SadServers Joined on September 10, 2023

root         590  0.0  0.9 220796  4244 ?        Ssl  14:15   0:00 /usr/sbin/rsyroot         594  0.1  1.1  13488  5416 ?        Ss   14:15   0:00 /lib/systemd/_chrony      595  0.0  0.7  10856  3724 ?        S    14:15   0:00 /usr/sbin/chr_chrony      600  0.0  0.1  10724   556 ?        S    14:15   0:00 /usr/sbin/chrroot         601  0.2  0.3   2872  1740 tty1     Ss+  14:15   0:00 /sbin/agetty root         603  0.0  0.4   4396  2144 ttyS0    Ss+  14:15   0:00 /sbin/agetty root         604  0.0  1.5  13348  7020 ?        Ss   14:15   0:00 sshd: /usr/sbroot         620  0.1  3.7  26612 17336 ?        Ss   14:15   0:00 /usr/bin/pythadmin        675  0.0  0.7   5920  3632 pts/0    S<s+ 14:15   0:00 bash -l      admin        678  0.4  4.1  98188 19388 pts/0    R<l+ 14:15   0:00 /usr/bin/pythadmin        681  0.0  3.0  24456 14432 pts/0    R<+  14:15   0:00 /usr/bin/pythadmin        682  0.0  0.1   2480   508 pts/1    S<s  14:15   0:00 sh -c /bin/baadmin        683  0.0  0.9   6820  4428 pts/1    S<   14:15   0:00 /bin/bash    admin        688  0.0  0.6   8648  3176 pts/1    R<+  14:16   0:00 ps auux      admin@i-0113c5af4b6af66cd:~$ which                                              

admin@i-05e54bfb217033b38:~$ curl localhost:5000                                Unauthorizedadmin@i-05e54bfb217033b38:~$ ls -ltr                                total 8                                                                         -rwxrwx--- 1 root  root  360 Sep 24 23:20 webserver.py                          drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent                                 admin@i-05e54bfb217033b38:~$ cat webserver.py                                   cat: webserver.py: Permission denied                                            admin@i-05e54bfb217033b38:~$                                                    

4.0K    /opt                                                                    du: cannot access '/proc/923/task/923/fd/4': No such file or directory          du: cannot access '/proc/923/task/923/fdinfo/4': No such file or directory      du: cannot access '/proc/923/fd/3': No such file or directory                   du: cannot access '/proc/923/fdinfo/3': No such file or directory               0       /proc                                                                   60K     /root                                                                   384K    /run                                                                    0       /sbin                                                                   4.0K    /srv                                                                    0       /sys                                                                    40K     /tmp                                                                    755M    /usr                                                                    281M    /var                                                                    root@i-05312dad7e1185a46:/home/admin#                                           

admin@i-0afae0e70e6636201:~$ ls -alh                                            total 5.1G                                                                      drwxr-xr-x 7 admin admin 4.0K Nov 24 20:43 .                                    drwxr-xr-x 3 root  root  4.0K Sep 17 16:44 ..                                   drwx------ 3 admin admin 4.0K Sep 17 17:15 .ansible                             -rw-r--r-- 1 admin admin  220 Aug  4  2021 .bash_logout                         -rw-r--r-- 1 admin admin 3.5K Aug  4  2021 .bashrc                              drwxr-xr-x 3 admin admin 4.0K Nov 24 20:43 .config                              -rw-r--r-- 1 admin admin  807 Aug  4  2021 .profile                             drwx------ 2 admin admin 4.0K Sep 17 16:44 .ssh                                 drwxr-xr-x 2 admin root  4.0K Sep 17 17:28 agent                                drwxr-xr-x 2 admin root  4.0K Nov 24 20:43 data                                 -rw-r--r-- 1 root  root  5.0G Sep 17 17:28 datafile                             -rwxr-xr-x 1 admin root  2.2M Sep 17 17:28 kihei                                admin@i-0afae0e70e6636201:~$                                                    

ty1     Ss+  20:00   0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux           root         593  0.0  0.4   4396  2028 ttyS0    Ss+  20:00   0:00 /sbin/agetty -o -p -- \u --keep-baud 115200,57          _chrony      595  0.0  0.7  10852  3716 ?        S    20:00   0:00 /usr/sbin/chronyd -F 1                                  _chrony      596  0.0  0.1  10724   552 ?        S    20:00   0:00  \_ /usr/sbin/chronyd -F 1                              root         611  0.0  3.7  26612 17296 ?        Ss   20:00   0:00 /usr/bin/python3 /usr/share/unattended-upgrade          admin@i-020b6c81f12d03fba:~$ ca          

[Service]                                                                       ExecStart=/usr/bin/python3 /home/admin/webserver.py                                                                                                             [Install]                                                                       WantedBy=multi-user.target                                                      admin@i-0ebbbbda7606d97e5:/etc/systemd/system$ cat /home/admin/webserver.py     cat: /home/admin/webserver.py: Permission denied                                admin@i-0ebbbbda7606d97e5:/etc/systemd/system$ ps aux | grep webserver          root         564  0.2  5.9  33040 27816 ?        Ss   22:43   0:00 /usr/bin/pythadmin        814  0.0  0.1   5264   704 pts/1    R<+  22:45   0:00 grep webserveadmin@i-0ebbbbda7606d97e5:/etc/systemd/system$ cat /proc/5                      5/   50/  51/  52/  54/  55/  557/ 558/ 56/  561/ 562/ 564/ 565/ 57/  58/  581/ admin@i-0ebbbbda7606d97e5:/etc/systemd/system$ cat /proc/5                      5/   50/  51/  52/  54/  55/  557/ 558/ 56/  561/ 562/ 564/ 565/ 57/  58/  581/ admin@i-0ebbbbda7606d97e5:/etc/systemd/system$ cat /proc/55                     

