API tools faq
paste
Guest User

Untitled

a guest
Jan 2nd, 2016
46
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 27.42 KB | None | 0 0
raw download clone embed print report
  1. ### SYSTEM ##############################################
  2. Kernel information:
  3. Linux Sichuan 3.16.0-30-generic #40~14.04.1-Ubuntu SMP Thu Jan 15 17:43:14 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
  4.  
  5.  
  6. Kernel information (continued):
  7. Linux version 3.16.0-30-generic (buildd@kissel) (gcc version 4.8.2 (Ubuntu 4.8.2-19ubuntu1) ) #40~14.04.1-Ubuntu SMP Thu Jan 15 17:43:14 UTC 2015
  8.  
  9.  
  10. Specific release information:
  11. DISTRIB_ID=Ubuntu
  12. DISTRIB_RELEASE=14.04
  13. DISTRIB_CODENAME=trusty
  14. DISTRIB_DESCRIPTION="Ubuntu 14.04.3 LTS"
  15. NAME="Ubuntu"
  16. VERSION="14.04.3 LTS, Trusty Tahr"
  17. ID=ubuntu
  18. ID_LIKE=debian
  19. PRETTY_NAME="Ubuntu 14.04.3 LTS"
  20. VERSION_ID="14.04"
  21. HOME_URL="http://www.ubuntu.com/"
  22. SUPPORT_URL="http://help.ubuntu.com/"
  23. BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
  24.  
  25.  
  26. Hostname:
  27. Sichuan
  28.  
  29.  
  30. ### USER/GROUP ##########################################
  31. Current user/group info:
  32. uid=33(www-data) gid=33(www-data) groups=33(www-data)
  33.  
  34.  
  35. Users that have previously logged onto the system:
  36. Username Port From Latest
  37. meigui tty1 Tue Sep 22 09:47:12 +0200 2015
  38.  
  39.  
  40. All users and uid/gid info:
  41. root:x:0:0
  42. daemon:x:1:1
  43. bin:x:2:2
  44. sys:x:3:3
  45. sync:x:4:65534
  46. games:x:5:60
  47. man:x:6:12
  48. lp:x:7:7
  49. mail:x:8:8
  50. news:x:9:9
  51. uucp:x:10:10
  52. proxy:x:13:13
  53. www-data:x:33:33
  54. backup:x:34:34
  55. list:x:38:38
  56. irc:x:39:39
  57. gnats:x:41:41
  58. nobody:x:65534:65534
  59. libuuid:x:100:101
  60. syslog:x:101:104
  61. mysql:x:102:106
  62. messagebus:x:103:107
  63. landscape:x:104:110
  64. sshd:x:105:65534
  65. meigui:x:1000:1000
  66.  
  67.  
  68. Group memberships:
  69. uid=0(root) gid=0(root) groups=0(root)
  70. uid=1(daemon) gid=1(daemon) groups=1(daemon)
  71. uid=2(bin) gid=2(bin) groups=2(bin)
  72. uid=3(sys) gid=3(sys) groups=3(sys)
  73. uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
  74. uid=5(games) gid=60(games) groups=60(games)
  75. uid=6(man) gid=12(man) groups=12(man)
  76. uid=7(lp) gid=7(lp) groups=7(lp)
  77. uid=8(mail) gid=8(mail) groups=8(mail)
  78. uid=9(news) gid=9(news) groups=9(news)
  79. uid=10(uucp) gid=10(uucp) groups=10(uucp)
  80. uid=13(proxy) gid=13(proxy) groups=13(proxy)
  81. uid=33(www-data) gid=33(www-data) groups=33(www-data)
  82. uid=34(backup) gid=34(backup) groups=34(backup)
  83. uid=38(list) gid=38(list) groups=38(list)
  84. uid=39(irc) gid=39(irc) groups=39(irc)
  85. uid=41(gnats) gid=41(gnats) groups=41(gnats)
  86. uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
  87. uid=100(libuuid) gid=101(libuuid) groups=101(libuuid)
  88. uid=101(syslog) gid=104(syslog) groups=104(syslog),4(adm)
  89. uid=102(mysql) gid=106(mysql) groups=106(mysql)
  90. uid=103(messagebus) gid=107(messagebus) groups=107(messagebus)
  91. uid=104(landscape) gid=110(landscape) groups=110(landscape)
  92. uid=105(sshd) gid=65534(nogroup) groups=65534(nogroup)
  93. uid=1000(meigui) gid=1000(meigui) groups=1000(meigui),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),112(lpadmin),113(sambashare)
  94.  
  95.  
  96. Sample entires from /etc/passwd (searching for uid values 0, 500, 501, 502, 1000, 1001, 1002, 2000, 2001, 2002):
  97. root:x:0:0:root:/root:/bin/bash
  98. meigui:x:1000:1000:Meigui,,,:/home/meigui:/bin/bash
  99.  
  100.  
  101. Super user account(s):
  102. root
  103.  
  104.  
