WooYun.org

★K8cmd-> whoami
====================================================================================================================================
hrois
★K8cmd-> cat /etc/passwd
====================================================================================================================================
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
news:x:9:13:news:/etc/news:
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
pcap:x:77:77::/var/arpwatch:/sbin/nologin
rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
oprofile:x:16:16:Special user account to be used by OProfile:/home/oprofile:/sbin/nologin
ntp:x:38:38::/etc/ntp:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin
avahi-autoipd:x:100:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin
gdm:x:42:42::/var/gdm:/sbin/nologin
sabayon:x:86:86:Sabayon user:/home/sabayon:/sbin/nologin
#hrrdc:x:502:200::/home/Projects/hrrdc:/bin/bash
#oms:x:501:200::/home/Projects/oms:/bin/bash
#gcagent:x:504:200::/home/Projects/gcagent:/bin/bash
#opc_op:x:777:177:OVO default operator:/home/opc_op:/bin/sh
etl:x:507:200::/home/Projects/etl:/bin/bash
#hp_wcm:x:778:200::/home/hp_wcm:/bin/bash
#hp_adm:x:779:500::/home/hp_adm:/bin/bash
#portal:x:508:200::/home/Projects/portal:/bin/bash
#nagios:x:780:501::/home/nagios:/bin/bash
passwdadm:x:781:781::/home/passwdadm:/bin/bash
etlbw:x:782:782::/home/Projects/etl/app/infa/bw_files/:/bin/bash
wzb:x:783:783::/home/wzb:/bin/bash
★K8cmd-> ls -l
====================================================================================================================================
total 605658
drwxr-x---  2 hrois bea         3 Aug 13  2013 autodeploy
-rw-r--r--  1 hrois bea    445439 Feb 18  2014 bak-218.log
drwxr-x---  5 hrois bea        19 May 30  2014 bin
-rw-r-----  1 hrois bea       461 May 13  2014 c:\2.vbs
-rw-r-----  1 hrois bea       717 Jan 13 01:53 cmd.jsp
drwxr-x--- 10 hrois bea        12 Jan  9 10:18 config
drwxr-x--- 10 hrois bea        13 Aug 30  2013 config.bak
drwxr-x---  2 hrois bea         3 Aug 13  2013 console-ext
-rw-r-----  1 hrois bea   4703367 Jan 13 10:21 dev_rfc.trc
-rw-r-----  1 hrois bea   8388668 Jan 12 01:03 dev_rfc.trc.log
-rw-r-----  1 hrois bea        32 Jan  8 19:36 edit.lok
-rw-r-----  1 hrois bea       462 Aug 13  2013 fileRealm.properties
-rw-r--r--  1 hrois bea   2216700 Dec 19  2013 fppproent225chs.rar
-rw-r-----  1 hrois bea   2301473 Jan 13 13:22 gc.log
-rw-r--r--  1 hrois bea     35453 Jan  9 11:03 hroisapp1.log
-rw-r--r--  1 hrois bea 616558374 Jan 13 13:22 hroisapp2.log
drwxr-x---  2 hrois bea         7 Aug 13  2013 init-info
drwxr-xr-x  8 hrois bea        16 Nov  5  2012 jdk1.6.0_37
drwxr-x---  2 hrois bea         2 Aug 16  2013 lib
-rw-r--r--  1 hrois bea     23218 Jan  6 11:53 nohup_adm.log
-rw-r--r--  1 hrois bea     23218 Jan  6 12:05 nohup_adm.log.bak
-rw-------  1 hrois bea     34542 Jan 10 01:42 nohup.out
-rw-r-----  1 hrois bea       170 Sep 20  2013 nulledu3.jsp
-rw-r-----  1 hrois bea       170 Jan 13 02:17 nullinback.jsp
-rw-r-----  1 hrois bea       170 Jan 13 01:46 nulllogic.jsp
-rw-r-----  1 hrois bea       170 Jan 13 02:06 nullone8.jsp
-rw-r-----  1 hrois bea       700 Jan  1 21:27 nullSilic.jsp
-rw-r--r--  1 hrois bea      7628 Nov 12  2013 OrderEditMapper.xml
drwxr-----  2 hrois bea         2 Jan  8 19:36 pending
drwxr-x---  2 hrois bea         6 Aug  7 11:02 security
drwxr-----  9 hrois bea         9 Dec  4  2013 servers
-rw-r-----  1 hrois bea       247 Nov 24 09:09 shutdown.py
-rwxr-x---  1 hrois bea       257 Aug 13  2013 startWebLogic.sh
drwxr-----  2 hrois bea         9 Jan  8 19:36 tmp