Hacked Servers
Aus HS Syswiki
(Unterschied zwischen Versionen)
Hja (Diskussion | Beiträge) |
Hja (Diskussion | Beiträge) |
||
| Zeile 3.102: | Zeile 3.102: | ||
-rw-r--r-- 1 root root 0 Sep 23 14:13 list_2015-09-23 | -rw-r--r-- 1 root root 0 Sep 23 14:13 list_2015-09-23 | ||
| + | </syntaxhighlight> | ||
| + | |||
| + | = tux27 = <!--T:1--> | ||
| + | '''tux27:''' | ||
| + | <syntaxhighlight lang="bash" style="font-size:8pt;"> | ||
| + | |||
</syntaxhighlight> | </syntaxhighlight> | ||
Version vom 23. September 2015, 14:15 Uhr
Command line used to find SUID files owned by user root:
mkdir -p ~/sysadmin/hack && /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n7 find / -type f -user root \( -perm -4000 -o -perm -2000 \) -exec ls -lg {} \; 2>/dev/null > ~/sysadmin/hack/suidfiles.txt &
Find hacked .htaccess files:
/usr/bin/nice -n 19 /usr/bin/ionice -c2 -n7 find /home/www/ -type f -name .htaccess -exec egrep -l 'alecspiegel|khiuh3.php|162.216.6.208' {} \; 2>/dev/null > ~/sysadmin/hack/list_`date -I` &
Remove hacks from .htaccess files:
cat list_2015-09-09 | awk '{print "bash remove.sh " $1}' | bash
Cleaned servers:
tux25
tux25:
tux25:~/sysadmin # cat suidfiles.txt -rwsr-xr-x 1 root 74720 12. Okt 2007 /bin/mount ---s--x--x 1 root 226 31. Aug 16:01 /bin/delp <<< Done by Sysad -rwsr-xr-x 1 root 57184 12. Okt 2007 /bin/umount -rwsr-xr-x 1 root 35936 21. Sep 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 21. Sep 2007 /bin/su -rwsr-xr-x 1 root 40192 21. Sep 2007 /bin/ping -rwsr-xr-x 1 shadow 23384 21. Sep 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 21. Sep 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 18. Jan 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 daemon 10952 21. Sep 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 27081 21. Sep 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 22. Sep 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 22. Sep 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 trusted 40672 21. Sep 2007 /usr/bin/crontab -rwsr-xr-x 1 root 10856 21. Sep 2007 /usr/bin/man -rwsr-xr-x 1 root 10856 21. Sep 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 78888 21. Sep 2007 /usr/bin/chfn -rwsr-xr-x 1 root 144344 27. Jan 2009 /usr/bin/sudo -rwsr-xr-x 1 root 19680 21. Sep 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15016 21. Sep 2007 /usr/bin/write -rwsr-xr-x 1 shadow 19552 21. Sep 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 82424 21. Sep 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 82744 21. Sep 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 78208 21. Sep 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 74232 21. Sep 2007 /usr/bin/chsh -rwxr-sr-x 1 tty 15152 21. Sep 2007 /usr/bin/wall -rwsr-x--- 1 dialout 58856 28. Mai 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 5. Dez 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 4. Jul 2008 /usr/sbin/zypp-checkpatches-wrapper -r-sr-xr-x 1 bin 189707 23. Aug 2010 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 23. Aug 2010 /usr/local/bin/dccproc -rws--x--x 1 root 58453 16. Jan 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 16. Jul 09:13 /usr/local/apache2-2.2.29/sbin/suexec2
tux163
tux163:
cat suidfiles.txt -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -r-sr-xr-x 1 bin 154584 Nov 24 2008 /var/dcc/libexec/dccsight -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rws--x--x 1 root 58453 Sep 4 15:12 /usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -r-sr-xr-x 1 bin 584923 Nov 24 2008 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Nov 24 2008 /usr/local/bin/cdcc -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd <<< change group password -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn <<< change finger information -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage <<< change user password expiry information -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp <<< Done by Sysad -rw-r--r-- 1 root root 0 Sep 9 09:21 list_2015-09-09
tux247
tux247:
-rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -r-sr-xr-x 1 bin 584923 May 2 2011 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 May 2 2011 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Sep 1 14:35 /usr/local/apache2-2.2.29/sbin/suexec2 -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp <<< Done by Sysad -rwsr-xr-x 1 root 661528 Feb 3 2013 /boot1/initr <<< Folder boot1 created by the hackers. initr fake bash created by the hacker (Folder removed) -r-sr-xr-x 1 bin 154584 May 2 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 431516 Sep 29 2011 /sbin/sid <<< Fake bash by the hacker (file removed) -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 0 Sep 9 09:23 list_2015-09-09 File: `/sbin/sid' Size: 431516 Blocks: 856 IO Block: 4096 regular file Device: 803h/2051d Inode: 1573092 Links: 1 Access: (4755/-rwsr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2015-09-08 02:02:43.000000000 +0200 Modify: 2011-09-29 18:34:41.000000000 +0200 Change: 2013-11-26 23:16:25.000000000 +0100
tux219
tux219:
cat suidfiles.txt -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 root 431516 Sep 29 2011 /sbin/sid <<< Fake bash by the hacker (file removed) -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp <<< Done by Sysad -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -r-sr-xr-x 1 bin 154584 Aug 29 2011 /var/dcc/libexec/dccsight -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -r-sr-xr-x 1 bin 189707 Aug 29 2011 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Aug 29 2011 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Sep 8 15:55 /usr/local/apache2-2.2.29/sbin/suexec2 -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rw-r--r-- 1 root root 0 Sep 9 09:24 list_2015-09-09 File: `/sbin/sid' Size: 431516 Blocks: 856 IO Block: 4096 regular file Device: 803h/2051d Inode: 1573092 Links: 1 Access: (4755/-rwsr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2015-09-09 09:57:13.000000000 +0200 Modify: 2011-09-29 18:34:41.000000000 +0200 Change: 2013-11-26 23:16:25.000000000 +0100
tux3.at
tux3.at:
cat suidfiles.txt -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Oct 19 2009 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -r-sr-xr-x 1 bin 584923 Oct 19 2009 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Oct 19 2009 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jun 5 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rw-r--r-- 1 root root 0 Sep 9 09:24 list_2015-09-09
tux197
tux197:
cat suidfiles.txt -r-sr-xr-x 1 bin 154584 Dec 22 2009 /var/dcc/libexec/dccsight -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -r-sr-xr-x 1 bin 584923 Dec 22 2009 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Dec 22 2009 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jun 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 431516 Sep 29 2011 /sbin/sid <<< Fake bash by the hacker (file removed) -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rw-r--r-- 1 root root 25769 Sep 9 11:19 list_2015-09-09 <<< Cleaned File: `/sbin/sid' Size: 431516 Blocks: 856 IO Block: 4096 regular file Device: 803h/2051d Inode: 1015851 Links: 1 Access: (4755/-rwsr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2015-09-09 01:13:42.000000000 +0200 Modify: 2011-09-29 18:34:41.000000000 +0200 Change: 2013-02-05 22:44:09.000000000 +0100
tux157
tux157:
