System/Kernel


skyfuck@ubuntu:~$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 2.6.32, BuildID[sha1]=6f072e70e3e49380ff4d43cdde8178c24cf73daa, stripped
Linux ubuntu 4.4.0-174-generic #204-Ubuntu SMP Wed Jan 29 06:41:01 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=16.04
DISTRIB_CODENAME=xenial
DISTRIB_DESCRIPTION="Ubuntu 16.04.6 LTS"
NAME="Ubuntu"
VERSION="16.04.6 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.6 LTS"
VERSION_ID="16.04"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenial

ELF 64-bit LSB executable Ubuntu 16.04.6 LTS (Xenial Xerus) 4.4.0-174-generic

Networks


skyfuck@ubuntu:~$ ip route ; arp -a
default via 10.10.0.1 dev eth0
10.10.0.0/16 dev eth0  proto kernel  scope link  src 10.10.198.73
? (10.10.0.1) at 02:c8:85:b5:5a:aa [ether] on eth0
skyfuck@ubuntu:~$ netstat -antup4
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:53              0.0.0.0:*               LISTEN      -
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -
tcp        0    604 10.10.198.73:22         10.9.2.95:59996         ESTABLISHED -
tcp        0      0 10.10.198.73:22         10.9.2.95:38838         ESTABLISHED -
udp        0      0 10.10.198.73:38893      8.8.8.8:53              ESTABLISHED -
udp        0      0 0.0.0.0:53              0.0.0.0:*                           -
udp        0      0 0.0.0.0:68              0.0.0.0:*                           -

Users & Groups


skyfuck@ubuntu:~$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-timesync:x:100:102:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:101:103:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:102:104:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:103:105:systemd Bus Proxy,,,:/run/systemd:/bin/false
syslog:x:104:108::/home/syslog:/bin/false
_apt:x:105:65534::/nonexistent:/bin/false
messagebus:x:106:110::/var/run/dbus:/bin/false
uuidd:x:107:111::/run/uuidd:/bin/false
merlin:x:1000:1000:zrimga,,,:/home/merlin:/bin/bash
sshd:x:108:65534::/var/run/sshd:/usr/sbin/nologin
dnsmasq:x:109:65534:dnsmasq,,,:/var/lib/misc:/bin/false
tomcat:x:1001:1001::/opt/tomcat:/bin/false
skyfuck:x:1002:1002:tryhackme TRIAL PoC,3871289312,2931923021,2391293912,2031201201:/home/skyfuck:/bin/bash
total 16
drwxr-xr-x  4 root    root    4096 Mar 10  2020 ./
drwxr-xr-x 22 root    root    4096 Mar 10  2020 ../
drwxr-xr-x  4 merlin  merlin  4096 Mar 10  2020 merlin/
drwxr-xr-x  3 skyfuck skyfuck 4096 Jul 13 08:23 skyfuck/

merlin

skyfuck@ubuntu:~$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-timesync) gid=102(systemd-timesync) groups=102(systemd-timesync)
uid=101(systemd-network) gid=103(systemd-network) groups=103(systemd-network)
uid=102(systemd-resolve) gid=104(systemd-resolve) groups=104(systemd-resolve)
uid=103(systemd-bus-proxy) gid=105(systemd-bus-proxy) groups=105(systemd-bus-proxy)
uid=104(syslog) gid=108(syslog) groups=108(syslog),4(adm)
uid=105(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=106(messagebus) gid=110(messagebus) groups=110(messagebus)
uid=107(uuidd) gid=111(uuidd) groups=111(uuidd)
uid=1000(merlin) gid=1000(merlin) groups=1000(merlin),4(adm),24(cdrom),30(dip),46(plugdev),114(lpadmin),115(sambashare)
uid=108(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=109(dnsmasq) gid=65534(nogroup) groups=65534(nogroup)
uid=1001(tomcat) gid=1001(tomcat) groups=1001(tomcat)
uid=1002(skyfuck) gid=1002(skyfuck) groups=1002(skyfuck)

uid=1000(merlin) gid=1000(merlin) groups=1000(merlin),4(adm),24(cdrom),30(dip),46(plugdev),114(lpadmin),115(sambashare)

