System/Kernel


www-data@ubuntu:/var/www/Magic$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=12f73d7a8e226c663034529c8dd20efec22dde54, stripped
linux ubuntu 5.3.0-42-generic #34~18.04.1-ubuntu smp fri feb 28 13:42:26 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=18.04
DISTRIB_CODENAME=bionic
DISTRIB_DESCRIPTION="Ubuntu 18.04.4 LTS"
NAME="Ubuntu"
VERSION="18.04.4 LTS (Bionic Beaver)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 18.04.4 LTS"
VERSION_ID="18.04"
home_url="https://www.ubuntu.com/"
support_url="https://help.ubuntu.com/"
bug_report_url="https://bugs.launchpad.net/ubuntu/"
privacy_policy_url="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=bionic
UBUNTU_CODENAME=bionic

Ubuntu 18.04.4 LTS (Bionic Beaver) 5.3.0-42-generic x86_64

Networks


www-data@ubuntu:/var/www/Magic$ arp -a ; netstat -antup4
_gateway (10.10.10.2) at 00:50:56:b9:d7:84 [ether] on ens160
 
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      -                   
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -                   
tcp        0      0 127.0.0.1:631           0.0.0.0:*               LISTEN      -                   
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      -                   
tcp        0      1 10.10.10.185:38150      1.1.1.1:53              SYN_SENT    -                   
tcp        0    346 10.10.10.185:60554      10.10.16.8:9999         ESTABLISHED 2567/sh             
udp        0      0 0.0.0.0:5353            0.0.0.0:*                           -                   
udp        0      0 127.0.0.1:36589         127.0.0.53:53           ESTABLISHED -                   
udp        0      0 0.0.0.0:46974           0.0.0.0:*                           -                   
udp        0      0 127.0.0.53:53           0.0.0.0:*                           -                   
udp        0      0 0.0.0.0:631             0.0.0.0:*                           -                   

127.0.0.53:53 127.0.0.1:631 127.0.0.1:3306

Users & Groups


www-data@ubuntu:/var/www/Magic$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:100:102:systemd Network Management,,,:/run/systemd/netif:/usr/sbin/nologin
systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd/resolve:/usr/sbin/nologin
syslog:x:102:106::/home/syslog:/usr/sbin/nologin
messagebus:x:103:107::/nonexistent:/usr/sbin/nologin
_apt:x:104:65534::/nonexistent:/usr/sbin/nologin
uuidd:x:105:111::/run/uuidd:/usr/sbin/nologin
avahi-autoipd:x:106:112:Avahi autoip daemon,,,:/var/lib/avahi-autoipd:/usr/sbin/nologin
usbmux:x:107:46:usbmux daemon,,,:/var/lib/usbmux:/usr/sbin/nologin
dnsmasq:x:108:65534:dnsmasq,,,:/var/lib/misc:/usr/sbin/nologin
rtkit:x:109:114:RealtimeKit,,,:/proc:/usr/sbin/nologin
cups-pk-helper:x:110:116:user for cups-pk-helper service,,,:/home/cups-pk-helper:/usr/sbin/nologin
speech-dispatcher:x:111:29:Speech Dispatcher,,,:/var/run/speech-dispatcher:/bin/false
whoopsie:x:112:117::/nonexistent:/bin/false
kernoops:x:113:65534:Kernel Oops Tracking Daemon,,,:/:/usr/sbin/nologin
saned:x:114:119::/var/lib/saned:/usr/sbin/nologin
pulse:x:115:120:PulseAudio daemon,,,:/var/run/pulse:/usr/sbin/nologin
avahi:x:116:122:Avahi mDNS daemon,,,:/var/run/avahi-daemon:/usr/sbin/nologin
colord:x:117:123:colord colour management daemon,,,:/var/lib/colord:/usr/sbin/nologin
hplip:x:118:7:HPLIP system user,,,:/var/run/hplip:/bin/false
geoclue:x:119:124::/var/lib/geoclue:/usr/sbin/nologin
gnome-initial-setup:x:120:65534::/run/gnome-initial-setup/:/bin/false
gdm:x:121:125:Gnome Display Manager:/var/lib/gdm3:/bin/false
theseus:x:1000:1000:Theseus,,,:/home/theseus:/bin/bash
sshd:x:123:65534::/run/sshd:/usr/sbin/nologin
mysql:x:122:127:MySQL Server,,,:/nonexistent:/bin/false
total 12K
4.0K drwxr-xr-x 15 theseus theseus 4.0K Jul 12  2021 theseus
4.0K drwxr-xr-x  3 root    root    4.0K Jul  6  2021 .
4.0K drwxr-xr-x 24 root    root    4.0K Jul  6  2021 ..

