System/Kernel
rektsu@zipping:/home/rektsu$ filfile /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=420fc9978ea9ba9eb9bf53fd7dc415152efe8b2d, for GNU/Linux 3.2.0, stripped
linux zipping 5.19.0-46-generic #47-ubuntu smp preempt_dynamic fri jun 16 13:30:11 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=22.10
DISTRIB_CODENAME=kinetic
DISTRIB_DESCRIPTION="Ubuntu 22.10"
PRETTY_NAME="Ubuntu 22.10"
NAME="Ubuntu"
VERSION_ID="22.10"
VERSION="22.10 (Kinetic Kudu)"
VERSION_CODENAME=kinetic
ID=ubuntu
ID_LIKE=debian
home_url="https://www.ubuntu.com/"
support_url="https://help.ubuntu.com/"
bug_report_url="https://bugs.launchpad.net/ubuntu/"
privacy_policy_url="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=kinetic
LOGO=ubuntu-logo5.19.0-46-generic
Ubuntu 22.10 (Kinetic Kudu)
x86_64
Networks
rektsu@zipping:/home/rektsu$ arp -a
? (10.10.10.2) at 00:50:56:b9:9d:31 [ether] on eth0
rektsu@zipping:/home/rektsu$ netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.54:53 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 1 10.10.11.229:38822 8.8.8.8:53 SYN_SENT -
tcp 0 301 10.10.11.229:42054 10.10.14.4:9999 ESTABLISHED 10073/sh
tcp 0 0 10.10.11.229:54574 10.10.14.24:1234 ESTABLISHED 1898/bash
tcp 0 0 10.10.11.229:34734 10.10.14.24:1234 ESTABLISHED 2546/bash
udp 0 0 127.0.0.54:53 0.0.0.0:* -
udp 0 0 127.0.0.53:53 0.0.0.0:* -
udp 0 0 0.0.0.0:68 0.0.0.0:* -
udp 0 0 127.0.0.1:51729 127.0.0.53:53 ESTABLISHED -
udp 0 0 10.10.11.229:58455 8.8.8.8:53 ESTABLISHED -
udp 0 0 10.10.11.229:33890 8.8.8.8:53 ESTABLISHED - 127.0.0.1:3306
Users & Groups
rektsu@zipping:/home/rektsu$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
_apt:x:100:65534::/nonexistent:/usr/sbin/nologin
systemd-network:x:101:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-timesync:x:102:103:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:109::/nonexistent:/usr/sbin/nologin
systemd-resolve:x:104:110:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
pollinate:x:105:1::/var/cache/pollinate:/bin/false
sshd:x:106:65534::/run/sshd:/usr/sbin/nologin
rektsu:x:1001:1001::/home/rektsu:/bin/bash
mysql:x:107:115:MySQL Server,,,:/nonexistent:/bin/false
_laurel:x:999:999::/var/log/laurel:/bin/false
total 12K
4.0k drwxr-x--x 7 rektsu rektsu 4.0k aug 30 13:44 rektsu
4.0k drwxr-xr-x 19 root root 4.0k aug 7 13:18 ..
