System/Kernel
shelly@shocker:/usr/lib/cgi-bin$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.24, BuildID[sha1]=3fe3af6db0cb5393f7b1b154595479b057575792, stripped
linux shocker 4.4.0-96-generic #119-ubuntu smp tue sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=16.04
DISTRIB_CODENAME=xenial
DISTRIB_DESCRIPTION="Ubuntu 16.04.3 LTS"
NAME="Ubuntu"
VERSION="16.04.3 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.3 LTS"
VERSION_ID="16.04"
home_url="http://www.ubuntu.com/"
support_url="http://help.ubuntu.com/"
bug_report_url="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenialUbuntu 16.04.3 LTS (Xenial Xerus)
4.4.0-96-generic
x86_64
Networks
shelly@Shocker:/usr/lib/cgi-bin$ netstat -antup4
netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:2222 0.0.0.0:* LISTEN -
tcp 0 297 10.10.10.56:44988 10.10.14.12:9999 ESTABLISHED 1560/bash Users & Groups
shelly@shocker:/usr/lib/cgi-bin$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-timesync:x:100:102:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:101:103:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:102:104:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:103:105:systemd Bus Proxy,,,:/run/systemd:/bin/false
syslog:x:104:108::/home/syslog:/bin/false
_apt:x:105:65534::/nonexistent:/bin/false
lxd:x:106:65534::/var/lib/lxd/:/bin/false
messagebus:x:107:111::/var/run/dbus:/bin/false
uuidd:x:108:112::/run/uuidd:/bin/false
dnsmasq:x:109:65534:dnsmasq,,,:/var/lib/misc:/bin/false
sshd:x:110:65534::/var/run/sshd:/usr/sbin/nologin
shelly:x:1000:1000:shelly,,,:/home/shelly:/bin/bash
total 12K
4.0K drwxr-xr-x 23 root root 4.0K Sep 21 2022 ..
4.0K drwxr-xr-x 4 shelly shelly 4.0K Sep 21 2022 shelly
4.0K drwxr-xr-x 3 root root 4.0K Sep 21 2022 .lxd
shelly@shocker:/usr/lib/cgi-bin$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-timesync) gid=102(systemd-timesync) groups=102(systemd-timesync)
uid=101(systemd-network) gid=103(systemd-network) groups=103(systemd-network)
uid=102(systemd-resolve) gid=104(systemd-resolve) groups=104(systemd-resolve)
uid=103(systemd-bus-proxy) gid=105(systemd-bus-proxy) groups=105(systemd-bus-proxy)
uid=104(syslog) gid=108(syslog) groups=108(syslog),4(adm)
uid=105(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=106(lxd) gid=65534(nogroup) groups=65534(nogroup)
uid=107(messagebus) gid=111(messagebus) groups=111(messagebus)
uid=108(uuidd) gid=112(uuidd) groups=112(uuidd)
uid=109(dnsmasq) gid=65534(nogroup) groups=65534(nogroup)
uid=110(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=1000(shelly) gid=1000(shelly) groups=1000(shelly),4(adm),24(cdrom),30(dip),46(plugdev),110(lxd),115(lpadmin),116(sambashare)uid=1000(shelly) gid=1000(shelly) groups=1000(shelly),4(adm),24(cdrom),30(dip),46(plugdev),110(lxd),115(lpadmin),116(sambashare)
SUIDs
shelly@Shocker:/usr/lib/cgi-bin$ find / -perm -04000 -ls -type f 2>/dev/null
278 44 -rwsr-xr-- 1 root messagebus 42992 Jan 12 2017 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
1260 40 -rwsr-xr-x 1 root root 38984 Jun 14 2017 /usr/lib/x86_64-linux-gnu/lxc/lxc-user-nic
1306 420 -rwsr-xr-x 1 root root 428240 Mar 16 2017 /usr/lib/openssh/ssh-keysign
15263 16 -rwsr-xr-x 1 root root 14864 Jan 17 2016 /usr/lib/policykit-1/polkit-agent-helper-1
