SadServers Joined on September 10, 2023
1685 public recordings by SadServers
find: ‘/var/cache/private’: Permission denied find: ‘/var/cache/ldconfig’: Permission denied find: ‘/var/cache/apt/archives/partial’: Permission denied find: ‘/var/cache/apparmor/c08a2770.0’: Permission denied find: ‘/var/spool/rsyslog’: Permission denied find: ‘/var/spool/cron/crontabs’: Permission denied find: ‘/var/tmp/systemd-private-9f2badbbb91d448495163a36e0cc284b-chrony.service-find: ‘/var/tmp/systemd-private-9f2badbbb91d448495163a36e0cc284b-systemd-logind.enied find: ‘/var/log/private’: Permission denied find: ‘/var/log/chrony’: Permission denied find: ‘/var/lib/private’: Permission denied find: ‘/var/lib/apt/lists/partial’: Permission denied find: ‘/var/lib/chrony’: Permission denied admin@i-0f010295ecb30725e:~$ find / -type f | grep webse
paris/i-0f010295ecb30725e 02:33
by SadServerstotal 5245084 drwxr-xr-x 7 admin admin 4096 Nov 24 05:54 . drwxr-xr-x 3 root root 4096 Sep 17 2023 .. drwx------ 3 admin admin 4096 Sep 17 2023 .ansible -rw------- 1 admin admin 65 Nov 24 05:54 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Nov 24 05:49 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 2023 .ssh drwxr-xr-x 2 admin root 4096 Sep 17 2023 agent drwxr-xr-x 2 admin root 4096 Nov 24 05:56 data -rw-r--r-- 1 root root 5368709120 Sep 17 2023 datafile -rwxr-xr-x 1 admin root 2207109 Sep 17 2023 kihei admin@i-0196ce4cef0e287bd:~$ cat k
kihei/i-0196ce4cef0e287bd 01:17
by SadServers83 -q -i 2 /var/log/cast/i-0df1765d3 admin 681 0.0 3.0 24456 14444 pts/0 R<+ 02:55 0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d3 admin 682 0.0 0.1 2480 572 pts/1 S<s 02:55 0:00 sh -c /bin/baadmin 683 0.0 0.9 6820 4536 pts/1 S< 02:55 0:00 /bin/bash admin 716 0.0 0.6 8648 3136 pts/1 R<+ 02:56 0:00 ps -aux admin@i-0df1765d381c3a083:~$ ps -aux | grep kihei admin 678 0.4 4.1 98188 19260 pts/0 S<l+ 02:55 0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d381c3a083 admin 681 0.0 3.0 24456 14444 pts/0 S<+ 02:55 0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d381c3a083 admin 718 0.0 0.1 5264 704 pts/1 S<+ 02:56 0:00 grep kihei admin@i-0df1765d381c3a083:~$ ls agent data datafile kihei admin@i-0df1765d381c3a083:~$
kihei/i-0df1765d381c3a083 00:56
by SadServers.itab.*reflect.rtype,reflect.Typego.itab.*flag.durationValue,flag.Valuego.itab.*lue,flag.Valuego.itab.*flag.intValue,flag.Valuego.itab.*flag.int64Value,flag.Valg.stringValue,flag.Valuego.itab.*flag.uintValue,flag.Valuego.itab.*flag.uint64Vago.itab.*strings.Builder,io.Writergo.itab.*errors.errorString,errorgo.itab.*fmt.rgo.itab.*fmt.pp,fmt.Statego.itab.*os.File,io.Readergo.itab.syscall.Signal,os.Sio/fs.PathError,errorgo.itab.*os.SyscallError,errorgo.itab.syscall.Errno,errorgo.iter,io.Writergo.itab.*os.fileStat,io/fs.FileInfogo.itab.*io.LimitedReader,io.Res.File,io.Closergo.itab.*os/exec.ExitError,errorgo.itab.*os/exec.Error,errorgo.ider,io.Readergo.itab.os/user.UnknownUserIdError,errorgo.itab.*internal/reflectlinal/reflectlite.Typego.itab.time.fileSizeError,errorgo.itab.*internal/fmtsort.Sonterfacego.itab.runtime.errorString,error_cgo_init_cgo_thread_start_cgo_notify_rne_cgo_callers_cgo_yield_cgo_mmap_cgo_munmap_cgo_sigactionruntime.mainPCgo.itab..DeadlineExceededError,errorgo.itab.internal/poll.errNetClosing,errorruntime.defruntime.buildVersion.strruntime.modinfo.strtype.*runtime.textsectionmaproot@i-0b3:/home/admin#
kihei/i-0b0ceabb4b4dd0e83 00:40
by SadServersCGroup: /system.slice/flaskapp.service └─574 /usr/bin/python3 /home/admin/webserver.py Nov 22 20:13:43 i-0cda4f62b9b5220f9 systemd[1]: Started Flask Application. Nov 22 20:13:44 i-0cda4f62b9b5220f9 python3[574]: * Serving Flask app 'webserveNov 22 20:13:44 i-0cda4f62b9b5220f9 python3[574]: * Debug mode: off Nov 22 20:13:44 i-0cda4f62b9b5220f9 python3[574]: WARNING: This is a development a production deployment. Use a production WSGI server instead. Nov 22 20:13:44 i-0cda4f62b9b5220f9 python3[574]: * Running on http://127.0.0.1Nov 22 20:13:44 i-0cda4f62b9b5220f9 python3[574]: Press CTRL+C to quit Nov 22 20:15:37 i-0cda4f62b9b5220f9 python3[574]: 127.0.0.1 - - [22/Nov/2024 20:00 - admin@i-0cda4f62b9b5220f9:~$ ps -aux | grep flask admin 959 0.0 0.1 5264 640 pts/1 S<+ 20:20 0:00 grep flask admin@i-0cda4f62b9b5220f9:~$ ps -aux | grep flask