4.0K drwxr-xr-x 3 root root 4.0K Jan 27 2023 .rektsu@zipping:/home/rektsu$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=101(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=102(systemd-timesync) gid=103(systemd-timesync) groups=103(systemd-timesync)
uid=103(messagebus) gid=109(messagebus) groups=109(messagebus)
uid=104(systemd-resolve) gid=110(systemd-resolve) groups=110(systemd-resolve)
uid=105(pollinate) gid=1(daemon) groups=1(daemon)
uid=106(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=1001(rektsu) gid=1001(rektsu) groups=1001(rektsu)
uid=107(mysql) gid=115(mysql) groups=115(mysql)
uid=999(_laurel) gid=999(_laurel) groups=999(_laurel)uid=1001(rektsu) gid=1001(rektsu) groups=1001(rektsu)
SUIDs
rektsu@zipping:/home/rektsu$ find / -perm -04000 -ls -type f 2>/dev/null
136043 136 -rwsr-xr-x 1 root root 138408 May 29 12:05 /usr/lib/snapd/snap-confine
137057 36 -rwsr-xr-- 1 root messagebus 34960 Oct 25 2022 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
138761 324 -rwsr-xr-x 1 root root 330344 May 30 20:58 /usr/lib/openssh/ssh-keysign
138788 20 -rwsr-xr-x 1 root root 18736 Feb 26 2022 /usr/libexec/polkit-agent-helper-1
162223 60 -rwsr-xr-x 1 root root 60136 Nov 23 2022 /usr/bin/passwd
164814 64 -rwsr-xr-x 1 root root 65224 Aug 28 2022 /usr/bin/ping6
131491 36 -rwsr-xr-x 1 root root 35200 May 7 2022 /usr/bin/fusermount3
162220 40 -rwsr-xr-x 1 root root 40664 Nov 23 2022 /usr/bin/newgrp
138926 72 -rwsr-xr-x 1 root root 72232 Nov 23 2022 /usr/bin/gpasswd
131611 48 -rwsr-xr-x 1 root root 47488 May 3 2022 /usr/bin/mount
164813 80 -rwsr-xr-x 1 root root 78480 Aug 28 2022 /usr/bin/ping
131844 56 -rwsr-xr-x 1 root root 55680 May 3 2022 /usr/bin/su
131577 44 -rwsr-xr-x 1 root root 44840 Nov 23 2022 /usr/bin/chsh
131906 36 -rwsr-xr-x 1 root root 35200 May 3 2022 /usr/bin/umount
131560 72 -rwsr-xr-x 1 root root 72872 Nov 23 2022 /usr/bin/chfn
131731 244 -rwsr-xr-x 1 root root 248840 Apr 3 17:57 /usr/bin/sudoSGIDs
rektsu@zipping:/home/rektsu$ find / -perm -02000 -ls -type f 2>/dev/null
459 0 drwxr-sr-x 2 root systemd-journal 40 aug 29 15:39 /run/log/journal
131205 24 -rwxr-sr-x 1 root shadow 22848 Feb 2 2023 /usr/sbin/pam_extrausers_chkpwd
138358 28 -rwxr-sr-x 1 root shadow 26944 Feb 2 2023 /usr/sbin/unix_chkpwd
272579 4 drwxrwsr-x 2 root staff 4096 Jan 27 2023 /usr/local/share/fonts
164811 40 -rwxr-sr-x 1 root crontab 39568 Mar 23 2022 /usr/bin/crontab
131619 24 -rwxr-sr-x 1 root shadow 23136 Nov 23 2022 /usr/bin/expiry
131930 24 -rwxr-sr-x 1 root tty 22912 May 3 2022 /usr/bin/wall
164827 24 -rwxr-sr-x 1 root tty 22920 May 3 2022 /usr/bin/write
137032 288 -rwxr-sr-x 1 root _ssh 293304 may 30 20:58 /usr/bin/ssh-agent
131478 72 -rwxr-sr-x 1 root shadow 72344 Nov 23 2022 /usr/bin/chage
268103 4 drwxrwsr-x 2 root mail 4096 Oct 19 2022 /var/mail
268101 4 drwxrwsr-x 2 root staff 4096 Oct 17 2022 /var/local
268137 4 drwxr-sr-x 3 root systemd-journal 4096 Jan 27 2023 /var/log/journal
262612 4 drwxr-sr-x 2 root systemd-journal 4096 aug 30 07:14 /var/log/journal/34c6ccf8504e46f1879be6e8a0566834
262782 4 drwxr-s--- 2 mysql adm 4096 apr 1 02:27 /var/log/mysqlProcesses
rektsu@zipping:/home/rektsu$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.3 167296 12212 ? Ss Aug29 0:04 /sbin/init
root 490 0.0 1.1 81724 46920 ? S<s Aug29 0:18 /lib/systemd/systemd-journald
root 530 0.0 0.6 289312 27112 ? SLsl Aug29 0:12 /sbin/multipathd -d -s
