System/Kernel
tomcat@ubuntu:~$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 2.6.32, BuildID[sha1]=6f072e70e3e49380ff4d43cdde8178c24cf73daa, stripped
Linux ubuntu 4.4.0-159-generic #187-Ubuntu SMP Thu Aug 1 16:28:06 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=16.04
DISTRIB_CODENAME=xenial
DISTRIB_DESCRIPTION="Ubuntu 16.04.6 LTS"
NAME="Ubuntu"
VERSION="16.04.6 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.6 LTS"
VERSION_ID="16.04"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenialUbuntu 16.04.6 LTS (Xenial Xerus)
4.4.0-159-generic
Networks
tomcat@ubuntu:~$ ip route
default via 10.10.0.1 dev eth0
10.10.0.0/16 dev eth0 proto kernel scope link src 10.10.206.196
tomcat@ubuntu:~$ netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
udp 0 0 0.0.0.0:68 0.0.0.0:* - Users & Groups
tomcat@ubuntu:~$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-timesync:x:100:102:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:101:103:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:102:104:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:103:105:systemd Bus Proxy,,,:/run/systemd:/bin/false
syslog:x:104:108::/home/syslog:/bin/false
_apt:x:105:65534::/nonexistent:/bin/false
messagebus:x:106:110::/var/run/dbus:/bin/false
uuidd:x:107:111::/run/uuidd:/bin/false
jack:x:1000:1000:tom,,,:/home/jack:/bin/bash
sshd:x:108:65534::/var/run/sshd:/usr/sbin/nologin
tomcat:x:1001:1001::/opt/tomcat:/bin/bash
total 12K
4.0K drwxr-xr-x 4 jack jack 4.0K Aug 23 2019 jack
4.0K drwxr-xr-x 22 root root 4.0K Aug 14 2019 ..
4.0K drwxr-xr-x 3 root root 4.0K Aug 14 2019 .jack
tomcat@ubuntu:~$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-timesync) gid=102(systemd-timesync) groups=102(systemd-timesync)
uid=101(systemd-network) gid=103(systemd-network) groups=103(systemd-network)
uid=102(systemd-resolve) gid=104(systemd-resolve) groups=104(systemd-resolve)
uid=103(systemd-bus-proxy) gid=105(systemd-bus-proxy) groups=105(systemd-bus-proxy)
uid=104(syslog) gid=108(syslog) groups=108(syslog),4(adm)
uid=105(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=106(messagebus) gid=110(messagebus) groups=110(messagebus)
uid=107(uuidd) gid=111(uuidd) groups=111(uuidd)
uid=1000(jack) gid=1000(jack) groups=1000(jack),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),114(lpadmin),115(sambashare)
uid=108(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=1001(tomcat) gid=1001(tomcat) groups=1001(tomcat)uid=1000(jack) gid=1000(jack) groups=1000(jack),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),114(lpadmin),115(sambashare)
SUIDs
tomcat@ubuntu:~$ find / -perm -04000 -ls -type f 2>/dev/null
277622 40 -rwsr-xr-x 1 root root 40128 Mar 26 2019 /bin/su
260172 44 -rwsr-xr-x 1 root root 44680 May 7 2014 /bin/ping6
260171 44 -rwsr-xr-x 1 root root 44168 May 7 2014 /bin/ping
261249 40 -rwsr-xr-x 1 root root 40152 May 15 2019 /bin/mount
270518 32 -rwsr-xr-x 1 root root 30800 Jul 12 2016 /bin/fusermount
261247 28 -rwsr-xr-x 1 root root 27608 May 15 2019 /bin/umount
16872 420 -rwsr-xr-x 1 root root 428240 Mar 4 2019 /usr/lib/openssh/ssh-keysign
488 12 -rwsr-xr-x 1 root root 10232 Mar 27 2017 /usr/lib/eject/dmcrypt-get-device