broot@tux157.hoststar.ch -rw-r--r-- 1 root root 76224 3. Sep 2014 /home/www/confixx/html/skins/ex.php cat suidfiles.txt -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jun 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -r-sr-xr-x 1 bin 189707 Oct 20 2008 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Oct 20 2008 /usr/local/bin/dccproc -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -r-sr-xr-x 1 bin 154584 Oct 20 2008 /var/dcc/libexec/dccsight ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 431516 Sep 29 2011 /sbin/sid <<< Fake bash by the hacker (file removed) -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rw-r--r-- 1 root root 24986 Sep 9 15:50 list_2015-09-09 File: `/sbin/sid' Size: 431516 Blocks: 856 IO Block: 4096 regular file Device: 803h/2051d Inode: 844276 Links: 1 Access: (4755/-rwsr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2015-09-09 01:52:43.000000000 +0200 Modify: 2011-09-29 18:34:41.000000000 +0200 Change: 2013-01-07 23:43:23.000000000 +0100
tux155
tux155:
broot@tux155.hoststar.ch -rw-r--r-- 1 root root 76224 3. Sep 2014 /home/www/confixx/html/skins/ex.php cat suidfiles.txt ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -r-sr-xr-x 1 bin 154584 Sep 30 2008 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -r-sr-xr-x 1 bin 584923 Sep 30 2008 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Sep 30 2008 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 May 2 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 21467 Sep 9 16:19 list_2015-09-09
tux159
tux159:
broot@tux159.hoststar.ch -rw-r--r-- 1 root root 76224 3. Sep 2014 /home/www/confixx/html/skins/ex.php cat suidfiles.txt -r-sr-xr-x 1 bin 189707 Sep 19 2008 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Sep 19 2008 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Sep 9 09:23 /usr/local/apache2-2.2.29/sbin/suexec2 -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -r-sr-xr-x 1 bin 154584 Mar 2 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 68 Sep 10 08:01 list_2015-09-10
tux153
tux153:
broot@tux153.hoststar.ch -rw-r--r-- 1 root root 76224 3. Sep 2014 /home/www/confixx/html/skins/ex.php cat suidfiles.txt -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -r-sr-xr-x 1 bin 154584 Sep 16 2008 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -r-sr-xr-x 1 bin 584923 Sep 16 2008 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Sep 16 2008 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Jun 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rw-r--r-- 1 root root 21621 Sep 10 09:05 list_2015-09-10
tux93
tux193:
broot@tux193.hoststar.ch -rw-r--r-- 1 root root 76224 3. Sep 2014 /home/www/confixx/html/skins/ex.php -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rws--x--x 1 root 58453 Jul 16 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 189707 Nov 3 2009 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Nov 3 2009 /usr/local/bin/dccproc -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 431516 Sep 29 2011 /sbin/sid <<< Fake bash by the hacker (file removed) -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Feb 14 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 661528 Feb 5 2013 /boot1/initr <<< Fake bash by the hacker (file removed) -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rw-r--r-- 1 root root 26816 Sep 10 09:33 list_2015-09-10
tux195
tux195:
broot@tux195.hoststar.ch -rw-r--r-- 1 root root 76224 3. Sep 2014 /home/www/confixx/html/skins/ex.php cat suidfiles.txt -rwsr-xr-x 1 root 431516 Sep 29 2011 /sbin/sid <<< Fake bash by the hacker (file removed) -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rws--x--x 1 root 58453 Jul 16 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 189707 Nov 18 2009 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Nov 18 2009 /usr/local/bin/dccproc -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -r-sr-xr-x 1 bin 154584 Dec 12 2011 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 27291 Sep 10 11:39 list_2015-09-10
tux199
tux199:
broot@tux199.hoststar.ch -rw-r--r-- 1 root root 76224 3. Sep 2014 /home/www/confixx/html/skins/ex.php cat suidfiles.txt -r-sr-xr-x 1 bin 154584 Jan 9 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Sep 9 09:34 /usr/local/apache2-2.2.29/sbin/suexec2 -r-sr-xr-x 1 bin 189707 May 26 2008 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 May 26 2008 /usr/local/bin/dccproc -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rw-r--r-- 1 root root 47366 Sep 10 13:56 list_2015-09-10
tux15
tux15:
-rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jul 15 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -r-sr-xr-x 1 bin 189707 Jul 27 2009 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Jul 27 2009 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 154584 Mar 26 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 3130738 Aug 3 2014 /lib/libbz2.so <<< Fake bash by the hacker (file removed) -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 0 Sep 10 16:37 list_2015-09-10 tux15:/lib # ./libbz2.so tux15:/lib# exit exit tux15:/lib #
tux281
tux281:
cat suidfiles.txt -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-sr-xr-x 1 daemon 584923 Jan 18 2011 /usr/local/bin/dccproc -r-sr-xr-x 1 daemon 189707 Jan 18 2011 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec2 -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /dcc/libexec/dccsight -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /mnt1/usr/lib/majordomo/wrapper -rwxr-sr-x 1 103 15056 Sep 22 2007 /mnt1/usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /mnt1/usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /mnt1/usr/lib64/pt_chown -rwsr-x--- 1 dialout 58856 May 28 2008 /mnt1/usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /mnt1/usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /mnt1/usr/sbin/zypp-checkpatches-wrapper -rws--x--x 1 root 58453 Jan 16 2015 /mnt1/usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /mnt1/usr/local/apache2-2.2.29/sbin/suexec.confixx -r-sr-xr-x 1 daemon 584923 Jan 18 2011 /mnt1/usr/local/bin/dccproc -r-sr-xr-x 1 daemon 189707 Jan 18 2011 /mnt1/usr/local/bin/cdcc -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /mnt1/usr/bin/chsh -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /mnt1/usr/bin/passwd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /mnt1/usr/bin/expiry -rwsr-xr-x 1 root 144344 Jan 27 2009 /mnt1/usr/bin/sudo -rwxr-sr-x 1 tty 15152 Sep 21 2007 /mnt1/usr/bin/wall -rwsr-xr-x 1 root 19680 Sep 21 2007 /mnt1/usr/bin/newgrp -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /mnt1/usr/bin/chfn -rwxr-sr-x 1 tty 15016 Sep 21 2007 /mnt1/usr/bin/write -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /mnt1/usr/bin/chage -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /mnt1/usr/bin/crontab -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /mnt1/usr/bin/gpasswd -rwsr-xr-x 1 root 10856 Sep 21 2007 /mnt1/usr/bin/mandb -rwsr-xr-x 1 root 10856 Sep 21 2007 /mnt1/usr/bin/man -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /mnt1/sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /mnt1/sbin/unix_chkpwd -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /mnt1/dcc/libexec/dccsight ---s--x--x 1 root 226 Aug 31 16:01 /mnt1/bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /mnt1/bin/mount -rwsr-xr-x 1 root 32304 Sep 21 2007 /mnt1/bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /mnt1/bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /mnt1/bin/ping -rwsr-xr-x 1 root 57184 Oct 12 2007 /mnt1/bin/umount -rw-r--r-- 1 broot root 0 Sep 10 18:54 list_2015-09-10
tux13
tux13:
broot@tux13.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [........] -r-sr-xr-x 1 bin 154584 Nov 24 2009 /var/dcc/libexec/dccsight -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rws--x--x 1 root 58453 Sep 10 20:56 /usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -r-sr-xr-x 1 bin 189707 Nov 24 2009 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Nov 24 2009 /usr/local/bin/dccproc -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rw-r--r-- 1 root root 94 Sep 11 09:13 list_2015-09-11
tux81
tux81:
broot@tux81.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -r-sr-xr-x 1 bin 154584 Feb 17 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rws--x--x 1 root 58453 Jun 5 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 189707 Feb 17 2011 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Feb 17 2011 /usr/local/bin/dccproc -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 0 Sep 11 10:30 list_2015-09-11
tux75
tux75:
-r-sr-xr-x 1 bin 584923 Aug 19 2009 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Aug 19 2009 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jul 15 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -r-sr-xr-x 1 bin 154584 Aug 19 2009 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 30521 Sep 11 14:58 list_2015-09-11
tux121
tux121:
tux121:~/sysadmin/hack # cat suidfiles.txt -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -r-sr-xr-x 1 bin 154584 Dec 9 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -r-sr-xr-x 1 bin 584923 Dec 19 2007 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Dec 19 2007 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jul 16 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rw-r--r-- 1 root root 0 Sep 12 12:50 list_2015-09-12
tux21.at
tux21.at:
-rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -r-sr-xr-x 1 bin 189707 Jun 20 2011 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Jun 20 2011 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Sep 9 14:51 /usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -r-sr-xr-x 1 bin 154584 Jun 20 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rw-r--r-- 1 broot root 0 Sep 13 17:49 list_2015-09-13
tux119
tux119:
broot@tux119.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rws--x--x 1 root 58453 Sep 7 14:59 /usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -r-sr-xr-x 1 bin 189707 Aug 21 2008 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Aug 21 2008 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 154584 Oct 20 2011 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 45323 Sep 14 08:59 list_2015-09-14
tux147
tux147:
broot@tux147.hoststar.ch -rwsr-xr-x 1 root web97 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rws--x--x 1 root 58453 May 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 584923 Jul 5 2008 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Jul 5 2008 /usr/local/bin/cdcc -rwsr-xr-x 1 root 661528 Feb 4 2012 /usr/local/bin/php5 <<< Fake bash by the hacker (file removed) -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-sr-xr-x 1 bin 154584 Jul 5 2008 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd File: `/usr/local/bin/php5' Size: 661528 Blocks: 1304 IO Block: 4096 regular file Device: 803h/2051d Inode: 2574533 Links: 1 Access: (4755/-rwsr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2015-09-14 00:57:03.000000000 +0200 Modify: 2012-02-04 23:25:05.000000000 +0100 Change: 2013-03-14 15:37:01.000000000 +0100 tux147:~/sysadmin/hack # /usr/local/bin/php5 tux147:~/sysadmin/hack# exit exit -rw-r--r-- 1 root root 0 Sep 14 10:04 list_2015-09-14
tux151
tux151:
broot@tux151.hoststar.ch -rwsr-xr-x 1 root web29 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Jul 5 2008 /var/dcc/libexec/dccsight ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rws--x--x 1 root 58453 Jun 11 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 189707 Jul 5 2008 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Jul 5 2008 /usr/local/bin/dccproc -rw-r--r-- 1 root root 0 Sep 14 11:27 list_2015-09-14
tux123
tux123:
broot@tux123.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rws--x--x 1 root 58453 Jul 16 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 584923 Jan 11 2008 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Jan 11 2008 /usr/local/bin/cdcc -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -r-sr-xr-x 1 bin 154584 Jun 7 2012 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 0 Sep 14 14:09 list_2015-09-14
tux171
tux171:
broot@tux171.hoststar.ch -rwsr-xr-x 1 root 1272 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -r-sr-xr-x 1 bin 154584 Dec 7 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -r-sr-xr-x 1 bin 189707 Feb 24 2009 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Feb 24 2009 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jul 16 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rw-r--r-- 1 root root 0 Sep 14 15:56 list_2015-09-14
tux167
tux167:
broot@tux167.hoststar.ch -rwsr-xr-x 1 root web78 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jul 16 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -r-sr-xr-x 1 bin 584923 Dec 22 2008 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Dec 22 2008 /usr/local/bin/cdcc -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -r-sr-xr-x 1 bin 154584 Jan 23 2012 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 32 Sep 14 17:40 list_2015-09-14
tux73
tux173:
broot@tux173.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -r-sr-xr-x 1 bin 189707 May 5 2009 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 May 5 2009 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Jun 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -r-sr-xr-x 1 bin 154584 May 5 2009 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rw-r--r-- 1 root root 0 Sep 15 08:13 list_2015-09-15
tux185
tux185:
broot@tux185.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -r-sr-xr-x 1 bin 189707 Jul 22 2009 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Jul 22 2009 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jul 16 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-sr-xr-x 1 bin 154584 Jan 11 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 21702 Sep 15 08:47 list_2015-09-15
tux181
tux181:
broot@tux181.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -r-sr-xr-x 1 bin 154584 Apr 16 2012 /var/dcc/libexec/dccsight ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -r-sr-xr-x 1 bin 584923 May 28 2009 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 May 28 2009 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Jun 13 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rw-r--r-- 1 root root 0 Sep 15 09:20 list_2015-09-15
tux187
tux187:
broot@tux187.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jun 13 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -r-sr-xr-x 1 bin 189707 Aug 11 2009 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Aug 11 2009 /usr/local/bin/dccproc -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-sr-xr-x 1 bin 154584 Dec 7 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rw-r--r-- 1 root root 0 Sep 15 09:59 list_2015-09-15
tux179
tux179:
broot@tux179.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -r-sr-xr-x 1 bin 154584 Oct 20 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-sr-xr-x 1 bin 189707 Sep 25 2008 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Sep 25 2008 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Aug 31 09:38 /usr/local/apache2-2.2.29/sbin/suexec2 -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwxr-sr-x 1 tty 10808 Sep 21 2007 /usr/sbin/utempter -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rw-r--r-- 1 root root 0 Sep 15 13:18 list_2015-09-15
