System/Kernel
www-data@THM-Chal:/var/www$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib, for GNU/Linux 2.6.32, BuildID[sha1]=d8231516fa1d26d5df42026dfc622b77bf4a681d, stripped
Linux THM-Chal 4.15.0-70-generic #79~16.04.1-Ubuntu SMP Tue Nov 12 11:54:29 UTC 2019 i686 i686 i686 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=16.04
DISTRIB_CODENAME=xenial
DISTRIB_DESCRIPTION="Ubuntu 16.04.6 LTS"
NAME="Ubuntu"
VERSION="16.04.6 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.6 LTS"
VERSION_ID="16.04"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenialELF 32-bit LSB executable
Ubuntu 16.04.6 LTS (Xenial Xerus)
4.15.0-70-generic
Networks
www-data@THM-Chal:/var/www$ ip route ; arp -a
default via 10.10.0.1 dev eth0
10.10.0.0/16 dev eth0 proto kernel scope link src 10.10.187.138
169.254.0.0/16 dev eth0 scope link metric 1000
ip-10-10-0-1.eu-west-1.compute.internal (10.10.0.1) at 02:c8:85:b5:5a:aa [ether] on eth0www-data@THM-Chal:/var/www$ netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN -
tcp 0 0 10.10.187.138:32872 10.9.2.95:9999 ESTABLISHED 2618/sh
udp 0 0 0.0.0.0:43185 0.0.0.0:* -
udp 0 0 0.0.0.0:5353 0.0.0.0:* -
udp 0 0 0.0.0.0:68 0.0.0.0:* -
udp 0 0 0.0.0.0:631 0.0.0.0:* - 127.0.0.1:3306
127.0.0.1:631
Users & Groups
www-data@THM-Chal:/var/www$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-timesync:x:100:102:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:101:103:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:102:104:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:103:105:systemd Bus Proxy,,,:/run/systemd:/bin/false
syslog:x:104:108::/home/syslog:/bin/false
_apt:x:105:65534::/nonexistent:/bin/false
messagebus:x:106:110::/var/run/dbus:/bin/false
uuidd:x:107:111::/run/uuidd:/bin/false
lightdm:x:108:114:Light Display Manager:/var/lib/lightdm:/bin/false
whoopsie:x:109:117::/nonexistent:/bin/false
avahi-autoipd:x:110:119:Avahi autoip daemon,,,:/var/lib/avahi-autoipd:/bin/false
avahi:x:111:120:Avahi mDNS daemon,,,:/var/run/avahi-daemon:/bin/false
dnsmasq:x:112:65534:dnsmasq,,,:/var/lib/misc:/bin/false
colord:x:113:123:colord colour management daemon,,,:/var/lib/colord:/bin/false
speech-dispatcher:x:114:29:Speech Dispatcher,,,:/var/run/speech-dispatcher:/bin/false
hplip:x:115:7:HPLIP system user,,,:/var/run/hplip:/bin/false
kernoops:x:116:65534:Kernel Oops Tracking Daemon,,,:/:/bin/false
pulse:x:117:124:PulseAudio daemon,,,:/var/run/pulse:/bin/false
rtkit:x:118:126:RealtimeKit,,,:/proc:/bin/false
saned:x:119:127::/var/lib/saned:/bin/false
usbmux:x:120:46:usbmux daemon,,,:/var/lib/usbmux:/bin/false
itguy:x:1000:1000:THM-Chal,,,:/home/itguy:/bin/bash
mysql:x:121:129:MySQL Server,,,:/nonexistent:/bin/false
vboxadd:x:999:1::/var/run/vboxadd:/bin/false
guest-3myc2b:x:998:998:Guest:/tmp/guest-3myc2b:/bin/bash
sshd:x:122:65534::/var/run/sshd:/usr/sbin/nologin
total 12K
4.0K drwxr-xr-x 18 itguy itguy 4.0K Nov 30 2019 itguy
4.0K drwxr-xr-x 23 root root 4.0K Nov 29 2019 ..
