find / -perm +7000 ls -l `find / -perm +7000` ls -l `find / -perm +4000` ls -l `find / -perm +4000` >mode4000.lst who ps -exa|grep 'p0' kill -9 2299 who who ps -exa|more ps -exa|more ps -exa|grep 'czert' find / -name 'eggdrop' ls -al ls -ale ls -alc ls -alc /* >allfiles.crtime.lst ls -alc top ps -lu ps -alu ps -elu ps -xelu ps -xeluw ps -xeluwww ps -xeluwww >processes.lst ls -al pass* chmod o-r passwd chmod o-r passwd.OLD chmod o-r passwd~ ls -al pass* diff passwd passwd.OLD diff passwd~ passwd.OLD find / -mtime -5 ls -al `find / (-mtime -5) -or (-ctime -5)` find / (-mtime -5) -or (-ctime -5) find / (-mtime -5 -or -ctime -5) find / -mtime -5 -or -ctime -5 ls -al `find / -mtime -5 -or -ctime -5` ls -al `find / -mtime -5 -or -ctime -5` >po23april.files.lst ls -l ls -al pass* diff passwd passwd.OLD joe root joe passwd [A [A man mv cd /mnt/stoupa cd /tmp cd /mnt/stoupa/tmp ls ls -l ls -l FD mc ps -exa|grep 'egg' kill -9 26003 ps -exa|grep 'egg' touch cf290497 ls -l cf290497 chmod 777 cf290497 ls -l cf290497 chmod 666 cf290497 ls -l cf290497 ifconfig ls -l cf290497 ls -l cf290497 ls -l cf290497 tftp tftpd tftp ls -l cf290497 find / -iname 'tftp*' man grep grep -il 'tftpd' grep -il 'tftpd' * touch cr290497 chmod 666 cr290497 ls -l cd .. ls -l cd tmp ls -l ls -l chown guest cr290497 chgrp user cr290497 chgrp users cr290497 ls -l ls -l ifconfig ping plzen-cs ping plzen-cs ping plzen-cs who passwd df umount stoupa umount stoupa: umount stoupa:/ umount top:/ df cd /mnt/disk ls mkdir all cd all ls -al ls -al /etc/* ps -exa >ps.lst ls -al /* >allfiles.lst ls -l mc df umount stoupa: umount stoupa:/ mc telnet top telnet top telnet top telnet top telnet top telnet top who telnet top telnet top login plzen-cs touch cs290497 mode 666 cs290497 chmod 666 cs290497 diff cr290497 cs290497 telnet praha-cs.lanprojekt.cz telnet plzen-cs.lanprojekt.cz telnet plzen-cs.lanprojekt.cz telnet plzen-cs.lanprojekt.cz telnet top man ls man find mc mount -t nfs -o rw /stoupa:/ /mnt/stoupa mount -t nfs -o rw stoupa:/ /mnt/stoupa df man find man mv man copy man cp cd /dev/ptuo cd /dev/ptyo ls rm * rm -rf * ls -l ls mc top df lookup heartware.cz cd $HOME lookup heartware.cz nslookup heartware.cz nslookup rtware.cz man mail telnet plzen-cs telnet plzen-cs telnet plzen-cs ping www.top.cz telnet top telnet stoupa telnet top pwd ls ftp stoupa ftp top telnet stoupa ftp stoupa telnet top ftp top ftp telnet top telnet top telnet top top ps -exa|grep 'inet' logout e logout exit telnet top man top man ps telnet top telnet top cd /tmp df ls -l telnet plzen-cs who telnet plzen-cs telnet praha-cs df logout df man makefs man fschk man fsstat df df df df df df df mc cd /etc telnet top cd / ls -l cd /dev ls -l|more cd ptyo ls -l cd czertbot ls -l man ls man find ping gertruda ping www2 traceroute ww2 traceroute www2 man mount man 8 mount ls -l mv -v *.* /mnt/stoupa/tmp/x/ ls -l cp -rpfv *.