tux203
tux203:
broot@tux203.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -r-sr-xr-x 1 bin 154584 May 20 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rws--x--x 1 root 58453 Jun 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 189707 Feb 3 2010 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Feb 3 2010 /usr/local/bin/dccproc -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rw-r--r-- 1 root root 21243 Sep 15 10:40 list_2015-09-15
tux189
tux189:
cat suidfiles.txt -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 root 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jun 13 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -r-sr-xr-x 1 bin 154584 Feb 15 2012 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 22156 Sep 16 09:51 list_2015-09-16
tux91
tux191:
broot@tux191.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Jan 11 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rws--x--x 1 root 58453 Jun 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 584923 Jun 24 2010 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Jun 24 2010 /usr/local/bin/cdcc -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rw-r--r-- 1 root root 27631 Sep 16 10:57 list_2015-09-16
tux201
tux201:
broot@tux201.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 May 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -r-sr-xr-x 1 bin 584923 Jan 11 2010 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Jan 11 2010 /usr/local/bin/cdcc -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Dec 9 2011 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 23023 Sep 16 12:37 list_2015-09-16
tux211
tux211:
broot@tux211.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rws--x--x 1 root 58453 May 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 584923 Apr 7 2010 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Apr 7 2010 /usr/local/bin/cdcc -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-sr-xr-x 1 bin 154584 Feb 28 2012 /var/dcc/libexec/dccsight ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 0 Sep 16 13:32 list_2015-09-16
tux207
tux207:
broot@tux207.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -r-sr-xr-x 1 bin 154584 Dec 9 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-sr-xr-x 1 bin 584923 Mar 14 2010 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Mar 14 2010 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jul 16 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rw-r--r-- 1 root root 22987 Sep 16 14:37 list_2015-09-16
tux205
tux205:
broot@tux205.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-sr-xr-x 1 bin 584923 Feb 23 2010 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Feb 23 2010 /usr/local/bin/cdcc -rws--x--x 1 root 58453 May 30 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Feb 23 2010 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 23067 Sep 16 15:44 list_2015-09-16
tux209
tux209:
broot@tux209.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Mar 30 2010 /var/dcc/libexec/dccsight -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rws--x--x 1 root 58453 Jun 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 189707 Mar 30 2010 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Mar 30 2010 /usr/local/bin/dccproc -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rw-r--r-- 1 root root 0 Sep 16 16:15 list_2015-09-16
tux231
tux231:
broot@tux231.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [........] cat suidfiles.txt -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 May 30 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -r-sr-xr-x 1 bin 584923 Dec 3 2010 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Dec 3 2010 /usr/local/bin/cdcc -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -r-sr-xr-x 1 bin 154584 Dec 3 2010 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 0 Sep 16 17:21 list_2015-09-16
tu213
tux213:
broot@tux213.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -r-sr-xr-x 1 bin 584923 May 18 2010 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 May 18 2010 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 May 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -r-sr-xr-x 1 bin 154584 May 18 2010 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rw-r--r-- 1 root root 0 Sep 17 08:52 list_2015-09-17
tux233
tux233:
broot@tux233.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -r-sr-xr-x 1 bin 154584 Dec 27 2010 /var/dcc/libexec/dccsight -r-sr-xr-x 1 bin 189707 Dec 27 2010 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Dec 27 2010 /usr/local/bin/dccproc -rws--x--x 1 root 58453 May 30 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 0 Sep 17 09:39 list_2015-09-17
tux221
tux221:
broot@tux221.hoststar.ch -rwxr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -r-sr-xr-x 1 bin 154584 Aug 17 2010 /var/dcc/libexec/dccsight -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -r-sr-xr-x 1 bin 584923 Aug 17 2010 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Aug 17 2010 /usr/local/bin/cdcc -rws--x--x 1 root 58453 May 13 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rw-r--r-- 1 root root 0 Sep 17 10:54 list_2015-09-17
tux217
tux217:
broot@tux217.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jul 17 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -r-sr-xr-x 1 bin 584923 Jul 19 2010 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Jul 19 2010 /usr/local/bin/cdcc -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -r-sr-xr-x 1 bin 154584 Jul 19 2010 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rw-r--r-- 1 root root 0 Sep 17 11:58 list_2015-09-17
tux223
tux223:
broot@tux223.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -r-sr-xr-x 1 bin 189707 Aug 20 2010 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Aug 20 2010 /usr/local/bin/dccproc -rws--x--x 1 root 58453 May 1 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -r-sr-xr-x 1 bin 154584 Feb 27 2012 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 0 Sep 17 13:53 list_2015-09-17
tux241
tux241:
broot@tux241.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 10869 Nov 8 2012 /bin/config -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 10869 Nov 8 2012 /etc/conf <<< Fake bash by the hacker (file removed) -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Feb 15 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-sr-xr-x 1 bin 189707 Feb 15 2011 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Feb 15 2011 /usr/local/bin/dccproc -rwsr-xr-x 1 root 84206 Nov 8 2012 /usr/local/bin/ping -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jun 5 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown File: `/etc/conf' Size: 10869 Blocks: 24 IO Block: 4096 regular file Device: 803h/2051d Inode: 1998973 Links: 1 Access: (4755/-rwsr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2015-09-17 01:17:52.000000000 +0200 Modify: 2012-11-08 21:52:07.000000000 +0100 Change: 2013-04-19 16:41:27.000000000 +0200 -rw-r--r-- 1 root root 0 Sep 17 16:01 list_2015-09-17
tux125
tux125:
cat suidfiles.txt -r-sr-xr-x 1 bin 154584 Jan 23 2008 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rws--x--x 1 root 58453 Jun 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 189707 Jan 23 2008 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Jan 23 2008 /usr/local/bin/dccproc -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rw-r--r-- 1 root root 0 Sep 17 18:42 list_2015-09-17
