admin 695 0.1 0.9 6952 4600 pts/1 S< 15:52 0:00 /bin/bash admin 705 0.0 0.6 8648 3216 pts/1 R<+ 15:52 0:00 ps aux ww admin@i-09ca2bfbe0a48f3ce:~$ ps aux^C admin@i-09ca2bfbe0a48f3ce:~$ curl localhost:5000 Unauthorizedadmin@i-09ca2bfbe0a48f3ce:~$ lsof -n | grep 581 python3 581 root cwd unknown /proc/581/cwd (readlink: Permission denied) python3 581 root rtd unknown /proc/581/root (readlink: Permission denied) python3 581 root txt unknown /proc/581/exe (readlink: Permission denied) python3 581 root NOFD /proc/581/fd (opendir: Permission denied) admin@i-09ca2bfbe0a48f3ce:~$ ps aux | grep 581 root 581 0.4 6.0 107132 28324 ? Ss 15:52 0:00 /usr/bin/python3 /home/admin/webserver.py admin 713 0.0 0.1 5264 640 pts/1 S<+ 15:53 0:00 grep 581 admin@i-09ca2bfbe0a48f3ce:~$ ls -la total 44 drwxr-xr-x 6 admin admin 4096 Sep 24 23:20 . drwxr-xr-x 3 root root 4096 Sep 17 16:44 .. drwx------ 3 admin admin 4096 Sep 20 15:52 .ansible -rw------- 1 admin admin 262 Jan 5 15:53 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-09ca2bfbe0a48f3ce:~$ ls -la .config/ total 12 drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 . drwxr-xr-x 6 admin admin 4096 Sep 24 23:20 .. drwxr-xr-x 2 admin admin 4096 Sep 20 15:56 asciinema admin@i-09ca2bfbe0a48f3ce:~$ ls -la .config/asciinema/ total 12 drwxr-xr-x 2 admin admin 4096 Sep 20 15:56 . drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .. -rw-r--r-- 1 admin admin 36 Sep 20 15:56 install-id admin@i-09ca2bfbe0a48f3ce:~$ ls -la .config/asciinema/install-id -rw-r--r-- 1 admin admin 36 Sep 20 15:56 .config/asciinema/install-id admin@i-09ca2bfbe0a48f3ce:~$
paris/i-09ca2bfbe0a48f3ce
by SadServersMore by SadServers
admin@i-098e8bd6780cfa047:~$ sudo netstat -antp We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: Sorry, try again. [sudo] password for admin: sudo: 1 incorrect password attempt admin@i-098e8bd6780cfa047:~$ ^C admin@i-098e8bd6780cfa047:~$ sys
paris/i-098e8bd6780cfa047 01:27
by SadServersadmin@i-04c670c6cdcffc314:~$ ls -l total 8 drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-04c670c6cdcffc314:~$ cat webserver.py cat: webserver.py: Permission denied admin@i-04c670c6cdcffc314:~$ ./webse
paris/i-04c670c6cdcffc314 03:49
by SadServersResolving localhost (localhost)... 127.0.0.1 Connecting to localhost (localhost)|127.0.0.1|:5000... connected. HTTP request sent, awaiting response... 200 OK Length: 12 [text/html] Saving to: ‘index.html’ index.html 0%[ index.html 100%[=========================================>] 12 --.-KB/s in 0s 2023-12-11 10:29:33 (119 KB/s) - ‘index.html’ saved [12/12] admin@i-031023b9f4d69a6e7:~$ cat index.html Unauthorizedadmin@i-031023b9f4d69a6e7:~$ ls^C admin@i-031023b9f4d69a6e7:~$ curl -I