System/Kernel
www-data@spx:/var/www/html$ uname -a ; cat /etc/*release
Linux spx 5.15.0-122-generic #132-Ubuntu SMP Thu Aug 29 13:45:52 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=22.04
DISTRIB_CODENAME=jammy
DISTRIB_DESCRIPTION="Ubuntu 22.04.3 LTS"
PRETTY_NAME="Ubuntu 22.04.3 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.3 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammy5.15.0-122-genericx86_64Ubuntu 22.04.3 LTS (Jammy Jellyfish)
Networks
www-data@spx:/var/www/html$ ip route ; arp -a
default via 192.168.138.254 dev ens160 proto static
192.168.138.0/24 dev ens160 proto kernel scope link src 192.168.138.108
_gateway (192.168.138.254) at 00:50:56:9e:72:00 [ether] on ens160www-data@spx:/var/www/html$ netstat -antup | grep LIST
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp6 0 0 :::80 :::* LISTEN -
tcp6 0 0 :::22 :::* LISTEN - tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -\
Users & Groups
www-data@spx:/var/www/html$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
_apt:x:100:65534::/nonexistent:/usr/sbin/nologin
systemd-network:x:101:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:102:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:104::/nonexistent:/usr/sbin/nologin
systemd-timesync:x:104:105:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
pollinate:x:105:1::/var/cache/pollinate:/bin/false
sshd:x:106:65534::/run/sshd:/usr/sbin/nologin
syslog:x:107:113::/home/syslog:/usr/sbin/nologin
uuidd:x:108:114::/run/uuidd:/usr/sbin/nologin
tcpdump:x:109:115::/nonexistent:/usr/sbin/nologin
tss:x:110:116:TPM software stack,,,:/var/lib/tpm:/bin/false
landscape:x:111:117::/var/lib/landscape:/usr/sbin/nologin
usbmux:x:112:46:usbmux daemon,,,:/var/lib/usbmux:/usr/sbin/nologin
lxd:x:999:100::/var/snap/lxd/common/lxd:/bin/false
fwupd-refresh:x:113:118:fwupd-refresh user,,,:/run/systemd:/usr/sbin/nologin
profiler:x:1000:1000::/home/profiler:/bin/bash
total 12K
4.0K drwxr-x--- 3 profiler profiler 4.0K Sep 12 2024 profiler
4.0K drwxr-xr-x 3 root root 4.0K Sep 12 2024 .
4.0K drwxr-xr-x 19 root root 4.0K Jun 15 2022 ..profiler
www-data@spx:/var/www/html$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=101(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=102(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=103(messagebus) gid=104(messagebus) groups=104(messagebus)
uid=104(systemd-timesync) gid=105(systemd-timesync) groups=105(systemd-timesync)
uid=105(pollinate) gid=1(daemon) groups=1(daemon)
uid=106(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=107(syslog) gid=113(syslog) groups=113(syslog),4(adm)
uid=108(uuidd) gid=114(uuidd) groups=114(uuidd)
uid=109(tcpdump) gid=115(tcpdump) groups=115(tcpdump)
uid=110(tss) gid=116(tss) groups=116(tss)
uid=111(landscape) gid=117(landscape) groups=117(landscape)
uid=112(usbmux) gid=46(plugdev) groups=46(plugdev)
uid=999(lxd) gid=100(users) groups=100(users)
uid=113(fwupd-refresh) gid=118(fwupd-refresh) groups=118(fwupd-refresh)
uid=1000(profiler) gid=1000(profiler) groups=1000(profiler)uid=1000(profiler) gid=1000(profiler) groups=1000(profiler)
SUIDs
www-data@spx:/var/www/html$ find / -perm -04000 -ls -type f 2>/dev/null | grep -v '/snap'
