System/Kernel


www-data@rootme:/var/www$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=12f73d7a8e226c663034529c8dd20efec22dde54, stripped
Linux rootme 4.15.0-112-generic #113-Ubuntu SMP Thu Jul 9 23:41:39 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=18.04
DISTRIB_CODENAME=bionic
DISTRIB_DESCRIPTION="Ubuntu 18.04.4 LTS"
NAME="Ubuntu"
VERSION="18.04.4 LTS (Bionic Beaver)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 18.04.4 LTS"
VERSION_ID="18.04"
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=bionic
UBUNTU_CODENAME=bionic

x86-64 Ubuntu 18.04.4 LTS (Bionic Beaver) 4.15.0-112-generic

Networks


www-data@rootme:/var/www$ ip route ; arp -a
default via 10.10.0.1 dev eth0 proto dhcp src 10.10.183.226 metric 100 
10.10.0.0/16 dev eth0 proto kernel scope link src 10.10.183.226 
10.10.0.1 dev eth0 proto dhcp scope link src 10.10.183.226 metric 100 
ip-10-10-0-1.eu-west-1.compute.internal (10.10.0.1) at 02:c8:85:b5:5a:aa [ether] on eth0
www-data@rootme:/var/www$ netstat -antup4
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -                   
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      -                   
tcp        0     17 10.10.183.226:36310     10.9.2.95:9999          ESTABLISHED 1680/sh             
udp        0      0 127.0.0.53:53           0.0.0.0:*                           -                   
udp        0      0 10.10.183.226:68        0.0.0.0:*                           -                   

Users & Groups


www-data@rootme:/var/www$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:100:102:systemd Network Management,,,:/run/systemd/netif:/usr/sbin/nologin
systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd/resolve:/usr/sbin/nologin
syslog:x:102:106::/home/syslog:/usr/sbin/nologin
messagebus:x:103:107::/nonexistent:/usr/sbin/nologin
_apt:x:104:65534::/nonexistent:/usr/sbin/nologin
lxd:x:105:65534::/var/lib/lxd/:/bin/false
uuidd:x:106:110::/run/uuidd:/usr/sbin/nologin
dnsmasq:x:107:65534:dnsmasq,,,:/var/lib/misc:/usr/sbin/nologin
landscape:x:108:112::/var/lib/landscape:/usr/sbin/nologin
pollinate:x:109:1::/var/cache/pollinate:/bin/false
rootme:x:1000:1000:RootMe:/home/rootme:/bin/bash
sshd:x:110:65534::/run/sshd:/usr/sbin/nologin
test:x:1001:1001:,,,:/home/test:/bin/bash
total 16K
4.0K drwxr-xr-x  3 test   test   4.0K Aug  4  2020 test
4.0K drwxr-xr-x  4 root   root   4.0K Aug  4  2020 .
4.0K drwxr-xr-x  4 rootme rootme 4.0K Aug  4  2020 rootme
4.0K drwxr-xr-x 24 root   root   4.0K Aug  4  2020 ..

test rootme

www-data@rootme:/var/www$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=101(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=102(syslog) gid=106(syslog) groups=106(syslog),4(adm)
uid=103(messagebus) gid=107(messagebus) groups=107(messagebus)
uid=104(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=105(lxd) gid=65534(nogroup) groups=65534(nogroup)
uid=106(uuidd) gid=110(uuidd) groups=110(uuidd)
uid=107(dnsmasq) gid=65534(nogroup) groups=65534(nogroup)
uid=108(landscape) gid=112(landscape) groups=112(landscape)
uid=109(pollinate) gid=1(daemon) groups=1(daemon)
uid=1000(rootme) gid=1000(rootme) groups=1000(rootme),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),108(lxd)
uid=110(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=1001(test) gid=1001(test) groups=1001(test)

uid=1001(test) gid=1001(test) groups=1001(test) uid=1000(rootme) gid=1000(rootme) groups=1000(rootme),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),108(lxd)

