root 468 0.0 1.2 99884 5788 ? Ssl 16:14 0:00 /sbin/dhclient -6 -v -pf /run/dhclient6.ens5.pid -lf /var/lib/dhcp/dhclient6.ens5.leases -I -df /var/lib/dhcp/dhcli admin 563 0.1 2.6 1304716 12256 ? S<sl 16:14 0:00 /usr/local/gotty --permit-write --reconnect --max-connection 5 bash -l admin 564 0.0 2.1 1080936 10192 ? S<sl 16:14 0:00 /home/admin/agent/sadagent root 567 0.0 0.5 5636 2652 ? Ss 16:14 0:00 /usr/sbin/cron -f message+ 568 0.0 0.7 7864 3696 ? Ss 16:14 0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only root 580 0.1 6.0 107132 28320 ? Ss 16:14 0:00 /usr/bin/python3 /home/admin/webserver.py root 581 0.0 0.9 220796 4312 ? Ssl 16:14 0:00 /usr/sbin/rsyslogd -n -iNONE root 587 0.0 1.4 13492 6668 ? Ss 16:14 0:00 /lib/systemd/systemd-logind root 589 0.0 1.5 13352 7112 ? Ss 16:14 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups root 590 0.0 0.3 2872 1720 tty1 Ss+ 16:14 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux root 591 0.0 0.4 4396 2088 ttyS0 Ss+ 16:14 0:00 /sbin/agetty -o -p -- \u --keep-baud 115200,57600,38400,9600 ttyS0 vt220 _chrony 593 0.0 0.7 10852 3712 ? S 16:14 0:00 /usr/sbin/chronyd -F 1 _chrony 594 0.0 0.1 10724 548 ? S 16:14 0:00 /usr/sbin/chronyd -F 1 root 604 0.0 3.7 26612 17328 ? Ss 16:14 0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal root 627 0.0 0.0 0 0 ? I 16:14 0:00 [kworker/1:3-events] root 683 0.0 0.0 0 0 ? I 16:14 0:00 [kworker/0:4-events] admin 686 0.0 0.9 6712 4308 pts/0 S<s+ 16:14 0:00 bash -l admin 691 0.1 4.1 98188 19504 pts/0 D<l+ 16:14 0:00 /usr/bin/python3 /usr/bin/asciinema rec -t paris/i-056d7eb6f3afcb862 -q -i 2 /var/log/cast/i-056d7eb6f3afcb862 admin 694 0.0 3.1 24456 14868 pts/0 R<+ 16:14 0:00 /usr/bin/python3 /usr/bin/asciinema rec -t paris/i-056d7eb6f3afcb862 -q -i 2 /var/log/cast/i-056d7eb6f3afcb862 admin 695 0.0 0.1 2480 568 pts/1 S<s 16:14 0:00 sh -c /bin/bash admin 696 0.0 1.0 6952 4716 pts/1 S< 16:14 0:00 /bin/bash root 786 0.0 0.0 0 0 ? R 16:17 0:00 [kworker/u4:4+events_unbound] admin 820 0.0 0.6 8648 3244 pts/1 R<+ 16:17 0:00 ps aux admin@i-056d7eb6f3afcb862:~$ ls agent webserver.py admin@i-056d7eb6f3afcb862:~$ cat webserver.py cat: webserver.py: Permission denied admin@i-056d7eb6f3afcb862:~$ ls -l total 8 drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-056d7eb6f3afcb862:~$ sudo cat webserver.py We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: sudo: a password is required admin@i-056d7eb6f3afcb862:~$ locate webserver.py bash: locate: command not found admin@i-056d7eb6f3afcb862:~$ find / -nwebserver.py
paris/i-056d7eb6f3afcb862
by SadServersMore by SadServers
^Csudo: 2 incorrect password attempts admin@i-05f19733b5c36166e:~$ ls -alh total 44K drwxr-xr-x 6 admin admin 4.0K Sep 24 2023 . drwxr-xr-x 3 root root 4.0K Sep 17 2023 .. drwx------ 3 admin admin 4.0K Sep 20 2023 .ansible -rw------- 1 admin admin 176 Nov 28 08:19 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3.5K Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4.0K Sep 20 2023 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4.0K Sep 17 2023 .ssh drwxr-xr-x 2 admin root 4.0K Sep 24 2023 agent -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py admin@i-05f19733b5c36166e:~$