theseus

www-data@ubuntu:/var/www/Magic/images/uploads$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=101(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=102(syslog) gid=106(syslog) groups=106(syslog),4(adm)
uid=103(messagebus) gid=107(messagebus) groups=107(messagebus)
uid=104(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=105(uuidd) gid=111(uuidd) groups=111(uuidd)
uid=106(avahi-autoipd) gid=112(avahi-autoipd) groups=112(avahi-autoipd)
uid=107(usbmux) gid=46(plugdev) groups=46(plugdev)
uid=108(dnsmasq) gid=65534(nogroup) groups=65534(nogroup)
uid=109(rtkit) gid=114(rtkit) groups=114(rtkit)
uid=110(cups-pk-helper) gid=116(lpadmin) groups=116(lpadmin)
uid=111(speech-dispatcher) gid=29(audio) groups=29(audio)
uid=112(whoopsie) gid=117(whoopsie) groups=117(whoopsie)
uid=113(kernoops) gid=65534(nogroup) groups=65534(nogroup)
uid=114(saned) gid=119(saned) groups=119(saned),118(scanner)
uid=115(pulse) gid=120(pulse) groups=120(pulse),29(audio)
uid=116(avahi) gid=122(avahi) groups=122(avahi)
uid=117(colord) gid=123(colord) groups=123(colord)
uid=118(hplip) gid=7(lp) groups=7(lp)
uid=119(geoclue) gid=124(geoclue) groups=124(geoclue)
uid=120(gnome-initial-setup) gid=65534(nogroup) groups=65534(nogroup)
uid=121(gdm) gid=125(gdm) groups=125(gdm)
uid=1000(theseus) gid=1000(theseus) groups=1000(theseus),100(users)
uid=123(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=122(mysql) gid=127(mysql) groups=127(mysql)

uid=1000(theseus) gid=1000(theseus) groups=1000(theseus),100(users)