3728 12 -rwsr-xr-x 1 root root 10232 Mar 27 2017 /usr/lib/eject/dmcrypt-get-device
1327 80 -rwsr-xr-x 1 root root 81672 Aug 31 2017 /usr/lib/snapd/snap-confine
5009 40 -rwsr-xr-x 1 root root 40432 May 16 2017 /usr/bin/chsh
3772 136 -rwsr-xr-x 1 root root 136808 Jul 4 2017 /usr/bin/sudo
5011 52 -rwsr-xr-x 1 root root 49584 May 16 2017 /usr/bin/chfn
5012 56 -rwsr-xr-x 1 root root 54256 May 16 2017 /usr/bin/passwd
5010 76 -rwsr-xr-x 1 root root 75304 May 16 2017 /usr/bin/gpasswd
14780 52 -rwsr-sr-x 1 daemon daemon 51464 Jan 14 2016 /usr/bin/at
3153 40 -rwsr-xr-x 1 root root 39904 May 16 2017 /usr/bin/newgrp
1274 36 -rwsr-xr-x 1 root root 32944 May 16 2017 /usr/bin/newgidmap
15272 24 -rwsr-xr-x 1 root root 23376 Jan 17 2016 /usr/bin/pkexec
1273 36 -rwsr-xr-x 1 root root 32944 May 16 2017 /usr/bin/newuidmap
41692 44 -rwsr-xr-x 1 root root 44680 May 7 2014 /bin/ping6
41640 40 -rwsr-xr-x 1 root root 40128 May 16 2017 /bin/su
45710 32 -rwsr-xr-x 1 root root 30800 Jul 12 2016 /bin/fusermount
42481 140 -rwsr-xr-x 1 root root 142032 Jan 28 2017 /bin/ntfs-3g
41671 28 -rwsr-xr-x 1 root root 27608 Jun 14 2017 /bin/umount
41691 44 -rwsr-xr-x 1 root root 44168 May 7 2014 /bin/ping
41667 40 -rwsr-xr-x 1 root root 40152 Jun 14 2017 /bin/mount/usr/lib/x86_64-linux-gnu/lxc/lxc-user-nic
SGIDs
shelly@shocker:/usr/lib/cgi-bin$ find / -perm -02000 -ls -type f 2>/dev/null
125 36 -rwxr-sr-x 1 root shadow 35600 Mar 16 2016 /sbin/unix_chkpwd
89 36 -rwxr-sr-x 1 root shadow 35632 Mar 16 2016 /sbin/pam_extrausers_chkpwd
54503 4 drwxrwsr-x 2 root staff 4096 Sep 21 2022 /var/local
55331 4 drwxr-sr-x 2 man root 4096 Sep 21 2022 /var/cache/man
54519 4 drwxrwsr-x 2 root mail 4096 Sep 21 2022 /var/mail
318 0 drwxr-sr-x 3 root systemd-journal 60 mar 31 09:33 /run/log/journal
319 0 drwxr-s--- 2 root systemd-journal 100 mar 31 09:33 /run/log/journal/ed3fde19803f222811e9abca59c53afc
3129 4 drwxrwsr-x 3 root staff 4096 Sep 22 2017 /usr/local/lib/python3.5
3130 4 drwxrwsr-x 2 root staff 4096 Jul 19 2016 /usr/local/lib/python3.5/dist-packages
31933 4 drwxrwsr-x 6 root staff 4096 Sep 21 2022 /usr/local/share/xml
44181 4 drwxrwsr-x 2 root staff 4096 Sep 21 2022 /usr/local/share/xml/declaration
44183 4 drwxrwsr-x 2 root staff 4096 Sep 21 2022 /usr/local/share/xml/schema
44182 4 drwxrwsr-x 2 root staff 4096 Sep 21 2022 /usr/local/share/xml/entities
31934 4 drwxrwsr-x 2 root staff 4096 Sep 21 2022 /usr/local/share/xml/misc
31840 4 drwxrwsr-x 7 root staff 4096 Sep 21 2022 /usr/local/share/sgml
31842 4 drwxrwsr-x 2 root staff 4096 Sep 21 2022 /usr/local/share/sgml/stylesheet
31841 4 drwxrwsr-x 2 root staff 4096 Sep 21 2022 /usr/local/share/sgml/declaration
31845 4 drwxrwsr-x 2 root staff 4096 Sep 21 2022 /usr/local/share/sgml/dtd
31843 4 drwxrwsr-x 2 root staff 4096 Sep 21 2022 /usr/local/share/sgml/entities
31844 4 drwxrwsr-x 2 root staff 4096 Sep 21 2022 /usr/local/share/sgml/misc
14821 12 -rwxr-sr-x 1 root utmp 10232 Mar 11 2016 /usr/lib/x86_64-linux-gnu/utempter/utempter
3692 28 -rwxr-sr-x 1 root tty 27368 Jun 14 2017 /usr/bin/wall
4969 24 -rwxr-sr-x 1 root shadow 22768 May 16 2017 /usr/bin/expiry
14825 428 -rwxr-sr-x 1 root utmp 434216 Feb 7 2016 /usr/bin/screen
14780 52 -rwsr-sr-x 1 daemon daemon 51464 Jan 14 2016 /usr/bin/at