  105. Are permissions on /home directories lax:
  106. total 12K
  107. drwxr-xr-x 3 root root 4.0K Sep 18 08:49 .
  108. drwxr-xr-x 23 root root 4.0K Sep 18 09:13 ..
  109. drwxr-xr-x 4 meigui meigui 4.0K Sep 20 17:18 meigui
  110.  
  111.  
  112. Files not owned by user but writable by group:
  113. -rw-rw-rw- 1 root root 0 Jan 2 08:18 /sys/kernel/security/apparmor/.access
  114.  
  115.  
  116. World-readable files within /home:
  117. -rw-r--r-- 1 meigui meigui 675 Sep 18 08:49 /home/meigui/.profile
  118. -rw-r--r-- 1 meigui meigui 220 Sep 18 08:49 /home/meigui/.bash_logout
  119. -rw-r--r-- 1 meigui meigui 3637 Sep 18 08:49 /home/meigui/.bashrc
  120. -rw-rw-r-- 1 meigui meigui 2244 Sep 20 14:14 /home/meigui/www/almostdone.html
  121.  
  122.  
  123. Home directory contents:
  124. total 12K
  125. drwxr-xr-x 3 root root 4.0K Sep 18 08:48 .
  126. drwxr-xr-x 13 root root 4.0K Sep 18 08:48 ..
  127. drwxr-xr-x 4 root root 4.0K Sep 20 14:16 html
  128.  
  129.  
  130. ### ENVIRONMENTAL #######################################
  131. Path information:
  132. /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
  133.  
  134.  
  135. Available shells:
  136. # /etc/shells: valid login shells
  137. /bin/sh
  138. /bin/dash
  139. /bin/bash
  140. /bin/rbash
  141. /usr/bin/tmux
  142. /usr/bin/screen
  143.  
  144.  
  145. Current umask value:
  146. 0022
  147. u=rwx,g=rx,o=rx
  148.  
  149.  
  150. umask value as specified in /etc/login.defs:
  151. UMASK 022
  152.  
  153.  
  154. Password and storage information:
  155. PASS_MAX_DAYS 99999
  156. PASS_MIN_DAYS 0
  157. PASS_WARN_AGE 7
  158. ENCRYPT_METHOD SHA512
  159.  
  160.  
  161. ### JOBS/TASKS ##########################################
  162. Cron jobs:
  163. -rw-r--r-- 1 root root 722 Feb 9 2013 /etc/crontab
  164.  
  165. /etc/cron.d:
  166. total 16
  167. drwxr-xr-x 2 root root 4096 Sep 18 08:57 .
  168. drwxr-xr-x 93 root root 4096 Jan 2 07:18 ..
  169. -rw-r--r-- 1 root root 102 Feb 9 2013 .placeholder
  170. -rw-r--r-- 1 root root 510 Feb 13 2015 php5
  171.  
  172. /etc/cron.daily:
  173. total 76
  174. drwxr-xr-x 2 root root 4096 Sep 18 08:58 .
  175. drwxr-xr-x 93 root root 4096 Jan 2 07:18 ..
  176. -rw-r--r-- 1 root root 102 Feb 9 2013 .placeholder
  177. -rwxr-xr-x 1 root root 625 Jul 22 2014 apache2
  178. -rwxr-xr-x 1 root root 376 Apr 4 2014 apport
  179. -rwxr-xr-x 1 root root 15481 Apr 10 2014 apt
  180. -rwxr-xr-x 1 root root 314 Feb 18 2014 aptitude
  181. -rwxr-xr-x 1 root root 355 Jun 4 2013 bsdmainutils
  182. -rwxr-xr-x 1 root root 256 Mar 7 2014 dpkg
  183. -rwxr-xr-x 1 root root 372 Jan 22 2014 logrotate
  184. -rwxr-xr-x 1 root root 1261 Sep 23 2014 man-db
  185. -rwxr-xr-x 1 root root 435 Jun 20 2013 mlocate
  186. -rwxr-xr-x 1 root root 249 Feb 17 2014 passwd
  187. -rwxr-xr-x 1 root root 2417 May 13 2013 popularity-contest
  188. -rwxr-xr-x 1 root root 214 Oct 7 2014 update-notifier-common
  189. -rwxr-xr-x 1 root root 328 Jul 18 2014 upstart
  190.  
  191. /etc/cron.hourly:
  192. total 12
  193. drwxr-xr-x 2 root root 4096 Sep 18 08:39 .
  194. drwxr-xr-x 93 root root 4096 Jan 2 07:18 ..
  195. -rw-r--r-- 1 root root 102 Feb 9 2013 .placeholder
  196.  
  197. /etc/cron.monthly:
  198. total 12
  199. drwxr-xr-x 2 root root 4096 Sep 18 08:39 .
  200. drwxr-xr-x 93 root root 4096 Jan 2 07:18 ..
  201. -rw-r--r-- 1 root root 102 Feb 9 2013 .placeholder
  202.  
  203. /etc/cron.weekly:
  204. total 28
  205. drwxr-xr-x 2 root root 4096 Sep 18 08:57 .