SUIDs


www-data@ubuntu:/var/www/Magic/images/uploads$ find / -perm -04000 -ls -type f 2>/dev/null
    39884    376 -rwsr-xr--   1 root     dip        382696 Feb 11  2020 /usr/sbin/pppd
    30836     40 -rwsr-xr-x   1 root     root        40344 Mar 22  2019 /usr/bin/newgrp
    30894     60 -rwsr-xr-x   1 root     root        59640 Mar 22  2019 /usr/bin/passwd
    30209     76 -rwsr-xr-x   1 root     root        76496 Mar 22  2019 /usr/bin/chfn
    30468     76 -rwsr-xr-x   1 root     root        75824 Mar 22  2019 /usr/bin/gpasswd
    23967    148 -rwsr-xr-x   1 root     root       149080 Jan 19  2021 /usr/bin/sudo
    31000     24 -rwsr-xr-x   1 root     root        22520 Mar 27  2019 /usr/bin/pkexec
    30211     44 -rwsr-xr-x   1 root     root        44528 Mar 22  2019 /usr/bin/chsh
    31393     20 -rwsr-xr-x   1 root     root        18448 Jun 28  2019 /usr/bin/traceroute6.iputils
    30133     24 -rwsr-xr-x   1 root     root        22528 Jun 28  2019 /usr/bin/arping
    24042     12 -rwsr-xr-x   1 root     root        10312 Dec  9  2019 /usr/bin/vmware-user-suid-wrapper
    56997    428 -rwsr-xr-x   1 root     root       436552 Mar  4  2019 /usr/lib/openssh/ssh-keysign
    52287     44 -rwsr-xr--   1 root     messagebus    42992 Jun 10  2019 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
    57037     16 -rwsr-xr-x   1 root     root          14328 Mar 27  2019 /usr/lib/policykit-1/polkit-agent-helper-1
    52590     12 -rwsr-xr-x   1 root     root          10232 Mar 27  2017 /usr/lib/eject/dmcrypt-get-device
    64807     12 -rwsr-sr-x   1 root     root          10232 Dec 18  2019 /usr/lib/xorg/Xorg.wrap
    60028    108 -rwsr-sr-x   1 root     root         109432 Oct 30  2019 /usr/lib/snapd/snap-confine
       56     43 -rwsr-xr-x   1 root     root          43088 Sep 16  2020 /snap/core18/2074/bin/mount
       65     63 -rwsr-xr-x   1 root     root          64424 Jun 28  2019 /snap/core18/2074/bin/ping
       81     44 -rwsr-xr-x   1 root     root          44664 Mar 22  2019 /snap/core18/2074/bin/su
       99     27 -rwsr-xr-x   1 root     root          26696 Sep 16  2020 /snap/core18/2074/bin/umount
     1710     75 -rwsr-xr-x   1 root     root          76496 Mar 22  2019 /snap/core18/2074/usr/bin/chfn
     1712     44 -rwsr-xr-x   1 root     root          44528 Mar 22  2019 /snap/core18/2074/usr/bin/chsh
     1765     75 -rwsr-xr-x   1 root     root          75824 Mar 22  2019 /snap/core18/2074/usr/bin/gpasswd
     1829     40 -rwsr-xr-x   1 root     root          40344 Mar 22  2019 /snap/core18/2074/usr/bin/newgrp
     1842     59 -rwsr-xr-x   1 root     root          59640 Mar 22  2019 /snap/core18/2074/usr/bin/passwd
     1933    146 -rwsr-xr-x   1 root     root         149080 Jan 19  2021 /snap/core18/2074/usr/bin/sudo
     2020     42 -rwsr-xr--   1 root     systemd-resolve    42992 Jun 11  2020 /snap/core18/2074/usr/lib/dbus-1.0/dbus-daemon-launch-helper
     2330    427 -rwsr-xr-x   1 root     root              436552 Mar  4  2019 /snap/core18/2074/usr/lib/openssh/ssh-keysign
       55     43 -rwsr-xr-x   1 root     root               43088 Aug 22  2019 /snap/core18/1668/bin/mount
       64     63 -rwsr-xr-x   1 root     root               64424 Jun 28  2019 /snap/core18/1668/bin/ping
       80     44 -rwsr-xr-x   1 root     root               44664 Mar 22  2019 /snap/core18/1668/bin/su
       98     27 -rwsr-xr-x   1 root     root               26696 Aug 22  2019 /snap/core18/1668/bin/umount
     1730     75 -rwsr-xr-x   1 root     root               76496 Mar 22  2019 /snap/core18/1668/usr/bin/chfn
     1732     44 -rwsr-xr-x   1 root     root               44528 Mar 22  2019 /snap/core18/1668/usr/bin/chsh
     1782     75 -rwsr-xr-x   1 root     root               75824 Mar 22  2019 /snap/core18/1668/usr/bin/gpasswd
     1846     40 -rwsr-xr-x   1 root     root               40344 Mar 22  2019 /snap/core18/1668/usr/bin/newgrp
     1858     59 -rwsr-xr-x   1 root     root               59640 Mar 22  2019 /snap/core18/1668/usr/bin/passwd
     1949    146 -rwsr-xr-x   1 root     root              149080 Oct 10  2019 /snap/core18/1668/usr/bin/sudo
     2036     42 -rwsr-xr--   1 root     systemd-resolve    42992 Jun 10  2019 /snap/core18/1668/usr/lib/dbus-1.0/dbus-daemon-launch-helper
     2344    427 -rwsr-xr-x   1 root     root              436552 Mar  4  2019 /snap/core18/1668/usr/lib/openssh/ssh-keysign
      798     84 -rwsr-xr-x   1 root     root               85064 May 27  2020 /snap/core20/1026/usr/bin/chfn
      804     52 -rwsr-xr-x   1 root     root               53040 May 27  2020 /snap/core20/1026/usr/bin/chsh
      873     87 -rwsr-xr-x   1 root     root               88464 May 27  2020 /snap/core20/1026/usr/bin/gpasswd