root 531 0.0 0.1 26492 6892 ? Ss Aug29 0:00 /lib/systemd/systemd-udevd
systemd+ 533 0.0 0.2 17244 8340 ? Ss Aug29 0:01 /lib/systemd/systemd-networkd
systemd+ 669 0.0 0.2 19204 10936 ? Ss Aug29 0:07 /lib/systemd/systemd-resolved
systemd+ 672 0.0 0.1 89472 6468 ? Ssl Aug29 0:05 /lib/systemd/systemd-timesyncd
root 673 0.0 0.0 85112 2728 ? S<sl Aug29 0:05 /sbin/auditd
_laurel 677 0.0 0.1 9872 6168 ? S< Aug29 0:09 /usr/local/sbin/laurel --config /etc/laurel/config.toml
root 682 0.0 0.2 49292 11348 ? Ss Aug29 0:00 /usr/bin/VGAuthService
root 688 0.1 0.2 239736 9700 ? Ssl Aug29 1:58 /usr/bin/vmtoolsd
root 699 0.0 0.0 4004 3288 ? Ss Aug29 0:00 /sbin/dhclient -1 -4 -v -i -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
message+ 746 0.0 0.1 9284 5112 ? Ss Aug29 0:00 @dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root 752 0.0 0.1 16548 7656 ? Ss Aug29 0:00 /lib/systemd/systemd-logind
root 1061 0.0 0.0 4176 2696 ? Ss Aug29 0:00 /usr/sbin/cron -f -P
root 1083 0.0 0.2 14848 8988 ? Ss Aug29 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root 1097 0.0 0.0 3040 1080 tty1 Ss+ Aug29 0:00 /sbin/agetty -o -p -- \u --noclear - linux
mysql 1123 0.1 2.2 1546024 91556 ? Ssl Aug29 1:38 /usr/sbin/mariadbd
root 1124 0.0 0.4 201120 19948 ? Ss Aug29 0:10 /usr/sbin/apache2 -k start
rektsu 1918 0.0 0.0 3028 1072 pts/0 S+ Aug29 0:00 script /dev/null -c bash
rektsu 1919 0.0 0.0 2736 964 pts/1 Ss Aug29 0:00 sh -c bash
rektsu 1920 0.0 0.1 5016 4128 pts/1 S+ Aug29 0:00 bash/usr/sbin/cron -f -P
/usr/sbin/mariadbd
Cron & Systemd
rektsu@zipping:/home/rektsu$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for rektsu
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
# You can also override PATH, but by default, newer versions inherit it from the environment
#path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED UNIT ACTIVATES
wed 2023-08-30 14:39:00 UTC 5min left Wed 2023-08-30 14:09:00 UTC 24min ago phpsessionclean.timer phpsessionclean.service
wed 2023-08-30 15:54:18 UTC 1h 20min left Tue 2023-08-29 15:54:18 UTC 22h ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service
wed 2023-08-30 19:33:56 UTC 5h 0min left Wed 2023-08-30 00:51:20 UTC 13h ago motd-news.timer motd-news.service
thu 2023-08-31 00:00:00 UTC 9h left Wed 2023-08-30 00:00:02 UTC 14h ago dpkg-db-backup.timer dpkg-db-backup.service
thu 2023-08-31 02:25:47 UTC 11h left Wed 2023-08-30 12:34:53 UTC 1h 58min ago apt-daily.timer apt-daily.service
thu 2023-08-31 06:24:55 UTC 15h left Wed 2023-08-30 06:08:59 UTC 8h ago apt-daily-upgrade.timer apt-daily-upgrade.service
thu 2023-08-31 08:08:42 UTC 17h left Wed 2023-08-30 00:11:53 UTC 14h ago man-db.timer man-db.service
sun 2023-09-03 03:10:54 UTC 3 days left Tue 2023-08-29 15:39:47 UTC 22h ago e2scrub_all.timer e2scrub_all.service
mon 2023-09-04 00:11:13 UTC 4 days left Tue 2023-08-29 16:40:07 UTC 21h ago fstrim.timer fstrim.service
9 timers listed.
Pass --all to see loaded but inactive timers, too.Sudo Version
rektsu@zipping:/home/rektsu$ sudo --version
Sudo version 1.9.11p3
Sudoers policy plugin version 1.9.11p3
Sudoers file grammar version 48
Sudoers I/O plugin version 1.9.11p3
Sudoers audit plugin version 1.9.11p3Sudo version 1.9.11p3
Glibc Version
rektsu@zipping:/home/rektsu$ ldd --version
ldd (Ubuntu GLIBC 2.36-0ubuntu4) 2.36
Copyright (C) 2022 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu GLIBC 2.36-0ubuntu4) 2.36