SUIDs


skyfuck@ubuntu:~$ find / -perm -04000 -ls -type f 2>/dev/null
   260343     44 -rwsr-xr--   1 root     messagebus    42992 Nov 29  2019 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
   262319    420 -rwsr-xr-x   1 root     root         428240 Mar  4  2019 /usr/lib/openssh/ssh-keysign
   260702     12 -rwsr-xr-x   1 root     root          10232 Mar 27  2017 /usr/lib/eject/dmcrypt-get-device
   281830     12 -rwsr-xr-x   1 root     root          10624 May  8  2018 /usr/bin/vmware-user-suid-wrapper
   262094    136 -rwsr-xr-x   1 root     root         136808 Jan 31  2020 /usr/bin/sudo
   260661     56 -rwsr-xr-x   1 root     root          54256 Mar 26  2019 /usr/bin/passwd
   260790     76 -rwsr-xr-x   1 root     root          75304 Mar 26  2019 /usr/bin/gpasswd
   262694     40 -rwsr-xr-x   1 root     root          40432 Mar 26  2019 /usr/bin/chsh
   260657     72 -rwsr-xr-x   1 root     root          71824 Mar 26  2019 /usr/bin/chfn
   260258     40 -rwsr-xr-x   1 root     root          39904 Mar 26  2019 /usr/bin/newgrp
   260242     40 -rwsr-xr-x   1 root     root          40152 Jan 27  2020 /bin/mount
   260171     44 -rwsr-xr-x   1 root     root          44168 May  7  2014 /bin/ping
   260252     28 -rwsr-xr-x   1 root     root          27608 Jan 27  2020 /bin/umount
   277288     32 -rwsr-xr-x   1 root     root          30800 Jul 12  2016 /bin/fusermount
   260293     40 -rwsr-xr-x   1 root     root          40128 Mar 26  2019 /bin/su
   260172     44 -rwsr-xr-x   1 root     root          44680 May  7  2014 /bin/ping6