4.0K drwxr-xr-x 3 root root 4.0K Nov 29 2019 .itguy
www-data@THM-Chal:/var/www$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-timesync) gid=102(systemd-timesync) groups=102(systemd-timesync)
uid=101(systemd-network) gid=103(systemd-network) groups=103(systemd-network)
uid=102(systemd-resolve) gid=104(systemd-resolve) groups=104(systemd-resolve)
uid=103(systemd-bus-proxy) gid=105(systemd-bus-proxy) groups=105(systemd-bus-proxy)
uid=104(syslog) gid=108(syslog) groups=108(syslog),4(adm)
uid=105(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=106(messagebus) gid=110(messagebus) groups=110(messagebus)
uid=107(uuidd) gid=111(uuidd) groups=111(uuidd)
uid=108(lightdm) gid=114(lightdm) groups=114(lightdm)
uid=109(whoopsie) gid=117(whoopsie) groups=117(whoopsie)
uid=110(avahi-autoipd) gid=119(avahi-autoipd) groups=119(avahi-autoipd)
uid=111(avahi) gid=120(avahi) groups=120(avahi)
uid=112(dnsmasq) gid=65534(nogroup) groups=65534(nogroup)
uid=113(colord) gid=123(colord) groups=123(colord)
uid=114(speech-dispatcher) gid=29(audio) groups=29(audio)
uid=115(hplip) gid=7(lp) groups=7(lp)
uid=116(kernoops) gid=65534(nogroup) groups=65534(nogroup)
uid=117(pulse) gid=124(pulse) groups=124(pulse),29(audio)
uid=118(rtkit) gid=126(rtkit) groups=126(rtkit)
uid=119(saned) gid=127(saned) groups=127(saned),122(scanner)
uid=120(usbmux) gid=46(plugdev) groups=46(plugdev)
uid=1000(itguy) gid=1000(itguy) groups=1000(itguy),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),113(lpadmin),128(sambashare)
uid=121(mysql) gid=129(mysql) groups=129(mysql)
uid=999(vboxadd) gid=1(daemon) groups=1(daemon)
uid=998(guest-3myc2b) gid=998(guest-3myc2b) groups=998(guest-3myc2b)
uid=122(sshd) gid=65534(nogroup) groups=65534(nogroup)uid=1000(itguy) gid=1000(itguy) groups=1000(itguy),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),113(lpadmin),128(sambashare)
SUIDs
SGIDs
Processes
www-data@THM-Chal:/var/www$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.5 0.4 24104 2116 ? Ss 16:10 0:25 /sbin/init splash
root 227 0.0 0.2 5116 976 ? Ss 16:10 0:04 /lib/systemd/systemd-journald
root 255 0.0 0.3 14848 1360 ? Ss 16:10 0:03 /lib/systemd/systemd-udevd
root 647 0.0 0.4 39212 1776 ? Ssl 16:11 0:00 /usr/lib/accountsservice/accounts-daemon
root 655 0.0 0.0 2248 164 ? Ss 16:11 0:00 /usr/sbin/acpid
root 656 0.0 0.1 7116 756 ? Ss 16:11 0:00 /usr/sbin/cron -f
syslog 674 0.0 0.1 30732 748 ? Ssl 16:11 0:01 /usr/sbin/rsyslogd -n
avahi 675 0.0 0.0 5924 264 ? Ss 16:11 0:00 avahi-daemon: running [THM-Chal.local]
avahi 681 0.0 0.0 5924 56 ? S 16:11 0:00 avahi-daemon: chroot helper
root 700 0.0 0.2 4136 988 ? Ss 16:11 0:00 /lib/systemd/systemd-logind
message+ 702 0.0 0.2 6504 1116 ? Ss 16:11 0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root 719 0.0 0.2 91792 1224 ? Ssl 16:11 0:00 /usr/sbin/NetworkManager --no-daemon