  206. drwxr-xr-x 93 root root 4096 Jan 2 07:18 ..
  207. -rw-r--r-- 1 root root 102 Feb 9 2013 .placeholder
  208. -rwxr-xr-x 1 root root 730 Feb 23 2014 apt-xapian-index
  209. -rwxr-xr-x 1 root root 427 Apr 16 2014 fstrim
  210. -rwxr-xr-x 1 root root 771 Sep 23 2014 man-db
  211. -rwxr-xr-x 1 root root 211 Oct 7 2014 update-notifier-common
  212.  
  213.  
  214. Crontab contents:
  215. # /etc/crontab: system-wide crontab
  216. # Unlike any other crontab you don't have to run the `crontab'
  217. # command to install the new version when you edit this file
  218. # and files in /etc/cron.d. These files also have username fields,
  219. # that none of the other crontabs do.
  220.  
  221. SHELL=/bin/sh
  222. PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
  223.  
  224. # m h dom mon dow user command
  225. 17 * * * * root cd / && run-parts --report /etc/cron.hourly
  226. 25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
  227. 47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
  228. 52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
  229. #
  230.  
  231.  
  232. ### NETWORKING ##########################################
  233. Network & IP info:
  234. eth0 Link encap:Ethernet HWaddr 00:07:3e:15:15:15
  235. inet addr:192.168.1.25 Bcast:192.168.1.255 Mask:255.255.255.0
  236. inet6 addr: fe80::207:3eff:fe15:1515/64 Scope:Link
  237. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  238. RX packets:30345 errors:0 dropped:0 overruns:0 frame:0
  239. TX packets:13175 errors:0 dropped:0 overruns:0 carrier:0
  240. collisions:0 txqueuelen:1000
  241. RX bytes:29685717 (29.6 MB) TX bytes:3331842 (3.3 MB)
  242.  
  243. eth1 Link encap:Ethernet HWaddr 08:00:27:c2:42:60
  244. BROADCAST MULTICAST MTU:1500 Metric:1
  245. RX packets:0 errors:0 dropped:0 overruns:0 frame:0
  246. TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
  247. collisions:0 txqueuelen:1000
  248. RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
  249.  
  250. lo Link encap:Local Loopback
  251. inet addr:127.0.0.1 Mask:255.0.0.0
  252. inet6 addr: ::1/128 Scope:Host
  253. UP LOOPBACK RUNNING MTU:65536 Metric:1
  254. RX packets:34 errors:0 dropped:0 overruns:0 frame:0
  255. TX packets:34 errors:0 dropped:0 overruns:0 carrier:0
  256. collisions:0 txqueuelen:0
  257. RX bytes:2976 (2.9 KB) TX bytes:2976 (2.9 KB)
  258.  
  259.  
  260. Nameserver(s):
  261. nameserver 8.8.8.8
  262. nameserver 8.8.4.4
  263. nameserver 192.168.1.1
  264.  
  265.  
  266. Default route:
  267. default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0
  268.  
  269.  
  270. Listening TCP:
  271. Active Internet connections (servers and established)
  272. Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
  273. tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
  274. tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN -
  275. tcp6 0 0 :::80 :::* LISTEN -
  276. tcp6 0 0 :::22 :::* LISTEN -
  277. tcp6 0 0 192.168.1.25:80 192.168.1.5:56652 TIME_WAIT -
  278. tcp6 0 0 192.168.1.25:80 192.168.1.5:56662 TIME_WAIT -
  279. tcp6 0 0 192.168.1.25:80 192.168.1.5:56653 TIME_WAIT -
  280. tcp6 0 0 192.168.1.25:80 192.168.1.5:56663 ESTABLISHED -
  281. tcp6 0 0 192.168.1.25:80 192.168.1.5:56661 TIME_WAIT -
  282.  
  283.  
  284. Listening UDP:
  285. Active Internet connections (servers and established)
  286. Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
  287. udp 0 0 0.0.0.0:18742 0.0.0.0:* -
  288. udp 0 0 0.0.0.0:68 0.0.0.0:* -
  289. udp6 0 0 :::4896 :::* -
  290.  
  291.  