SUIDs


www-data@rootme:/var/www$ find / -perm -04000 -ls -type f 2>/dev/null
   787696     44 -rwsr-xr--   1 root     messagebus    42992 Jun 11  2020 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
   787234    112 -rwsr-xr-x   1 root     root         113528 Jul 10  2020 /usr/lib/snapd/snap-confine
   918336    100 -rwsr-xr-x   1 root     root         100760 Nov 23  2018 /usr/lib/x86_64-linux-gnu/lxc/lxc-user-nic
   787659     12 -rwsr-xr-x   1 root     root          10232 Mar 28  2017 /usr/lib/eject/dmcrypt-get-device
   787841    428 -rwsr-xr-x   1 root     root         436552 Mar  4  2019 /usr/lib/openssh/ssh-keysign
   787845     16 -rwsr-xr-x   1 root     root          14328 Mar 27  2019 /usr/lib/policykit-1/polkit-agent-helper-1
   787467     20 -rwsr-xr-x   1 root     root          18448 Jun 28  2019 /usr/bin/traceroute6.iputils
   787290     40 -rwsr-xr-x   1 root     root          37136 Mar 22  2019 /usr/bin/newuidmap
   787288     40 -rwsr-xr-x   1 root     root          37136 Mar 22  2019 /usr/bin/newgidmap
   787086     44 -rwsr-xr-x   1 root     root          44528 Mar 22  2019 /usr/bin/chsh
   266770   3580 -rwsr-sr-x   1 root     root        3665768 Aug  4  2020 /usr/bin/python
   787033     52 -rwsr-sr-x   1 daemon   daemon        51464 Feb 20  2018 /usr/bin/at
   787084     76 -rwsr-xr-x   1 root     root          76496 Mar 22  2019 /usr/bin/chfn
   787179     76 -rwsr-xr-x   1 root     root          75824 Mar 22  2019 /usr/bin/gpasswd
   787431    148 -rwsr-xr-x   1 root     root         149080 Jan 31  2020 /usr/bin/sudo
   787289     40 -rwsr-xr-x   1 root     root          40344 Mar 22  2019 /usr/bin/newgrp
   787306     60 -rwsr-xr-x   1 root     root          59640 Mar 22  2019 /usr/bin/passwd
   787326     24 -rwsr-xr-x   1 root     root          22520 Mar 27  2019 /usr/bin/pkexec
          66     40 -rwsr-xr-x   1 root     root          40152 Oct 10  2019 /snap/core/8268/bin/mount
       80     44 -rwsr-xr-x   1 root     root          44168 May  7  2014 /snap/core/8268/bin/ping
       81     44 -rwsr-xr-x   1 root     root          44680 May  7  2014 /snap/core/8268/bin/ping6
       98     40 -rwsr-xr-x   1 root     root          40128 Mar 25  2019 /snap/core/8268/bin/su
      116     27 -rwsr-xr-x   1 root     root          27608 Oct 10  2019 /snap/core/8268/bin/umount
     2665     71 -rwsr-xr-x   1 root     root          71824 Mar 25  2019 /snap/core/8268/usr/bin/chfn
     2667     40 -rwsr-xr-x   1 root     root          40432 Mar 25  2019 /snap/core/8268/usr/bin/chsh
     2743     74 -rwsr-xr-x   1 root     root          75304 Mar 25  2019 /snap/core/8268/usr/bin/gpasswd
     2835     39 -rwsr-xr-x   1 root     root          39904 Mar 25  2019 /snap/core/8268/usr/bin/newgrp
