lsof 1049 admin cwd DIR 259,1 4096 272476 /home/admin lsof 1049 admin rtd DIR 259,1 4096 2 / lsof 1049 admin txt REG 259,1 171488 1580 /usr/bin/lsof lsof 1049 admin mem REG 259,1 27002 15342 /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache lsof 1049 admin mem REG 259,1 346132 2398 /usr/lib/locale/C.UTF-8/LC_CTYPE lsof 1049 admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so lsof 1049 admin mem REG 259,1 18688 15078 /usr/lib/x86_64-linux-gnu/libdl-2.31.so lsof 1049 admin mem REG 259,1 617128 2728 /usr/lib/x86_64-linux-gnu/libpcre2-8.so.0.10.1 lsof 1049 admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so lsof 1049 admin mem REG 259,1 166120 2215 /usr/lib/x86_64-linux-gnu/libselinux.so.1 lsof 1049 admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so 0 bash admin@i-0f6ee434bf2ef1d8a:~$ 1 bash
paris/i-0f6ee434bf2ef1d8a
by SadServersMore by SadServers
systemd-1 /proc/sys/fs/binfmt_misc autofs rw,relatime,fd=30,pgrp=1,timeout=0,min,pipe_ino=9766 0 0 hugetlbfs /dev/hugepages hugetlbfs rw,relatime,pagesize=2M 0 0 mqueue /dev/mqueue mqueue rw,nosuid,nodev,noexec,relatime 0 0 debugfs /sys/kernel/debug debugfs rw,nosuid,nodev,noexec,relatime 0 0 tracefs /sys/kernel/tracing tracefs rw,nosuid,nodev,noexec,relatime 0 0 fusectl /sys/fs/fuse/connections fusectl rw,nosuid,nodev,noexec,relatime 0 0 configfs /sys/kernel/config configfs rw,nosuid,nodev,noexec,relatime 0 0 /dev/nvme0n1p15 /boot/efi vfat rw,relatime,fmask=0022,dmask=0022,codepage=437,ioixed,utf8,errors=remount-ro 0 0 admin@i-071ad0c6474467efc:/proc/574$ docker ps bash: docker: command not found admin@i-071ad0c6474467efc:/proc/574$ echo $ENV admin@i-071ad0c6474467efc:/proc/574$ echo
paris/i-071ad0c6474467efc 04:32
by SadServerssystemd-udev-trigger.service loaded active exited Coldplug All udev Dev systemd-udevd.service loaded active running Rule-based Manager fo systemd-update-utmp.service loaded active exited Update UTMP about Sys systemd-user-sessions.service loaded active exited Permit User Sessions unattended-upgrades.service loaded active running Unattended Upgrades S LOAD = Reflects whether the unit definition was properly loaded. ACTIVE = The high-level unit activation state, i.e. generalization of SUB. admin@i-0de83ec36426f6541:~$ systemctl --type=service | grep kihei admin@i-0de83ec36426f6541:~$ cd /home/admin admin@i-0de83ec36426f6541:~$ ls agent data datafile kihei admin@i-0de83ec36426f6541:~$ kehei bash: kehei: command not found admin@i-0de83ec36426f6541:~$ kehei
kihei/i-0de83ec36426f6541 01:28
by SadServersroot 594 0.0 3.7 26612 17396 ? Ss 17:08 0:00 /usr/bin/pyth_chrony 596 0.0 0.7 10852 3604 ? S 17:08 0:00 /usr/sbin/chr_chrony 598 0.0 0.1 10724 548 ? S 17:08 0:00 /usr/sbin/chrroot 680 0.0 0.0 0 0 ? I 17:08 0:00 [kworker/1:4-admin 683 0.0 0.9 6740 4460 pts/0 S<s+ 17:09 0:00 bash -l admin 687 0.1 4.1 98188 19320 pts/0 R<l+ 17:09 0:00 /usr/bin/pythadmin 690 0.0 3.0 24456 14420 pts/0 R<+ 17:09 0:00 /usr/bin/pythadmin 691 0.0 0.1 2480 500 pts/1 S<s 17:09 0:00 sh -c /bin/baadmin 692 0.0 1.0 6952 4756 pts/1 S< 17:09 0:00 /bin/bash admin 793 0.0 0.6 8648 3244 pts/1 R<+ 17:11 0:00 ps aux admin@i-01ae2ccb494fc3a25:~$ nc -zv 5000 nc: missing port number admin@i-01ae2ccb494fc3a25:~$ nc -zv localhost 5000 Connection to localhost (127.0.0.1) 5000 port [tcp/*] succeeded! admin@i-01ae2ccb494fc3a25:~$ ps aux