System/Kernel


nibbler@nibbles:/var/www/html/nibbleblog/content$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.32, BuildID[sha1]=04eca96c5bf3e9a300952a29ef3218f00487d37b, stripped
linux nibbles 4.4.0-104-generic #127-ubuntu smp mon dec 11 12:16:42 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=16.04
DISTRIB_CODENAME=xenial
DISTRIB_DESCRIPTION="Ubuntu 16.04.3 LTS"
NAME="Ubuntu"
VERSION="16.04.3 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.3 LTS"
VERSION_ID="16.04"
home_url="http://www.ubuntu.com/"
support_url="http://help.ubuntu.com/"
bug_report_url="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenial

Ubuntu 16.04.3 LTS (Xenial Xerus) 4.4.0-104-generic x86-64

Networks


nibbler@Nibbles:/var/www/html/nibbleblog/content$ netstat -antup4
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      -               
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -               
tcp        0     79 10.10.10.75:33958       10.10.14.7:9999         ESTABLISHED 1538/sh         
tcp        1      0 10.10.10.75:33956       10.10.14.7:9999         CLOSE_WAIT  1528/sh         
udp        0      0 10.10.10.75:47336       10.10.10.2:53           ESTABLISHED -       

127.0.0.1:3306

Users


nibbler@nibbles:/var/www/html/nibbleblog/content$ cat /etc/passwd ; ls -lasht /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-timesync:x:100:102:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:101:103:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:102:104:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:103:105:systemd Bus Proxy,,,:/run/systemd:/bin/false
syslog:x:104:108::/home/syslog:/bin/false
_apt:x:105:65534::/nonexistent:/bin/false
lxd:x:106:65534::/var/lib/lxd/:/bin/false
messagebus:x:107:111::/var/run/dbus:/bin/false
uuidd:x:108:112::/run/uuidd:/bin/false
dnsmasq:x:109:65534:dnsmasq,,,:/var/lib/misc:/bin/false
sshd:x:110:65534::/var/run/sshd:/usr/sbin/nologin
mysql:x:111:118:MySQL Server,,,:/nonexistent:/bin/false
nibbler:x:1001:1001::/home/nibbler:
total 12K
4.0K drwxr-xr-x 23 root    root    4.0K Dec 15  2020 ..
4.0K drwxr-xr-x  3 nibbler nibbler 4.0K Dec 29  2017 nibbler
4.0K drwxr-xr-x  3 root    root    4.0K Dec 10  2017 .
 

SUIDs


nibbler@Nibbles:/var/www/html/nibbleblog/content$ find / -perm -04000 -ls -type f 2>/dev/null
      278     44 -rwsr-xr--   1 root     messagebus    42992 Jan 12  2017 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
     1260     40 -rwsr-xr-x   1 root     root          38984 Jun 14  2017 /usr/lib/x86_64-linux-gnu/lxc/lxc-user-nic
     1306    420 -rwsr-xr-x   1 root     root         428240 Mar 16  2017 /usr/lib/openssh/ssh-keysign
    15263     16 -rwsr-xr-x   1 root     root          14864 Jan 17  2016 /usr/lib/policykit-1/polkit-agent-helper-1
     3728     12 -rwsr-xr-x   1 root     root          10232 Mar 27  2017 /usr/lib/eject/dmcrypt-get-device
     5346     84 -rwsr-sr-x   1 root     root          85832 Nov 30  2017 /usr/lib/snapd/snap-confine
     5009     40 -rwsr-xr-x   1 root     root          40432 May 16  2017 /usr/bin/chsh
     3772    136 -rwsr-xr-x   1 root     root         136808 Jul  4  2017 /usr/bin/sudo
     5011     52 -rwsr-xr-x   1 root     root          49584 May 16  2017 /usr/bin/chfn
     5012     56 -rwsr-xr-x   1 root     root          54256 May 16  2017 /usr/bin/passwd
     5010     76 -rwsr-xr-x   1 root     root          75304 May 16  2017 /usr/bin/gpasswd
    14780     52 -rwsr-sr-x   1 daemon   daemon        51464 Jan 14  2016 /usr/bin/at
     3153     40 -rwsr-xr-x   1 root     root          39904 May 16  2017 /usr/bin/newgrp
     1274     36 -rwsr-xr-x   1 root     root          32944 May 16  2017 /usr/bin/newgidmap
    15272     24 -rwsr-xr-x   1 root     root          23376 Jan 17  2016 /usr/bin/pkexec
     1273     36 -rwsr-xr-x   1 root     root          32944 May 16  2017 /usr/bin/newuidmap
   262222     44 -rwsr-xr-x   1 root     root          44680 May  7  2014 /bin/ping6
   262164     40 -rwsr-xr-x   1 root     root          40128 May 16  2017 /bin/su
   277891     32 -rwsr-xr-x   1 root     root          30800 Jul 12  2016 /bin/fusermount
   274656    140 -rwsr-xr-x   1 root     root         142032 Jan 28  2017 /bin/ntfs-3g
   262201     28 -rwsr-xr-x   1 root     root          27608 Jun 14  2017 /bin/umount
   262221     44 -rwsr-xr-x   1 root     root          44168 May  7  2014 /bin/ping
   262196     40 -rwsr-xr-x   1 root     root          40152 Jun 14  2017 /bin/mount

