command-line-murders/i-02fa28005a2eb3fcf
by SadServersMore by SadServers
0:00 grep webserver admin@i-0f52b9b9e90050f5c:~$ ls -la total 44 drwxr-xr-x 6 admin admin 4096 Sep 24 23:20 . drwxr-xr-x 3 root root 4096 Sep 17 16:44 .. drwx------ 3 admin admin 4096 Sep 20 15:52 .ansible -rw------- 1 admin admin 454 Oct 4 14:29 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-0f52b9b9e90050f5c:~$
paris/i-0f52b9b9e90050f5c 02:03
by SadServerswrite(2, ":", 1:) = 1 write(2, "64", 264) = 2 write(2, " +", 2 +) = 2 write(2, "0x47d", 50x47d) = 5 write(2, "\n", 1 ) = 1 exit_group(2) = ? +++ exited with 2 +++ admin@i-0383999b6e9ab8158:~$ ls agent data datafile kihei admin@i-0383999b6e9ab8158:~$ ls datafile datafile admin@i-0383999b6e9ab8158:~$ ls /usr/local/sbin/fallocate ls: cannot access '/usr/local/sbin/fallocate': No such file or directory admin@i-0383999b6e9ab8158:~$ whereis fallo
kihei/i-0383999b6e9ab8158 01:37
by SadServersopenat(AT_FDCWD, "/dev/null", O_RDONLY|O_CLOEXEC) = 3 epoll_ctl(4, EPOLL_CTL_ADD, 3, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=310235= -1 EPERM (Operation not permitted) openat(AT_FDCWD, "/dev/null", O_WRONLY|O_CLOEXEC) = 7 epoll_ctl(4, EPOLL_CTL_ADD, 7, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=310235= -1 EPERM (Operation not permitted) openat(AT_FDCWD, "/dev/null", O_WRONLY|O_CLOEXEC) = 8 epoll_ctl(4, EPOLL_CTL_ADD, 8, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=310235= -1 EPERM (Operation not permitted) -- nanosleep({tv_sec=0, tv_nsec=1000000}, NULL) = 0 write(2, "panic: ", 7panic: ) = 7 write(2, "exit status 1", 13exit status 1) = 13 admin@i-0ed492a651080fdae:~$ ^C admin@i-0ed492a651080fdae:~$ ls -l /home/admin/data/newda