      957     55 -rwsr-xr-x   1 root     root               55528 Jul 21  2020 /snap/core20/1026/usr/bin/mount
      966     44 -rwsr-xr-x   1 root     root               44784 May 27  2020 /snap/core20/1026/usr/bin/newgrp
      979     67 -rwsr-xr-x   1 root     root               68208 May 27  2020 /snap/core20/1026/usr/bin/passwd
     1088     67 -rwsr-xr-x   1 root     root               67816 Jul 21  2020 /snap/core20/1026/usr/bin/su
     1089    163 -rwsr-xr-x   1 root     root              166056 Jan 19  2021 /snap/core20/1026/usr/bin/sudo
     1147     39 -rwsr-xr-x   1 root     root               39144 Jul 21  2020 /snap/core20/1026/usr/bin/umount
     1233     51 -rwsr-xr--   1 root     systemd-resolve    51344 Jun 11  2020 /snap/core20/1026/usr/lib/dbus-1.0/dbus-daemon-launch-helper
     1605    463 -rwsr-xr-x   1 root     root              473576 Mar  9  2021 /snap/core20/1026/usr/lib/openssh/ssh-keysign
       66     40 -rwsr-xr-x   1 root     root               40152 Jan 27  2020 /snap/core/11316/bin/mount
       80     44 -rwsr-xr-x   1 root     root               44168 May  7  2014 /snap/core/11316/bin/ping
       81     44 -rwsr-xr-x   1 root     root               44680 May  7  2014 /snap/core/11316/bin/ping6
       98     40 -rwsr-xr-x   1 root     root               40128 Mar 25  2019 /snap/core/11316/bin/su
      116     27 -rwsr-xr-x   1 root     root               27608 Jan 27  2020 /snap/core/11316/bin/umount
     2618     71 -rwsr-xr-x   1 root     root               71824 Mar 25  2019 /snap/core/11316/usr/bin/chfn
     2620     40 -rwsr-xr-x   1 root     root               40432 Mar 25  2019 /snap/core/11316/usr/bin/chsh
     2697     74 -rwsr-xr-x   1 root     root               75304 Mar 25  2019 /snap/core/11316/usr/bin/gpasswd
     2789     39 -rwsr-xr-x   1 root     root               39904 Mar 25  2019 /snap/core/11316/usr/bin/newgrp
     2802     53 -rwsr-xr-x   1 root     root               54256 Mar 25  2019 /snap/core/11316/usr/bin/passwd
     2912    134 -rwsr-xr-x   1 root     root              136808 Jan 20  2021 /snap/core/11316/usr/bin/sudo
     3011     42 -rwsr-xr--   1 root     systemd-resolve    42992 Jun 11  2020 /snap/core/11316/usr/lib/dbus-1.0/dbus-daemon-launch-helper
     3383    419 -rwsr-xr-x   1 root     root              428240 Jun  7  2021 /snap/core/11316/usr/lib/openssh/ssh-keysign
     6457    109 -rwsr-xr-x   1 root     root              111080 Jun 15  2021 /snap/core/11316/usr/lib/snapd/snap-confine
     7638    386 -rwsr-xr--   1 root     dip               394984 Jul 23  2020 /snap/core/11316/usr/sbin/pppd
       66     40 -rwsr-xr-x   1 root     root               40152 Jan 27  2020 /snap/core/8689/bin/mount
       80     44 -rwsr-xr-x   1 root     root               44168 May  7  2014 /snap/core/8689/bin/ping
       81     44 -rwsr-xr-x   1 root     root               44680 May  7  2014 /snap/core/8689/bin/ping6
       98     40 -rwsr-xr-x   1 root     root               40128 Mar 25  2019 /snap/core/8689/bin/su
      116     27 -rwsr-xr-x   1 root     root               27608 Jan 27  2020 /snap/core/8689/bin/umount
     2666     71 -rwsr-xr-x   1 root     root               71824 Mar 25  2019 /snap/core/8689/usr/bin/chfn
     2668     40 -rwsr-xr-x   1 root     root               40432 Mar 25  2019 /snap/core/8689/usr/bin/chsh
     2744     74 -rwsr-xr-x   1 root     root               75304 Mar 25  2019 /snap/core/8689/usr/bin/gpasswd
     2836     39 -rwsr-xr-x   1 root     root               39904 Mar 25  2019 /snap/core/8689/usr/bin/newgrp
     2849     53 -rwsr-xr-x   1 root     root               54256 Mar 25  2019 /snap/core/8689/usr/bin/passwd
     2959    134 -rwsr-xr-x   1 root     root              136808 Jan 31  2020 /snap/core/8689/usr/bin/sudo
     3058     42 -rwsr-xr--   1 root     systemd-resolve    42992 Nov 29  2019 /snap/core/8689/usr/lib/dbus-1.0/dbus-daemon-launch-helper
     3428    419 -rwsr-xr-x   1 root     root              428240 Mar  4  2019 /snap/core/8689/usr/lib/openssh/ssh-keysign
     6466    105 -rwsr-sr-x   1 root     root              106696 Feb 12  2020 /snap/core/8689/usr/lib/snapd/snap-confine
     7640    386 -rwsr-xr--   1 root     dip               394984 Jun 12  2018 /snap/core/8689/usr/sbin/pppd
   131127     28 -rwsr-xr-x   1 root     root               26696 Jan  8  2020 /bin/umount
   131130     32 -rwsr-xr-x   1 root     root               30800 Aug 11  2016 /bin/fusermount
   393232     24 -rwsr-x---   1 root     users              22040 Oct 21  2019 /bin/sysinfo
   131123     44 -rwsr-xr-x   1 root     root               43088 Jan  8  2020 /bin/mount
   131231     44 -rwsr-xr-x   1 root     root               44664 Mar 22  2019 /bin/su
   131203     64 -rwsr-xr-x   1 root     root               64424 Jun 28  2019 /bin/ping