root 775 0.0 0.6 37152 3008 ? Ssl 16:11 0:01 /usr/lib/policykit-1/polkitd --no-debug
root 857 0.0 0.2 6016 1104 ? Ss 16:11 0:00 /sbin/dhclient -1 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
root 954 0.0 0.3 36196 1472 ? Ssl 16:11 0:02 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
whoopsie 956 0.0 0.3 38176 1344 ? Ssl 16:11 0:00 /usr/bin/whoopsie -f
mysql 975 0.0 6.6 546680 29092 ? Ssl 16:11 0:04 /usr/sbin/mysqld
root 989 0.0 0.0 10004 384 ? Ss 16:11 0:00 /usr/sbin/sshd -D
root 1078 0.0 2.5 152964 11220 ? Ss 16:12 0:02 php-fpm: master process (/etc/php/7.0/fpm/php-fpm.conf)
root 1081 0.2 3.6 152228 15904 ? Ss 16:12 0:09 /usr/sbin/apache2 -k start
www-data 1129 0.0 0.5 152964 2476 ? S 16:12 0:00 php-fpm: pool www
www-data 1130 0.0 0.5 152964 2484 ? S 16:12 0:00 php-fpm: pool www
root 1248 0.0 0.4 43404 1956 ? Ssl 16:13 0:00 /usr/sbin/lightdm
root 1263 0.0 4.1 153212 18092 tty7 Ssl+ 16:13 0:04 /usr/lib/xorg/Xorg -core :0 -seat seat0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
root 1265 0.0 0.0 4752 384 tty1 Ss+ 16:13 0:00 /sbin/agetty --noclear tty1 linux
root 1266 0.0 0.1 6104 600 ttyS0 Ss+ 16:13 0:00 /sbin/agetty --keep-baud 115200 38400 9600 ttyS0 vt220
root 1286 0.0 0.4 27908 1960 ? Sl 16:13 0:00 lightdm --session-child 16 19
lightdm 1289 0.0 0.2 6396 1240 ? Ss 16:13 0:00 /lib/systemd/systemd --user
lightdm 1290 0.0 0.2 25120 1012 ? S 16:13 0:00 (sd-pam)
lightdm 1297 0.0 0.0 2372 44 ? Ss 16:13 0:00 /bin/sh /usr/lib/lightdm/lightdm-greeter-session /usr/sbin/unity-greeter
lightdm 1302 0.0 0.3 6140 1352 ? Ss 16:13 0:01 /usr/bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session
lightdm 1303 0.2 3.2 370508 14344 ? Sl 16:13 0:09 /usr/sbin/unity-greeter
lightdm 1305 0.0 0.4 43468 1912 ? Sl 16:13 0:00 /usr/lib/at-spi2-core/at-spi-bus-launcher --launch-immediately
lightdm 1310 0.0 0.1 5940 860 ? S 16:13 0:00 /usr/bin/dbus-daemon --config-file=/etc/at-spi2/accessibility.conf --nofork --print-address 3
lightdm 1312 0.0 0.1 29176 708 ? Sl 16:13 0:00 /usr/lib/at-spi2-core/at-spi2-registryd --use-gnome-session
lightdm 1318 0.0 0.2 39796 1004 ? Sl 16:13 0:00 /usr/lib/gvfs/gvfsd
lightdm 1323 0.0 0.3 50688 1652 ? Sl 16:13 0:00 /usr/lib/gvfs/gvfsd-fuse /run/user/108/gvfs -f -o big_writes
lightdm 1334 0.0 0.3 25268 1684 ? Sl 16:13 0:00 /usr/lib/dconf/dconf-service
root 1337 0.0 0.3 9372 1596 ? S 16:13 0:00 lightdm --session-child 12 19
lightdm 1340 0.0 0.2 9684 1304 ? S 16:13 0:00 upstart --user --startup-event indicator-services-start
lightdm 1342 0.0 1.5 119872 6920 ? Sl 16:13 0:03 nm-applet
lightdm 1344 0.0 0.4 48060 1988 ? Ssl 16:13 0:00 /usr/lib/i386-linux-gnu/indicator-messages/indicator-messages-service
lightdm 1345 0.0 0.3 53816 1676 ? Ssl 16:13 0:00 /usr/lib/i386-linux-gnu/indicator-bluetooth/indicator-bluetooth-service
lightdm 1346 0.0 0.5 48108 2508 ? Ssl 16:13 0:00 /usr/lib/i386-linux-gnu/indicator-power/indicator-power-service