     2848     53 -rwsr-xr-x   1 root     root          54256 Mar 25  2019 /snap/core/8268/usr/bin/passwd
     2958    134 -rwsr-xr-x   1 root     root         136808 Oct 11  2019 /snap/core/8268/usr/bin/sudo
     3057     42 -rwsr-xr--   1 root     systemd-resolve    42992 Jun 10  2019 /snap/core/8268/usr/lib/dbus-1.0/dbus-daemon-launch-helper
     3427    419 -rwsr-xr-x   1 root     root              428240 Mar  4  2019 /snap/core/8268/usr/lib/openssh/ssh-keysign
     6462    105 -rwsr-sr-x   1 root     root              106696 Dec  6  2019 /snap/core/8268/usr/lib/snapd/snap-confine
     7636    386 -rwsr-xr--   1 root     dip               394984 Jun 12  2018 /snap/core/8268/usr/sbin/pppd
       66     40 -rwsr-xr-x   1 root     root               40152 Jan 27  2020 /snap/core/9665/bin/mount
       80     44 -rwsr-xr-x   1 root     root               44168 May  7  2014 /snap/core/9665/bin/ping
       81     44 -rwsr-xr-x   1 root     root               44680 May  7  2014 /snap/core/9665/bin/ping6
       98     40 -rwsr-xr-x   1 root     root               40128 Mar 25  2019 /snap/core/9665/bin/su
      116     27 -rwsr-xr-x   1 root     root               27608 Jan 27  2020 /snap/core/9665/bin/umount
     2605     71 -rwsr-xr-x   1 root     root               71824 Mar 25  2019 /snap/core/9665/usr/bin/chfn
     2607     40 -rwsr-xr-x   1 root     root               40432 Mar 25  2019 /snap/core/9665/usr/bin/chsh
     2683     74 -rwsr-xr-x   1 root     root               75304 Mar 25  2019 /snap/core/9665/usr/bin/gpasswd
     2775     39 -rwsr-xr-x   1 root     root               39904 Mar 25  2019 /snap/core/9665/usr/bin/newgrp
     2788     53 -rwsr-xr-x   1 root     root               54256 Mar 25  2019 /snap/core/9665/usr/bin/passwd
     2898    134 -rwsr-xr-x   1 root     root              136808 Jan 31  2020 /snap/core/9665/usr/bin/sudo
     2997     42 -rwsr-xr--   1 root     systemd-resolve    42992 Jun 11  2020 /snap/core/9665/usr/lib/dbus-1.0/dbus-daemon-launch-helper
     3367    419 -rwsr-xr-x   1 root     root              428240 May 26  2020 /snap/core/9665/usr/lib/openssh/ssh-keysign
     6405    109 -rwsr-xr-x   1 root     root              110656 Jul 10  2020 /snap/core/9665/usr/lib/snapd/snap-confine
     7582    386 -rwsr-xr--   1 root     dip               394984 Feb 11  2020 /snap/core/9665/usr/sbin/pppd
   786527     44 -rwsr-xr-x   1 root     root               43088 Jan  8  2020 /bin/mount
   786567     44 -rwsr-xr-x   1 root     root               44664 Mar 22  2019 /bin/su
   786500     32 -rwsr-xr-x   1 root     root               30800 Aug 11  2016 /bin/fusermount
   786551     64 -rwsr-xr-x   1 root     root               64424 Jun 28  2019 /bin/ping
   786585     28 -rwsr-xr-x   1 root     root               26696 Jan  8  2020 /bin/umount