tux243
tux243:
broot@tux243.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Mar 9 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-sr-xr-x 1 bin 189707 Mar 9 2011 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Mar 9 2011 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 May 2 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rw-r--r-- 1 root root 0 Sep 17 19:34 list_2015-09-17
tux225
tux225:
broot@tux225.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Sep 20 2010 /var/dcc/libexec/dccsight -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jun 13 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -r-sr-xr-x 1 bin 584923 Sep 20 2010 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Sep 20 2010 /usr/local/bin/cdcc -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rw-r--r-- 1 root root 0 Sep 18 08:35 list_2015-09-18
tux245
tux245:
broot@tux245.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Apr 15 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 May 14 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -r-sr-xr-x 1 bin 189707 Apr 15 2011 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Apr 15 2011 /usr/local/bin/dccproc -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rw-r--r-- 1 root root 132 Sep 18 09:47 list_2015-09-18
tux259
tux259:
broot@tux259.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Jul 7 09:30 /usr/local/apache2-2.2.29/sbin/suexec2 -r-sr-xr-x 1 bin 584923 Aug 16 2011 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Aug 16 2011 /usr/local/bin/cdcc -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -r-sr-xr-x 1 bin 154584 Aug 16 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rw-r--r-- 1 root root 0 Sep 18 13:13 list_2015-09-18
tux279
tux279:
broot@tux279.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid -r-sr-xr-x 1 bin 584923 Sep 16 2011 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Sep 16 2011 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Sep 9 09:57 /usr/local/apache2-2.2.29/sbin/suexec2 -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -r-sr-xr-x 1 bin 154584 Sep 26 2012 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 0 Sep 18 15:34 list_2015-09-18
tux299
tux299:
broot@tux299.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -r-sr-xr-x 1 bin 154584 Oct 10 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -r-sr-xr-x 1 bin 189707 Jan 5 2011 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Jan 5 2011 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Sep 9 10:24 /usr/local/apache2-2.2.29/sbin/suexec2 -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rw-r--r-- 1 root root 0 Sep 21 13:36 list_2015-09-21
tux319
tux319:
broot@tux319.hoststar.ch -rwsr-xr-x 1 root web90 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -r-sr-xr-x 1 bin 154584 Jul 26 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-sr-xr-x 1 bin 584923 Jul 26 2011 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Jul 26 2011 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Sep 9 14:09 /usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rw-r--r-- 1 root root 0 Sep 21 16:30 list_2015-09-21
tux237
tux237:
broot@tux237.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -r-sr-xr-x 1 bin 154584 Feb 29 2012 /var/dcc/libexec/dccsight -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-sr-xr-x 1 bin 189707 Feb 8 2011 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Feb 8 2011 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 Jul 16 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rw-r--r-- 1 root root 0 Sep 22 09:12 list_2015-09-22
tux99
tux99:
broot@tux99.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /boot1/initr cat suidfiles.txt -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -r-sr-xr-x 1 bin 154584 Oct 14 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -r-sr-xr-x 1 bin 189707 Jul 5 2008 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Jul 5 2008 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Sep 7 14:53 /usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 0 Sep 22 11:12 list_2015-09-22
tux107
tux107:
broot@tux107.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 7 2013 /boot1/initr cat suidfiles.txt -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Aug 23 2010 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-sr-xr-x 1 bin 584923 Aug 23 2010 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Aug 23 2010 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Sep 11 16:08 /usr/local/apache2-2.2.29/sbin/suexec2 -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rw-r--r-- 1 root root 0 Sep 22 11:50 list_2015-09-22
tux251
tux251:
broot@tux251.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /boot1/initr broot@tux251.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /usr/local/bin/php5 cat suidfiles.txt -r-sr-xr-x 1 bin 154584 Jun 22 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -r-sr-xr-x 1 bin 189707 Jun 22 2011 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Jun 22 2011 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Jul 16 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 Apr 5 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-xr-sr-x 1 mail 2712278 Nov 15 2007 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rw-r--r-- 1 root root 0 Sep 22 12:53 list_2015-09-22
tux11
tux11:
broot@tux11.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so cat suidfiles.txt ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -r-sr-xr-x 1 bin 154584 Jan 25 2012 /var/dcc/libexec/dccsight -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -r-sr-xr-x 1 bin 584923 Aug 26 2009 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Aug 26 2009 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Sep 10 20:42 /usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 32 Sep 22 15:17 list_2015-09-22
tux131
tux131:
cat suidfiles.txt -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -r-sr-xr-x 1 bin 154584 Apr 13 2008 /var/dcc/libexec/dccsight -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Sep 22 16:28 /usr/local/apache2-2.2.29/sbin/suexec2 -r-sr-xr-x 1 bin 189707 Apr 13 2008 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Apr 13 2008 /usr/local/bin/dccproc -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 0 Sep 22 17:18 list_2015-09-22
tux9
tux9:
-rwsr-xr-x 1 shadow 10864 21. Sep 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 21. Sep 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 root 35936 21. Sep 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 21. Sep 2007 /bin/ping -rwsr-xr-x 1 root 57184 12. Okt 2007 /bin/umount -rwsr-xr-x 1 root 74720 12. Okt 2007 /bin/mount ---s--x--x 1 root 226 31. Aug 16:01 /bin/delp -rwsr-xr-x 1 root 32304 21. Sep 2007 /bin/su -rwsr-xr-x 1 root 10856 22. Sep 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 22. Sep 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 21. Sep 2007 /usr/lib64/pt_chown -r-xr-sr-x 1 mail 2856959 5. Dez 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 4. Jul 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 28. Mai 2008 /usr/sbin/mtr -rwsr-xr-x 1 shadow 82744 21. Sep 2007 /usr/bin/chage -rwxr-sr-x 1 tty 15152 21. Sep 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 21. Sep 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 74232 21. Sep 2007 /usr/bin/chsh -rwsr-xr-x 1 trusted 40672 21. Sep 2007 /usr/bin/crontab -rwxr-sr-x 1 tty 15016 21. Sep 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 21. Sep 2007 /usr/bin/man -rwsr-xr-x 1 shadow 19552 21. Sep 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 78208 21. Sep 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 78888 21. Sep 2007 /usr/bin/chfn -rwsr-xr-x 1 root 19680 21. Sep 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82424 21. Sep 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 144344 27. Jan 2009 /usr/bin/sudo -rws--x--x 1 root 58453 16. Jan 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 10. Sep 20:42 /usr/local/apache2-2.2.29/sbin/suexec2 -r-sr-xr-x 1 bin 584923 24. Nov 2008 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 24. Nov 2008 /usr/local/bin/cdcc -rwsr-xr-x 1 daemon 10952 21. Sep 2007 /usr/lib/majordomo/wrapper -r-sr-xr-x 1 bin 154584 5. Dez 2011 /var/dcc/libexec/dccsight -rw-r--r-- 1 broot root 0 22. Sep 12:59 list_2015-09-22