210 44 -rwsr-xr-- 1 root messagebus 42992 Jun 10 2019 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
429 40 -rwsr-xr-x 1 root root 39904 Mar 26 2019 /usr/bin/newgrp
2117 136 -rwsr-xr-x 1 root root 136808 Jun 10 2019 /usr/bin/sudo
2180 72 -rwsr-xr-x 1 root root 71824 Mar 26 2019 /usr/bin/chfn
2183 76 -rwsr-xr-x 1 root root 75304 Mar 26 2019 /usr/bin/gpasswd
2196 40 -rwsr-xr-x 1 root root 40432 Mar 26 2019 /usr/bin/chsh
16855 12 -rwsr-xr-x 1 root root 10624 May 8 2018 /usr/bin/vmware-user-suid-wrapper
2181 56 -rwsr-xr-x 1 root root 54256 Mar 26 2019 /usr/bin/passwdSGIDs
tomcat@ubuntu:~$ find / -perm -02000 -ls -type f 2>/dev/null
270489 4 drwxr-sr-x 2 man root 4096 Aug 14 2019 /var/cache/man
261342 4 drwxrwsr-x 2 root staff 4096 Apr 12 2016 /var/local
261358 4 drwxrwsr-x 2 root mail 4096 Feb 26 2019 /var/mail
229 0 drwxr-sr-x 3 root systemd-journal 60 Jul 12 03:04 /run/log/journal
230 0 drwxr-s--- 2 root systemd-journal 80 Jul 12 03:12 /run/log/journal/333a6fb5167493b61a821a215d543b34
125 36 -rwxr-sr-x 1 root shadow 35600 Apr 9 2018 /sbin/unix_chkpwd
89 36 -rwxr-sr-x 1 root shadow 35632 Apr 9 2018 /sbin/pam_extrausers_chkpwd
15432 16 -rwxr-sr-x 1 root tty 14752 Mar 1 2016 /usr/bin/bsd-write
4165 28 -rwxr-sr-x 1 root tty 27368 May 15 2019 /usr/bin/wall
16868 352 -rwxr-sr-x 1 root ssh 358624 Mar 4 2019 /usr/bin/ssh-agent
15682 40 -rwxr-sr-x 1 root mlocate 39520 Nov 17 2014 /usr/bin/mlocate
2179 64 -rwxr-sr-x 1 root shadow 62336 Mar 26 2019 /usr/bin/chage
173 36 -rwxr-sr-x 1 root crontab 36080 Apr 5 2016 /usr/bin/crontab
2195 24 -rwxr-sr-x 1 root shadow 22768 Mar 26 2019 /usr/bin/expiry
14697 4 drwxrwsr-x 6 root staff 4096 Aug 14 2019 /usr/local/share/xml
14701 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/share/xml/schema
14698 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/share/xml/misc
14699 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/share/xml/declaration
14700 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/share/xml/entities
15960 4 drwxrwsr-x 3 root staff 4096 Aug 14 2019 /usr/local/share/emacs
15961 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/share/emacs/site-lisp
149372 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/share/fonts
14661 4 drwxrwsr-x 7 root staff 4096 Aug 14 2019 /usr/local/share/sgml
14666 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/share/sgml/dtd
14663 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/share/sgml/stylesheet
14665 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/share/sgml/misc
14662 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/share/sgml/declaration
14664 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/share/sgml/entities
276910 4 drwxrwsr-x 4 root staff 4096 Aug 14 2019 /usr/local/lib/python2.7
411048 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/lib/python2.7/site-packages
411047 4 drwxrwsr-x 2 root staff 4096 Aug 14 2019 /usr/local/lib/python2.7/dist-packages
3139 4 drwxrwsr-x 3 root staff 4096 Aug 14 2019 /usr/local/lib/python3.5
3140 4 drwxrwsr-x 2 root staff 4096 Feb 26 2019 /usr/local/lib/python3.5/dist-packagesProcesses