* /mnt/stoupa/tmp/x/ cp -rpfv * /mnt/stoupa/tmp/x/ cd $HOME lookup atc.cz lookup audit.cz telnet stoupa telnet top telnet stoupa telnet top telnrt plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs cd /tmp mc ps -exa|grep 'tcp' mc env in.tftpd& ps -exa|grep 'ftp' ps -exa|grep 'ftp'|more in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& in.tftpd& ls -l ls -l tmp mc top mc kill -HUP `cat /var/run/inetd.pid` ls -l /var/run ps -exa|grep 'net' inetd& ps -exa|grep 'net' ps -exa|grep 'net' mc logout telnet plzen-cs telnet top telnet top telnet top telnet top telnet top telnet top mc mc ftp telnet plzen-cs telnet praha-cs telnet top ftp stoupa logout lpq lpq -l lpq -? lp lpq lp lpq -l lpc status ls cd /home/ftp ls cd pub/winproxy l telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet top telnet top cd /tmp mc exit touch prah_run touch plze_run touch plze_sta touch prah_sta ls -l chmod * 666 chmod 666 * ls -l ls -l [A ls -l chgrp mail root.lock ls -l diff plze_run plze_sta telnet plzen-cs telnet praha-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs logout who ifconfig cd/tmp cd /tmp telnet praha-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs logout telnet root telnet top telnet top telnet stoupa logout telnet top telnet stoupa telnet top logout ls -l cd /mnt cd / mc ps -exa|grep 'egg' ps -exa|grep 'bot' ps -exa|more ps -exa|more telnet plzen-cs logout cat passwd|grep '::' cat shadow|grep '::' ls -l sha* cat passwd passwd operator cat passwd passwd nobody passwd nobody cat passwd cat /etcpasswd cat /etc/passwd who top find / -iname 'cron*'|more [A diff a:g blovice ls -l kill -HUP `cat inetd.pid` ps -exa |grep 'inet' ps -exa |grep 'tel' ps -exa |grep 'inet' kill -HUP `cat sendmail.pid` cat sendmail.pid cat sendmail.pid ps -exa |grep 'tel' ps -exa |grep 'inet' ls -l ps -exa |grep 'tcp' tcpd& ps -exa |grep 'tcp' inetd& ps -exa |grep 'tcp' ps -exa |grep 'inet' mc logout telnet stoupa who logout .. ls -l cro* newaliases grep -c '64.129' * grep -l '64.129' * grep -l 'lan-uc' * grep -ls 'lan-uc' *.* grep -ls 'lan-uc' * grep -ls 'lan-uc' rc.d/* telnet stoupa telnet stoupa telnet stoupa who who find / -iname cf df telnet stoupa grep 'geis.cz' messages grep 'geis.cz' messages |more grep -v 'geis.cz' messages >mess grep -v 'hp4mp-dtp.l' mess >mes grep -v 'OSPF RECV' mes >me grep -i 'may' xferlog grep -i 'may' xferlog >/tmp/tmp/xferlog grep -i 'may' syslog >/tmp/tmp/syslog grep -vi 'message repe' me >mes grep -vi 'icmp redirect from 194.196.64.34' mes >mess ls -l ls -l|more chmod o-r passwd* ls -l|more ls -l g*|more chmod o-r group* ls -l sha* man shadow cd /tmp ls -l cd tmp ls -l ftp top login plzen-cs touch utmp cd nslookup spc.top.cz ping spc.top.cz telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet top telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs telnet plzen-cs nslookup heartware lookup heartware lookup heartware lookup heartware.cz lookup hebel.cz telnet plzen-cs man find tac_plus -v df cat tac_plus.2.1.tar |tar xvf - zcat tac_plus.3.0.12.alpha.tar.Z |tar xvf - ls -l mak* ls -li mak* ls -li Mak* lp users_guide lpq users_guide lpq users_guide lpq CHANGES ls passw* [1~ df mount -v /dev/hdb1 cd /etc fdisk /dev/hdb man sendmail.cf man sendmail find / -iname 'accoun*' diff sendmail sendmail.bak sendmail /? sendmail -? sendmail -h sendmail -v ls -l send* ls -lc send* ls -lu send* sendmail --version cd ../.. cd .. mc exit mc df mc ls -l cd /tmp ls -l rm pop3* df man spawn df ls -l logout df ls -l find / -iname 'account*' sed -e 1997/1998 accounting set sed sed -e 1997/1998 accounting sed 1997/1998 accounting sed 1997/1998 -f accounting sed -e y/1997/1998 accounting sed y/1997/1998 accounting sed y/1997/1998/ accounting grep 'stop' accounting|sed y/1997/1998/ cd /usr/local/etc/httpd/webs/dolphin-cgi l l *cgi l *txt logout cd /home/dolphin/www/pns l cd cgi-bin l cp *.