System/Kernel
www-data@soccer:~$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=2a9f157890930ced4c3ad0e74fc1b1b84aad71e6, for GNU/Linux 3.2.0, stripped
linux soccer 5.4.0-135-generic #152-ubuntu smp wed nov 23 20:19:22 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=20.04
DISTRIB_CODENAME=focal
DISTRIB_DESCRIPTION="Ubuntu 20.04.5 LTS"
NAME="Ubuntu"
VERSION="20.04.5 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04.5 LTS"
VERSION_ID="20.04"
home_url="https://www.ubuntu.com/"
support_url="https://help.ubuntu.com/"
bug_report_url="https://bugs.launchpad.net/ubuntu/"
privacy_policy_url="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focalUbuntu 20.04.5 LTS (Focal Fossa)
5.4.0-135-generic
x86_64
Networks
www-data@soccer:~$ arp -a ; netstat -antup4
? (10.10.10.2) at 00:50:56:b9:d7:84 [ether] on eth0
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1111/nginx: worker
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:3000 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:9091 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:33060 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:3306 127.0.0.1:40254 ESTABLISHED -
tcp 0 210 10.10.11.194:58008 10.10.16.8:9999 ESTABLISHED 3376/sh
tcp 0 0 127.0.0.1:40254 127.0.0.1:3306 ESTABLISHED -
udp 0 0 127.0.0.53:53 0.0.0.0:* -
udp 0 0 0.0.0.0:68 0.0.0.0:* - 127.0.0.1:3000
0.0.0.0:9091
127.0.0.1:33060
127.0.0.1:3306
Users & Groups
www-data@soccer:~$ cat /etc/passwd ; ll /home
cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:100:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
systemd-timesync:x:102:104:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:106::/nonexistent:/usr/sbin/nologin
syslog:x:104:110::/home/syslog:/usr/sbin/nologin
_apt:x:105:65534::/nonexistent:/usr/sbin/nologin
tss:x:106:111:TPM software stack,,,:/var/lib/tpm:/bin/false
uuidd:x:107:112::/run/uuidd:/usr/sbin/nologin
tcpdump:x:108:113::/nonexistent:/usr/sbin/nologin
sshd:x:109:65534::/run/sshd:/usr/sbin/nologin
landscape:x:110:115::/var/lib/landscape:/usr/sbin/nologin
pollinate:x:111:1::/var/cache/pollinate:/bin/false
fwupd-refresh:x:112:116:fwupd-refresh user,,,:/run/systemd:/usr/sbin/nologin
systemd-coredump:x:999:999:systemd Core Dumper:/:/usr/sbin/nologin
lxd:x:998:100::/var/snap/lxd/common/lxd:/bin/false
player:x:1001:1001::/home/player:/bin/bash
mysql:x:113:121:MySQL Server,,,:/nonexistent:/bin/false
_laurel:x:997:997::/var/log/laurel:/bin/false
total 12K
4.0K drwxr-xr-x 21 root root 4.0K Dec 1 2022 ..
4.0K drwxr-xr-x 3 player player 4.0K Nov 28 2022 player
4.0K drwxr-xr-x 3 root root 4.0K Nov 17 2022 .player
www-data@soccer:~$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=101(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=102(systemd-timesync) gid=104(systemd-timesync) groups=104(systemd-timesync)
uid=103(messagebus) gid=106(messagebus) groups=106(messagebus)
uid=104(syslog) gid=110(syslog) groups=110(syslog),4(adm),5(tty)
uid=105(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=106(tss) gid=111(tss) groups=111(tss)
uid=107(uuidd) gid=112(uuidd) groups=112(uuidd)
uid=108(tcpdump) gid=113(tcpdump) groups=113(tcpdump)
uid=109(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=110(landscape) gid=115(landscape) groups=115(landscape)
uid=111(pollinate) gid=1(daemon) groups=1(daemon)
uid=112(fwupd-refresh) gid=116(fwupd-refresh) groups=116(fwupd-refresh)
