709120 Sep 17 17:28 datafile -rwxr-xr-x 1 admin root 2207109 Sep 17 17:28 kihei admin@i-06aaa324a79f9607e:~$ less kihei "kihei" may be a binary file. See it anyway? admin@i-06aaa324a79f9607e:~$