* /usr/local/etc/httpd/webs/dolphin-cgi/ cd /usr/local/etc/httpd/webs/dolphin-cgi/ l l *.cpp l *.cgi cd /home/dolphin/www/pns cd cgi-bin l cd /usr/local/etc/httpd/webs/dolphin-cgi/ l *.cpp cc c.cpp -o c.cgi ftp stoupa ftp stoupa.lanprojekt.cz logout mc df cd / du -s * du -s * cd /usr ls -l ls du -s * cd local ls du -s * cd lib ls du -s * cd .. ls cd /usr ls l cd .. du -s * cd usr du -s * cd local du -s * cd etc ls du -s * cd httpd ls du -s * man cp cd .. cd httpd du -s * df mc df umount /dev/hdb1 df umount /dev/hdb1 umount /dev/hdb1 umount /dev/hdb1 df fdisk /dev/hdb fdisk /dev/hdb mke2fs -cv /dev/hdb1 mke2fs -v /dev/hdb2 cd /etc mc mount -v /dev/hdb1 mount -v /dev/hdb2 df cd / ls -l find / name 'easy' find / name 'easy'|more find / -name 'easy'|more grep /etc/passwd 'easy'|more grep 'asy' /etc/passwd|more nslookup spc.top.cz cat /etc/passwd|grep 'spc' cat /etc/passwd|grep 'pc' dtm cat /etc/passwd|grep 'ouku' cat /etc/passwd|grep 'ouk' cat /etc/passwd|grep 'ompu' tadduser spc tadduser tadduser cd /etc/namedb joe passwd cd .. joe passwd tadduser dtm cd /usr/local/tacacs sestav cd /home mc logout ls -l cd .. ls -l who passwd nri dtm dtm logout logout cd /etc ls -l mta* chmod 644 mtab~ ls -l mta* rm mtab~ man ext2fs man e2fs man mkext2fs man mke2fs mc logout ps -exa|grep 'tac' runtac ps -exa|grep 'tac' top df who who shutdown -r -t 30 now ./runtac ls run* ls -l run* chmod +111 runsql chmod a+x runsql ls -l run* ls -l cd /etc cat passwd|grep 'ta' cd namedb l ls -l cd /usr/local/tacacs cat tac_config|grep 'suk' [A [A [A dtm ls -l send* diff sendmail.cf sendmail.cf.zaloha diff sendmail.cf sendmail.cf.zaloha|more diff sendmail.cf sendmail.cf.zaloha ls -l sendma* find / -type f -iname '*mail*' -anewer sendmail.cf find / -type f -iname '*mail*' -anewer sendmail.cf >ml.tmp mc find / -iname cf ./sestav ps -exa|grep 'tac' top cd /usr mc runtac mc runtac m mc runtac ps -exa|grep 'tac' cd /etc df mc find / -name 'idas' find / -name 'iddas' mc nslookup -? nslookup -h env env|more passwd suk login suk lo logout passwd skoleni1 passwd skoleni2 passwd skoleni3 passwd skoleni4 logout ps -exa|grep 'tac' ps -exa|grep 'msq' mc telnet plzen-cs who who cd /etc/local mc cd /var/spool/mail ls -l fmplus ls -l ls -l fmplus joe fmplus joe fmplus joe fmplus ls -l plzen ls -l plzennaklfraus ls -l naklfraus ls -l fraus ls -l frauspha ls -l frauspha find / -iname '*m4' find / -iname '*m4'|more find / -iname '*.dir'|more find / -iname '*.par'|more find / -iname '*.pag'|more who mc find / -iname 'tac*' find / -iname 'tac*'|more man nslookup man nslookup>ns.tmp mc man man man -t nslookup man man man nslookup cd /usr/local mc ls -l tac_ ls -l tac_* ls -l tac_* ls find / -iname '*.pid' cd /etc ps -exa|grep 'tac' cat tacacs.pid cat tac_plus.pid kill -HUP `cat tac_plus.pid` ps -exa|grep 'tac' cd /tmp ls df mc cd /usr