uid=999(systemd-coredump) gid=999(systemd-coredump) groups=999(systemd-coredump)
uid=998(lxd) gid=100(users) groups=100(users)
uid=1001(player) gid=1001(player) groups=1001(player)
uid=113(mysql) gid=121(mysql) groups=121(mysql)
uid=997(_laurel) gid=997(_laurel) groups=997(_laurel)SUIDs
www-data@soccer:~$ find / -perm -04000 -ls -type f 2>/dev/null
70968 44 -rwsr-xr-x 1 root root 42224 Nov 17 2022 /usr/local/bin/doas
18263 140 -rwsr-xr-x 1 root root 142792 Nov 28 2022 /usr/lib/snapd/snap-confine
7696 52 -rwsr-xr-- 1 root messagebus 51344 Oct 25 2022 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
14300 464 -rwsr-xr-x 1 root root 473576 Mar 30 2022 /usr/lib/openssh/ssh-keysign
16207 24 -rwsr-xr-x 1 root root 22840 Feb 21 2022 /usr/lib/policykit-1/polkit-agent-helper-1
7700 16 -rwsr-xr-x 1 root root 14488 Jul 8 2019 /usr/lib/eject/dmcrypt-get-device
1753 40 -rwsr-xr-x 1 root root 39144 Feb 7 2022 /usr/bin/umount
2093 40 -rwsr-xr-x 1 root root 39144 Mar 7 2020 /usr/bin/fusermount
1752 56 -rwsr-xr-x 1 root root 55528 Feb 7 2022 /usr/bin/mount
1647 68 -rwsr-xr-x 1 root root 67816 Feb 7 2022 /usr/bin/su
13720 44 -rwsr-xr-x 1 root root 44784 Nov 29 2022 /usr/bin/newgrp
3023 84 -rwsr-xr-x 1 root root 85064 Nov 29 2022 /usr/bin/chfn
1724 164 -rwsr-xr-x 1 root root 166056 Jan 19 2021 /usr/bin/sudo
3027 68 -rwsr-xr-x 1 root root 68208 Nov 29 2022 /usr/bin/passwd
3026 88 -rwsr-xr-x 1 root root 88464 Nov 29 2022 /usr/bin/gpasswd
3024 52 -rwsr-xr-x 1 root root 53040 Nov 29 2022 /usr/bin/chsh
2242 56 -rwsr-sr-x 1 daemon daemon 55560 Nov 12 2018 /usr/bin/at
135 121 -rwsr-xr-x 1 root root 123560 Nov 25 2022 /snap/snapd/17883/usr/lib/snapd/snap-confine
814 84 -rwsr-xr-x 1 root root 85064 Mar 14 2022 /snap/core20/1695/usr/bin/chfn
820 52 -rwsr-xr-x 1 root root 53040 Mar 14 2022 /snap/core20/1695/usr/bin/chsh
889 87 -rwsr-xr-x 1 root root 88464 Mar 14 2022 /snap/core20/1695/usr/bin/gpasswd
973 55 -rwsr-xr-x 1 root root 55528 Feb 7 2022 /snap/core20/1695/usr/bin/mount
982 44 -rwsr-xr-x 1 root root 44784 Mar 14 2022 /snap/core20/1695/usr/bin/newgrp
997 67 -rwsr-xr-x 1 root root 68208 Mar 14 2022 /snap/core20/1695/usr/bin/passwd
1107 67 -rwsr-xr-x 1 root root 67816 Feb 7 2022 /snap/core20/1695/usr/bin/su
1108 163 -rwsr-xr-x 1 root root 166056 Jan 19 2021 /snap/core20/1695/usr/bin/sudo
1166 39 -rwsr-xr-x 1 root root 39144 Feb 7 2022 /snap/core20/1695/usr/bin/umount
1255 51 -rwsr-xr-- 1 root systemd-resolve 51344 Oct 25 2022 /snap/core20/1695/usr/lib/dbus-1.0/dbus-daemon-launch-helper
1627 463 -rwsr-xr-x 1 root root 473576 Mar 30 2022 /snap/core20/1695/usr/lib/openssh/ssh-keysign/usr/local/bin/doas why??
SGIDs
www-data@soccer:~$ find / -perm -02000 -ls -type f 2>/dev/null
323 0 drwxr-sr-x 2 root systemd-journal 40 dec 18 14:48 /run/log/journal
256063 4 drwxrwsr-x 2 root staff 4096 Nov 17 2022 /usr/local/share/fonts
80719 4 drwxrwsr-x 3 root staff 4096 Nov 15 2022 /usr/local/lib/python3.8
80720 4 drwxrwsr-x 2 root staff 4096 Nov 15 2022 /usr/local/lib/python3.8/dist-packages
5467 16 -rwxr-sr-x 1 root utmp 14648 Sep 30 2019 /usr/lib/x86_64-linux-gnu/utempter/utempter
3025 32 -rwxr-sr-x 1 root shadow 31312 Nov 29 2022 /usr/bin/expiry
1898 44 -rwxr-sr-x 1 root crontab 43720 Feb 13 2020 /usr/bin/crontab
2056 16 -rwxr-sr-x 1 root tty 14488 Mar 30 2020 /usr/bin/bsd-write
