System/Kernel
clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=ffe165dc81a64aea2b05beda07aeda8ad71f1e7c, stripped
Linux xposedapi 4.19.0-14-amd64 #1 SMP Debian 4.19.171-2 (2021-01-30) x86_64 GNU/Linux
PRETTY_NAME="Debian GNU/Linux 10 (buster)"
NAME="Debian GNU/Linux"
VERSION_ID="10"
VERSION="10 (buster)"
VERSION_CODENAME=buster
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"64-bit
Debian GNU/Linux 10 (buster)
4.19.0-14-amd64
Networks
clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ ip route ; arp -a
default via 192.168.209.254 dev ens192 onlink
192.168.209.0/24 dev ens192 proto kernel scope link src 192.168.209.134
? (192.168.209.254) at 00:50:56:9e:72:00 [ether] on ens192clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:13337 0.0.0.0:* LISTEN 499/python3
tcp 0 301 192.168.209.134:50804 192.168.45.215:9999 ESTABLISHED 3662/sh Users & Groups
clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ cat /etc/passwd ; ll /home
cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
_apt:x:100:65534::/nonexistent:/usr/sbin/nologin
systemd-timesync:x:101:102:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
systemd-network:x:102:103:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:103:104:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:104:110::/nonexistent:/usr/sbin/nologin
sshd:x:105:65534::/run/sshd:/usr/sbin/nologin
systemd-coredump:x:999:999:systemd Core Dumper:/:/usr/sbin/nologin
clumsyadmin:x:1000:1000::/home/clumsyadmin:/bin/sh
total 12K
4.0K drwxr-xr-x 4 clumsyadmin clumsyadmin 4.0K Aug 2 2024 clumsyadmin
4.0K drwxr-xr-x 3 root root 4.0K Feb 9 2021 .
4.0K drwxr-xr-x 18 root root 4.0K Feb 9 2021 ..clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ cut -d: -f1 /etc/passwd | xargs -n1 id
-n1 id: -f1 /etc/passwd | xargs -
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=101(systemd-timesync) gid=102(systemd-timesync) groups=102(systemd-timesync)
uid=102(systemd-network) gid=103(systemd-network) groups=103(systemd-network)
uid=103(systemd-resolve) gid=104(systemd-resolve) groups=104(systemd-resolve)
uid=104(messagebus) gid=110(messagebus) groups=110(messagebus)
uid=105(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=999(systemd-coredump) gid=999(systemd-coredump) groups=999(systemd-coredump)
uid=1000(clumsyadmin) gid=1000(clumsyadmin) groups=1000(clumsyadmin)uid=1000(clumsyadmin) gid=1000(clumsyadmin) groups=1000(clumsyadmin)
SUIDs
clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ find / -perm -04000 -ls -type f 2>/dev/null
273373 52 -rwsr-xr-- 1 root messagebus 51184 Jul 5 2020 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
276719 428 -rwsr-xr-x 1 root root 436552 Jan 31 2020 /usr/lib/openssh/ssh-keysign
398815 12 -rwsr-xr-x 1 root root 10232 Mar 28 2017 /usr/lib/eject/dmcrypt-get-device
266035 52 -rwsr-xr-x 1 root root 51280 Jan 10 2019 /usr/bin/mount
262183 64 -rwsr-xr-x 1 root root 63736 Jul 27 2018 /usr/bin/passwd
265710 64 -rwsr-xr-x 1 root root 63568 Jan 10 2019 /usr/bin/su
276984 456 -rwsr-xr-x 1 root root 466496 Apr 5 2019 /usr/bin/wget
282583 36 -rwsr-xr-x 1 root root 34896 Apr 22 2020 /usr/bin/fusermount
266037 36 -rwsr-xr-x 1 root root 34888 Jan 10 2019 /usr/bin/umount
262179 56 -rwsr-xr-x 1 root root 54096 Jul 27 2018 /usr/bin/chfn
262180 44 -rwsr-xr-x 1 root root 44528 Jul 27 2018 /usr/bin/chsh
265563 44 -rwsr-xr-x 1 root root 44440 Jul 27 2018 /usr/bin/newgrp
272436 156 -rwsr-xr-x 1 root root 157192 Jan 20 2021 /usr/bin/sudo