who top passwd ps -exa|grep 'tac' cat /etc/passwd|more shutdown -t 30 -r now who who who ls -l send* find / -name 'fotbalpress' cd /home/pech/ cd fotbalpress ls cd /usr/local/etc/httpd/ cd cgi-bin/counter ls cd conf ls joe count.cfg mc df find ./ -iname 'x*'|more find / -iname 'x*'|more find / -iname 'xfer*'|more cd /etc cat sendmail.cf|grep 'agro' cat sendmail.cf|grep 'arc' cat sendmail.cf|grep 'fmp' joe sendmail.cf dtm man ls man find cd /usr/bin ls mx mc ps ps -e ps -ex ps -ex |more ps -ex grep 'sen' ps -ex grep `sen` ps -ex grep -name `sen` ps -ex |grep -name `sen` ps -ex |grep 'sen' kill -HUP 104 ps -ex |grep 'sen' kill -HUP 104 ps -ex |grep 'sen' ps -ex |grep 'sen' kill -HUP 104 ps -ex |grep 'sen' ps -ex |grep 'sen' who ps -ex |grep 'sen' shutdown -rt 30 now mail nic@fmplus.cz mailq mailq ps -xa | grep sendmail kill 105 sendmail -bd -q 5m mailq sendmail -q & mailq pine mailq df man find man find man ps ps =m ps -m man ps man ps ps -f ps man ps ps -fw ps -fmw man ps ps -fmwxa ps -fmwxa >proc.lst top man top man top top -s >top.lst ls -l mc talk bobovsky@netra.pbko.sk ls -l cd / ls ls -l cd home ls ls|more ls|more ls -l|more mc who man talk man ls man find talk bobovsky@netra.pbko.sk man find passwd mc grep / 'arc-h' grep / *.* 'arc-h' man grep grep -e / 'arc-h' grep -e / `arc-h` grep / `arc-h` mem grep / 'arc-h' grep / -name 'arc-h' grep / -e 'arc-h' grep -e / 'arc-h' grep -e / 'arc-h*' grep -e / '*arc-h*' grep -e / '*arc' grep -e / 'arc' man grep grep -F / 'arc' grep -E / 'arc' grep -E /* 'arc' grep -E /* 'arc'|more grep -E /*.* 'arc'|more grep -E /* 'arc'|more man grep grep -E /* -e 'arc'|more grep -E /*.* -e 'arc'|more grep -E / -e 'arc'|more man grep grep -E -e / 'arc'|more grep -E -e 'arc'|more grep -l 'arc' * grep -l 'arc' /*|more grep -lsn 'arc' /*|more grep -lsn 'arc' `find / -type f *` find / -type f |grep -lsn 'arc' find / -type f grep -lsn -e 'arc' `find / -type f *` echo `find / -type f *` echo `find / -type f` grep -lsn -e 'arc' `find / -type f` grep -lsn -e 'arc' /etc/sendmail.cf grep -isn -e 'arc' /etc/sendmail.cf grep -isnl -e 'arc' /etc/sendmail.cf grep -isnL -e 'arc' /etc/sendmail.cf grep -isL -e 'arc' /etc/sendmail.cf grep -isl -e 'arc' /etc/sendmail.cf grep -is -e 'arc' /etc/sendmail.cf grep -is -e 'arc' / grep -is -e 'arc' /* grep -is -e 'arc' /etc grep -is -e 'arc' /etc/ grep -is -e 'arc' /etc/* grep -isl -e 'arc' /etc/* |more grep -is -e 'arc' /etc/* |more grep -is -e 'arc-h' /etc/* |more joe zakaznici mc grep -is -e 'arc-h' /etc/* |more mc mail nic@fmplus.cz mc adduser mc man grep who free mc w shutdown -r now man signal mc find / -iname signal.h cd /usr/include cat signal.h|more cat signal.h|more cat signal.h|more mc shutdown -r now ls -l rm pop3* man grep cat sendmail.pid ps -xa|grep 'send' kill -HUP `cat /var/run/sendmail.pid` ps -xa|grep 'send' ps -xa|grep 'send' grep -ivl 'mail' * grep -il 'mail' * ps -xalw ps -xalw >ps00.lst ls top logout find / -iname '*mail*'|more mailstat mailstats mailconfig man sendmail man sendmail man ls mc cd / mc cd /var/run ls cat sendmail.pid ps -exa|grep 'sendm' kill 103 ps -exa|grep 'sendm' /usr/sbin/sendmail -bd -q 5m ps -exa|grep 'sendm' cat sendmail.pid cd /etc mc who df