command-line-murders/i-00baa51fad562d866
by SadServersMore by SadServers
ps _chrony 593 1 0 03:44 ? 00:00:00 /usr/sbin/chronyd -F 1 root 600 1 0 03:44 ? 00:00:00 /usr/bin/python3 /usr/share/ended-upgrade-shutdown --wait-for-signal _chrony 601 593 0 03:44 ? 00:00:00 /usr/sbin/chronyd -F 1 root 684 2 0 03:45 ? 00:00:00 [kworker/u4:4+events_unboundadmin 714 563 0 03:45 pts/0 00:00:00 bash -l admin 718 714 2 03:45 pts/0 00:00:00 /usr/bin/python3 /usr/bin/as0901153058fcbfd -q -i 2 /var/log/cast/i-0e0901153058fcbfd admin 721 718 0 03:45 pts/0 00:00:00 /usr/bin/python3 /usr/bin/as0901153058fcbfd -q -i 2 /var/log/cast/i-0e0901153058fcbfd admin 722 718 0 03:45 pts/1 00:00:00 sh -c /bin/bash admin 723 722 0 03:45 pts/1 00:00:00 /bin/bash admin 727 723 0 03:45 pts/1 00:00:00 ps -eafww admin@i-0e0901153058fcbfd:~$ curl -v http://localhost:500
paris/i-0e0901153058fcbfd 00:39
by SadServersadmin@i-0ef39eb9f44fc6704:~/agent$ ls check.sh sadagent sadagent.txt admin@i-0ef39eb9f44fc6704:~/agent$ cat check.sh #!/bin/bash expected_checksum="d8bee9d7f830d5fb59b89e1e120cce8e" actual_checksum=$(md5sum /home/admin/mysolution | awk '{print $1}') if [[ "$actual_checksum" == "$expected_checksum" ]]; then echo -n "OK" else echo -n "NO" fiadmin@i-0ef39eb9f44fc6704:~/agent$ cat sa
paris/i-0ef39eb9f44fc6704 01:37
by SadServersroot 574 0.0 0.3 2872 1672 tty1 Ss+ 10:17 0:00 /sbin/agetty root 575 0.0 0.4 4396 2040 ttyS0 Ss+ 10:17 0:00 /sbin/agetty _chrony 577 0.0 0.7 10852 3668 ? S 10:17 0:00 /usr/sbin/chr_chrony 578 0.0 0.1 10724 556 ? S 10:17 0:00 /usr/sbin/chrroot 579 0.0 1.5 13352 7084 ? Ss 10:17 0:00 sshd: /usr/sbroot 583 0.0 3.7 26612 17396 ? Ss 10:17 0:00 /usr/bin/pythroot 662 0.0 0.0 0 0 ? I 10:17 0:00 [kworker/1:4-admin 664 0.0 0.9 6740 4464 pts/0 S<s+ 10:17 0:00 bash -l admin 668 0.1 4.1 98320 19236 pts/0 D<l+ 10:17 0:00 /usr/bin/pythadmin 671 0.0 3.1 24456 14924 pts/0 R<+ 10:17 0:00 /usr/bin/pythadmin 672 0.0 0.1 2480 568 pts/1 S<s 10:17 0:00 sh -c /bin/baadmin 673 0.0 1.0 6952 4792 pts/1 S< 10:17 0:00 /bin/bash root 717 0.0 0.0 0 0 ? R 10:18 0:00 [kworker/u4:4admin 762 0.0 0.6 8648 3212 pts/1 R<+ 10:19 0:00 ps aux admin@i-0cace07c960fab3ec:/etc$ ps aux