SGIDs


skyfuck@ubuntu:~$ find / -perm -02000 -ls -type f 2>/dev/null
   263353      4 drwxrwsr-x   3 root     staff        4096 Mar 10  2020 /usr/local/lib/python3.5
   263354      4 drwxrwsr-x   2 root     staff        4096 Feb 26  2019 /usr/local/lib/python3.5/dist-packages
   276487      4 drwxrwsr-x   7 root     staff        4096 Mar 10  2020 /usr/local/share/sgml
   276490      4 drwxrwsr-x   2 root     staff        4096 Mar 10  2020 /usr/local/share/sgml/entities
   276491      4 drwxrwsr-x   2 root     staff        4096 Mar 10  2020 /usr/local/share/sgml/misc
   276492      4 drwxrwsr-x   2 root     staff        4096 Mar 10  2020 /usr/local/share/sgml/dtd
   276489      4 drwxrwsr-x   2 root     staff        4096 Mar 10  2020 /usr/local/share/sgml/stylesheet
   276488      4 drwxrwsr-x   2 root     staff        4096 Mar 10  2020 /usr/local/share/sgml/declaration
   277811      4 drwxrwsr-x   3 root     staff        4096 Mar 10  2020 /usr/local/share/emacs
   277812      4 drwxrwsr-x   2 root     staff        4096 Mar 10  2020 /usr/local/share/emacs/site-lisp
   276523      4 drwxrwsr-x   6 root     staff        4096 Mar 10  2020 /usr/local/share/xml
   276526      4 drwxrwsr-x   2 root     staff        4096 Mar 10  2020 /usr/local/share/xml/entities
   276524      4 drwxrwsr-x   2 root     staff        4096 Mar 10  2020 /usr/local/share/xml/misc
   276525      4 drwxrwsr-x   2 root     staff        4096 Mar 10  2020 /usr/local/share/xml/declaration
   276527      4 drwxrwsr-x   2 root     staff        4096 Mar 10  2020 /usr/local/share/xml/schema
   284526      4 drwxrwsr-x   2 root     staff        4096 Mar 10  2020 /usr/local/share/fonts
   260646     64 -rwxr-sr-x   1 root     shadow      62336 Mar 26  2019 /usr/bin/chage
   277258     16 -rwxr-sr-x   1 root     tty         14752 Mar  1  2016 /usr/bin/bsd-write
   263916     28 -rwxr-sr-x   1 root     tty         27368 Jan 27  2020 /usr/bin/wall
   262693     24 -rwxr-sr-x   1 root     shadow      22768 Mar 26  2019 /usr/bin/expiry
   277529     40 -rwxr-sr-x   1 root     mlocate     39520 Nov 17  2014 /usr/bin/mlocate
   262311    352 -rwxr-sr-x   1 root     ssh        358624 Mar  4  2019 /usr/bin/ssh-agent
   260387     36 -rwxr-sr-x   1 root     crontab     36080 Apr  5  2016 /usr/bin/crontab
     1676      4 drwxrwsr-x   2 root     staff        4096 Apr 12  2016 /var/local
     1692      4 drwxrwsr-x   2 root     mail         4096 Feb 26  2019 /var/mail
    12279      4 drwxr-sr-x  31 man      root         4096 Mar 10  2020 /var/cache/man
   137147      4 drwxr-sr-x   4 man      root         4096 Mar 10  2020 /var/cache/man/sl
   137148      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/sl/cat1
   137149      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/sl/cat8
    13068      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/cat1
   137151      4 drwxr-sr-x   3 man      root         4096 Mar 10  2020 /var/cache/man/fi
   137152      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/fi/cat1
   137146      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/cat8
    13070      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/cat2
   137144      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/cat6
   137143      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/cat5
    13071      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/cat3
   137154      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/ko
   137155      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/ko/cat1
   137157      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/ko/cat8
   137156      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/ko/cat5
   137159      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/zh_TW
   137160      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/zh_TW/cat1
   137162      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/zh_TW/cat8
   137161      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/zh_TW/cat5
   137164      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/cs
   137165      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/cs/cat1
   137167      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/cs/cat8
   137166      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/cs/cat5
   137169      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/pl
   137170      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/pl/cat1
   137172      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/pl/cat8
   137171      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/pl/cat5
   137142      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/cat4
   137174      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/ru
   137175      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/ru/cat1
   137177      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/ru/cat8
   137176      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/ru/cat5
   137179      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/da
   137180      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/da/cat1
   137182      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/da/cat8
   137181      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/da/cat5
   137184      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/id
   137185      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/id/cat1
   137187      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/id/cat8
   137186      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/id/cat5
   137189      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/nl
   137190      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/nl/cat1
   137192      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/nl/cat8
   137191      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/nl/cat5
   137194      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/es
   137195      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/es/cat1
   137197      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/es/cat8
   137196      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/es/cat5
   137199      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/it
   137200      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/it/cat1
   137202      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/it/cat8
   137201      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/it/cat5
   137204      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/sv
   137205      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/sv/cat1
   137207      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/sv/cat8
   137206      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/sv/cat5
   137209      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/tr
   137210      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/tr/cat1
   137212      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/tr/cat8
   137211      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/tr/cat5
   137214      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/zh_CN
   137215      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/zh_CN/cat1
   137217      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/zh_CN/cat8
   137216      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/zh_CN/cat5
   137219      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/fr
   137220      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/fr/cat1
   137222      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/fr/cat8
   137221      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/fr/cat5
   137224      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/ja
   137225      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/ja/cat1
   137227      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/ja/cat8
   137226      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/ja/cat5
   137145      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/cat7
   137229      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/hu
   137230      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/hu/cat1
   137232      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/hu/cat8
   137231      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/hu/cat5
   137234      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/pt_BR
   137235      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/pt_BR/cat1
   137237      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/pt_BR/cat8
   137236      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/pt_BR/cat5
   137239      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/pt
   137240      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/pt/cat1
   137242      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/pt/cat8
   137241      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/pt/cat5
   137244      4 drwxr-sr-x   5 man      root         4096 Mar 10  2020 /var/cache/man/de
   137245      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/de/cat1
   137247      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/de/cat8
   137246      4 drwxr-sr-x   2 man      root         4096 Mar 10  2020 /var/cache/man/de/cat5
      237      0 drwxr-sr-x   3 root     systemd-journal       60 Jul 13 08:21 /run/log/journal
      238      0 drwxr-s---   2 root     systemd-journal       60 Jul 13 08:21 /run/log/journal/69b76998d1f1b41d455f1f665e683714
   260303     36 -rwxr-sr-x   1 root     shadow             35632 Apr  9  2018 /sbin/pam_extrausers_chkpwd
   260339     36 -rwxr-sr-x   1 root     shadow             35600 Apr  9  2018 /sbin/unix_chkpwd