  292. ### SERVICES #############################################
  293. Running processes:
  294. USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
  295. root 1 0.0 0.3 33448 3956 ? Ss 08:18 0:00 /sbin/init
  296. root 2 0.0 0.0 0 0 ? S 08:18 0:00 [kthreadd]
  297. root 3 0.0 0.0 0 0 ? S 08:18 0:00 [ksoftirqd/0]
  298. root 5 0.0 0.0 0 0 ? S< 08:18 0:00 [kworker/0:0H]
  299. root 7 0.0 0.0 0 0 ? S 08:18 0:01 [rcu_sched]
  300. root 8 0.0 0.0 0 0 ? S 08:18 0:02 [rcuos/0]
  301. root 9 0.0 0.0 0 0 ? S 08:18 0:00 [rcu_bh]
  302. root 10 0.0 0.0 0 0 ? S 08:18 0:00 [rcuob/0]
  303. root 11 0.0 0.0 0 0 ? S 08:18 0:00 [migration/0]
  304. root 12 0.0 0.0 0 0 ? S 08:18 0:00 [watchdog/0]
  305. root 13 0.0 0.0 0 0 ? S< 08:18 0:00 [khelper]
  306. root 14 0.0 0.0 0 0 ? S 08:18 0:00 [kdevtmpfs]
  307. root 15 0.0 0.0 0 0 ? S< 08:18 0:00 [netns]
  308. root 16 0.0 0.0 0 0 ? S 08:18 0:00 [khungtaskd]
  309. root 17 0.0 0.0 0 0 ? S< 08:18 0:00 [writeback]
  310. root 18 0.0 0.0 0 0 ? SN 08:18 0:00 [ksmd]
  311. root 19 0.0 0.0 0 0 ? SN 08:18 0:00 [khugepaged]
  312. root 20 0.0 0.0 0 0 ? S< 08:18 0:00 [crypto]
  313. root 21 0.0 0.0 0 0 ? S< 08:18 0:00 [kintegrityd]
  314. root 22 0.0 0.0 0 0 ? S< 08:18 0:00 [bioset]
  315. root 23 0.0 0.0 0 0 ? S< 08:18 0:00 [kblockd]
  316. root 24 0.0 0.0 0 0 ? S< 08:18 0:00 [ata_sff]
  317. root 25 0.0 0.0 0 0 ? S 08:18 0:00 [khubd]
  318. root 26 0.0 0.0 0 0 ? S< 08:18 0:00 [md]
  319. root 27 0.0 0.0 0 0 ? S< 08:18 0:00 [devfreq_wq]
  320. root 29 0.0 0.0 0 0 ? S 08:18 0:06 [kworker/0:1]
  321. root 30 0.0 0.0 0 0 ? S 08:18 0:00 [kswapd0]
  322. root 31 0.0 0.0 0 0 ? S 08:18 0:00 [fsnotify_mark]
  323. root 32 0.0 0.0 0 0 ? S 08:18 0:00 [ecryptfs-kthrea]
  324. root 44 0.0 0.0 0 0 ? S< 08:18 0:00 [kthrotld]
  325. root 45 0.0 0.0 0 0 ? S< 08:18 0:00 [acpi_thermal_pm]
  326. root 46 0.0 0.0 0 0 ? S 08:18 0:00 [scsi_eh_0]
  327. root 47 0.0 0.0 0 0 ? S< 08:18 0:00 [scsi_tmf_0]
  328. root 48 0.0 0.0 0 0 ? S 08:18 0:00 [scsi_eh_1]
  329. root 49 0.0 0.0 0 0 ? S< 08:18 0:00 [scsi_tmf_1]
  330. root 51 0.0 0.0 0 0 ? S< 08:18 0:00 [ipv6_addrconf]
  331. root 71 0.0 0.0 0 0 ? S< 08:18 0:00 [deferwq]
  332. root 72 0.0 0.0 0 0 ? S< 08:18 0:00 [charger_manager]
  333. root 123 0.0 0.0 0 0 ? S< 08:18 0:00 [kpsmoused]
  334. root 124 0.0 0.0 0 0 ? S< 08:18 0:00 [kworker/0:1H]
  335. root 131 0.0 0.0 0 0 ? S< 08:18 0:00 [kdmflush]
  336. root 132 0.0 0.0 0 0 ? S< 08:18 0:00 [bioset]
  337. root 134 0.0 0.0 0 0 ? S< 08:18 0:00 [kdmflush]
  338. root 137 0.0 0.0 0 0 ? S< 08:18 0:00 [bioset]
  339. root 150 0.0 0.0 0 0 ? S 08:18 0:00 [jbd2/dm-0-8]
  340. root 151 0.0 0.0 0 0 ? S< 08:18 0:00 [ext4-rsv-conver]
  341. root 280 0.0 0.0 19480 176 ? S 08:18 0:00 upstart-udev-bridge --daemon
  342. root 286 0.0 0.3 51596 3668 ? Ss 08:18 0:00 /lib/systemd/systemd-udevd --daemon
  343. root 462 0.0 0.0 15264 212 ? S 08:18 0:00 upstart-socket-bridge --daemon
  344. root 472 0.0 0.0 0 0 ? S< 08:18 0:00 [ext4-rsv-conver]
  345. root 532 0.0 0.0 15280 208 ? S 08:18 0:00 upstart-file-bridge --daemon
  346. message+ 537 0.0 0.1 39120 1992 ? Ss 08:18 0:00 dbus-daemon --system --fork
  347. syslog 539 0.0 0.2 255848 2884 ? Ssl 08:18 0:00 rsyslogd
  348. root 560 0.0 0.2 35024 2952 ? Ss 08:18 0:00 /lib/systemd/systemd-logind