/usr/bin/pkexec /bin/sysinfo

SGIDs


www-data@ubuntu:/var/www/Magic/images/uploads$ find / -perm -02000 -ls -type f 2>/dev/null
    68004      4 drwxrwsr-t   2 root     lpadmin      4096 Jul  6  2021 /usr/share/ppd/custom
    31319    356 -rwxr-sr-x   1 root     ssh        362640 Mar  4  2019 /usr/bin/ssh-agent
    30782     44 -rwxr-sr-x   1 root     mlocate     43088 Mar  1  2018 /usr/bin/mlocate
    30247     40 -rwxr-sr-x   1 root     crontab     39352 Nov 15  2017 /usr/bin/crontab
    30179     16 -rwxr-sr-x   1 root     tty         14328 Jan 17  2018 /usr/bin/bsd-write
    30337     24 -rwxr-sr-x   1 root     shadow      22808 Mar 22  2019 /usr/bin/expiry
    29613     32 -rwxr-sr-x   1 root     tty         30800 Jan  8  2020 /usr/bin/wall
    30202     72 -rwxr-sr-x   1 root     shadow      71816 Mar 22  2019 /usr/bin/chage
    52612     16 -rwxr-sr-x   1 root     mail        14336 May 28  2019 /usr/lib/evolution/camel-lock-helper-1.2
    64807     12 -rwsr-sr-x   1 root     root        10232 Dec 18  2019 /usr/lib/xorg/Xorg.wrap
    60028    108 -rwsr-sr-x   1 root     root       109432 Oct 30  2019 /usr/lib/snapd/snap-confine
    39431      4 drwxrwsr-x   2 root     staff        4096 Jul  6  2021 /usr/local/share/fonts
    39430      4 drwxrwsr-x   3 root     staff        4096 Jul  6  2021 /usr/local/share/emacs
    39433      4 drwxrwsr-x   2 root     staff        4096 Jul  6  2021 /usr/local/share/emacs/site-lisp
    39425      4 drwxrwsr-x   3 root     staff        4096 Jul  6  2021 /usr/local/lib/python3.6
    39428      4 drwxrwsr-x   2 root     staff        4096 Jul  6  2021 /usr/local/lib/python3.6/dist-packages
      173     36 -rwxr-sr-x   1 root     shadow      34816 Feb 27  2019 /sbin/pam_extrausers_chkpwd
      225     36 -rwxr-sr-x   1 root     shadow      34816 Feb 27  2019 /sbin/unix_chkpwd
     1639     34 -rwxr-sr-x   1 root     shadow      34816 Apr  8  2021 /snap/core18/2074/sbin/pam_extrausers_chkpwd
     1668     34 -rwxr-sr-x   1 root     shadow      34816 Apr  8  2021 /snap/core18/2074/sbin/unix_chkpwd
     1705     71 -rwxr-sr-x   1 root     shadow      71816 Mar 22  2019 /snap/core18/2074/usr/bin/chage
     1750     23 -rwxr-sr-x   1 root     shadow      22808 Mar 22  2019 /snap/core18/2074/usr/bin/expiry
     1926    355 -rwxr-sr-x   1 root     crontab    362640 Mar  4  2019 /snap/core18/2074/usr/bin/ssh-agent
     1990     31 -rwxr-sr-x   1 root     tty         30800 Sep 16  2020 /snap/core18/2074/usr/bin/wall
    10795      0 drwxrwsr-x   2 root     mail            3 Jun 10  2021 /snap/core18/2074/var/mail
     1663     34 -rwxr-sr-x   1 root     shadow      34816 Feb 27  2019 /snap/core18/1668/sbin/pam_extrausers_chkpwd
     1692     34 -rwxr-sr-x   1 root     shadow      34816 Feb 27  2019 /snap/core18/1668/sbin/unix_chkpwd
     1725     71 -rwxr-sr-x   1 root     shadow      71816 Mar 22  2019 /snap/core18/1668/usr/bin/chage
     1769     23 -rwxr-sr-x   1 root     shadow      22808 Mar 22  2019 /snap/core18/1668/usr/bin/expiry
     1942    355 -rwxr-sr-x   1 root     crontab    362640 Mar  4  2019 /snap/core18/1668/usr/bin/ssh-agent
     2006     31 -rwxr-sr-x   1 root     tty         30800 Aug 22  2019 /snap/core18/1668/usr/bin/wall
    10087      0 drwxrwsr-x   2 root     mail            3 Jan 23  2020 /snap/core18/1668/var/mail
      793     83 -rwxr-sr-x   1 root     shadow      84512 May 27  2020 /snap/core20/1026/usr/bin/chage
      854     31 -rwxr-sr-x   1 root     shadow      31312 May 27  2020 /snap/core20/1026/usr/bin/expiry
     1080    343 -rwxr-sr-x   1 root     crontab    350504 Mar  9  2021 /snap/core20/1026/usr/bin/ssh-agent
     1166     35 -rwxr-sr-x   1 root     tty         35048 Jul 21  2020 /snap/core20/1026/usr/bin/wall
     7169     43 -rwxr-sr-x   1 root     shadow      43168 Jul 21  2020 /snap/core20/1026/usr/sbin/pam_extrausers_chkpwd
     7213     43 -rwxr-sr-x   1 root     shadow      43160 Jul 21  2020 /snap/core20/1026/usr/sbin/unix_chkpwd
    11700      0 drwxrwsr-x   2 root     mail            3 Apr 28  2021 /snap/core20/1026/var/mail
      389      0 drwxr-s---   2 root     dip            54 Jun 15  2021 /snap/core/11316/etc/chatscripts
      794      0 drwxr-s---   2 root     dip            31 Jun 15  2021 /snap/core/11316/etc/ppp/peers