/usr/bin/python

SGIDs


www-data@rootme:/var/www$ find / -perm -02000 -ls -type f 2>/dev/null
   917722     36 -rwxr-sr-x   1 root     shadow      34816 Feb 27  2019 /sbin/unix_chkpwd
   917690     36 -rwxr-sr-x   1 root     shadow      34816 Feb 27  2019 /sbin/pam_extrausers_chkpwd
   793514      4 drwxrwsr-x   3 root     staff        4096 Feb  3  2020 /usr/local/lib/python3.6
   793515      4 drwxrwsr-x   2 root     staff        4096 Feb  3  2020 /usr/local/lib/python3.6/dist-packages
   800624      4 drwxrwsr-x   4 root     staff        4096 Aug  4  2020 /usr/local/lib/python2.7
   800625      4 drwxrwsr-x   2 root     staff        4096 Aug  4  2020 /usr/local/lib/python2.7/dist-packages
   925994      4 drwxrwsr-x   2 root     staff        4096 Aug  4  2020 /usr/local/lib/python2.7/site-packages
   919517     12 -rwxr-sr-x   1 root     utmp        10232 Mar 11  2016 /usr/lib/x86_64-linux-gnu/utempter/utempter
   787044     16 -rwxr-sr-x   1 root     tty         14328 Jan 17  2018 /usr/bin/bsd-write
   787107     40 -rwxr-sr-x   1 root     crontab     39352 Nov 16  2017 /usr/bin/crontab
   787520     32 -rwxr-sr-x   1 root     tty         30800 Jan  8  2020 /usr/bin/wall
   266770   3580 -rwsr-sr-x   1 root     root      3665768 Aug  4  2020 /usr/bin/python
   787280     44 -rwxr-sr-x   1 root     mlocate     43088 Mar  1  2018 /usr/bin/mlocate
   787079     72 -rwxr-sr-x   1 root     shadow      71816 Mar 22  2019 /usr/bin/chage
   787033     52 -rwsr-sr-x   1 daemon   daemon      51464 Feb 20  2018 /usr/bin/at
   787422    356 -rwxr-sr-x   1 root     ssh        362640 Mar  4  2019 /usr/bin/ssh-agent
   787158     24 -rwxr-sr-x   1 root     shadow      22808 Mar 22  2019 /usr/bin/expiry
   926051      4 drwxr-sr-x   3 root     systemd-journal     4096 Aug  4  2020 /var/log/journal
   923239      4 drwxr-sr-x   2 root     systemd-journal     4096 Jul 13 17:39 /var/log/journal/baf7439272ce43a98cc8afde5b086a25
   925960      4 drwxrwsr-x   2 root     staff               4096 Apr 24  2018 /var/local
  1054408      4 drwxrwsr-x   2 root     mail                4096 Feb  3  2020 /var/mail
      389      0 drwxr-s---   2 root     dip                   54 Dec  6  2019 /snap/core/8268/etc/chatscripts
      792      0 drwxr-s---   2 root     dip                   31 Dec  6  2019 /snap/core/8268/etc/ppp/peers
     2583     35 -rwxr-sr-x   1 root     shadow             35632 Apr  9  2018 /snap/core/8268/sbin/pam_extrausers_chkpwd
     2623     35 -rwxr-sr-x   1 root     shadow             35600 Apr  9  2018 /snap/core/8268/sbin/unix_chkpwd
     2660     61 -rwxr-sr-x   1 root     shadow             62336 Mar 25  2019 /snap/core/8268/usr/bin/chage
     2680     36 -rwxr-sr-x   1 root     systemd-network    36080 Apr  5  2016 /snap/core/8268/usr/bin/crontab
     2709     15 -rwxr-sr-x   1 root     mail               14856 Dec  7  2013 /snap/core/8268/usr/bin/dotlockfile
     2721     23 -rwxr-sr-x   1 root     shadow             22768 Mar 25  2019 /snap/core/8268/usr/bin/expiry