173 36 -rwxr-sr-x 1 root crontab 36080 Apr 5 2016 /usr/bin/crontab
14451 40 -rwxr-sr-x 1 root mlocate 39520 Nov 18 2014 /usr/bin/mlocate
4968 64 -rwxr-sr-x 1 root shadow 62336 May 16 2017 /usr/bin/chage
13697 16 -rwxr-sr-x 1 root tty 14752 Mar 1 2016 /usr/bin/bsd-write
1317 352 -rwxr-sr-x 1 root ssh 358624 Mar 16 2017 /usr/bin/ssh-agentProcesses
shelly@Shocker:/usr/lib/cgi-bin$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 1.1 37640 5636 ? Ss 09:33 0:02 /sbin/init
root 484 0.0 0.6 27688 2928 ? Ss 09:33 0:00 /lib/systemd/systemd-journald
root 534 0.0 0.3 102968 1512 ? Ss 09:33 0:00 /sbin/lvmetad -f
root 543 0.0 0.8 44708 3900 ? Ss 09:33 0:00 /lib/systemd/systemd-udevd
systemd+ 820 0.0 0.4 100324 2376 ? Ssl 09:33 0:00 /lib/systemd/systemd-timesyncd
root 932 0.0 0.5 29008 2804 ? Ss 09:33 0:00 /usr/sbin/cron -f
root 939 0.0 0.2 4400 1240 ? Ss 09:33 0:00 /usr/sbin/acpid
root 949 0.0 1.2 275864 6028 ? Ssl 09:33 0:00 /usr/lib/accountsservice/accounts-daemon
root 958 0.1 2.1 192240 10308 ? Ssl 09:33 0:08 /usr/bin/vmtoolsd
message+ 966 0.0 0.7 42900 3648 ? Ss 09:33 0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root 1002 0.0 0.2 20100 1216 ? Ss 09:33 0:00 /lib/systemd/systemd-logind
syslog 1004 0.0 0.6 256396 3024 ? Ssl 09:33 0:00 /usr/sbin/rsyslogd -n
root 1008 0.0 0.3 531188 1808 ? Ssl 09:33 0:00 /usr/bin/lxcfs /var/lib/lxcfs/
daemon 1012 0.0 0.4 26044 2072 ? Ss 09:33 0:00 /usr/sbin/atd -f
root 1015 0.0 4.3 275752 20764 ? Ssl 09:33 0:00 /usr/lib/snapd/snapd
root 1038 0.0 0.0 13376 172 ? Ss 09:33 0:00 /sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan --syslog
root 1045 0.0 1.1 277088 5776 ? Ssl 09:33 0:00 /usr/lib/policykit-1/polkitd --no-debug
root 1132 0.0 1.2 65520 6124 ? Ss 09:33 0:00 /usr/sbin/sshd -D
root 1147 0.0 0.0 5224 160 ? Ss 09:33 0:00 /sbin/iscsid
root 1148 0.0 0.7 5724 3520 ? S<Ls 09:33 0:01 /sbin/iscsid
root 1248 0.0 0.3 15940 1820 tty1 Ss+ 09:33 0:00 /sbin/agetty --noclear tty1 linux
root 1270 0.0 0.9 73684 4384 ? Ss 09:33 0:00 /usr/sbin/apache2 -k start
shelly 1659 0.0 0.5 34424 2884 pts/1 R+ 11:48 0:00 ps -auxwww/usr/sbin/cron -f
/usr/lib/policykit-1/polkitd --no-debug
Cron & Systemd
shelly@shocker:/usr/lib/cgi-bin$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for shelly
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED
fri 2023-03-31 12:13:47 EDT 24min left Fri 2023-03-31 10:39:51 EDT 1h 9min
fri 2023-03-31 14:01:02 EDT 2h 12min left Fri 2023-03-31 09:33:12 EDT 2h 15min
sat 2023-04-01 05:05:18 EDT 17h left Fri 2023-03-31 09:33:14 EDT 2h 15min
sat 2023-04-01 06:38:32 EDT 18h left Fri 2023-03-31 09:33:14 EDT 2h 15min
sat 2023-04-01 09:48:19 EDT 21h left Fri 2023-03-31 09:48:19 EDT 2h 0min
5 timers listed.
Pass --all to see loaded but inactive timers, too.
lines 1-9/9 (END)Sudo Version
shelly@Shocker:/usr/lib/cgi-bin$ sudo -V
Sudo version 1.8.16
Sudoers policy plugin version 1.8.16
Sudoers file grammar version 45
Sudoers I/O plugin version 1.8.16
shelly@Shocker:/usr/lib/cgi-bin$ ldd --versionSudo version 1.8.16
Glibc Version
shelly@shocker:/usr/lib/cgi-bin$ ldd --version
ldd (Ubuntu GLIBC 2.23-0ubuntu9) 2.23
Copyright (C) 2016 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu GLIBC 2.23-0ubuntu9) 2.23