  349. root 727 0.0 0.3 10236 3196 ? Ss 08:18 0:00 dhclient -1 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases eth0
  350. root 864 0.0 0.2 15824 2064 tty4 Ss+ 08:18 0:00 /sbin/getty -8 38400 tty4
  351. root 867 0.0 0.2 15824 2104 tty5 Ss+ 08:18 0:00 /sbin/getty -8 38400 tty5
  352. root 872 0.0 0.1 15824 2032 tty2 Ss+ 08:18 0:00 /sbin/getty -8 38400 tty2
  353. root 873 0.0 0.2 15824 2076 tty3 Ss+ 08:18 0:00 /sbin/getty -8 38400 tty3
  354. root 876 0.0 0.2 15824 2092 tty6 Ss+ 08:18 0:00 /sbin/getty -8 38400 tty6
  355. root 897 0.0 0.5 61372 5456 ? Ss 08:18 0:00 /usr/sbin/sshd -D
  356. root 932 0.0 0.1 4372 1568 ? Ss 08:18 0:00 acpid -c /etc/acpi/events -s /var/run/acpid.socket
  357. root 953 0.0 0.2 23660 2352 ? Ss 08:18 0:00 cron
  358. daemon 954 0.0 0.0 19144 164 ? Ss 08:18 0:00 atd
  359. mysql 999 0.0 5.4 558388 55924 ? Ssl 08:18 0:10 /usr/sbin/mysqld
  360. root 1026 0.0 2.1 276380 22084 ? Ss 08:18 0:01 /usr/sbin/apache2 -k start
  361. www-data 1036 0.0 1.2 276736 12852 ? S 08:18 0:00 /usr/sbin/apache2 -k start
  362. www-data 1037 0.0 1.3 276716 13344 ? S 08:18 0:00 /usr/sbin/apache2 -k start
  363. www-data 1038 0.0 1.2 276752 13000 ? S 08:18 0:00 /usr/sbin/apache2 -k start
  364. www-data 1039 0.0 1.2 276728 12836 ? S 08:18 0:00 /usr/sbin/apache2 -k start
  365. root 1179 0.0 0.0 0 0 ? S 08:18 0:00 [kauditd]
  366. www-data 1180 0.0 1.3 277016 13680 ? S 08:19 0:00 /usr/sbin/apache2 -k start
  367. www-data 1188 0.0 1.2 276988 12996 ? S 08:19 0:00 /usr/sbin/apache2 -k start
  368. root 1189 0.0 0.2 15824 2112 tty1 Ss+ 08:19 0:00 /sbin/getty -8 38400 tty1
  369. www-data 1270 0.0 1.4 277020 14852 ? S 08:32 0:00 /usr/sbin/apache2 -k start
  370. www-data 4513 0.0 1.2 276712 12784 ? S 08:54 0:00 /usr/sbin/apache2 -k start
  371. www-data 4514 0.0 1.2 276712 13140 ? S 08:54 0:00 /usr/sbin/apache2 -k start
  372. www-data 4515 0.0 1.2 276728 12832 ? S 08:54 0:00 /usr/sbin/apache2 -k start
  373. root 4892 0.0 0.0 0 0 ? S 10:37 0:00 [kworker/u2:2]
  374. root 22862 0.0 0.0 0 0 ? S 12:41 0:00 [kworker/0:2]
  375. root 22863 0.0 0.0 0 0 ? S 13:04 0:00 [kworker/u2:0]
  376. www-data 22893 0.0 0.0 4448 772 ? S 13:45 0:00 sh -c ./LinEnum.sh -k pass -r report -e /tmp/ -t 2>&1
  377. www-data 22894 0.4 0.3 18044 3080 ? S 13:45 0:00 /bin/bash ./LinEnum.sh -k pass -r report -e /tmp/ -t
  378. www-data 23246 0.0 0.1 18036 1996 ? S 13:45 0:00 /bin/bash ./LinEnum.sh -k pass -r report -e /tmp/ -t
  379. www-data 23247 0.0 0.2 15572 2228 ? R 13:45 0:00 ps aux
  380.  
  381.  
  382. Process binaries & associated permissions (from above list):
  383. -rwxr-xr-x 1 root root 1021112 Oct 7 2014 /bin/bash
  384. -rwxr-xr-x 1 root root 252056 Jul 15 21:13 /lib/systemd/systemd-logind
  385. -rwxr-xr-x 1 root root 239896 Jul 15 21:13 /lib/systemd/systemd-udevd
  386. -rwxr-xr-x 2 root root 32112 Sep 2 20:35 /sbin/getty
  387. -rwxr-xr-x 1 root root 265848 Jul 18 2014 /sbin/init
  388. -rwxr-xr-x 1 root root 637528 Jul 24 19:27 /usr/sbin/apache2
  389. -rwxr-xr-x 1 root root 11762624 Jul 17 00:51 /usr/sbin/mysqld
  390. -rwxr-xr-x 1 root root 766784 Aug 18 04:14 /usr/sbin/sshd
  391.  
  392.  
  393. /etc/init.d/ binary permissions:
  394. total 196
  395. drwxr-xr-x 2 root root 4096 Sep 18 08:58 .