tux51
tux51:
-r-sr-xr-x 1 bin 189707 7. Okt 2009 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 7. Okt 2009 /usr/local/bin/dccproc -rws--x--x 1 root 58453 16. Jan 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 11. Sep 13:32 /usr/local/apache2-2.2.29/sbin/suexec2 -rwsr-x--- 1 dialout 58856 28. Mai 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 5. Dez 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 4. Jul 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 shadow 82424 21. Sep 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15016 21. Sep 2007 /usr/bin/write -rwsr-xr-x 1 root 10856 21. Sep 2007 /usr/bin/mandb -rwsr-xr-x 1 root 19680 21. Sep 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 19552 21. Sep 2007 /usr/bin/expiry -rwsr-xr-x 1 trusted 40672 21. Sep 2007 /usr/bin/crontab -rwsr-xr-x 1 root 144344 27. Jan 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 74232 21. Sep 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 78208 21. Sep 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 78888 21. Sep 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 21. Sep 2007 /usr/bin/man -rwsr-xr-x 1 shadow 82744 21. Sep 2007 /usr/bin/chage -rwxr-sr-x 1 tty 15152 21. Sep 2007 /usr/bin/wall -rwsr-xr-x 1 daemon 10952 21. Sep 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 27081 21. Sep 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 22. Sep 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 22. Sep 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 shadow 23384 21. Sep 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 21. Sep 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 root 40192 21. Sep 2007 /bin/ping ---s--x--x 1 root 226 31. Aug 16:01 /bin/delp -rwsr-xr-x 1 root 57184 12. Okt 2007 /bin/umount -rwsr-xr-x 1 root 74720 12. Okt 2007 /bin/mount -rwsr-xr-x 1 root 32304 21. Sep 2007 /bin/su -rwsr-xr-x 1 root 35936 21. Sep 2007 /bin/ping6 -r-sr-xr-x 1 bin 154584 10. Jan 2012 /var/dcc/libexec/dccsight -rw-r--r-- 1 broot root 0 22. Sep 15:23 list_2015-09-22
tux175
tux175:
-rwsr-xr-x 1 root 35936 21. Sep 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 21. Sep 2007 /bin/ping -rwsr-xr-x 1 root 32304 21. Sep 2007 /bin/su -rwsr-xr-x 1 root 57184 12. Okt 2007 /bin/umount -rwsr-xr-x 1 root 74720 12. Okt 2007 /bin/mount ---s--x--x 1 root 226 31. Aug 16:01 /bin/delp -rwsr-xr-x 1 shadow 23384 21. Sep 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 21. Sep 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 14. Feb 2012 /var/dcc/libexec/dccsight -r-sr-xr-x 1 bin 584923 18. Mär 2009 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 18. Mär 2009 /usr/local/bin/cdcc -rws--x--x 1 root 58453 5. Apr 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -rws--x--x 1 root 58453 16. Jul 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rwxr-sr-x 1 tty 15016 21. Sep 2007 /usr/bin/write -rwsr-xr-x 1 shadow 19552 21. Sep 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15152 21. Sep 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 82744 21. Sep 2007 /usr/bin/chage -rwsr-xr-x 1 root 10856 21. Sep 2007 /usr/bin/mandb -rwsr-xr-x 1 shadow 82424 21. Sep 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 19680 21. Sep 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 74232 21. Sep 2007 /usr/bin/chsh -rwsr-xr-x 1 root 144344 27. Jan 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 21. Sep 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78208 21. Sep 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 78888 21. Sep 2007 /usr/bin/chfn -rwsr-xr-x 1 trusted 40672 21. Sep 2007 /usr/bin/crontab -rwsr-xr-x 1 daemon 10952 21. Sep 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 10856 22. Sep 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 22. Sep 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 27081 21. Sep 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10784 4. Jul 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 28. Mai 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2712278 15. Nov 2007 /usr/sbin/sendmail -rw-r--r-- 1 broot root 1929 22. Sep 16:54 suidfiles.txt
tux111
tux111:
broot@tux111.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid cat suidfiles.txt -r-sr-xr-x 1 bin 154584 Feb 15 2011 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -r-sr-xr-x 1 bin 189707 Feb 15 2011 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 Feb 15 2011 /usr/local/bin/dccproc -rws--x--x 1 root 58453 Sep 11 16:09 /usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rw-r--r-- 1 root root 0 Sep 23 09:51 list_2015-09-23
tux229
tux229:
-rwsr-xr-x 1 root 27081 21. Sep 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 22. Sep 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 22. Sep 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 shadow 82424 21. Sep 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15016 21. Sep 2007 /usr/bin/write -rwsr-xr-x 1 root 19680 21. Sep 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 10856 21. Sep 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15152 21. Sep 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 78888 21. Sep 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 78208 21. Sep 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 82744 21. Sep 2007 /usr/bin/chage -rwsr-xr-x 1 root 144344 27. Jan 2009 /usr/bin/sudo -rwsr-xr-x 1 trusted 40672 21. Sep 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 74232 21. Sep 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 21. Sep 2007 /usr/bin/man -rwsr-xr-x 1 shadow 19552 21. Sep 2007 /usr/bin/expiry -rwsr-x--- 1 dialout 58856 28. Mai 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 4. Jul 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2712278 15. Nov 2007 /usr/sbin/sendmail -rws--x--x 1 root 58453 16. Jul 2013 /usr/local/apache2-2.2.24/sbin/suexec2 -rws--x--x 1 root 58453 5. Apr 2013 /usr/local/apache2-2.2.24/sbin/suexec.confixx -r-sr-xr-x 1 bin 189707 9. Nov 2010 /usr/local/bin/cdcc -r-sr-xr-x 1 bin 584923 9. Nov 2010 /usr/local/bin/dccproc -rwsr-xr-x 1 daemon 10952 21. Sep 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 40192 21. Sep 2007 /bin/ping -rwsr-xr-x 1 root 57184 12. Okt 2007 /bin/umount ---s--x--x 1 root 226 31. Aug 16:01 /bin/delp -rwsr-xr-x 1 root 74720 12. Okt 2007 /bin/mount -rwsr-xr-x 1 root 32304 21. Sep 2007 /bin/su -rwsr-xr-x 1 root 35936 21. Sep 2007 /bin/ping6 -rwsr-xr-x 1 shadow 10864 21. Sep 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 21. Sep 2007 /sbin/unix_chkpwd -r-sr-xr-x 1 bin 154584 27. Feb 2012 /var/dcc/libexec/dccsight -rw-r--r-- 1 broot root 0 23. Sep 09:37 list_2015-09-23
tux285
tux285:
cat suidfiles.txt ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 trusted 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 trusted 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 trusted 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 trusted 78888 Sep 21 2007 /usr/bin/chfn -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 trusted 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 trusted 78208 Sep 21 2007 /usr/bin/passwd -r-sr-xr-x 1 bin 584923 Jan 18 2011 /usr/local/bin/dccproc -r-sr-xr-x 1 bin 189707 Jan 18 2011 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 bin 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-x--- 1 cdrom 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 trusted 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 trusted 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 bin 154584 Feb 15 2012 /dcc/libexec/dccsight -r-sr-xr-x 1 bin 154584 Feb 15 2012 /var/dcc/libexec/dccsight -rw-r--r-- 1 root root 0 Sep 23 11:03 list_2015-09-23
tux283
tux283:
cat suidfiles.txt -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /dcc/libexec/dccsight -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -r-sr-xr-x 1 daemon 584923 Jan 18 2011 /usr/local/bin/dccproc -r-sr-xr-x 1 daemon 189707 Jan 18 2011 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec2 -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 0 Sep 23 11:44 list_2015-09-23
tux277
tux277:
cat suidfiles.txt -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /dcc/libexec/dccsight ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rws--x--x 1 root 58453 Sep 18 20:08 /usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -r-sr-xr-x 1 daemon 189707 Jan 18 2011 /usr/local/bin/cdcc -r-sr-xr-x 1 daemon 584923 Jan 18 2011 /usr/local/bin/dccproc -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rw-r--r-- 1 root root 0 Sep 23 11:56 list_2015-09-23
tux275
tux275:
cat suidfiles.txt -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -rws--x--x 1 root 58453 Sep 18 20:24 /usr/local/apache2-2.2.29/sbin/suexec2 -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -r-sr-xr-x 1 daemon 584923 Jan 18 2011 /usr/local/bin/dccproc -r-sr-xr-x 1 daemon 189707 Jan 18 2011 /usr/local/bin/cdcc -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /var/dcc/libexec/dccsight -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /dcc/libexec/dccsight -rw-r--r-- 1 root root 0 Sep 23 12:03 list_2015-09-23
tux273
tux273:
cat suidfiles.txt -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Sep 19 10:13 /usr/local/apache2-2.2.29/sbin/suexec2 -r-sr-xr-x 1 daemon 584923 Jan 18 2011 /usr/local/bin/dccproc -r-sr-xr-x 1 daemon 189707 Jan 18 2011 /usr/local/bin/cdcc -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /var/dcc/libexec/dccsight -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /dcc/libexec/dccsight -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rw-r--r-- 1 root root 0 Sep 23 12:19 list_2015-09-23
tux271
tux271:
cat suidfiles.txt ---s--x--x 1 root 226 Aug 31 16:01 /bin/delp -rwsr-xr-x 1 root 74720 Oct 12 2007 /bin/mount -rwsr-xr-x 1 root 57184 Oct 12 2007 /bin/umount -rwsr-xr-x 1 root 40192 Sep 21 2007 /bin/ping -rwsr-xr-x 1 root 32304 Sep 21 2007 /bin/su -rwsr-xr-x 1 root 35936 Sep 21 2007 /bin/ping6 -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /dcc/libexec/dccsight -r-sr-xr-x 1 daemon 154584 Feb 15 2012 /var/dcc/libexec/dccsight -rwsr-xr-x 1 shadow 23384 Sep 21 2007 /sbin/unix_chkpwd -rwsr-xr-x 1 shadow 10864 Sep 21 2007 /sbin/unix2_chkpwd -rwsr-xr-x 1 shadow 82424 Sep 21 2007 /usr/bin/gpasswd -rwxr-sr-x 1 tty 15016 Sep 21 2007 /usr/bin/write -rwsr-xr-x 1 trusted 40672 Sep 21 2007 /usr/bin/crontab -rwsr-xr-x 1 shadow 74232 Sep 21 2007 /usr/bin/chsh -rwxr-sr-x 1 tty 15152 Sep 21 2007 /usr/bin/wall -rwsr-xr-x 1 root 144344 Jan 27 2009 /usr/bin/sudo -rwsr-xr-x 1 shadow 19552 Sep 21 2007 /usr/bin/expiry -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/man -rwsr-xr-x 1 shadow 82744 Sep 21 2007 /usr/bin/chage -rwsr-xr-x 1 shadow 78888 Sep 21 2007 /usr/bin/chfn -rwsr-xr-x 1 root 10856 Sep 21 2007 /usr/bin/mandb -rwsr-xr-x 1 root 19680 Sep 21 2007 /usr/bin/newgrp -rwsr-xr-x 1 shadow 78208 Sep 21 2007 /usr/bin/passwd -rwsr-x--- 1 dialout 58856 May 28 2008 /usr/sbin/mtr -r-xr-sr-x 1 mail 2856959 Dec 5 2014 /usr/sbin/sendmail -rwsr-xr-x 1 root 10784 Jul 4 2008 /usr/sbin/zypp-checkpatches-wrapper -rwsr-xr-x 1 root 27081 Sep 21 2007 /usr/lib64/pt_chown -rwsr-xr-x 1 root 10856 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper-pam -rwxr-sr-x 1 103 15056 Sep 22 2007 /usr/lib64/PolicyKit/polkit-grant-helper -r-sr-xr-x 1 daemon 584923 Jan 18 2011 /usr/local/bin/dccproc -r-sr-xr-x 1 daemon 189707 Jan 18 2011 /usr/local/bin/cdcc -rws--x--x 1 root 58453 Jan 16 2015 /usr/local/apache2-2.2.29/sbin/suexec.confixx -rws--x--x 1 root 58453 Sep 19 10:22 /usr/local/apache2-2.2.29/sbin/suexec2 -rwsr-xr-x 1 daemon 10952 Sep 21 2007 /usr/lib/majordomo/wrapper -rw-r--r-- 1 root root 0 Sep 23 14:13 list_2015-09-23
tux27
tux27:
tuxYZW
tux:
Other servers to check:
Removed: broot@tux3.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 25 2014 /sbin/sid broot@tux15.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux13.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux81.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux107.hoststar.ch -rwsr-xr-x 1 root web297 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux111.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [-----] broot@tux121.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux119.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux147.hoststar.ch -rwsr-xr-x 1 root web97 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux151.hoststar.ch -rwsr-xr-x 1 root web29 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux123.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux171.hoststar.ch -rwsr-xr-x 1 root 1272 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux167.hoststar.ch -rwsr-xr-x 1 root web78 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux173.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux185.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux181.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux187.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux193.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux179.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux195.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux189.hoststar.ch -rwxr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux191.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux201.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux203.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux211.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux207.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux205.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux209.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux231.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux213.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux233.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux221.hoststar.ch -rwxr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux217.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux223.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux241.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux243.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux225.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux245.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux259.