command-line-murders/i-071b3e1fd1456ee07
by SadServersMore by SadServers
total 48 drwxr-xr-x 6 admin admin 4096 Nov 9 15:47 . drwxr-xr-x 3 root root 4096 Sep 17 16:44 .. drwx------ 3 admin admin 4096 Sep 20 15:52 .ansible -rw------- 1 admin admin 689 Nov 9 15:47 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rw-r--r-- 1 admin admin 131 Nov 9 15:41 c -rw-r--r-- 1 admin admin 0 Nov 9 15:47 file.py -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-0c431aae291ececb8:~$
paris/i-0c431aae291ececb8 04:01
by SadServersWARNING: only considering LVM devices /dev/sdc [ 1.00 GiB] LVM physical volume /dev/sdb [ 1.00 GiB] LVM physical volume 2 LVM physical volume whole disks 0 LVM physical volumes admin@i-0cd04794b59819ce5:~$ sudo vgcreate 2gdisk /dev/sdc /dev/sdb Volume group "2gdisk" successfully created admin@i-0cd04794b59819ce5:~$ vgs WARNING: Running as a non-root user. Functionality may be unavailable. /run/lock/lvm/P_global:aux: open failed: Permission denied admin@i-0cd04794b59819ce5:~$ sudo !! sudo vgs VG #PV #LV #SN Attr VSize VFree 2gdisk 2 0 0 wz--n- 1.99g 1.99g admin@i-0cd04794b59819ce5:~$ sudo lvcrea
kihei/i-0cd04794b59819ce5 04:57
by SadServerstmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-01d29b6753c5b092d:~$ /home/admin/kihei panic: exit status 1 goroutine 1 [running]: main.main() ./main.go:64 +0x47d admin@i-01d29b6753c5b092d:~$ cd /home/admin admin@i-01d29b6753c5b092d:~$ ls agent data datafile kihei admin@i-01d29b6753c5b092d:~$
kihei/i-01d29b6753c5b092d 01:04
by SadServers(Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) admin@i-0b9f3cd0094de1d6e:~$ netstat -anlp|grep 172 (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) tcp 0 0 172.31.42.227:59464 172.31.21.181:9000 TIME_WAIT tcp 0 0 172.31.42.227:59462 172.31.21.181:9000 TIME_WAIT tcp 0 0 172.31.42.227:59460 172.31.21.181:9000 TIME_WAIT tcp6 0 0 172.31.42.227:8080 172.31.16.109:54422 ESTABLISHED admin@i-0b9f3cd0094de1d6e:~$ curl ^C admin@i-0b9f3cd0094de1d6e:~$ nmap -sV 172.31.21.181 -p 9000 Starting Nmap 7.80 ( https://nmap.org ) at 2023-10-01 16:08 UTC Note: Host seems down. If it is really up, but blocking our ping probes, try -PnNmap done: 1 IP address (0 hosts up) scanned in 4.87 seconds admin@i-0b9f3cd0094de1d6e:~$ ip a