  396. drwxr-xr-x 93 root root 4096 Jan 2 07:18 ..
  397. -rw-r--r-- 1 root root 0 Feb 18 2015 .legacy-bootordering
  398. -rw-r--r-- 1 root root 2427 Mar 13 2014 README
  399. -rwxr-xr-x 1 root root 2243 Apr 3 2014 acpid
  400. -rwxr-xr-x 1 root root 9974 Jan 7 2014 apache2
  401. -rwxr-xr-x 1 root root 4596 Mar 27 2014 apparmor
  402. -rwxr-xr-x 1 root root 2801 Feb 7 2015 apport
  403. -rwxrwxr-x 1 root root 1071 Sep 8 2013 atd
  404. -rwxr-xr-x 1 root root 1919 Jan 18 2011 console-setup
  405. lrwxrwxrwx 1 root root 21 Sep 18 08:39 cron -> /lib/init/upstart-job
  406. -rwxr-xr-x 1 root root 2813 Nov 25 2014 dbus
  407. -rwxr-xr-x 1 root root 1217 Mar 7 2013 dns-clean
  408. lrwxrwxrwx 1 root root 21 Mar 14 2012 friendly-recovery -> /lib/init/upstart-job
  409. -rwxr-xr-x 1 root root 1105 May 13 2015 grub-common
  410. -rwxr-xr-x 1 root root 1329 Mar 13 2014 halt
  411. -rwxr-xr-x 1 root root 1864 Nov 12 2012 irqbalance
  412. -rwxr-xr-x 1 root root 1293 Mar 13 2014 killprocs
  413. -rwxr-xr-x 1 root root 1990 Jan 22 2013 kmod
  414. -rwxr-xr-x 1 root root 5491 Feb 19 2014 mysql
  415. -rwxr-xr-x 1 root root 4479 Mar 20 2014 networking
  416. -rwxr-xr-x 1 root root 1346 Mar 13 2015 ondemand
  417. -rwxr-xr-x 1 root root 561 Nov 25 2014 pppd-dns
  418. -rwxr-xr-x 1 root root 1192 May 27 2013 procps
  419. -rwxr-xr-x 1 root root 6120 Mar 13 2014 rc
  420. -rwxr-xr-x 1 root root 782 Mar 13 2014 rc.local
  421. -rwxr-xr-x 1 root root 117 Mar 13 2014 rcS
  422. -rwxr-xr-x 1 root root 639 Mar 13 2014 reboot
  423. -rwxr-xr-x 1 root root 2918 Jun 13 2014 resolvconf
  424. -rwxr-xr-x 1 root root 4395 Apr 17 2014 rsync
  425. -rwxr-xr-x 1 root root 2913 Dec 4 2013 rsyslog
  426. -rwxr-xr-x 1 root root 1226 Jul 22 2013 screen-cleanup
  427. -rwxr-xr-x 1 root root 3920 Mar 13 2014 sendsigs
  428. -rwxr-xr-x 1 root root 590 Mar 13 2014 single
  429. -rw-r--r-- 1 root root 4290 Mar 13 2014 skeleton
  430. -rwxr-xr-x 1 root root 4077 May 2 2014 ssh
  431. -rwxr-xr-x 1 root root 731 Feb 5 2014 sudo
  432. -rwxr-xr-x 1 root root 6173 Apr 14 2014 udev
  433. -rwxr-xr-x 1 root root 2721 Mar 13 2014 umountfs
  434. -rwxr-xr-x 1 root root 2260 Mar 13 2014 umountnfs.sh
  435. -rwxr-xr-x 1 root root 1872 Mar 13 2014 umountroot
  436. -rwxr-xr-x 1 root root 1361 Dec 6 2013 unattended-upgrades
  437. -rwxr-xr-x 1 root root 3111 Mar 13 2014 urandom
  438.  
  439.  
  440. ### SOFTWARE #############################################
  441. Sudo version:
  442. Sudo version 1.8.9p5
  443.  
  444.  
  445. MYSQL version:
  446. mysql Ver 14.14 Distrib 5.5.44, for debian-linux-gnu (x86_64) using readline 6.3
  447.  
  448.  
  449. Apache version:
  450. Server version: Apache/2.4.7 (Ubuntu)
  451. Server built: Jul 24 2015 17:25:11
  452.  
  453.  
  454. Apache user configuration:
  455. APACHE_RUN_USER=www-data
  456. APACHE_RUN_GROUP=www-data
  457.  
  458.  
  459. ### INTERESTING FILES ####################################
  460. Useful file locations:
  461. /bin/nc
  462. /bin/netcat
  463. /usr/bin/wget
  464. /usr/bin/gcc
  465.  
  466.  
  467. Installed compilers:
  468. ii gcc 4:4.8.2-1ubuntu6 amd64 GNU C compiler
  469. ii gcc-4.8 4.8.4-2ubuntu1~14.04 amd64 GNU C compiler
  470.  
  471.  
