System/Kernel
gaara@Gaara:~$ uname -a ; cat /etc/*release
Linux Gaara 4.19.0-13-amd64 #1 SMP Debian 4.19.160-2 (2020-11-28) x86_64 GNU/Linux
PRETTY_NAME="Debian GNU/Linux 10 (buster)"
NAME="Debian GNU/Linux"
VERSION_ID="10"
VERSION="10 (buster)"
VERSION_CODENAME=buster
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"4.19.0-13-amd64x86_64Debian GNU/Linux 10 (buster)
Networks
gaara@Gaara:~$ ip route ; arp -a
default via 192.168.239.254 dev ens192 onlink
169.254.0.0/16 dev ens192 scope link metric 1000
192.168.239.0/24 dev ens192 proto kernel scope link src 192.168.239.142
-bash: arp: command not found169.254.0.0/16 dev ens192 scope link metric 1000
gaara@Gaara:~$ ss -tunlp
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port
tcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
tcp LISTEN 0 128 *:80 *:*
tcp LISTEN 0 128 [::]:22 [::]:* Users & Groups
gaara@Gaara:~$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
_apt:x:100:65534::/nonexistent:/usr/sbin/nologin
systemd-timesync:x:101:102:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
systemd-network:x:102:103:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:103:104:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:104:110::/nonexistent:/usr/sbin/nologin
avahi-autoipd:x:105:112:Avahi autoip daemon,,,:/var/lib/avahi-autoipd:/usr/sbin/nologin
sshd:x:106:65534::/run/sshd:/usr/sbin/nologin
systemd-coredump:x:999:999:systemd Core Dumper:/:/usr/sbin/nologin
gaara:x:1001:1001:,,,:/home/gaara:/bin/bash
total 12K
4.0K drwxr-xr-x 2 gaara gaara 4.0K Apr 27 2021 gaara
4.0K drwxr-xr-x 3 root root 4.0K Dec 13 2020 .
4.0K drwxr-xr-x 18 root root 4.0K Dec 13 2020 ..gaara@Gaara:~$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=101(systemd-timesync) gid=102(systemd-timesync) groups=102(systemd-timesync)
uid=102(systemd-network) gid=103(systemd-network) groups=103(systemd-network)
uid=103(systemd-resolve) gid=104(systemd-resolve) groups=104(systemd-resolve)
uid=104(messagebus) gid=110(messagebus) groups=110(messagebus)
uid=105(avahi-autoipd) gid=112(avahi-autoipd) groups=112(avahi-autoipd)
uid=106(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=999(systemd-coredump) gid=999(systemd-coredump) groups=999(systemd-coredump)
uid=1001(gaara) gid=1001(gaara) groups=1001(gaara)uid=1001(gaara) gid=1001(gaara) groups=1001(gaara)
SUIDs
gaara@Gaara:~$ find / -perm -04000 -ls -type f 2>/dev/null | grep -v '/snap'
12750 52 -rwsr-xr-- 1 root messagebus 51184 Jul 5 2020 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
135600 12 -rwsr-xr-x 1 root root 10232 Mar 28 2017 /usr/lib/eject/dmcrypt-get-device
16097 428 -rwsr-xr-x 1 root root 436552 Jan 31 2020 /usr/lib/openssh/ssh-keysign
22040 7824 -rwsr-sr-x 1 root root 8008480 Oct 14 2019 /usr/bin/gdb
19754 156 -rwsr-xr-x 1 root root 157192 Feb 2 2020 /usr/bin/sudo
21629 7396 -rwsr-sr-x 1 root root 7570720 Dec 24 2018 /usr/bin/gimp-2.10
22047 36 -rwsr-xr-x 1 root root 34896 Apr 22 2020 /usr/bin/fusermount
53 44 -rwsr-xr-x 1 root root 44528 Jul 27 2018 /usr/bin/chsh
52 56 -rwsr-xr-x 1 root root 54096 Jul 27 2018 /usr/bin/chfn
55 84 -rwsr-xr-x 1 root root 84016 Jul 27 2018 /usr/bin/gpasswd
3436 44 -rwsr-xr-x 1 root root 44440 Jul 27 2018 /usr/bin/newgrp
3583 64 -rwsr-xr-x 1 root root 63568 Jan 10 2019 /usr/bin/su
56 64 -rwsr-xr-x 1 root root 63736 Jul 27 2018 /usr/bin/passwd
3908 52 -rwsr-xr-x 1 root root 51280 Jan 10 2019 /usr/bin/mount