lightdm 1347 0.0 0.6 100276 2976 ? Ssl 16:13 0:00 /usr/lib/i386-linux-gnu/indicator-datetime/indicator-datetime-service
lightdm 1349 0.0 1.4 105240 6532 ? Ssl 16:13 0:04 /usr/lib/i386-linux-gnu/indicator-keyboard/indicator-keyboard-service --use-gtk
lightdm 1350 0.0 0.4 315364 1908 ? Ssl 16:13 0:00 /usr/lib/i386-linux-gnu/indicator-sound/indicator-sound-service
lightdm 1351 0.0 0.3 70944 1384 ? Ssl 16:13 0:00 /usr/lib/i386-linux-gnu/indicator-session/indicator-session-service
lightdm 1353 0.0 1.3 82892 5784 ? Sl 16:13 0:02 /usr/lib/unity-settings-daemon/unity-settings-daemon
lightdm 1367 0.0 0.4 58000 1808 ? Ssl 16:13 0:00 /usr/lib/i386-linux-gnu/indicator-application/indicator-application-service
lightdm 1396 0.0 0.4 156548 1884 ? S<l 16:13 0:00 /usr/bin/pulseaudio --start --log-target=syslog
rtkit 1397 0.0 0.2 23792 1008 ? SNsl 16:13 0:00 /usr/lib/rtkit/rtkit-daemon
root 1412 0.0 0.5 72992 2256 ? Ssl 16:13 0:00 /usr/lib/upower/upowerd
colord 1426 0.0 0.8 43260 3748 ? Ssl 16:13 0:01 /usr/lib/colord/colord
root 1614 0.0 0.3 15728 1576 ? Ss 16:16 0:00 /usr/sbin/cupsd -l
root 1615 0.0 0.5 37572 2440 ? Ssl 16:16 0:00 /usr/sbin/cups-browsed
www-data 2079 0.4 2.5 152916 11044 ? R 16:17 0:18 /usr/sbin/apache2 -k start
www-data 2704 7.7 1.5 9636 6736 ? S 17:28 0:00 python3 -c import pty; pty.spawn("/bin/bash")
www-data 2705 1.7 0.6 3772 2832 pts/9 Ss 17:28 0:00 /bin/bash
www-data 2708 0.0 0.6 5684 2708 pts/9 R+ 17:28 0:00 ps -auxwww/usr/sbin/cron -f
/usr/lib/policykit-1/polkitd --no-debug
/usr/bin/whoopsie -f
/usr/sbin/mysqld
/usr/sbin/cupsd -l
/usr/sbin/cups-browsed
/usr/sbin/lightdm
/bin/sh /usr/lib/lightdm/lightdm-greeter-session /usr/sbin/unity-greeter
/usr/lib/xorg/Xorg -core :0 -seat seat0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
lightdm --session-child 12 19
/usr/bin/pulseaudio --start --log-target=syslog
Cron & Systemd
www-data@THM-Chal:/var/www$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for www-data
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED
Sat 2024-07-13 05:46:30 EEST 12h left Fri 2024-07-12 16:11:18 EEST 1h 21min ag
Sat 2024-07-13 06:29:34 EEST 12h left Fri 2024-07-12 16:11:18 EEST 1h 21min ag
Sat 2024-07-13 06:35:30 EEST 13h left Fri 2024-07-12 16:11:18 EEST 1h 21min ag
Sat 2024-07-13 16:25:07 EEST 22h left Fri 2024-07-12 16:25:07 EEST 1h 7min ago
4 timers listed.
Pass --all to see loaded but inactive timers, too.Sudo Version
www-data@THM-Chal:/var/www$ sudo --version
Sudo version 1.8.16
Sudoers policy plugin version 1.8.16
Sudoers file grammar version 45
Sudoers I/O plugin version 1.8.16Sudo version 1.8.16
Glibc Version
www-data@THM-Chal:/var/www$ ldd --version
ldd (Ubuntu GLIBC 2.23-0ubuntu11) 2.23
Copyright (C) 2016 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu GLIBC 2.23-0ubuntu11) 2.23