SGIDs


nibbler@nibbles:/var/www/html/nibbleblog/content$ find / -perm -02000 -ls -type f 2>/dev/null
      125     36 -rwxr-sr-x   1 root     shadow      35600 Mar 16  2016 /sbin/unix_chkpwd
       89     36 -rwxr-sr-x   1 root     shadow      35632 Mar 16  2016 /sbin/pam_extrausers_chkpwd
     7491      4 drwxrwsr-x   2 root     staff        4096 Dec 10  2017 /var/local
     8294      4 drwxr-sr-x   2 man      root         4096 Dec 28  2017 /var/cache/man
     7507      4 drwxrwsr-x   2 root     mail         4096 Dec 10  2017 /var/mail
      309      0 drwxr-sr-x   3 root     systemd-journal       60 oct 14 16:48 /run/log/journal
      310      0 drwxr-s---   2 root     systemd-journal      100 oct 14 16:48 /run/log/journal/ed3fde19803f222811e9abca59c53afc
     3129      4 drwxrwsr-x   3 root     staff               4096 Sep 22  2017 /usr/local/lib/python3.5
     3130      4 drwxrwsr-x   2 root     staff               4096 Jul 19  2016 /usr/local/lib/python3.5/dist-packages
   152051      4 drwxrwsr-x   6 root     staff               4096 Sep 22  2017 /usr/local/share/xml
   276360      4 drwxrwsr-x   2 root     staff               4096 Sep 22  2017 /usr/local/share/xml/declaration
   276362      4 drwxrwsr-x   2 root     staff               4096 Sep 22  2017 /usr/local/share/xml/schema
   276361      4 drwxrwsr-x   2 root     staff               4096 Sep 22  2017 /usr/local/share/xml/entities
   152052      4 drwxrwsr-x   2 root     staff               4096 Sep 22  2017 /usr/local/share/xml/misc
   151958      4 drwxrwsr-x   7 root     staff               4096 Sep 22  2017 /usr/local/share/sgml
   151960      4 drwxrwsr-x   2 root     staff               4096 Sep 22  2017 /usr/local/share/sgml/stylesheet
   151959      4 drwxrwsr-x   2 root     staff               4096 Sep 22  2017 /usr/local/share/sgml/declaration
   151963      4 drwxrwsr-x   2 root     staff               4096 Sep 22  2017 /usr/local/share/sgml/dtd
   151961      4 drwxrwsr-x   2 root     staff               4096 Sep 22  2017 /usr/local/share/sgml/entities
   151962      4 drwxrwsr-x   2 root     staff               4096 Sep 22  2017 /usr/local/share/sgml/misc
    41516      4 drwxrwsr-x   2 root     staff               4096 Dec 10  2017 /usr/local/share/fonts
    14821     12 -rwxr-sr-x   1 root     utmp               10232 Mar 11  2016 /usr/lib/x86_64-linux-gnu/utempter/utempter
     5346     84 -rwsr-sr-x   1 root     root               85832 Nov 30  2017 /usr/lib/snapd/snap-confine
     3692     28 -rwxr-sr-x   1 root     tty                27368 Jun 14  2017 /usr/bin/wall
     4969     24 -rwxr-sr-x   1 root     shadow             22768 May 16  2017 /usr/bin/expiry
    14825    428 -rwxr-sr-x   1 root     utmp              434216 Feb  7  2016 /usr/bin/screen
    14780     52 -rwsr-sr-x   1 daemon   daemon             51464 Jan 14  2016 /usr/bin/at
      173     36 -rwxr-sr-x   1 root     crontab            36080 Apr  5  2016 /usr/bin/crontab
    14451     40 -rwxr-sr-x   1 root     mlocate            39520 Nov 18  2014 /usr/bin/mlocate
     4968     64 -rwxr-sr-x   1 root     shadow             62336 May 16  2017 /usr/bin/chage
    13697     16 -rwxr-sr-x   1 root     tty                14752 Mar  1  2016 /usr/bin/bsd-write
     1317    352 -rwxr-sr-x   1 root     ssh               358624 Mar 16  2017 /usr/bin/ssh-agent