     2818     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/8268/usr/bin/mail-lock
     2818     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/8268/usr/bin/mail-touchlock
     2818     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/8268/usr/bin/mail-unlock
     2951    351 -rwxr-sr-x   1 root     crontab           358624 Mar  4  2019 /snap/core/8268/usr/bin/ssh-agent
     3016     27 -rwxr-sr-x   1 root     tty                27368 Oct 10  2019 /snap/core/8268/usr/bin/wall
     6462    105 -rwsr-sr-x   1 root     root              106696 Dec  6  2019 /snap/core/8268/usr/lib/snapd/snap-confine
     7575      0 drwxrwsr-x   3 root     staff                 36 Dec  6  2019 /snap/core/8268/usr/local/lib/python3.5
     7576      0 drwxrwsr-x   2 root     staff                  3 Dec  6  2019 /snap/core/8268/usr/local/lib/python3.5/dist-packages
    12820      0 drwxrwsr-x   2 root     staff                  3 Apr 12  2016 /snap/core/8268/var/local
    12831      0 drwxrwsr-x   2 root     mail                   3 Dec  6  2019 /snap/core/8268/var/mail
      389      0 drwxr-s---   2 root     dip                   54 Jul 10  2020 /snap/core/9665/etc/chatscripts
      792      0 drwxr-s---   2 root     dip                   31 Jul 10  2020 /snap/core/9665/etc/ppp/peers
     2525     35 -rwxr-sr-x   1 root     shadow             35632 Apr  9  2018 /snap/core/9665/sbin/pam_extrausers_chkpwd
     2565     35 -rwxr-sr-x   1 root     shadow             35600 Apr  9  2018 /snap/core/9665/sbin/unix_chkpwd
     2600     61 -rwxr-sr-x   1 root     shadow             62336 Mar 25  2019 /snap/core/9665/usr/bin/chage
     2620     36 -rwxr-sr-x   1 root     systemd-network    36080 Apr  5  2016 /snap/core/9665/usr/bin/crontab
     2649     15 -rwxr-sr-x   1 root     mail               14856 Dec  7  2013 /snap/core/9665/usr/bin/dotlockfile
     2661     23 -rwxr-sr-x   1 root     shadow             22768 Mar 25  2019 /snap/core/9665/usr/bin/expiry
     2758     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/9665/usr/bin/mail-lock
     2758     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/9665/usr/bin/mail-touchlock
     2758     15 -rwxr-sr-x   3 root     mail               14592 Dec  3  2012 /snap/core/9665/usr/bin/mail-unlock
     2891    351 -rwxr-sr-x   1 root     crontab           358624 May 26  2020 /snap/core/9665/usr/bin/ssh-agent
     2956     27 -rwxr-sr-x   1 root     tty                27368 Jan 27  2020 /snap/core/9665/usr/bin/wall
     7521      0 drwxrwsr-x   3 root     staff                 36 Jul 10  2020 /snap/core/9665/usr/local/lib/python3.5
     7522      0 drwxrwsr-x   2 root     staff                  3 Jul 10  2020 /snap/core/9665/usr/local/lib/python3.5/dist-packages
    12840      0 drwxrwsr-x   2 root     staff                  3 Apr 12  2016 /snap/core/9665/var/local
    12851      0 drwxrwsr-x   2 root     mail                   3 Jul 10  2020 /snap/core/9665/var/mail

