InfoSec LAB

Sightless_Initial_Foothold_UNIX_Docker

Created: 3 min read

System/Kernel

root@c184118df0a6:/var/lib/sqlpad# file /bin/bash ; uname -a ; cat /etc/*release
bash: file: command not foundat /etc/*release 
Linux c184118df0a6 5.15.0-119-generic #129-Ubuntu SMP Fri Aug 2 19:25:20 UTC 2024 x86_64 GNU/Linux
PRETTY_NAME="Debian GNU/Linux 10 (buster)"
NAME="Debian GNU/Linux"
VERSION_ID="10"
VERSION="10 (buster)"
VERSION_CODENAME=buster
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"

Debian GNU/Linux 10 (buster) 5.15.0-119-generic

Networks

root@c184118df0a6:/var/lib/sqlpad# cat /proc/net/arp
cat /proc/net/arp
IP address       HW type     Flags       HW address            Mask     Device
172.17.0.1       0x1         0x2         02:42:56:53:1d:d0     *        eth0
 
root@c184118df0a6:/var/lib/sqlpad# cat /etc/hosts
cat /etc/hosts
127.0.0.1	localhost
::1	localhost ip6-localhost ip6-loopback
fe00::0	ip6-localnet
ff00::0	ip6-mcastprefix
ff02::1	ip6-allnodes
ff02::2	ip6-allrouters
172.17.0.2	c184118df0a6

Users & Groups

root@c184118df0a6:/var/lib/sqlpad# cat /etc/passwd ; ll /home
cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
_apt:x:100:65534::/nonexistent:/usr/sbin/nologin
node:x:1000:1000::/home/node:/bin/bash
michael:x:1001:1001::/home/michael:/bin/bash
total 20K
4.0K drwxr-xr-x 1 node    node    4.0K Aug  9 09:42 node
4.0K drwxr-xr-x 2 michael michael 4.0K Aug  9 09:42 michael
8.0K drwxr-xr-x 1 root    root    4.0K Aug  6 11:23 .
4.0K drwxr-xr-x 1 root    root    4.0K Aug  2 09:30 ..
root@c184118df0a6:/var/lib/sqlpad# cut -d: -f1 /etc/passwd | xargs -n1 id
cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=1000(node) gid=1000(node) groups=1000(node)
uid=1001(michael) gid=1001(michael) groups=1001(michael)

uid=1001(michael) gid=1001(michael) groups=1001(michael)

SUIDs

root@c184118df0a6:/var/lib/sqlpad# find / -perm -04000 -ls -type f 2>/dev/null
   397379     52 -rwsr-xr-x   1 root     root        51280 Jan 10  2019 /bin/mount
   397394     64 -rwsr-xr-x   1 root     root        63568 Jan 10  2019 /bin/su
   397400     36 -rwsr-xr-x   1 root     root        34888 Jan 10  2019 /bin/umount
   397898     44 -rwsr-xr-x   1 root     root        44528 Jul 27  2018 /usr/bin/chsh
   397944     84 -rwsr-xr-x   1 root     root        84016 Jul 27  2018 /usr/bin/gpasswd
   397895     56 -rwsr-xr-x   1 root     root        54096 Jul 27  2018 /usr/bin/chfn
   397987     44 -rwsr-xr-x   1 root     root        44440 Jul 27  2018 /usr/bin/newgrp
   397997     64 -rwsr-xr-x   1 root     root        63736 Jul 27  2018 /usr/bin/passwd

SGIDs

root@c184118df0a6:/var/lib/sqlpad# find / -perm -02000 -ls -type f 2>/dev/null
   397865     40 -rwxr-sr-x   1 root     shadow      39616 Feb 14  2019 /sbin/unix_chkpwd
   402004      4 drwxrwsr-x   2 root     staff        4096 Oct  3  2021 /var/local
   402013      4 drwxrwsr-x   2 root     mail         4096 Feb 28  2022 /var/mail
   397931     32 -rwxr-sr-x   1 root     shadow      31000 Jul 27  2018 /usr/bin/expiry
   398062     36 -rwxr-sr-x   1 root     tty         34896 Jan 10  2019 /usr/bin/wall
   397892     72 -rwxr-sr-x   1 root     shadow      71816 Jul 27  2018 /usr/bin/chage

Processes

root@c184118df0a6:/var/lib/sqlpad# ps
bash: ps: command not found

Cron & Systemd

root@c184118df0a6:/var/lib/sqlpad# crontab -l ; cat /etc/crontab
crontab -l ; cat /etc/crontab
bash: crontab: command not found
cat: /etc/crontab: No such file or directory

Sudo Version

root@c184118df0a6:/var/lib/sqlpad# sudo --version
sudo --version
bash: sudo: command not found

Glibc Version

root@c184118df0a6:/var/lib/sqlpad# ldd --version
ldd --version
ldd (Debian GLIBC 2.28-10) 2.28
Copyright (C) 2018 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.

ldd (Debian GLIBC 2.28-10) 2.28

Interactive Graph View

Backlinks