8988 20 -rwsr-xr-x 1 root root 18736 Feb 26 2022 /usr/libexec/polkit-agent-helper-1
13858 36 -rwsr-xr-- 1 root messagebus 35112 Oct 25 2022 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
3086 332 -rwsr-xr-x 1 root root 338536 Jun 26 2024 /usr/lib/openssh/ssh-keysign
1203 56 -rwsr-xr-x 1 root root 55680 Apr 9 2024 /usr/bin/su
986 40 -rwsr-xr-x 1 root root 40496 Feb 6 2024 /usr/bin/newgrp
2312 44 -rwsr-xr-x 1 root root 44808 Feb 6 2024 /usr/bin/chsh
2260 72 -rwsr-xr-x 1 root root 72712 Feb 6 2024 /usr/bin/chfn
896 32 -rwsr-xr-x 1 root root 30872 Feb 26 2022 /usr/bin/pkexec
2335 72 -rwsr-xr-x 1 root root 72072 Feb 6 2024 /usr/bin/gpasswd
679 36 -rwsr-xr-x 1 root root 35200 Mar 23 2022 /usr/bin/fusermount3
8803 36 -rwsr-xr-x 1 root root 35200 Apr 9 2024 /usr/bin/umount
2337 60 -rwsr-xr-x 1 root root 59976 Feb 6 2024 /usr/bin/passwd
8802 48 -rwsr-xr-x 1 root root 47488 Apr 9 2024 /usr/bin/mount
5803 228 -rwsr-xr-x 1 root root 232416 Apr 3 2023 /usr/bin/sudoSGIDs
www-data@spx:/var/www/html$ find / -perm -02000 -ls -type f 2>/dev/null | grep -v '/snap'
419 0 drwxr-sr-x 2 root systemd-journal 40 Oct 10 2024 /run/log/journal
12243 4 drwxrwsr-x 2 root staff 4096 Apr 18 2022 /var/local
12245 4 drwxrwsr-x 2 root mail 4096 Apr 21 2022 /var/mail
12664 4 drwxr-sr-x 3 root systemd-journal 4096 Jun 15 2022 /var/log/journal
278494 4 drwxr-sr-x 2 root systemd-journal 4096 Apr 8 13:48 /var/log/journal/43fddd5fdaac48989c811e81838aeb4d
196293 4 drwxrwsr-x 2 root staff 4096 Sep 12 2024 /usr/local/share/fonts
136845 16 -rwxr-sr-x 1 root utmp 14488 Mar 24 2022 /usr/lib/x86_64-linux-gnu/utempter/utempter
595 40 -rwxr-sr-x 1 root crontab 39568 Mar 23 2022 /usr/bin/crontab
2333 24 -rwxr-sr-x 1 root shadow 23136 Feb 6 2024 /usr/bin/expiry
2231 72 -rwxr-sr-x 1 root shadow 72184 Feb 6 2024 /usr/bin/chage
3073 288 -rwxr-sr-x 1 root _ssh 293304 Jun 26 2024 /usr/bin/ssh-agent
797 28 -rwxr-sr-x 1 root shadow 26776 Jan 10 2024 /usr/sbin/unix_chkpwd
776 24 -rwxr-sr-x 1 root shadow 22680 Jan 10 2024 /usr/sbin/pam_extrausers_chkpwdCapabilities
www-data@spx:/var/www/html$ getcap -r / 2>/dev/null
/snap/core20/2318/usr/bin/ping cap_net_raw=ep
/snap/core20/2379/usr/bin/ping cap_net_raw=ep
/usr/lib/x86_64-linux-gnu/gstreamer1.0/gstreamer-1.0/gst-ptp-helper cap_net_bind_service,cap_net_admin=ep
/usr/bin/mtr-packet cap_net_raw=ep
/usr/bin/ping cap_net_raw=epProcesses
www-data@spx:/var/www/html$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.6 167516 13024 ? Ss 13:46 0:01 /sbin/init
root 513 0.0 0.7 47880 15012 ? S<s 13:46 0:00 /lib/systemd/systemd-journald
root 551 0.0 1.3 354888 27100 ? SLsl 13:46 0:00 /sbin/multipathd -d -s
root 554 0.0 0.3 26280 7164 ? Ss 13:46 0:00 /lib/systemd/systemd-udevd
systemd+ 721 0.0 0.3 163096 6664 ? Ssl 13:46 0:00 /lib/systemd/systemd-timesyncd
root 789 0.0 0.5 51144 11804 ? Ss 13:46 0:00 /usr/bin/VGAuthService
root 790 0.0 0.5 242348 10124 ? Ssl 13:46 0:04 /usr/bin/vmtoolsd
systemd+ 944 0.0 0.4 16248 8044 ? Ss 13:46 0:00 /lib/systemd/systemd-networkd
systemd+ 946 0.0 0.6 25540 12728 ? Ss 13:46 0:00 /lib/systemd/systemd-resolved
root 988 0.0 0.1 6896 2876 ? Ss 13:48 0:00 /usr/sbin/cron -f -P