Processes


skyfuck@ubuntu:~$ ps -auxwww
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root         1  0.1  0.2  37700  5764 ?        Ss   08:21   0:00 /sbin/init noprompt
root       187  0.0  0.1  29636  3132 ?        Ss   08:21   0:00 /lib/systemd/systemd-journald
root       255  0.0  0.1  44184  3724 ?        Ss   08:21   0:00 /lib/systemd/systemd-udevd
systemd+   302  0.0  0.1 100320  2432 ?        Ssl  08:21   0:00 /lib/systemd/systemd-timesyncd
root       534  0.0  0.0  16120   860 ?        Ss   08:21   0:00 /sbin/dhclient -1 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
syslog     567  0.0  0.1 256388  3184 ?        Ssl  08:21   0:00 /usr/sbin/rsyslogd -n
message+   589  0.0  0.1  42888  3784 ?        Ss   08:21   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root       603  0.0  0.1  28540  2976 ?        Ss   08:21   0:00 /lib/systemd/systemd-logind
root       608  0.0  0.1  29004  2988 ?        Ss   08:21   0:00 /usr/sbin/cron -f
root       609  0.0  0.3 275860  6240 ?        Ssl  08:21   0:00 /usr/lib/accountsservice/accounts-daemon
dnsmasq    654  0.0  0.0  52860   400 ?        S    08:21   0:00 /usr/sbin/dnsmasq -x /var/run/dnsmasq/dnsmasq.pid -u dnsmasq -r /var/run/dnsmasq/resolv.conf -7 /etc/dnsmasq.d,.dpkg-dist,.dpkg-old,.dpkg-new --local-service --trust-anchor=.,19036,8,2,49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 --trust-anchor=.,20326,8,2,e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
tomcat     689  0.5  7.0 3046828 145104 ?      Sl   08:21   0:03 /usr/lib/jvm/java-1.8.0-openjdk-amd64/jre/bin/java -Djava.util.logging.config.file=/opt/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom -Djdk.tls.ephemeralDHKeySize=2048 -Djava.protocol.handler.pkgs=org.apache.catalina.webresources -Dorg.apache.catalina.security.SecurityListener.UMASK=0027 -Xms512M -Xmx1024M -server -XX:+UseParallelGC -Dignore.endorsed.dirs= -classpath /opt/tomcat/bin/bootstrap.jar:/opt/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/tomcat -Dcatalina.home=/opt/tomcat -Djava.io.tmpdir=/opt/tomcat/temp org.apache.catalina.startup.Bootstrap start
root       699  0.0  0.1  15748  2240 ttyS0    Ss+  08:21   0:00 /sbin/agetty --keep-baud 115200 38400 9600 ttyS0 vt220
root       703  0.0  0.0  15932  1800 tty1     Ss+  08:21   0:00 /sbin/agetty --noclear tty1 linux
root       714  0.0  0.2  65508  5388 ?        Ss   08:21   0:00 /usr/sbin/sshd -D
root      1246  0.0  0.3  92832  6740 ?        Ss   08:23   0:00 sshd: skyfuck [priv]
skyfuck   1249  0.0  0.2  45296  4580 ?        Ss   08:23   0:00 /lib/systemd/systemd --user
skyfuck   1251  0.0  0.0  61152  1864 ?        S    08:23   0:00 (sd-pam)
skyfuck   1279  0.0  0.1  92832  3336 ?        S    08:23   0:00 sshd: skyfuck@pts/0
skyfuck   1282  0.0  0.2  22252  4828 pts/0    Ss+  08:23   0:00 -bash
root      1811  0.0  0.3  92828  6612 ?        Ss   08:26   0:00 sshd: skyfuck [priv]
skyfuck   1836  0.0  0.1  92828  3372 ?        S    08:26   0:00 sshd: skyfuck@pts/1
skyfuck   1837  0.0  0.2  22252  4756 pts/1    Ss   08:26   0:00 -bash
skyfuck   2750  0.0  0.1  37360  3280 pts/1    R+   08:31   0:00 ps -auxwww
  • root 608 0.0 0.1 29004 2988 ? Ss 08:21 0:00 /usr/sbin/cron -f
  • dnsmasq 654 0.0 0.0 52860 400 ? S 08:21 0:00 /usr/sbin/dnsmasq -x /var/run/dnsmasq/dnsmasq.pid -u dnsmasq -r /var/run/dnsmasq/resolv.conf -7 /etc/dnsmasq.d,.dpkg-dist,.dpkg-old,.dpkg-new --local-service --trust-anchor=.,19036,8,2,49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 --trust-anchor=.,20326,8,2,e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
  • tomcat 689 0.5 7.0 3046828 145104 ? Sl 08:21 0:03 /usr/lib/jvm/java-1.8.0-openjdk-amd64/jre/bin/java -Djava.util.logging.config.file=/opt/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom -Djdk.tls.ephemeralDHKeySize=2048 -Djava.protocol.handler.pkgs=org.apache.catalina.webresources -Dorg.apache.catalina.security.SecurityListener.UMASK=0027 -Xms512M -Xmx1024M -server -XX:+UseParallelGC -Dignore.endorsed.dirs= -classpath /opt/tomcat/bin/bootstrap.jar:/opt/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/tomcat -Dcatalina.home=/opt/tomcat -Djava.io.tmpdir=/opt/tomcat/temp org.apache.catalina.startup.Bootstrap start