Processes


nibbler@Nibbles:/var/www/html/nibbleblog/content$ ps -aux | grep -i 'root' --color=auto
root          1  0.1  0.6 119904  6104 ?        Ss   16:48   0:01 /sbin/init
[...]
root        507  0.0  0.3  28336  3032 ?        Ss   16:48   0:00 /lib/systemd/systemd-journald
[...]
root        556  0.0  0.1 102972  1672 ?        Ss   16:48   0:00 /sbin/lvmetad -f
root        570  0.0  0.3  44320  3732 ?        Ss   16:48   0:00 /lib/systemd/systemd-udevd
root       1010  0.2  1.0 192244 10000 ?        Ssl  16:48   0:02 /usr/bin/vmtoolsd
root       1026  0.0  0.1  20104  1168 ?        Ss   16:48   0:00 /lib/systemd/systemd-logind
root       1031  0.1  0.2 161876  2460 ?        Ssl  16:48   0:01 /usr/bin/lxcfs /var/lib/lxcfs/
root       1036  0.0  0.2  29012  2840 ?        Ss   16:48   0:00 /usr/sbin/cron -f
root       1039  0.0  0.1   4400  1280 ?        Ss   16:48   0:00 /usr/sbin/acpid
root       1044  0.0  0.7 275860  7984 ?        Ssl  16:48   0:00 /usr/lib/accountsservice/accounts-daemon
root       1047  0.0  2.2 268684 22672 ?        Ssl  16:48   0:00 /usr/lib/snapd/snapd
root       1083  0.0  0.6 277092  5992 ?        Ssl  16:48   0:00 /usr/lib/policykit-1/polkitd --no-debug
root       1098  0.0  0.0  13376   168 ?        Ss   16:48   0:00 /sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan --syslog
root       1205  0.0  0.5  65524  5188 ?        Ss   16:49   0:00 /usr/sbin/sshd -D
root       1228  0.0  0.0   5224   132 ?        Ss   16:49   0:00 /sbin/iscsid
root       1229  0.0  0.3   5724  3516 ?        S<Ls 16:49   0:00 /sbin/iscsid
root       1310  0.0  0.1  15940  1652 tty1     Ss+  16:49   0:00 /sbin/agetty --noclear tty1 linux
root       1359  0.0  2.3 326216 23920 ?        Ss   16:49   0:00 /usr/sbin/apache2 -k start
nibbler    1596  0.0  0.0  11288   944 pts/1    S+   17:06   0:00 grep -i root --color=auto

/usr/sbin/cron /usr/lib/policykit-1/polkitd

Cron & Systemd


nibbler@nibbles:/var/www/html/nibbleblog/content/private/plugins/my_image$ crontab -l ; cat /etc/crontab ; systemctl list-timers --all
 
no crontab for nibbler
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
 
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 
# m h dom mon dow user	command
17 *	* * *	root    cd / && run-parts --report /etc/cron.hourly
25 6	* * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6	* * 7	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6	1 * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT                         LEFT          LAST                         PASSED  
fri 2023-01-13 23:39:00 EST  23min left    Fri 2023-01-13 23:09:05 EST  6min ago
sat 2023-01-14 03:59:13 EST  4h 43min left Fri 2023-01-13 22:45:06 EST  30min ag
sat 2023-01-14 06:31:29 EST  7h left       Fri 2023-01-13 22:45:08 EST  30min ag
sat 2023-01-14 09:52:05 EST  10h left      Fri 2023-01-13 22:45:08 EST  30min ag
sat 2023-01-14 23:00:05 EST  23h left      Fri 2023-01-13 23:00:05 EST  15min ag
n/a                          n/a           n/a                          n/a     
n/a                          n/a           n/a                          n/a     
n/a                          n/a           n/a                          n/a     
 
8 timers listed.

Sudo Version


nibbler@Nibbles:/var/www/html/nibbleblog/content/private/plugins/my_image$ sudo -V  
Sudo version 1.8.16
Sudoers policy plugin version 1.8.16
Sudoers file grammar version 45
Sudoers I/O plugin version 1.8.16

Glibc Version


nibbler@nibbles:/var/www/html/nibbleblog/content/private/plugins/my_image$ ldd --version
ldd (Ubuntu GLIBC 2.23-0ubuntu9) 2.23
Copyright (C) 2016 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.