Enumerating as mindy
Continuing SolidState_Post_Enumeration
System/Kernel
${debian_chroot:+($debian_chroot)}mindy@solidstate:~$ file /bin/bash ; uname -a ; cat /etc/issue
/bin/bash: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, for GNU/Linux 2.6.32, BuildID[sha1]=b533e7ee1f1588ddb63ceeea8554c15f42c75966, stripped
Linux solidstate 4.9.0-3-686-pae #1 SMP Debian 4.9.30-2+deb9u3 (2017-08-06) i686 GNU/Linux
Debian GNU/Linux 9 \n \lsolidstate 4.9.0-3-686-pae
Debian GNU/Linux 9
i686
Networks
${debian_chroot:+($debian_chroot)}mindy@solidstate:~$ ss -tunlp4
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port
udp UNCONN 0 0 *:44974 *:*
udp UNCONN 0 0 *:631 *:*
udp UNCONN 0 0 *:5353 *:*
udp UNCONN 0 0 *:1900 *:*
tcp LISTEN 0 128 *:22 *:*
tcp LISTEN 0 5 127.0.0.1:631 *:* Users
${debian_chroot:+($debian_chroot)}mindy@solidstate:~$ cat /etc/passwd ; ls -lasht /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-timesync:x:100:102:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:101:103:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:102:104:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:103:105:systemd Bus Proxy,,,:/run/systemd:/bin/false
_apt:x:104:65534::/nonexistent:/bin/false
usbmux:x:105:46:usbmux daemon,,,:/var/lib/usbmux:/bin/false
rtkit:x:106:110:RealtimeKit,,,:/proc:/bin/false
dnsmasq:x:107:65534:dnsmasq,,,:/var/lib/misc:/bin/false
messagebus:x:108:111::/var/run/dbus:/bin/false
geoclue:x:109:115::/var/lib/geoclue:/bin/false
avahi:x:110:117:Avahi mDNS daemon,,,:/var/run/avahi-daemon:/bin/false
colord:x:111:118:colord colour management daemon,,,:/var/lib/colord:/bin/false
saned:x:112:119::/var/lib/saned:/bin/false
speech-dispatcher:x:113:29:Speech Dispatcher,,,:/var/run/speech-dispatcher:/bin/false
pulse:x:114:120:PulseAudio daemon,,,:/var/run/pulse:/bin/false
hplip:x:115:7:HPLIP system user,,,:/var/run/hplip:/bin/false
debian-gdm:x:116:122:Gnome Display Manager:/var/lib/gdm3:/bin/false
sshd:x:117:65534::/run/sshd:/usr/sbin/nologin
james:x:1000:1000:james:/home/james/:/bin/bash
mindy:x:1001:1001:mindy:/home/mindy:/bin/rbash
total 16K
4.0k drwxr-xr-x 22 root root 4.0k may 27 11:05 ..