Cron & Systemd


skyfuck@ubuntu:~$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for skyfuck
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 
# m h dom mon dow user  command
17 *    * * *   root    cd / && run-parts --report /etc/cron.hourly
25 6    * * *   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6    * * 7   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6    1 * *   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
*  *    * * *   root    cd /root/ufw && bash ufw.sh
#
NEXT                         LEFT          LAST                         PASSED    UNIT                         ACTIVATES
Sat 2024-07-13 08:36:14 PDT  1min 36s left n/a                          n/a       systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service
Sat 2024-07-13 10:00:32 PDT  1h 25min left Sat 2024-07-13 08:21:19 PDT  13min ago motd-news.timer              motd-news.service
Sat 2024-07-13 21:05:46 PDT  12h left      Sat 2024-07-13 08:21:19 PDT  13min ago apt-daily.timer              apt-daily.service
Sun 2024-07-14 06:49:09 PDT  22h left      Sat 2024-07-13 08:21:19 PDT  13min ago apt-daily-upgrade.timer      apt-daily-upgrade.service
 
4 timers listed.
Pass --all to see loaded but inactive timers, too.

* * * * * root cd /root/ufw && bash ufw.sh

Sudo Version


skyfuck@ubuntu:~$ sudo --version
Sudo version 1.8.16
Sudoers policy plugin version 1.8.16
Sudoers file grammar version 45
Sudoers I/O plugin version 1.8.16

Sudo version 1.8.16

Glibc Version


skyfuck@ubuntu:~$ ldd --version
ldd (Ubuntu GLIBC 2.23-0ubuntu11) 2.23
Copyright (C) 2016 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.

ldd (Ubuntu GLIBC 2.23-0ubuntu11) 2.23