tomcat@ubuntu:~$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.3 37500 1632 ? Ss 03:04 0:02 /sbin/init noprompt
root 183 0.0 0.1 27704 944 ? Ss 03:04 0:00 /lib/systemd/systemd-journald
root 268 0.0 0.1 44292 724 ? Ss 03:04 0:00 /lib/systemd/systemd-udevd
systemd+ 325 0.0 0.1 100324 560 ? Ssl 03:04 0:00 /lib/systemd/systemd-timesyncd
root 514 0.0 0.0 16124 376 ? Ss 03:04 0:00 /sbin/dhclient -1 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
root 566 0.0 0.1 20096 628 ? Ss 03:04 0:00 /lib/systemd/systemd-logind
root 567 0.0 0.1 275856 796 ? Ssl 03:04 0:00 /usr/lib/accountsservice/accounts-daemon
root 569 0.0 0.1 29008 876 ? Ss 03:04 0:00 /usr/sbin/cron -f
message+ 579 0.0 0.1 42888 596 ? Ss 03:04 0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
syslog 589 0.0 0.1 256392 656 ? Ssl 03:04 0:00 /usr/sbin/rsyslogd -n
root 634 0.0 0.0 15752 468 ttyS0 Ss+ 03:04 0:00 /sbin/agetty --keep-baud 115200 38400 9600 ttyS0 vt220
root 637 0.0 0.0 15936 268 tty1 Ss+ 03:04 0:00 /sbin/agetty --noclear tty1 linux
tomcat 653 3.3 34.6 3058788 172568 ? Sl 03:04 1:58 /usr/lib/jvm/java-1.8.0-openjdk-amd64/jre/bin/java -Djava.util.logging.config.file=/opt/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom -Djdk.tls.ephemeralDHKeySize=2048 -Xms512M -Xmx1024M -server -XX:+UseParallelGC -classpath /opt/tomcat/bin/bootstrap.jar:/opt/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/tomcat -Dcatalina.home=/opt/tomcat -Djava.io.tmpdir=/opt/tomcat/temp org.apache.catalina.startup.Bootstrap start
root 659 0.0 0.0 65512 0 ? Ss 03:04 0:00 /usr/sbin/sshd -D
tomcat 992 0.0 0.0 4504 68 ? S 03:39 0:00 /bin/sh
tomcat 1076 0.0 0.8 38776 3988 ? D 03:54 0:00 python3 -c import pty; pty.spawn("/bin/bash")
tomcat 1077 0.0 0.4 21200 2240 pts/0 Ss 03:54 0:00 /bin/bash
tomcat 1221 0.0 0.6 37364 3152 pts/0 R+ 04:03 0:00 ps -auxwww/usr/sbin/cron -f
/usr/lib/jvm/java-1.8.0-openjdk-amd64/jre/bin/java -Djava.util.logging.config.file=/opt/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom -Djdk.tls.ephemeralDHKeySize=2048 -Xms512M -Xmx1024M -server -XX:+UseParallelGC -classpath /opt/tomcat/bin/bootstrap.jar:/opt/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/tomcat -Dcatalina.home=/opt/tomcat -Djava.io.tmpdir=/opt/tomcat/temp org.apache.catalina.startup.Bootstrap start
Cron & Systemd
tomcat@ubuntu:~$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for tomcat
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
* * * * * root cd /home/jack && bash id.sh
#
NEXT LEFT LAST PASSED
Fri 2024-07-12 06:55:34 PDT 2h 50min left Fri 2024-07-12 03:04:49 PDT 1h 0min
Fri 2024-07-12 08:20:29 PDT 4h 15min left Fri 2024-07-12 03:04:49 PDT 1h 0min
Sat 2024-07-13 03:20:14 PDT 23h left Fri 2024-07-12 03:20:14 PDT 44min ag
3 timers listed.
Pass --all to see loaded but inactive timers, too.* * * * * root cd /home/jack && bash id.sh
Sudo Version
tomcat@ubuntu:~$ sudo --version
Sudo version 1.8.16
Sudoers policy plugin version 1.8.16
Sudoers file grammar version 45
Sudoers I/O plugin version 1.8.16Sudo version 1.8.16
Glibc Version
tomcat@ubuntu:~$ ldd --version
ldd (Ubuntu GLIBC 2.23-0ubuntu11) 2.23
Copyright (C) 2016 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu GLIBC 2.23-0ubuntu11) 2.23