  472. Can we read/write sensitive files:
  473. -rw-r--r-- 1 root root 1212 Sep 18 08:49 /etc/passwd
  474. -rw-r--r-- 1 root root 703 Sep 18 08:49 /etc/group
  475. -rw-r--r-- 1 root root 665 Feb 20 2014 /etc/profile
  476. -rw-r----- 1 root shadow 773 Sep 18 08:49 /etc/shadow
  477.  
  478.  
  479. SUID files:
  480. /usr/sbin/pppd
  481. /usr/sbin/uuidd
  482. /usr/lib/openssh/ssh-keysign
  483. /usr/lib/policykit-1/polkit-agent-helper-1
  484. /usr/lib/dbus-1.0/dbus-daemon-launch-helper
  485. /usr/lib/eject/dmcrypt-get-device
  486. /usr/lib/pt_chown
  487. /usr/bin/at
  488. /usr/bin/gpasswd
  489. /usr/bin/chsh
  490. /usr/bin/pkexec
  491. /usr/bin/newgrp
  492. /usr/bin/passwd
  493. /usr/bin/chfn
  494. /usr/bin/mtr
  495. /usr/bin/sudo
  496. /usr/bin/traceroute6.iputils
  497. /bin/su
  498. /bin/umount
  499. /bin/ping
  500. /bin/fusermount
  501. /bin/mount
  502. /bin/ping6
  503.  
  504.  
  505. GUID files:
  506. /sbin/unix_chkpwd
  507. /usr/sbin/uuidd
  508. /usr/bin/bsd-write
  509. /usr/bin/crontab
  510. /usr/bin/mail-touchlock
  511. /usr/bin/at
  512. /usr/bin/mail-unlock
  513. /usr/bin/chage
  514. /usr/bin/expiry
  515. /usr/bin/wall
  516. /usr/bin/dotlockfile
  517. /usr/bin/mlocate
  518. /usr/bin/mail-lock
  519. /usr/bin/ssh-agent
  520. /usr/bin/screen
  521.  
  522.  
  523. World-writable files (excluding /proc):
  524. /sys/kernel/security/apparmor/.access
  525. /var/www/html/blackbox/.htaccess
  526.  
  527.  
  528. Find keyword (pass) in .conf files (recursive 4 levels - output format filepath:identified line number where keyword appears):
  529. /etc/ltrace.conf:152:string getpass(string);
  530. /etc/iscsi/iscsid.conf:55:# To set a CHAP username and password for initiator
  531. /etc/iscsi/iscsid.conf:58:#node.session.auth.password = password
  532. /etc/iscsi/iscsid.conf:60:# To set a CHAP username and password for target(s)
  533. /etc/iscsi/iscsid.conf:63:#node.session.auth.password_in = password_in
  534. /etc/iscsi/iscsid.conf:69:# To set a discovery session CHAP username and password for the initiator
  535. /etc/iscsi/iscsid.conf:72:#discovery.sendtargets.auth.password = password
  536. /etc/iscsi/iscsid.conf:74:# To set a discovery session CHAP username and password for target(s)
  537. /etc/iscsi/iscsid.conf:77:#discovery.sendtargets.auth.password_in = password_in
  538. /etc/apache2/sites-available/default-ssl.conf:78: # Note that no password is obtained from the user. Every entry in the user
  539. /etc/apache2/sites-available/default-ssl.conf:79: # file needs this password: `xxj31ZMTZzkVA'.
  540. /etc/apache2/mods-available/ssl.conf:33: # Configure the pass phrase gathering process.
  541. /etc/apache2/mods-available/ssl.conf:35: # terminal dialog) has to provide the pass phrase on stdout.
  542. /etc/apache2/mods-available/ssl.conf:36: SSLPassPhraseDialog exec:/usr/share/apache2/ask-for-passphrase
  543. /etc/apache2/apache2.conf:186:# The following lines prevent .htaccess and .htpasswd files from being
  544. /etc/lvm/lvm.conf:507: # String with options passed with thin_check command. By default,
  545. /etc/hdparm.conf:14:## Note that if the init script causes boot problems, you can pass 'nohdparm'
  546. /etc/hdparm.conf:86:# --security-set-pass Set security password
  547. /etc/hdparm.conf:87:# security_pass = password
  548. /etc/hdparm.conf:90:# --user-master Select password to use
  549. /etc/nsswitch.conf:7:passwd: compat
  550. /etc/ca-certificates.conf:29:mozilla/Buypass_Class_2_CA_1.crt
  551. /etc/ca-certificates.conf:30:mozilla/Buypass_Class_2_Root_CA.crt
  552. /etc/ca-certificates.conf:31:mozilla/Buypass_Class_3_CA_1.crt
  553. /etc/ca-certificates.conf:32:mozilla/Buypass_Class_3_Root_CA.crt
  554. /etc/debconf.conf:14:# World-readable, and accepts everything but passwords.
  555. /etc/debconf.conf:18:Reject-Type: password
  556. /etc/debconf.conf:21:# Not world readable (the default), and accepts only passwords.