262182 84 -rwsr-xr-x 1 root root 84016 Jul 27 2018 /usr/bin/gpasswd/usr/bin/wget
SGIDs
clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ find / -type f -perm -02000 -ls 2>/dev/null
262984 40 -rwxr-sr-x 1 root shadow 39616 Feb 14 2019 /usr/sbin/unix_chkpwd
273564 20 -rwxr-sr-x 1 root mail 18944 Dec 3 2017 /usr/bin/dotlockfile
262181 32 -rwxr-sr-x 1 root shadow 31000 Jul 27 2018 /usr/bin/expiry
276712 316 -rwxr-sr-x 1 root ssh 321672 Jan 31 2020 /usr/bin/ssh-agent
268064 16 -rwxr-sr-x 1 root tty 14736 May 4 2018 /usr/bin/bsd-write
262178 72 -rwxr-sr-x 1 root shadow 71816 Jul 27 2018 /usr/bin/chage
268184 44 -rwxr-sr-x 1 root crontab 43568 Oct 11 2019 /usr/bin/crontab
263608 36 -rwxr-sr-x 1 root tty 34896 Jan 10 2019 /usr/bin/wallProcesses
clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.4 169356 10080 ? Ss 11:54 0:00 /sbin/init
root 246 0.0 0.5 34932 10672 ? Ss 11:54 0:01 /lib/systemd/systemd-journald
root 266 0.0 0.2 22200 5204 ? Ss 11:54 0:00 /lib/systemd/systemd-udevd
root 298 0.0 0.5 48228 10968 ? Ss 11:54 0:00 /usr/bin/VGAuthService
root 299 0.0 0.5 122876 12252 ? Ssl 11:54 0:02 /usr/bin/vmtoolsd
systemd+ 301 0.0 0.3 93084 6560 ? Ssl 11:54 0:00 /lib/systemd/systemd-timesyncd
message+ 384 0.0 0.1 8984 3760 ? Ss 11:54 0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root 385 0.0 0.1 9748 3352 ? Ss 11:54 0:00 /usr/bin/su clumsyadmin -c /home/clumsyadmin/webapp/start.sh
root 386 0.0 0.2 225824 4408 ? Ssl 11:54 0:00 /usr/sbin/rsyslogd -n -iNONE
root 389 0.0 0.1 8476 2584 ? Ss 11:54 0:00 /usr/sbin/cron -f
root 390 0.0 0.3 19392 7248 ? Ss 11:54 0:00 /lib/systemd/systemd-logind
root 406 0.0 0.0 5612 1556 tty1 Ss+ 11:54 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root 410 0.0 0.3 15852 6988 ? Ss 11:54 0:00 /usr/sbin/sshd -D
clumsya+ 431 0.0 0.4 21024 8372 ? Ss 11:54 0:00 /lib/systemd/systemd --user
clumsya+ 437 0.0 0.1 23140 2276 ? S 11:54 0:00 (sd-pam)
clumsya+ 496 0.0 0.0 2388 692 ? Ss 11:54 0:00 sh -c /home/clumsyadmin/webapp/start.sh
clumsya+ 497 0.0 0.1 6644 3096 ? S 11:54 0:00 /bin/bash /home/clumsyadmin/webapp/start.sh
clumsya+ 499 0.0 1.1 31576 22492 ? S 11:54 0:00 /usr/bin/python3 /usr/local/bin/gunicorn -w 4 -b 0.0.0.0:13337 main:app
clumsya+ 768 3.4 1.4 46488 28660 ? S 11:56 3:15 /usr/bin/python3 /usr/local/bin/gunicorn -w 4 -b 0.0.0.0:13337 main:app
clumsya+ 840 3.4 1.3 46484 28496 ? S 11:56 3:15 /usr/bin/python3 /usr/local/bin/gunicorn -w 4 -b 0.0.0.0:13337 main:app
clumsya+ 842 3.4 1.3 46344 28580 ? S 11:56 3:14 /usr/bin/python3 /usr/local/bin/gunicorn -w 4 -b 0.0.0.0:13337 main:app
clumsya+ 983 3.7 1.4 46456 28720 ? S 12:08 3:08 /usr/bin/python3 /usr/local/bin/gunicorn -w 4 -b 0.0.0.0:13337 main:app
clumsya+ 997 0.0 0.1 6644 3156 ? S 12:32 0:00 /bin/bash /home/clumsyadmin/app
clumsya+ 1014 0.0 0.1 6644 3092 ? S 12:34 0:00 /bin/bash /home/clumsyadmin/app
clumsya+ 1033 0.0 0.1 6644 3204 ? S 12:35 0:00 /bin/bash /home/clumsyadmin/app
clumsya+ 1039 0.0 0.1 6644 3124 ? S 12:35 0:00 /bin/bash /home/clumsyadmin/app
clumsya+ 1046 0.0 0.1 6644 3124 ? S 12:36 0:00 /bin/bash /home/clumsyadmin/app
clumsya+ 1058 0.0 0.1 6644 3224 ? S 12:36 0:00 /bin/bash /home/clumsyadmin/app
clumsya+ 1066 0.0 0.1 6644 3168 ? S 12:36 0:00 /bin/bash /home/clumsyadmin/app
clumsya+ 1075 0.0 0.1 6644 3084 ? S 12:36 0:00 /bin/bash /home/clumsyadmin/app
clumsya+ 3662 0.0 0.0 2388 764 ? S 13:29 0:00 /bin/sh
clumsya+ 3672 0.0 0.0 2592 1968 ? S 13:29 0:00 script /dev/null -c /bin/bash
clumsya+ 3673 0.0 0.0 2388 752 pts/0 Ss 13:29 0:00 sh -c /bin/bash