4.0K drwxr-xr-x 16 james osboxes 4.0K Apr 26 2021 james
4.0K drwxr-x--- 4 mindy mindy 4.0K Apr 26 2021 mindy
4.0K drwxr-xr-x 4 root root 4.0K Apr 26 2021 .james
SUIDs
${debian_chroot:+($debian_chroot)}mindy@solidstate:~$ find / -perm -04000 -ls -type f 2>/dev/null
14790 40 -rwsr-xr-x 1 root root 39144 May 17 2017 /bin/su
14787 40 -rwsr-xr-x 1 root root 38940 Mar 22 2017 /bin/mount
14860 32 -rwsr-xr-x 1 root root 30112 Jun 23 2016 /bin/fusermount
14811 68 -rwsr-xr-x 1 root root 68076 Nov 10 2016 /bin/ping
14863 160 -rwsr-xr-x 1 root root 161520 Feb 26 2017 /bin/ntfs-3g
14788 28 -rwsr-xr-x 1 root root 26504 Mar 22 2017 /bin/umount
32568 36 -rwsr-xr-x 1 root root 34920 May 17 2017 /usr/bin/newgrp
44053 24 -rwsr-xr-x 1 root root 22304 May 24 2017 /usr/bin/pkexec
29556 60 -rwsr-xr-x 1 root root 57972 May 17 2017 /usr/bin/passwd
29553 40 -rwsr-xr-x 1 root root 39632 May 17 2017 /usr/bin/chsh
29552 48 -rwsr-xr-x 1 root root 48560 May 17 2017 /usr/bin/chfn
29555 80 -rwsr-xr-x 1 root root 78340 May 17 2017 /usr/bin/gpasswd
53521 356 -rwsr-xr-- 1 root dip 363140 Nov 11 2016 /usr/sbin/pppd
133164 16 -rwsr-xr-x 1 root root 13960 May 24 2017 /usr/lib/policykit-1/polkit-agent-helper-1
93484 516 -rwsr-xr-x 1 root root 525932 Jun 17 2017 /usr/lib/openssh/ssh-keysign
57277 8 -rwsr-xr-x 1 root root 5480 Mar 28 2017 /usr/lib/eject/dmcrypt-get-device
85233 48 -rwsr-xr-- 1 root messagebus 46436 Apr 5 2017 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
262167 12 -rwsr-sr-x 1 root root 9772 Jul 7 2017 /usr/lib/xorg/Xorg.wrap
50055 16 -rwsr-xr-x 1 root root 13672 Jan 14 2017 /usr/lib/spice-gtk/spice-client-glib-usb-acl-helper/usr/bin/pkexec
SGID
${debian_chroot:+($debian_chroot)}mindy@solidstate:~$ find / -perm -02000 -ls -type f 2>/dev/null
14790 40 -rwsr-xr-x 1 root root 39144 May 17 2017 /bin/su
14787 40 -rwsr-xr-x 1 root root 38940 Mar 22 2017 /bin/mount
14860 32 -rwsr-xr-x 1 root root 30112 Jun 23 2016 /bin/fusermount
14811 68 -rwsr-xr-x 1 root root 68076 Nov 10 2016 /bin/ping
14863 160 -rwsr-xr-x 1 root root 161520 Feb 26 2017 /bin/ntfs-3g
14788 28 -rwsr-xr-x 1 root root 26504 Mar 22 2017 /bin/umount
32568 36 -rwsr-xr-x 1 root root 34920 May 17 2017 /usr/bin/newgrp
44053 24 -rwsr-xr-x 1 root root 22304 May 24 2017 /usr/bin/pkexec
29556 60 -rwsr-xr-x 1 root root 57972 May 17 2017 /usr/bin/passwd
29553 40 -rwsr-xr-x 1 root root 39632 May 17 2017 /usr/bin/chsh
29552 48 -rwsr-xr-x 1 root root 48560 May 17 2017 /usr/bin/chfn
29555 80 -rwsr-xr-x 1 root root 78340 May 17 2017 /usr/bin/gpasswd
53521 356 -rwsr-xr-- 1 root dip 363140 Nov 11 2016 /usr/sbin/pppd
133164 16 -rwsr-xr-x 1 root root 13960 May 24 2017 /usr/lib/policykit-1/polkit-agent-helper-1