paris/i-0cda4f62b9b5220f9 04:19
by SadServersroot@i-00cd16d1d6b62ecaf:~# vgcreate data /dev/nvme1n1 /dev/nvme2n1 Volume group "data" successfully created root@i-00cd16d1d6b62ecaf:~# vgs VG #PV #LV #SN Attr VSize VFree data 2 0 0 wz--n- 1.99g 1.99g root@i-00cd16d1d6b62ecaf:~# df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 384K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 24K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi tmpfs 46M 0 46M 0% /run/user/0 root@i-00cd16d1d6b62ecaf:~# ko
kihei/i-00cd16d1d6b62ecaf 02:32
by SadServers-rw-r--r-- 1 root root 5368709120 Sep 17 2023 datafile -rwxr-xr-x 1 admin root 2207109 Sep 17 2023 kihei admin@i-0c7a28e3a2fe0be8b:~$ ls -la data total 8 drwxr-xr-x 2 admin root 4096 Nov 22 13:46 . drwxr-xr-x 7 admin admin 4096 Nov 22 13:45 .. admin@i-0c7a28e3a2fe0be8b:~$ df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-0c7a28e3a2fe0be8b:~$
kihei/i-0c7a28e3a2fe0be8b 02:41
by SadServersgoroutine 1 [running]: main.main() ./main.go:64 +0x47d admin@i-0e446c270466448da:~$ ls agent data datafile kihei admin@i-0e446c270466448da:~$ head datafile | od 0000000 000000 000000 000000 000000 000000 000000 000000 000000 * ^C admin@i-0e446c270466448da:~$ head datafile | less admin@i-0e446c270466448da:~$ od datafile | less admin@i-0e446c270466448da:~$ head -c 1024 datafile | less
kihei/i-0e446c270466448da 04:26
by SadServersDisk identifier: 0xb43838c3 Device Boot Start End Sectors Size Id Type /dev/nvme2n1p1 2048 2097151 2095104 1023M 8e Linux LVM admin@i-0e9eb0be2a0842a52:~$ pvcreate /dev/nvme1n1p1 WARNING: Running as a non-root user. Functionality may be unavailable. /run/lock/lvm/P_global:aux: open failed: Permission denied admin@i-0e9eb0be2a0842a52:~$ sudo pvcreate /dev/nvme1n1p1 /dev/nvme2n1p1 Physical volume "/dev/nvme1n1p1" successfully created. Physical volume "/dev/nvme2n1p1" successfully created. admin@i-0e9eb0be2a0842a52:~$ sudo pvs PV VG Fmt Attr PSize PFree /dev/sdb1 lvm2 --- 1023.00m 1023.00m /dev/sdc1 lvm2 --- 1023.00m 1023.00m admin@i-0e9eb0be2a0842a52:~$ vgcreate
kihei/i-0e9eb0be2a0842a52 03:39
by SadServers16K spool 24K tmp admin@i-0cacbe2813d3e9a07:/var$ cd /proc/ admin@i-0cacbe2813d3e9a07:/proc$ ls 1 139 222 30 57 598 68 835 cpuinfo interrupts kpage10 14 23 4 572 6 7 879 crypto iomem kpage1003 140 24 402 573 60 77 9 devices ioports loada11 15 25 477 576 600 78 927 diskstats irq locks1154 16 251 49 58 601 8 acpi driver kallsyms memin1165 17 26 50 580 602 828 buddyinfo dynamic_debug kcore misc 119 18 27 51 588 61 83 bus execdomains key-users modul12 2 28 54 59 617 830 cgroups fb keys mount1273 20 29 55 591 62 833 cmdline filesystems kmsg mtrr 13 205 3 56 597 67 834 consoles fs kpagecgroup net admin@i-0cacbe2813d3e9a07:/proc$ du -hs
kihei/i-0cacbe2813d3e9a07 13:45
by SadServersadmin@i-0b336a7231c9a436f:~$ sudo mkfs.ext4 /dev/vg_1/lv_1 mke2fs 1.46.2 (28-Feb-2021) Creating filesystem with 522240 4k blocks and 130560 inodes Filesystem UUID: 255e6434-d8b5-4435-adc4-71051ef3a6cd Superblock backups stored on blocks: 32768, 98304, 163840, 229376, 294912 Allocating group tables: done Writing inode tables: done Creating journal (8192 blocks): done Writing superblocks and filesystem accounting information: done admin@i-0b336a7231c9a436f:~$ sudo mount /home/admin/data/ mount: /home/admin/data/: can't find in /etc/fstab. admin@i-0b336a7231c9a436f:~$ cd /ho
kihei/i-0b336a7231c9a436f 07:12
by SadServerswrite(2, "main.main", 9main.main) = 9 write(2, "(", 1() = 1 write(2, ")\n", 2) ) = 2 write(2, "\t", 1 ) = 1 write(2, "./main.go", 9./main.go) = 9 write(2, ":", 1:) = 1 write(2, "64", 264) = 2 write(2, " +", 2 +) = 2 write(2, "0x47d", 50x47d) = 5 write(2, "\n", 1 ) = 1 exit_group(2) = ? +++ exited with 2 +++ admin@i-0f74c319172ce7b15:~$ strace ./kihei