     2536     35 -rwxr-sr-x   1 root     shadow      35632 May 26  2021 /snap/core/11316/sbin/pam_extrausers_chkpwd
     2576     35 -rwxr-sr-x   1 root     shadow      35600 May 26  2021 /snap/core/11316/sbin/unix_chkpwd
     2613     61 -rwxr-sr-x   1 root     shadow      62336 Mar 25  2019 /snap/core/11316/usr/bin/chage
     2633     36 -rwxr-sr-x   1 root     systemd-network    36080 Apr  5  2016 /snap/core/11316/usr/bin/crontab
     2662     15 -rwxr-sr-x   1 root     mail               14856 Dec  6  2013 /snap/core/11316/usr/bin/dotlockfile
     2674     23 -rwxr-sr-x   1 root     shadow             22768 Mar 25  2019 /snap/core/11316/usr/bin/expiry
     2772     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/11316/usr/bin/mail-lock
     2772     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/11316/usr/bin/mail-touchlock
     2772     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/11316/usr/bin/mail-unlock
     2905    351 -rwxr-sr-x   1 root     crontab           358624 Jun  7  2021 /snap/core/11316/usr/bin/ssh-agent
     2970     27 -rwxr-sr-x   1 root     tty                27368 Jan 27  2020 /snap/core/11316/usr/bin/wall
     7576      0 drwxrwsr-x   3 root     staff                 36 Jun 15  2021 /snap/core/11316/usr/local/lib/python3.5
     7577      0 drwxrwsr-x   2 root     staff                  3 Jun 15  2021 /snap/core/11316/usr/local/lib/python3.5/dist-packages
    12828      0 drwxrwsr-x   2 root     staff                  3 Apr 12  2016 /snap/core/11316/var/local
    12839      0 drwxrwsr-x   2 root     mail                   3 Jun 15  2021 /snap/core/11316/var/mail
      389      0 drwxr-s---   2 root     dip                   54 Feb 12  2020 /snap/core/8689/etc/chatscripts
      792      0 drwxr-s---   2 root     dip                   31 Feb 12  2020 /snap/core/8689/etc/ppp/peers
     2584     35 -rwxr-sr-x   1 root     shadow             35632 Apr  9  2018 /snap/core/8689/sbin/pam_extrausers_chkpwd
     2624     35 -rwxr-sr-x   1 root     shadow             35600 Apr  9  2018 /snap/core/8689/sbin/unix_chkpwd
     2661     61 -rwxr-sr-x   1 root     shadow             62336 Mar 25  2019 /snap/core/8689/usr/bin/chage
     2681     36 -rwxr-sr-x   1 root     systemd-network    36080 Apr  5  2016 /snap/core/8689/usr/bin/crontab
     2710     15 -rwxr-sr-x   1 root     mail               14856 Dec  6  2013 /snap/core/8689/usr/bin/dotlockfile
     2722     23 -rwxr-sr-x   1 root     shadow             22768 Mar 25  2019 /snap/core/8689/usr/bin/expiry
     2819     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/8689/usr/bin/mail-lock
     2819     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/8689/usr/bin/mail-touchlock
     2819     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/8689/usr/bin/mail-unlock
     2952    351 -rwxr-sr-x   1 root     crontab           358624 Mar  4  2019 /snap/core/8689/usr/bin/ssh-agent
     3017     27 -rwxr-sr-x   1 root     tty                27368 Jan 27  2020 /snap/core/8689/usr/bin/wall
     6466    105 -rwsr-sr-x   1 root     root              106696 Feb 12  2020 /snap/core/8689/usr/lib/snapd/snap-confine
     7579      0 drwxrwsr-x   3 root     staff                 36 Feb 12  2020 /snap/core/8689/usr/local/lib/python3.5
     7580      0 drwxrwsr-x   2 root     staff                  3 Feb 12  2020 /snap/core/8689/usr/local/lib/python3.5/dist-packages
    12825      0 drwxrwsr-x   2 root     staff                  3 Apr 12  2016 /snap/core/8689/var/local
    12836      0 drwxrwsr-x   2 root     mail                   3 Feb 12  2020 /snap/core/8689/var/mail
   262167      4 drwxr-s---   2 root     dip                 4096 Mar 13  2020 /etc/chatscripts
   263948      4 drwxr-s---   2 root     dip                 4096 Aug  5  2019 /etc/ppp/peers
    68226      4 drwxrwsrwt   2 root     whoopsie            4096 Jul  6  2021 /var/metrics
    68225      4 drwxrwsr-x   2 root     mail                4096 Jul  6  2021 /var/mail
    68220      4 drwxrwsrwt   2 root     whoopsie            4096 Jul  6  2021 /var/crash
   283714      4 drwxr-sr-x   3 root     systemd-journal     4096 Jul  6  2021 /var/log/journal
   263488      4 drwxr-sr-x   2 root     systemd-journal     4096 oct  1 06:07 /var/log/journal/1456d592d9a64495ba5b92bdbdb0cc08
    68222      4 drwxrwsr-x   2 root     staff               4096 Jul  6  2021 /var/local