93484 516 -rwsr-xr-x 1 root root 525932 Jun 17 2017 /usr/lib/openssh/ssh-keysign
57277 8 -rwsr-xr-x 1 root root 5480 Mar 28 2017 /usr/lib/eject/dmcrypt-get-device
85233 48 -rwsr-xr-- 1 root messagebus 46436 Apr 5 2017 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
262167 12 -rwsr-sr-x 1 root root 9772 Jul 7 2017 /usr/lib/xorg/Xorg.wrap
50055 16 -rwsr-xr-x 1 root root 13672 Jan 14 2017 /usr/lib/spice-gtk/spice-client-glib-usb-acl2000 -ls -typ 000 -ls -typ
13418 4 drwxr-s--- 2 root dip 4096 Apr 26 2021 /etc/chatscripts
13436 4 drwxr-s--- 2 root dip 4096 Apr 26 2021 /etc/ppp/peers
14649 36 -rwxr-sr-x 1 root shadow 34568 May 27 2017 /sbin/unix_chkpwd
15082 4 drwxrwsr-x 2 root staff 4096 Apr 26 2021 /var/local
15126 4 drwxrwsr-x 2 root mail 4096 Apr 26 2021 /var/mail
30644 28 -rwxr-sr-x 1 root tty 26416 Mar 22 2017 /usr/bin/wall
29554 24 -rwxr-sr-x 1 root shadow 22040 May 17 2017 /usr/bin/expiry
33863 12 -rwxr-sr-x 1 root tty 9820 Apr 12 2017 /usr/bin/bsd-write
29551 68 -rwxr-sr-x 1 root shadow 66120 May 17 2017 /usr/bin/chage
33916 40 -rwxr-sr-x 1 root crontab 39056 May 3 2015 /usr/bin/crontab
40836 20 -rwxr-sr-x 1 root mail 18084 Jan 17 2017 /usr/bin/dotlockfile
49995 424 -rwxr-sr-x 1 root ssh 431632 Jun 17 2017 /usr/bin/ssh-agent
45627 8 -rwxr-sr-x 1 root utmp 5480 Feb 18 2016 /usr/lib/i386-linux-gnu/utempter/utempter
131712 16 -rwxr-sr-x 1 root mail 13680 Mar 23 2017 /usr/lib/evolution/camel-lock-helper-1.2
262167 12 -rwsr-sr-x 1 root root 9772 Jul 7 2017 /usr/lib/xorg/Xorg.wrap
133923 4 drwxrwsr-t 2 root lpadmin 4096 Apr 26 2021 /usr/share/ppd/custom
[...]
10164 0 drwxr-sr-x 3 root systemd-journal 60 oct 18 13:03 /run/log/journal
10165 0 drwxr-s--- 2 root systemd-journal 80 oct 18 13:03 /run/log/journal/3b14ced53cef4e38b9b241c6989e06d8Processes
${debian_chroot:+($debian_chroot)}mindy@solidstate:~$ ps -aux | grep -i 'root' --color=auto
root 1 0.0 0.2 27984 6152 ? Ss 13:03 0:01 /sbin/init
[...]
root 319 0.0 0.4 54532 9884 ? Ssl 13:03 0:10 /usr/bin/vmtoolsd
root 324 0.0 0.2 20492 5968 ? Ss 13:03 0:00 /lib/systemd/systemd-journald
root 351 0.0 0.2 16976 4868 ? Ss 13:03 0:00 /lib/systemd/systemd-udevd
root 515 0.0 0.2 7444 4720 ? Ss 13:03 0:00 /lib/systemd/systemd-logind
root 516 0.0 0.0 2332 572 ? Ss 13:03 0:00 /bin/sh /opt/james-2.3.2/bin/run.sh
root 517 0.0 0.7 53964 16188 ? Ss 13:03 0:00 /usr/bin/VGAuthService
root 521 0.0 0.4 51984 8728 ? Ssl 13:03 0:00 /usr/sbin/ModemManager
root 523 0.0 0.1 23868 3524 ? Ssl 13:03 0:00 /usr/sbin/rsyslogd -n
root 524 0.0 0.3 41404 7668 ? Ssl 13:03 0:00 /usr/lib/accountsservice/accounts-daemon