3910 36 -rwsr-xr-x 1 root root 34888 Jan 10 2019 /usr/bin/umount22040 7824 -rwsr-sr-x 1 root root 8008480 Oct 14 2019 /usr/bin/gdb21629 7396 -rwsr-sr-x 1 root root 7570720 Dec 24 2018 /usr/bin/gimp-2.10
SGIDs
gaara@Gaara:~$ find / -perm -02000 -ls -type f 2>/dev/null | grep -v '/snap'
259836 4 drwxrwsr-x 2 root staff 4096 Nov 22 2020 /var/local
259938 4 drwxrwsr-x 2 root mail 4096 Dec 13 2020 /var/mail
11066 0 drwxr-sr-x 3 root systemd-journal 60 Aug 3 2024 /run/log/journal
11067 0 drwxr-s--- 2 root systemd-journal 200 Apr 29 11:32 /run/log/journal/262dce940ec34195b35636eabb5963be
857 40 -rwxr-sr-x 1 root shadow 39616 Feb 14 2019 /usr/sbin/unix_chkpwd
11586 4 drwxrwsr-x 4 root staff 4096 Dec 13 2020 /usr/local/lib/python2.7
18655 4 drwxrwsr-x 2 root staff 4096 Dec 13 2020 /usr/local/lib/python2.7/site-packages
11587 4 drwxrwsr-x 2 root staff 4096 Dec 13 2020 /usr/local/lib/python2.7/dist-packages
8588 4 drwxrwsr-x 3 root staff 4096 Dec 13 2020 /usr/local/lib/python3.7
8590 4 drwxrwsr-x 2 root staff 4096 Dec 13 2020 /usr/local/lib/python3.7/dist-packages
137669 4 drwxrwsr-x 2 root staff 4096 Dec 13 2020 /usr/local/share/fonts
5509 44 -rwxr-sr-x 1 root crontab 43568 Oct 11 2019 /usr/bin/crontab
22040 7824 -rwsr-sr-x 1 root root 8008480 Oct 14 2019 /usr/bin/gdb
21629 7396 -rwsr-sr-x 1 root root 7570720 Dec 24 2018 /usr/bin/gimp-2.10
16090 316 -rwxr-sr-x 1 root ssh 321672 Jan 31 2020 /usr/bin/ssh-agent
51 72 -rwxr-sr-x 1 root shadow 71816 Jul 27 2018 /usr/bin/chage
12942 20 -rwxr-sr-x 1 root mail 18944 Dec 3 2017 /usr/bin/dotlockfile
54 32 -rwxr-sr-x 1 root shadow 31000 Jul 27 2018 /usr/bin/expiry
5436 16 -rwxr-sr-x 1 root tty 14736 May 4 2018 /usr/bin/bsd-write
1481 36 -rwxr-sr-x 1 root tty 34896 Jan 10 2019 /usr/bin/wall22040 7824 -rwsr-sr-x 1 root root 8008480 Oct 14 2019 /usr/bin/gdb21629 7396 -rwsr-sr-x 1 root root 7570720 Dec 24 2018 /usr/bin/gimp-2.10
Capabilities
gaara@Gaara:~$ getcap -r / 2>/dev/nullProcesses
gaara@Gaara:~$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.9 103884 10096 ? Ss 09:57 0:01 /sbin/init
root 250 0.1 0.9 41176 9980 ? Ss 09:57 0:09 /lib/systemd/systemd-journald
root 271 0.0 0.5 22196 5216 ? Ss 09:57 0:00 /lib/systemd/systemd-udevd
root 311 0.0 1.0 48228 10800 ? Ss 09:57 0:00 /usr/bin/VGAuthService
root 312 0.0 1.2 122880 12212 ? Ssl 09:57 0:02 /usr/bin/vmtoolsd
systemd+ 313 0.0 0.6 93084 6512 ? Ssl 09:57 0:00 /lib/systemd/systemd-timesyncd
root 381 0.0 0.4 225960 4840 ? Ssl 09:57 0:01 /usr/sbin/rsyslogd -n -iNONE
root 383 0.0 0.2 8504 2760 ? Ss 09:57 0:00 /usr/sbin/cron -f
root 385 0.0 0.7 19520 7300 ? Ss 09:57 0:00 /lib/systemd/systemd-logind
message+ 386 0.0 0.4 9316 4576 ? Ss 09:57 0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root 391 0.0 0.5 19768 5176 ? Ss 09:57 0:00 /sbin/wpa_supplicant -u -s -O /run/wpa_supplicant
root 545 0.0 0.1 5612 1716 tty1 Ss+ 09:58 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root 556 0.0 0.6 15852 7048 ? Ss 09:58 0:00 /usr/sbin/sshd -D
root 651 0.0 0.4 8564 4408 ? Ss 09:58 0:00 /usr/sbin/apache2 -k start
www-data 653 1.3 0.8 756024 8112 ? Sl 09:59 1:20 /usr/sbin/apache2 -k start
gaara 6474 0.0 0.8 21024 8408 ? Ss 11:38 0:00 /lib/systemd/systemd --user
gaara 6475 0.0 0.2 105132 2424 ? S 11:38 0:00 (sd-pam)
gaara 6483 0.0 0.4 16928 4876 ? S 11:38 0:00 sshd: gaara@pts/0
gaara 6484 0.0 0.4 7768 4484 pts/0 Ss 11:38 0:00 -bash
gaara 6544 0.0 0.3 10916 3332 pts/0 R+ 11:41 0:00 ps -auxwwwroot 383 0.0 0.2 8504 2760 ? Ss 09:57 0:00 /usr/sbin/cron -froot 391 0.0 0.5 19768 5176 ? Ss 09:57 0:00 /sbin/wpa_supplicant -u -s -O /run/wpa_supplicant