  557. /etc/debconf.conf:22:Name: passwords
  558. /etc/debconf.conf:27:Accept-Type: password
  559. /etc/debconf.conf:28:Filename: /var/cache/debconf/passwords.dat
  560. /etc/debconf.conf:31:# databases, one to hold passwords and one for everything else.
  561. /etc/debconf.conf:34:Stack: config, passwords
  562. /etc/debconf.conf:58:# A remote LDAP database. It is also read-only. The password is really
  563. /etc/init/passwd.conf:1:# passwd - clear locks on passwd and related files
  564. /etc/init/passwd.conf:6:# This helper clears locks on passwd to avoid million duplicate bug reports
  565. /etc/init/passwd.conf:12:description "Clear passwd locks"
  566. /etc/init/passwd.conf:18:exec rm -f /etc/gshadow.lock /etc/shadow.lock /etc/passwd.lock /etc/group.lock
  567. /etc/init/udevmonitor.conf:3:# The set of devices created in the "cold plug" pass is generally
  568. /etc/init/rcS.conf:24: # Switch, passing a magic flag
  569. /etc/adduser.conf:28:# Please note that system software, such as the users allocated by the base-passwd
  570. /usr/share/base-files/nsswitch.conf:7:passwd: compat
  571. /usr/share/debconf/debconf.conf:8:Reject-Type: password
  572. /usr/share/debconf/debconf.conf:11:Name: passwords
  573. /usr/share/debconf/debconf.conf:16:Accept-Type: password
  574. /usr/share/debconf/debconf.conf:17:Filename: /var/cache/debconf/passwords.dat
  575. /usr/share/debconf/debconf.conf:21:Stack: config, passwords
  576. /usr/share/libc-bin/nsswitch.conf:7:passwd: compat
  577. /usr/share/adduser/adduser.conf:28:# Please note that system software, such as the users allocated by the base-passwd
  578.  
  579.  
  580. Find keyword (pass) in .log files (recursive 2 levels):
  581. 'pass' not found in any .log files
  582.  
  583.  
  584. Find keyword (pass) in .ini files (recursive 4 levels - output format filepath:identified line number where keyword appears):
  585. ....
  586.  
  587.  
  588. All *.conf files in /etc (recursive 1 level):
  589. -rw-r--r-- 1 root root 2084 Apr 1 2013 /etc/sysctl.conf
  590. -rw-r--r-- 1 root root 604 Nov 7 2013 /etc/deluser.conf
  591. -rw-r--r-- 1 root root 191 Dec 4 2013 /etc/libaudit.conf
  592. -rw-r--r-- 1 root root 144 Sep 18 08:49 /etc/kernel-img.conf
  593. -rw-r--r-- 1 root root 14867 May 10 2014 /etc/ltrace.conf
  594. -rw-r----- 1 root fuse 280 May 24 2013 /etc/fuse.conf
  595. -rw-r--r-- 1 root root 552 Jan 31 2014 /etc/pam.conf
  596. -rw-r--r-- 1 root root 4781 Nov 15 2013 /etc/hdparm.conf
  597. -rw-r--r-- 1 root root 321 Jun 20 2013 /etc/updatedb.conf
  598. -rw-r--r-- 1 root root 1320 Aug 19 2014 /etc/rsyslog.conf
  599. -rw-r--r-- 1 root root 92 Feb 20 2014 /etc/host.conf
  600. -rw-r--r-- 1 root root 2584 Oct 10 2012 /etc/gai.conf
  601. -rw-r--r-- 1 root root 1260 Jul 1 2013 /etc/ucf.conf
  602. -rw-r--r-- 1 root root 475 Feb 20 2014 /etc/nsswitch.conf
  603. -rw-r--r-- 1 root root 350 Sep 18 08:48 /etc/popularity-contest.conf
  604. -rw-r--r-- 1 root root 8052 Sep 18 08:58 /etc/ca-certificates.conf
  605. -rw-r--r-- 1 root root 771 May 19 2013 /etc/insserv.conf
  606. -rw-r--r-- 1 root root 34 Feb 18 2015 /etc/ld.so.conf
  607. -rw-r--r-- 1 root root 2969 Feb 23 2014 /etc/debconf.conf
  608. -rw-r--r-- 1 root root 956 Feb 19 2014 /etc/mke2fs.conf
  609. -rw-r--r-- 1 root root 703 Jan 22 2014 /etc/logrotate.conf
  610. -rw-r--r-- 1 root root 321 Apr 16 2014 /etc/blkid.conf
  611. -rw-r--r-- 1 root root 2981 Feb 18 2015 /etc/adduser.conf
  612.  
  613.  
  614. Any interesting mail in /var/mail:
  615. total 8
  616. drwxrwsr-x 2 root mail 4096 Feb 18 2015 .
  617. drwxr-xr-x 13 root root 4096 Sep 18 08:48 ..
  618.  
  619.  
  620. ### SCAN COMPLETE ####################################
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!