clumsya+ 3674 0.0 0.1 4660 4036 pts/0 S 13:29 0:00 /bin/bash
clumsya+ 3812 0.0 0.0 5260 748 ? S 13:31 0:00 sleep 10
clumsya+ 3813 0.0 0.0 5260 744 ? S 13:31 0:00 sleep 10
clumsya+ 3814 0.0 0.0 5260 744 ? S 13:31 0:00 sleep 10
clumsya+ 3815 0.0 0.0 5260 680 ? S 13:31 0:00 sleep 10
clumsya+ 3816 0.0 0.0 5260 744 ? S 13:31 0:00 sleep 10
clumsya+ 3817 0.0 0.0 5260 740 ? S 13:31 0:00 sleep 10
clumsya+ 3818 0.0 0.0 5260 744 ? S 13:31 0:00 sleep 10
clumsya+ 3819 0.0 0.0 5260 684 ? S 13:31 0:00 sleep 10
clumsya+ 3820 0.0 0.1 7924 2876 pts/0 R+ 13:31 0:00 ps -auxwwwroot 385 0.0 0.1 9748 3352 ? Ss 11:54 0:00 /usr/bin/su clumsyadmin -c /home/clumsyadmin/webapp/start.sh
root 389 0.0 0.1 8476 2584 ? Ss 11:54 0:00 /usr/sbin/cron -f
Cron & Systemd
clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for clumsyadmin
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# Example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED
Fri 2025-02-07 00:00:00 EST 10h left Thu 2025-02-06 11:56:45 EST 1h 35min ago
Fri 2025-02-07 00:00:00 EST 10h left Thu 2025-02-06 11:56:45 EST 1h 35min ago
Fri 2025-02-07 00:42:01 EST 11h left Thu 2025-02-06 11:56:45 EST 1h 35min ago
Fri 2025-02-07 06:50:13 EST 17h left Thu 2025-02-06 11:56:45 EST 1h 35min ago
Fri 2025-02-07 12:09:43 EST 22h left Thu 2025-02-06 12:09:43 EST 1h 23min ago
5 timers listed.
Pass --all to see loaded but inactive timers, too.
lines 1-9/9 (END)Services
clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ systemctl list-units --state=running
ningemctl list-units --state=runn
UNIT LOAD ACTIVE SUB DESCRIPTION
proc-sys-fs-binfmt_misc.automount loaded active running Arbitrary Executable Fil
init.scope loaded active running System and Service Manage
session-c1.scope loaded active running Session c1 of user clumsy
cron.service loaded active running Regular background progra
dbus.service loaded active running D-Bus System Message Bus
getty@tty1.service loaded active running Getty on tty1
open-vm-tools.service loaded active running Service for virtual machi
rsyslog.service loaded active running System Logging Service
ssh.service loaded active running OpenBSD Secure Shell serv
systemd-journald.service loaded active running Journal Service
systemd-logind.service loaded active running Login Service
systemd-timesyncd.service loaded active running Network Time Synchronizat
systemd-udevd.service loaded active running udev Kernel Device Manage
user@1000.service loaded active running User Manager for UID 1000
vgauth.service loaded active running Authentication service fo
webapp.service loaded active running WebApp
dbus.socket loaded active running D-Bus System Message Bus
syslog.socket loaded active running Syslog Socket
systemd-journald-audit.socket loaded active running Journal Audit Socket
systemd-journald-dev-log.socket loaded active running Journal Socket (/dev/log)
systemd-journald.socket loaded active running Journal Socket
systemd-udevd-control.socket loaded active running udev Control Socket
lines 1-23webapp.service loaded active running WebApp
Sudo Version
clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ sudo --version
Sudo version 1.8.27
Sudoers policy plugin version 1.8.27
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.27Sudo version 1.8.27
Glibc Version
clumsyadmin@xposedapi:/home/clumsyadmin/webapp$ ldd --version
ldd (Debian GLIBC 2.28-10) 2.28
Copyright (C) 2018 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Debian GLIBC 2.28-10) 2.28