Cron & Systemd
gaara@Gaara:~$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for gaara
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# Example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED UNIT ACTIVATES
Tue 2025-04-29 12:30:38 EDT 48min left Tue 2025-04-29 11:32:15 EDT 9min ago anacron.timer anacron.service
Tue 2025-04-29 23:09:14 EDT 11h left Tue 2025-04-29 09:59:24 EDT 1h 42min ago apt-daily.timer apt-daily.service
Wed 2025-04-30 00:00:00 EDT 12h left Tue 2025-04-29 09:59:24 EDT 1h 42min ago logrotate.timer logrotate.service
Wed 2025-04-30 00:00:00 EDT 12h left Tue 2025-04-29 09:59:24 EDT 1h 42min ago man-db.timer man-db.service
Wed 2025-04-30 06:42:21 EDT 19h left Tue 2025-04-29 09:59:24 EDT 1h 42min ago apt-daily-upgrade.timer apt-daily-upgrade.service
Wed 2025-04-30 10:12:09 EDT 22h left Tue 2025-04-29 10:12:09 EDT 1h 29min ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.se
6 timers listed.
Pass --all to see loaded but inactive timers, too.Services
gaara@Gaara:~$ systemctl list-units --state=running
UNIT LOAD ACTIVE SUB DESCRIPTION
proc-sys-fs-binfmt_misc.automount loaded active running Arbitrary Executable File Formats File System Automount Point
init.scope loaded active running System and Service Manager
session-7.scope loaded active running Session 7 of user gaara
apache2.service loaded active running The Apache HTTP Server
cron.service loaded active running Regular background program processing daemon
dbus.service loaded active running D-Bus System Message Bus
getty@tty1.service loaded active running Getty on tty1
open-vm-tools.service loaded active running Service for virtual machines hosted on VMware
rsyslog.service loaded active running System Logging Service
ssh.service loaded active running OpenBSD Secure Shell server
systemd-journald.service loaded active running Journal Service
systemd-logind.service loaded active running Login Service
systemd-timesyncd.service loaded active running Network Time Synchronization
systemd-udevd.service loaded active running udev Kernel Device Manager
user@1001.service loaded active running User Manager for UID 1001
vgauth.service loaded active running Authentication service for virtual machines hosted on VMware
wpa_supplicant.service loaded active running WPA supplicant
dbus.socket loaded active running D-Bus System Message Bus Socket
syslog.socket loaded active running Syslog Socket
systemd-journald-audit.socket loaded active running Journal Audit Socket
systemd-journald-dev-log.socket loaded active running Journal Socket (/dev/log)
systemd-journald.socket loaded active running Journal Socket
systemd-udevd-control.socket loaded active running udev Control Socket
systemd-udevd-kernel.socket loaded active running udev Kernel Socket
LOAD = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB = The low-level unit activation state, values depend on unit type.
24 loaded units listed. Pass --all to see loaded but inactive units, too.
To show all installed unit files use 'systemctl list-unit-files'.apache2.servicewpa_supplicant.service
Sudo Version
gaara@Gaara:~$ sudo --version
Sudo version 1.8.27
sudo: unable to resolve host Gaara: Name or service not known
Sudoers policy plugin version 1.8.27
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.27Sudo version 1.8.27
Glibc Version
gaara@Gaara:~$ ldd --version
ldd (Debian GLIBC 2.28-10) 2.28
Copyright (C) 2018 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Debian GLIBC 2.28-10) 2.28