admin@i-0c86aaede796dd0fb:~$ ды                                                 bash: ды: command not found                                                     admin@i-0c86aaede796dd0fb:~$ ls                                                 agent  webserver.py                                                             admin@i-0c86aaede796dd0fb:~$ ls -l                                              total 8                                                                         drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent                                 -rwxrwx--- 1 root  root  360 Sep 24 23:20 webserver.py                          admin@i-0c86aaede796dd0fb:~$ curl localhost:5000                                Unauthorizedadmin@i-0c86aaede796dd0fb:~$                                        admin@i-0c86aaede796dd0fb:~$ curl localhost:5000                                

u_str ESTAB 0      0                                 * 11417                    u_str ESTAB 0      0       /run/systemd/journal/stdout 10756                    u_str ESTAB 0      0       /run/systemd/journal/stdout 10757                    u_str ESTAB 0      0                                 * 10588                    u_str ESTAB 0      0                                 * 8888                     u_str ESTAB 0      0       /run/systemd/journal/stdout 8911                     u_str ESTAB 0      0                                 * 10605                    u_str ESTAB 0      0                                 * 10597                    u_str ESTAB 0      0                                 * 10587                    u_str ESTAB 0      0                                 * 10571                    u_str ESTAB 0      0       /run/systemd/journal/stdout 10747                    u_str ESTAB 0      0       /run/systemd/journal/stdout 10770                    u_str ESTAB 0      0       /run/systemd/journal/stdout 10771                    tcp   ESTAB 0      0            [::ffff:172.31.46.140]:http-alt   [::ffff:172.31admin@i-05640abf76c220ed1:~$ netstat -tulp                                      

  <link rel="icon" href="icon.svg" type="image/svg+xml">                          <link rel="stylesheet" href="./css/index.css" />                                <link rel="stylesheet" href="./css/xterm.css" />                                <link rel="stylesheet" href="./css/xterm_customize.css" />                      <meta name="viewport" content="width=device-width, initial-scale=1">          </head>                                                                                                                                                         <body>                                                                            <div id="terminal"></div>                                                       <script src="./auth_token.js"></script>                                         <script src="./config.js"></script>                                             <script src="./js/gotty.js"></script>                                         </body>                                                                                                                                                         </html>admin@i-0994a038ccb66d5c6:~$                                             

admin@i-08a1941667a15b5b6:/home$ cd /var/log/                                   admin@i-08a1941667a15b5b6:/var/log$ ls                                          alternatives.log    auth.log.2.gz  cloud-init-output.log  debug       faillog   te      unattended-upgrades                                                     alternatives.log.1  btmp           cloud-init.log         debug.1     journal           user.log                                                                apt                 btmp.1         daemon.log             debug.2.gz  kern.log  g       user.log.1                                                              auth.log            cast           daemon.log.1           dpkg.log    kern.log.1g.1     user.log.2.gz                                                           auth.log.1          chrony         daemon.log.2.gz        dpkg.log.1  kern.log.2g.2.gz  wtmp                                                                    admin@i-08a1941667a15b5b6:/var/log$ less messages                               admin@i-08a1941667a15b5b6:/var/log$ less syslog                                 admin@i-08a1941667a15b5b6:/var/log$ c                                           

ss           ssh          ssh-add      ssh-agent    ssh-argv0    ssh-copy-id  ssadmin@i-0aa042ade078e1d14:~$ ss -tulnp | grep :5000                             tcp   LISTEN 0      128                          127.0.0.1:5000      0.0.0.0:*  admin@i-0aa042ade078e1d14:~$ ps ax | grep 128                                       845 pts/1    R<+    0:00 grep 128                                           admin@i-0aa042ade078e1d14:~$                                                    admin@i-0aa042ade078e1d14:~$                                                    admin@i-0aa042ade078e1d14:~$                                                    admin@i-0aa042ade078e1d14:~$ ls /etc/                                           Display all 153 possibilities? (y or n)                                         admin@i-0aa042ade078e1d14:~$ ls /etc/n                                          nanorc         netconfig      network/       networks       nsswitch.conf       admin@i-0aa042ade078e1d14:~$ ls /etc/n                                          nanorc         netconfig      network/       networks       nsswitch.conf       admin@i-0aa042ade078e1d14:~$ ls /etc/                                           

admin@i-0ba063de908116e06:~$ curl -A 'agent                                     

admin@i-0eb3b6c9b06538fd3:~$ nc localhost 5000                                  GET /                                                                           

admin@i-09ab8a8b9d764d718:~$ ls -la                                             total 44                                                                        drwxr-xr-x 6 admin admin 4096 Sep 24 23:20 .                                    drwxr-xr-x 3 root  root  4096 Sep 17 16:44 ..                                   drwx------ 3 admin admin 4096 Sep 20 15:52 .ansible                             -rw------- 1 admin admin  485 Nov 13 22:00 .bash_history                        -rw-r--r-- 1 admin admin  220 Aug  4  2021 .bash_logout                         -rw-r--r-- 1 admin admin 3526 Aug  4  2021 .bashrc                              drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config                              -rw-r--r-- 1 admin admin  807 Aug  4  2021 .profile                             drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh                                 drwxr-xr-x 2 admin root  4096 Sep 24 23:20 agent                                -rwxrwx--- 1 root  root   360 Sep 24 23:20 webserver.py                         admin@i-09ab8a8b9d764d718:~$ less .bash_history                                 admin@i-09ab8a8b9d764d718:~$