root 533 0.2 3.9 865108 81228 ? Sl 13:03 0:30 /usr/lib/jvm/java-8-openjdk-i386//bin/java -Djava.ext.dirs=/opt/james-2.3.2/lib:/opt/james-2.3.2/tools/lib -Djava.security.manager -Djava.security.policy=jar:file:/opt/james-2.3.2/bin/phoenix-loader.jar!/META-INF/java.policy -Dnetworkaddress.cache.ttl=300 -Dphoenix.home=/opt/james-2.3.2 -Djava.io.tmpdir=/opt/james-2.3.2/temp -jar /opt/james-2.3.2/bin/phoenix-loader.jar
root 534 0.0 0.7 85560 15824 ? Ssl 13:03 0:02 /usr/sbin/NetworkManager --no-daemon
root 537 0.0 0.1 5264 2812 ? Ss 13:03 0:00 /usr/sbin/cron -f
avahi 560 0.0 0.0 6256 300 ? S 13:03 0:00 avahi-daemon: chroot helper
root 563 0.0 0.4 42076 9708 ? Ssl 13:03 0:00 /usr/lib/policykit-1/polkitd --no-debug
root 722 0.0 0.2 10472 5828 ? Ss 13:03 0:00 /usr/sbin/sshd -D
root 728 0.0 0.0 2104 56 ? Ss 13:03 0:00 /usr/sbin/minissdpd -i 0.0.0.0
root 749 0.0 0.3 41228 6932 ? Ssl 13:03 0:00 /usr/sbin/gdm3
root 757 0.0 0.3 31512 7588 ? Sl 13:03 0:00 gdm-session-worker [pam/gdm-launch-environment]
root 792 0.0 0.3 51336 7800 ? Ssl 13:03 0:00 /usr/lib/upower/upowerd
Debian-+ 821 0.0 1.3 98320 28928 tty1 Sl+ 13:03 0:00 /usr/bin/Xwayland :1024 -rootless -noreset -listen 4 -listen 5 -displayfd 6
root 917 0.0 0.2 10772 4936 ? Ss 13:03 0:00 /sbin/wpa_supplicant -u -s -O /run/wpa_supplicant
root 918 0.0 0.5 48048 11924 ? Ssl 13:03 0:00 /usr/lib/packagekit/packagekitd
root 975 0.0 0.2 6408 4396 ? Ss 13:04 0:00 /usr/sbin/apache2 -k start
root 1280 0.0 0.3 14652 7228 ? Ss 13:08 0:00 /usr/sbin/cupsd -l
root 1282 0.0 0.3 35424 6848 ? Ssl 13:08 0:00 /usr/sbin/cups-browsed
root 4817 0.0 0.3 11156 6436 ? Ss 15:50 0:00 sshd: mindy [priv]
mindy 6187 0.0 0.0 4736 860 pts/2 S+ 16:50 0:00 grep -i root --color=auto/usr/lib/policykit-1/polkitd --no-debug
/usr/sbin/cron -f
Cron & Systemd
${debian_chroot:+($debian_chroot)}mindy@solidstate:~$ crontab -l ; cat /etc/crontab ; systemctl list-timers --all
no crontab for mindy
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED UNIT ACTIVATES
wed 2023-01-18 00:04:00 EST 22min left Tue 2023-01-17 23:04:48 EST 36min ago anacron.timer anacron.service
wed 2023-01-18 06:38:04 EST 6h left Tue 2023-01-17 22:29:39 EST 1h 11min ago apt-daily-upgrade.timer apt-daily-upgrade.service
wed 2023-01-18 12:27:42 EST 12h left Tue 2023-01-17 22:29:39 EST 1h 11min ago apt-daily.timer apt-daily.service
wed 2023-01-18 22:44:07 EST 23h left Tue 2023-01-17 22:44:07 EST 57min ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.se
4 timers listed.Sudo Version
${debian_chroot:+($debian_chroot)}mindy@solidstate:~$ sudo -V
bash: sudo: command not foundGlibc Version
${debian_chroot:+($debian_chroot)}mindy@solidstate:~$ ldd --version
ldd (Debian GLIBC 2.24-11+deb9u1) 2.24
Copyright (C) 2016 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.