Processes


www-data@rootme:/var/www$ ps -auxwww
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root         1  0.8  1.6 159784  7908 ?        Ss   17:38   0:32 /sbin/init auto automatic-ubiquity noprompt
root       394  0.0  1.6  94820  8084 ?        S<s  17:39   0:02 /lib/systemd/systemd-journald
root       416  0.0  0.2  97708  1388 ?        Ss   17:39   0:00 /sbin/lvmetad -f
root       421  0.2  0.9  46220  4488 ?        Ss   17:39   0:08 /lib/systemd/systemd-udevd
systemd+   478  0.0  0.4 141952  2360 ?        Ssl  17:39   0:00 /lib/systemd/systemd-timesyncd
systemd+   652  0.0  0.8  80068  4080 ?        Ss   17:40   0:00 /lib/systemd/systemd-networkd
systemd+   667  0.0  0.8  70656  4104 ?        Ss   17:40   0:00 /lib/systemd/systemd-resolved
root       749  0.0  0.6  30028  2948 ?        Ss   17:40   0:00 /usr/sbin/cron -f
root       778  0.0  1.2 286256  6020 ?        Ssl  17:40   0:00 /usr/lib/accountsservice/accounts-daemon
daemon     786  0.0  0.4  28332  2104 ?        Ss   17:40   0:00 /usr/sbin/atd -f
message+   788  0.0  0.7  50104  3640 ?        Ss   17:40   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root       808  0.1  0.4 636916  2276 ?        Ssl  17:40   0:05 /usr/bin/lxcfs /var/lib/lxcfs/
root       809  0.4  5.5 636668 27464 ?        Ssl  17:40   0:17 /usr/lib/snapd/snapd
root       810  0.0  2.6 169144 13240 ?        Ssl  17:40   0:01 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
syslog     811  0.0  0.7 263040  3832 ?        Ssl  17:40   0:00 /usr/sbin/rsyslogd -n
root       814  0.0  0.9  62144  4816 ?        Ss   17:40   0:00 /lib/systemd/systemd-logind
root       817  0.0  1.1  72300  5632 ?        Ss   17:40   0:00 /usr/sbin/sshd -D
root       835  0.0  1.2 291496  6080 ?        Ssl  17:40   0:00 /usr/lib/policykit-1/polkitd --no-debug
root       837  0.0  0.4  14664  2048 ttyS0    Ss+  17:40   0:00 /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
root       845  0.0  0.3  14888  1692 tty1     Ss+  17:40   0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root       859  0.0  2.9 185948 14640 ?        Ssl  17:40   0:01 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
root       891  0.0  2.3 327124 11536 ?        Ss   17:40   0:03 /usr/sbin/apache2 -k start
www-data  1320  0.1  2.5 331980 12712 ?        S    17:46   0:03 /usr/sbin/apache2 -k start
www-data  1575  0.0  0.1   4628   904 ?        S    18:26   0:00 sh -c python3 -c 'import pty; pty.spawn("/bin/bash")'
www-data  1576  0.0  1.2  37296  6348 ?        S    18:26   0:00 python3 -c import pty; pty.spawn("/bin/bash")
www-data  1577  0.0  0.6  18508  3244 pts/0    Ss+  18:26   0:00 /bin/bash

/usr/sbin/cron -f /usr/bin/lxcfs /var/lib/lxcfs/ /usr/lib/policykit-1/polkitd --no-debug

Cron & Systemd


www-data@rootme:/var/www$ crontab -l ; cat /etc/crontab ; systemctl list-timers 
no crontab for www-data
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 
# m h dom mon dow user	command
17 *	* * *	root    cd / && run-parts --report /etc/cron.hourly
25 6	* * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6	* * 7	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6	1 * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT                         LEFT          LAST                         PASSED  
Sat 2024-07-13 19:09:00 UTC  25min left    Sat 2024-07-13 18:39:30 UTC  3min 32s
Sun 2024-07-14 05:52:11 UTC  11h left      Sat 2024-07-13 17:40:37 UTC  1h 2min 
Sun 2024-07-14 06:42:37 UTC  11h left      Sat 2024-07-13 17:40:37 UTC  1h 2min 
Sun 2024-07-14 10:47:57 UTC  16h left      Sat 2024-07-13 17:40:37 UTC  1h 2min 
Sun 2024-07-14 17:53:53 UTC  23h left      Sat 2024-07-13 17:53:53 UTC  49min ag
Mon 2024-07-15 00:00:00 UTC  1 day 5h left Sat 2024-07-13 17:40:37 UTC  1h 2min 
 
6 timers listed.
Pass --all to see loaded but inactive timers, too.

Sudo Version


www-data@rootme:/var/www$ sudo --version
Sudo version 1.8.21p2
Sudoers policy plugin version 1.8.21p2
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.21p2

Sudo version 1.8.21p2

Glibc Version


www-data@rootme:/var/www$ ldd --version
ldd (Ubuntu GLIBC 2.27-3ubuntu1.2) 2.27
Copyright (C) 2018 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.

ldd (Ubuntu GLIBC 2.27-3ubuntu1.2) 2.27