message+ 989 0.0 0.2 8768 4764 ? Ss 13:48 0:00 @dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root 1003 0.0 0.1 82832 3824 ? Ssl 13:48 0:00 /usr/sbin/irqbalance --foreground
root 1005 0.0 0.9 32744 19132 ? Ss 13:48 0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
root 1007 0.0 0.3 234504 6632 ? Ssl 13:48 0:00 /usr/libexec/polkitd --no-debug
syslog 1008 0.0 0.2 222404 5920 ? Ssl 13:48 0:00 /usr/sbin/rsyslogd -n -iNONE
root 1011 0.1 1.4 1393952 29848 ? Ssl 13:48 0:07 /usr/lib/snapd/snapd
root 1013 0.0 0.3 15032 7412 ? Ss 13:48 0:00 /lib/systemd/systemd-logind
root 1015 0.0 0.6 392600 12772 ? Ssl 13:48 0:00 /usr/libexec/udisks2/udisksd
root 1032 0.0 0.0 6176 1184 tty1 Ss+ 13:48 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root 1066 0.0 0.6 317968 12188 ? Ssl 13:48 0:00 /usr/sbin/ModemManager
root 1073 0.0 0.4 15432 9232 ? Ss 13:48 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root 1115 0.0 1.0 205596 21256 ? Ss 13:48 0:00 /usr/sbin/apache2 -k start
root 1126 0.0 1.0 109760 21456 ? Ssl 13:48 0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
www-data 1520 0.0 1.2 251252 24168 ? S 13:59 0:00 /usr/sbin/apache2 -k start
www-data 1537 0.0 0.8 206624 17148 ? S 13:59 0:00 /usr/sbin/apache2 -k start
www-data 1650 0.0 1.2 251164 24296 ? S 14:15 0:00 /usr/sbin/apache2 -k start
www-data 1651 1.3 1.1 251164 23932 ? R 14:15 0:47 /usr/sbin/apache2 -k start
www-data 1658 0.0 0.8 206532 17268 ? S 14:16 0:00 /usr/sbin/apache2 -k start
www-data 1665 0.0 0.8 206524 17232 ? S 14:18 0:00 /usr/sbin/apache2 -k start
www-data 1674 0.0 0.8 206520 17308 ? S 14:21 0:00 /usr/sbin/apache2 -k start
www-data 1675 5.6 1.0 215248 20212 ? S 14:21 3:06 /usr/sbin/apache2 -k start
www-data 1828 0.0 0.8 206436 16240 ? S 14:59 0:00 /usr/sbin/apache2 -k start
www-data 2000 0.0 0.0 2892 948 ? S 15:14 0:00 sh -c bash
www-data 2001 0.0 0.1 4364 3184 ? S 15:14 0:00 bash
www-data 2002 0.0 0.4 17720 9292 ? S 15:14 0:00 python3 -c import pty; pty.spawn("/bin/bash")
www-data 2003 0.0 0.1 7984 3960 pts/0 Ss 15:14 0:00 /bin/bash
www-data 2010 0.0 0.1 10676 3560 pts/0 R+ 15:15 0:00 ps -auxwwwroot 988 0.0 0.1 6896 2876 ? Ss 13:48 0:00 /usr/sbin/cron -f -P
Cron & Systemd
www-data@spx:/var/www/html$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for www-data
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
# You can also override PATH, but by default, newer versions inherit it from the environment
#PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# Example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED >
Tue 2025-04-08 15:39:00 UTC 22min left Tue 2025-04-08 15:09:04 UTC 7min ago >
Tue 2025-04-08 18:28:56 UTC 3h 12min left Sun 2024-09-22 15:54:43 UTC 6 months >
Tue 2025-04-08 18:52:33 UTC 3h 35min left Sun 2024-09-22 20:27:43 UTC 6 months >
Wed 2025-04-09 00:00:00 UTC 8h left Tue 2025-04-08 13:48:44 UTC 1h 28min >
Wed 2025-04-09 00:00:00 UTC 8h left Tue 2025-04-08 13:48:44 UTC 1h 28min >
Wed 2025-04-09 00:27:56 UTC 9h left Sun 2024-09-22 20:19:43 UTC 6 months >
Wed 2025-04-09 01:08:04 UTC 9h left Sun 2024-09-22 01:38:43 UTC 6 months >
Wed 2025-04-09 06:51:58 UTC 15h left Tue 2025-04-08 14:36:04 UTC 40min ago>
Wed 2025-04-09 13:51:10 UTC 22h left Tue 2025-04-08 13:51:10 UTC 1h 25min >