Processes


www-data@ubuntu:/var/www/Magic/images/uploads$ ps -auxwww
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root         1  0.0  0.2 225524  9212 ?        Ss   06:07   0:02 /sbin/init auto noprompt
root       410  0.0  0.5 103252 21084 ?        S<s  06:07   0:00 /lib/systemd/systemd-journald
root       424  0.0  0.1  47864  5972 ?        Ss   06:07   0:00 /lib/systemd/systemd-udevd
root       518  0.0  0.0 232652   316 ?        Ssl  06:07   0:00 vmware-vmblock-fuse /run/vmblock-fuse -o rw,subtype=vmware-vmblock,default_permissions,allow_other,dev,suid
systemd+   586  0.0  0.0 146112  3444 ?        Ssl  06:07   0:00 /lib/systemd/systemd-timesyncd
systemd+   587  0.0  0.1  70900  6252 ?        Ss   06:07   0:01 /lib/systemd/systemd-resolved
root       588  0.0  0.2  99424 10660 ?        Ss   06:07   0:00 /usr/bin/VGAuthService
root       593  0.1  0.2 244200  8092 ?        Ssl  06:07   0:17 /usr/bin/vmtoolsd
root       898  0.0  0.4 177640 17172 ?        Ssl  06:07   0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
root       900  0.0  0.0 110544  2096 ?        Ssl  06:07   0:00 /usr/sbin/irqbalance --foreground
avahi      902  0.0  0.0  47204  3232 ?        Ss   06:07   0:00 avahi-daemon: running [ubuntu.local]
syslog     905  0.0  0.1 263032  4916 ?        Ssl  06:07   0:00 /usr/sbin/rsyslogd -n
root       906  0.0  0.3 517576 12336 ?        Ssl  06:07   0:00 /usr/lib/udisks2/udisksd
root       907  0.0  0.2 308548  8764 ?        Ssl  06:07   0:00 /usr/lib/accountsservice/accounts-daemon
root       910  0.0  0.1  70704  6188 ?        Ss   06:07   0:00 /lib/systemd/systemd-logind
root       918  0.0  0.2 434324  9472 ?        Ssl  06:07   0:00 /usr/sbin/ModemManager --filter-policy=strict
root       920  0.0  0.0   4548   760 ?        Ss   06:07   0:00 /usr/sbin/acpid
root       924  0.0  0.7 868904 29300 ?        Ssl  06:07   0:03 /usr/lib/snapd/snapd
avahi      930  0.0  0.0  47072   336 ?        S    06:07   0:00 avahi-daemon: chroot helper
root       936  0.0  0.0  38424  3260 ?        Ss   06:07   0:00 /usr/sbin/cron -f
message+   940  0.0  0.1  51248  5364 ?        Ss   06:07   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root       974  0.0  0.4 502320 18204 ?        Ssl  06:07   0:02 /usr/sbin/NetworkManager --no-daemon
root       975  0.0  0.1  45232  5492 ?        Ss   06:07   0:00 /sbin/wpa_supplicant -u -s -O /run/wpa_supplicant
root       994  0.0  0.2 311348 10976 ?        Ssl  06:07   0:00 /usr/lib/policykit-1/polkitd --no-debug
root      1075  0.0  0.1 308056  7556 ?        Ssl  06:07   0:00 /usr/sbin/gdm3
root      1086  0.0  0.2 261552  8116 ?        Sl   06:07   0:00 gdm-session-worker [pam/gdm-launch-environment]
root      1090  0.0  0.1  72296  6620 ?        Ss   06:07   0:00 /usr/sbin/sshd -D
whoopsie  1098  0.0  0.3 394996 12828 ?        Ssl  06:07   0:00 /usr/bin/whoopsie -f
kernoops  1102  0.0  0.0  56940   416 ?        Ss   06:07   0:00 /usr/sbin/kerneloops --test
kernoops  1106  0.0  0.0  56940   416 ?        Ss   06:07   0:00 /usr/sbin/kerneloops
root      1118  0.0  0.5 264200 23272 ?        Ss   06:07   0:00 /usr/sbin/apache2 -k start
mysql     1141  0.4  4.7 1490124 191932 ?      Sl   06:07   1:06 /usr/sbin/mysqld --daemonize --pid-file=/run/mysqld/mysqld.pid
gdm       1169  0.0  0.1  77020  7968 ?        Ss   06:07   0:00 /lib/systemd/systemd --user
gdm       1171  0.0  0.0 196060  2732 ?        S    06:07   0:00 (sd-pam)
gdm       1206  0.0  0.1 197796  5512 tty1     Ssl+ 06:07   0:00 /usr/lib/gdm3/gdm-wayland-session gnome-session --autostart /usr/share/gdm/greeter/autostart
gdm       1208  0.0  0.1  50324  4600 ?        Ss   06:07   0:00 /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
gdm       1225  0.0  0.3 566976 15268 tty1     Sl+  06:07   0:00 /usr/lib/gnome-session/gnome-session-binary --autostart /usr/share/gdm/greeter/autostart
gdm       1243  0.1  5.0 3326080 202540 tty1   Sl+  06:07   0:17 /usr/bin/gnome-shell
root      1273  0.0  0.2 322348  8648 ?        Ssl  06:07   0:00 /usr/lib/upower/upowerd
gdm       1289  0.0  0.9 366868 39216 tty1     Sl+  06:07   0:00 /usr/bin/Xwayland :1024 -rootless -terminate -accessx -core -listen 4 -listen 5 -displayfd 6
gdm       1294  0.0  0.2 365552  8380 ?        Ssl  06:07   0:00 /usr/lib/at-spi2-core/at-spi-bus-launcher
gdm       1299  0.0  0.0  49924  3876 ?        S    06:07   0:00 /usr/bin/dbus-daemon --config-file=/usr/share/defaults/at-spi2/accessibility.conf --nofork --print-address 3
gdm       1301  0.0  0.1 220764  7068 ?        Sl   06:07   0:00 /usr/lib/at-spi2-core/at-spi2-registryd --use-gnome-session
gdm       1304  0.0  0.1 1072516 7948 ?        Ssl  06:07   0:00 /usr/bin/pulseaudio --daemonize=no
rtkit     1306  0.0  0.0 183504  2960 ?        SNsl 06:07   0:00 /usr/lib/rtkit/rtkit-daemon
gdm       1317  0.0  0.2 375232  9560 tty1     Sl   06:07   0:00 ibus-daemon --xim --panel disable
gdm       1320  0.0  0.1 294488  7804 tty1     Sl   06:07   0:00 /usr/lib/ibus/ibus-dconf
gdm       1323  0.0  1.2 638108 50328 tty1     Sl   06:07   0:00 /usr/lib/ibus/ibus-x11 --kill-daemon
gdm       1327  0.0  0.1 292432  7836 ?        Sl   06:07   0:00 /usr/lib/ibus/ibus-portal
gdm       1333  0.0  0.1 271560  5020 ?        Ssl  06:07   0:00 /usr/libexec/xdg-permission-store
root      1345  0.0  0.2 315244  8892 ?        Ssl  06:07   0:00 /usr/lib/x86_64-linux-gnu/boltd
root      1349  0.0  0.3 383592 14156 ?        Ssl  06:07   0:00 /usr/lib/packagekit/packagekitd
gdm       1350  0.0  0.5 502544 23264 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-xsettings
gdm       1353  0.0  0.2 294440  8212 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-a11y-settings
gdm       1355  0.0  0.5 353816 21972 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-clipboard
gdm       1356  0.0  0.5 740576 23396 tty1     Sl+  06:07   0:02 /usr/lib/gnome-settings-daemon/gsd-color
gdm       1363  0.0  0.3 394880 13660 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-datetime
gdm       1364  0.0  0.1 283740  5148 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-housekeeping
gdm       1369  0.0  0.5 514552 22832 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-keyboard
gdm       1371  0.0  0.6 874708 24640 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-media-keys
gdm       1372  0.0  0.1 201996  4676 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-mouse
gdm       1374  0.0  0.5 525348 23936 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-power
gdm       1378  0.0  0.2 267020  8596 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-print-notifications
gdm       1379  0.0  0.1 202016  4516 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-rfkill
gdm       1394  0.0  0.1 275732  4776 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-screensaver-proxy
gdm       1397  0.0  0.2 321404 10288 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-sharing
gdm       1402  0.0  0.2 464248  9968 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-smartcard
gdm       1406  0.0  0.2 340892  9576 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-sound
gdm       1408  0.0  0.5 438788 22812 tty1     Sl+  06:07   0:00 /usr/lib/gnome-settings-daemon/gsd-wacom
colord    1426  0.0  0.3 339464 15720 ?        Ssl  06:07   0:00 /usr/lib/colord/colord
gdm       1465  0.0  0.1 218764  7552 tty1     Sl   06:07   0:00 /usr/lib/ibus/ibus-engine-simple
root      1770  0.0  0.2 107700  8184 ?        Ss   06:12   0:00 /usr/sbin/cupsd -l
root      1771  0.0  0.2 303668 11076 ?        Ssl  06:12   0:00 /usr/sbin/cups-browsed
www-data  2652  0.0  0.3 269096 13928 ?        S    10:02   0:00 /usr/sbin/apache2 -k start
www-data  2659  0.0  0.0   4624   876 ?        S    10:03   0:00 sh -c sh
www-data  2660  0.0  0.0   4624   772 ?        S    10:03   0:00 sh
www-data  2661  0.0  0.2  37292  9288 ?        S    10:03   0:00 python3 -c import pty; pty.spawn("/bin/bash")
www-data  2662  0.0  0.0  18504  3416 pts/0    Ss   10:03   0:00 /bin/bash
www-data  2724  0.0  0.0  36696  3148 pts/0    R+   10:05   0:00 ps -auxwww