2209 344 -rwxr-sr-x 1 root ssh 350504 Mar 30 2022 /usr/bin/ssh-agent
3022 84 -rwxr-sr-x 1 root shadow 84512 Nov 29 2022 /usr/bin/chage
1668 36 -rwxr-sr-x 1 root tty 35048 Feb 7 2022 /usr/bin/wall
2242 56 -rwsr-sr-x 1 daemon daemon 55560 Nov 12 2018 /usr/bin/at
2574 44 -rwxr-sr-x 1 root shadow 43168 Sep 17 2021 /usr/sbin/pam_extrausers_chkpwd
2583 44 -rwxr-sr-x 1 root shadow 43160 Sep 17 2021 /usr/sbin/unix_chkpwd
80974 4 drwxrwsr-x 2 root staff 4096 Apr 15 2020 /var/local
80988 4 drwxrwsr-x 2 root mail 4096 Nov 15 2022 /var/mail
80976 4 drwxr-sr-x 3 root systemd-journal 4096 Nov 17 2022 /var/log/journal
81007 4 drwxr-sr-x 2 root systemd-journal 4096 dec 18 14:48 /var/log/journal/54adfd95645d49d9a102f16e9e98293b
809 83 -rwxr-sr-x 1 root shadow 84512 Mar 14 2022 /snap/core20/1695/usr/bin/chage
870 31 -rwxr-sr-x 1 root shadow 31312 Mar 14 2022 /snap/core20/1695/usr/bin/expiry
1099 343 -rwxr-sr-x 1 root crontab 350504 Mar 30 2022 /snap/core20/1695/usr/bin/ssh-agent
1185 35 -rwxr-sr-x 1 root tty 35048 Feb 7 2022 /snap/core20/1695/usr/bin/wall
7275 43 -rwxr-sr-x 1 root shadow 43168 Sep 17 2021 /snap/core20/1695/usr/sbin/pam_extrausers_chkpwd
7319 43 -rwxr-sr-x 1 root shadow 43160 Sep 17 2021 /snap/core20/1695/usr/sbin/unix_chkpwd
11889 0 drwxrwsr-x 2 root mail 3 Oct 27 2022 /snap/core20/1695/var/mailProcesses
www-data@soccer:~$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
www-data 1111 0.8 0.1 54080 6176 ? S 14:49 2:02 nginx: worker process
www-data 1112 0.9 0.1 54280 6496 ? S 14:49 2:11 nginx: worker process
www-data 3599 0.0 0.0 2608 596 ? S 18:49 0:00 sh -c sh
www-data 3600 0.0 0.0 2608 596 ? S 18:49 0:00 sh
www-data 3601 0.0 0.0 2636 1840 ? S 18:49 0:00 script /dev/null -c bash
www-data 3602 0.0 0.0 2608 596 pts/0 Ss 18:49 0:00 sh -c bash
www-data 3603 0.0 0.0 4108 3412 pts/0 S 18:49 0:00 bash
www-data 3605 0.0 0.0 6072 3212 pts/0 R+ 18:49 0:00 ps -auxwwwCron & Systemd
www-data@soccer:~$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for www-data
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
NEXT LEFT LAST PASSED >
mon 2023-12-18 19:09:00 UTC 19min left Mon 2023-12-18 18:39:01 UTC 10min ago>
mon 2023-12-18 21:25:20 UTC 2h 35min left Mon 2023-12-18 15:02:10 UTC 3h 47min >
mon 2023-12-18 21:50:34 UTC 3h 0min left Mon 2022-11-28 22:09:30 UTC 1 years 0>
mon 2023-12-18 22:07:22 UTC 3h 17min left Tue 2022-11-29 10:17:45 UTC 1 years 0>
tue 2023-12-19 00:00:00 UTC 5h 10min left Mon 2023-12-18 14:49:03 UTC 4h 0min a>
tue 2023-12-19 00:00:00 UTC 5h 10min left Mon 2023-12-18 14:49:03 UTC 4h 0min a>
tue 2023-12-19 06:22:38 UTC 11h left Mon 2023-12-18 15:26:57 UTC 3h 22min >
tue 2023-12-19 11:14:33 UTC 16h left Mon 2023-12-18 18:45:42 UTC 4min 8s a>
tue 2023-12-19 15:04:00 UTC 20h left Mon 2023-12-18 15:04:00 UTC 3h 45min >
sun 2023-12-24 03:10:50 UTC 5 days left Mon 2023-12-18 14:49:40 UTC 4h 0min a>
mon 2023-12-25 00:00:00 UTC 6 days left Mon 2023-12-18 14:49:03 UTC 4h 0min a>
11 timers listed.
Pass --all to see loaded but inactive timers, too.
lines 1-15/15 (END)Sudo Version
www-data@soccer:~$ sudo --version
Sudo version 1.8.31
Sudoers policy plugin version 1.8.31
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.31Sudo version 1.8.31
Glibc Version
www-data@soccer:~$ ldd --version
ldd (Ubuntu GLIBC 2.31-0ubuntu9.9) 2.31
Copyright (C) 2020 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu GLIBC 2.31-0ubuntu9.9) 2.31