Wed 2025-04-09 14:01:10 UTC 22h left Tue 2025-04-08 14:01:10 UTC 1h 15min >
Thu 2025-04-10 22:18:28 UTC 2 days left Tue 2024-09-17 21:19:08 UTC 6 months >
Sun 2025-04-13 03:10:50 UTC 4 days left Tue 2025-04-08 13:48:44 UTC 1h 28min >
Mon 2025-04-14 00:46:20 UTC 5 days left Tue 2025-04-08 14:16:42 UTC 1h 0min a>
13 timers listed.
Pass --all to see loaded but inactive timers, too.Services
www-data@spx:/var/www/html$ systemctl list-units --state=running
UNIT LOAD ACTIVE SUB DESCRIPTION >
proc-sys-fs-binfmt_misc.automount loaded active running Arbitrary Executable >
init.scope loaded active running System and Service Ma>
apache2.service loaded active running The Apache HTTP Server
cron.service loaded active running Regular background pr>
dbus.service loaded active running D-Bus System Message >
getty@tty1.service loaded active running Getty on tty1
irqbalance.service loaded active running irqbalance daemon
ModemManager.service loaded active running Modem Manager
multipathd.service loaded active running Device-Mapper Multipa>
networkd-dispatcher.service loaded active running Dispatcher daemon for>
open-vm-tools.service loaded active running Service for virtual m>
polkit.service loaded active running Authorization Manager
rsyslog.service loaded active running System Logging Service
snapd.service loaded active running Snap Daemon
ssh.service loaded active running OpenBSD Secure Shell >
systemd-journald.service loaded active running Journal Service
systemd-logind.service loaded active running User Login Management
systemd-networkd.service loaded active running Network Configuration
systemd-resolved.service loaded active running Network Name Resoluti>
systemd-timesyncd.service loaded active running Network Time Synchron>
systemd-udevd.service loaded active running Rule-based Manager fo>
udisks2.service loaded active running Disk Manager
unattended-upgrades.service loaded active running Unattended Upgrades S>
vgauth.service loaded active running Authentication servic>
dbus.socket loaded active running D-Bus System Message >
multipathd.socket loaded active running multipathd control so>
snapd.socket loaded active running Socket activation for>
syslog.socket loaded active running Syslog Socket
systemd-journald-audit.socket loaded active running Journal Audit Socket
systemd-journald-dev-log.socket loaded active running Journal Socket (/dev/>
systemd-journald.socket loaded active running Journal Socket
systemd-networkd.socket loaded active running Network Service Netli>
systemd-udevd-control.socket loaded active running udev Control Socket
systemd-udevd-kernel.socket loaded active running udev Kernel Socket
LOAD = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB = The low-level unit activation state, values depend on unit type.
34 loaded units listed.Sudo Version
www-data@spx:/var/www/html$ sudo --version
Sudo version 1.9.9
Sudoers policy plugin version 1.9.9
Sudoers file grammar version 48
Sudoers I/O plugin version 1.9.9
Sudoers audit plugin version 1.9.9Sudo version 1.9.9
Glibc Version
www-data@spx:/var/www/html$ ldd --version
ldd (Ubuntu GLIBC 2.35-0ubuntu3.8) 2.35
Copyright (C) 2022 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu GLIBC 2.35-0ubuntu3.8) 2.35