/usr/sbin/cron -f /usr/lib/snapd/snapd /usr/lib/policykit-1/polkitd --no-debug /usr/sbin/gdm3 /usr/sbin/mysqld --daemonize --pid-file=/run/mysqld/mysqld.pid /usr/lib/gdm3/gdm-wayland-session gnome-session --autostart /usr/share/gdm/greeter/autostart /usr/lib/rtkit/rtkit-daemon /usr/sbin/cupsd -l /usr/sbin/cups-browsed

Cron & Systemd


www-data@ubuntu:/var/www/Magic/images/uploads$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for www-data
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
 
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 
# m h dom mon dow user	command
17 *	* * *	root    cd / && run-parts --report /etc/cron.hourly
25 6	* * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6	* * 7	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6	1 * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT                         LEFT          LAST                         PASSED  
sun 2023-10-01 10:09:00 PDT  10s left      Sun 2023-10-01 09:39:02 PDT  29min ag
sun 2023-10-01 11:01:11 PDT  52min left    Sun 2023-10-01 10:03:43 PDT  5min ago
sun 2023-10-01 15:28:39 PDT  5h 19min left Sun 2023-10-01 06:07:28 PDT  4h 1min 
sun 2023-10-01 23:00:06 PDT  12h left      Sun 2023-10-01 06:07:28 PDT  4h 1min 
mon 2023-10-02 00:00:00 PDT  13h left      Sun 2023-10-01 06:07:28 PDT  4h 1min 
mon 2023-10-02 06:09:09 PDT  20h left      Sun 2023-10-01 06:07:28 PDT  4h 1min 
mon 2023-10-02 06:22:21 PDT  20h left      Sun 2023-10-01 06:22:21 PDT  3h 46min
 
7 timers listed.
Pass --all to see loaded but inactive timers, too.
lines 1-11/11 (END)

Sudo Version


www-data@ubuntu:/var/www/Magic/images/uploads$ sudo --version
Sudo version 1.8.21p2
Sudoers policy plugin version 1.8.21p2
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.21p2

Sudo version 1.8.21p2

Glibc Version


www-data@ubuntu:/var/www/Magic/images/uploads$ ldd --version
ldd (Ubuntu GLIBC 2.27-3ubuntu1) 2.27
Copyright (C) 2018 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.

ldd (Ubuntu GLIBC 2.27-3ubuntu1) 2.27