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux279.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux299.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux319.hoststar.ch -rwsr-xr-x 1 root web90 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] broot@tux237.hoststar.ch -rwsr-xr-x 1 root root 431516 Sep 29 2011 /sbin/sid [Already scanned and fixed] Removed: broot@tux81.hoststar.ch -rwsr-xr-x 1 root root 661528 Aug 14 2012 /boot1/initr [Already scanned and fixed] broot@tux123.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 22 2013 /boot1/initr [Already scanned and fixed] broot@tux121.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 25 2013 /boot1/initr [Already scanned and fixed] broot@tux99.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /boot1/initr [Already scanned and fixed] broot@tux107.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 7 2013 /boot1/initr [Already scanned and fixed] broot@tux147.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 4 2012 /boot1/initr [Already scanned and fixed] broot@tux151.hoststar.ch -rwxr-xr-x 1 root root 661528 Jan 7 2013 /boot1/initr [Already scanned and fixed] broot@tux171.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 7 2013 /boot1/initr [Already scanned and fixed] broot@tux167.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 7 2013 /boot1/initr [Already scanned and fixed] broot@tux185.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 21 2013 /boot1/initr [Already scanned and fixed] broot@tux187.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 21 2013 /boot1/initr [Already scanned and fixed] broot@tux181.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 21 2013 /boot1/initr [Already scanned and fixed] broot@tux189.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 21 2013 /boot1/initr [Already scanned and fixed] broot@tux207.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 4 2013 /boot1/initr [Already scanned and fixed] broot@tux193.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 5 2013 /boot1/initr [Already scanned and fixed] broot@tux203.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 7 2013 /boot1/initr [Already scanned and fixed] broot@tux201.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 5 2013 /boot1/initr [Already scanned and fixed] broot@tux195.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 5 2013 /boot1/initr [Already scanned and fixed] broot@tux199.hoststar.ch -rwsr-xr-x 1 root root 661528 Aug 14 2012 /boot1/initr [Already scanned and fixed] broot@tux217.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /boot1/initr [Already scanned and fixed] broot@tux241.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 3 2013 /boot1/initr [Already scanned and fixed] broot@tux237.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 3 2013 /boot1/initr [Already scanned and fixed] broot@tux251.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /boot1/initr [Already scanned and fixed] broot@tux319.hoststar.ch -rwsr-xr-x 1 root root 661528 Feb 27 2012 /boot1/initr [Already scanned and fixed] broot@tux259.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /boot1/initr [Already scanned and fixed] broot@tux11.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so [Already scanned and fixed] broot@tux13.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so [Already scanned and fixed] broot@tux15.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so [Already scanned and fixed] broot@tux9.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so [Already scanned and fixed] broot@tux185.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so [Already scanned and fixed] broot@tux189.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so [Already scanned and fixed] broot@tux191.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so [Already scanned and fixed] broot@tux203.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so [Already scanned and fixed] broot@tux201.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so [Already scanned and fixed] broot@tux205.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so [Already scanned and fixed] broot@tux207.hoststar.ch -rwsr-xr-x 1 root root 3130738 Aug 3 2014 /lib/libbz2.so [Already scanned and fixed] broot@tux51.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /usr/local/bin/php5 [Already scanned and fixed] broot@tux99.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /usr/local/bin/php5 [Already scanned and fixed] broot@tux175.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /usr/local/bin/php5 [Already scanned and fixed] broot@tux217.hoststar.ch ---------- 1 root root 661528 Jan 16 2012 /usr/local/bin/php5 [Already scanned and fixed] broot@tux229.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /usr/local/bin/php5 broot@tux251.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /usr/local/bin/php5 [Already scanned and fixed] broot@tux259.hoststar.ch -rwsr-xr-x 1 root root 661528 Jan 16 2012 /usr/local/bin/php5 [Already scanned and fixed] broot@tux241.hoststar.ch -rwsr-xr-x 1 root root 10869 Nov 8 2012 /etc/conf [Already scanned and fixed]
Server List
Server List:
- -tux25 [Done]
- -tux307 [Done | Not in Prod]
- -tux163 [Done]
- -tux247 [Done]
- -tux219 [Done]
- -tux3.at [Done]
- -tux197 [Done]
- -tux157 [Done]
- -tux155 [Done]
- -tux159 [Done | New Kernel with iptables logs]
- -tux153 [Done | New Kernel with iptables logs]
- -tux193 [Done | New Kernel with iptables logs]
- -tux195 [Done | New Kernel with iptables logs]
- -tux199 [Done | New Kernel with iptables logs]
- -tux15 [Done | New Kernel with iptables logs | Missing SSL patch]
- -tux281 [Done | New Kernel with iptables logs]
- -tux13 [Done | New Kernel with iptables logs | Enabling ntpdate via /etc/init.d/after.local Not working]
- -tux81 [Done | New Kernel with iptables logs | Enabling ntpdate via /etc/init.d/after.local Not working| Missing SSL patch]
- -tux75 [Done | New Kernel with iptables logs | Enabling ntpdate via /etc/init.d/after.local Not working]
- -tux121 [Done | New Kernel with iptables logs]
- -tux21.at [Done | New Kernel with iptables logs]
- -tux119 [Done | New Kernel with iptables logs]
- -tux147 [Done | New Kernel with iptables logs]
- -tux151 [Done | New Kernel with iptables logs]
- -tux123 [Done | New Kernel with iptables logs]
- -tux171 [Done | New Kernel with iptables logs]
- -tux167 [Done | New Kernel with iptables logs]
- -tux173 [Done | New Kernel with iptables logs]
- -tux185 [Done | New Kernel with iptables logs]
- -tux181 [Done | New Kernel with iptables logs]
- -tux187 [Done | New Kernel with iptables logs]
- -tux179 [Done | New Kernel with iptables logs]
- -tux203 [Done | New Kernel with iptables logs]
- -tux189 [Done | New Kernel with iptables logs]
- -tux191 [Done | New Kernel with iptables logs]
- -tux201 [Done | New Kernel with iptables logs]
- -tux211 [Done | New Kernel with iptables logs]
- -tux207 [Done | New Kernel with iptables logs]
- -tux205 [Done | New Kernel with iptables logs]
- -tux209 [Done | New Kernel with iptables logs]
- -tux231 [Done | New Kernel with iptables logs]
- -tux233 [Done | New Kernel with iptables logs]
- -tux221 [Done | New Kernel with iptables logs]
- -tux217 [Done | New Kernel with iptables logs]
- -tux223 [Done | New Kernel with iptables logs]
- -tux241 [Done | New Kernel with iptables logs]
- -tux125 [Done | New Kernel with iptables logs]
- -tux243 [Done | New Kernel with iptables logs]
- -tux225 [Done | New Kernel with iptables logs]
- -tux245 [Done | New Kernel with iptables logs]
- -tux259 [Done | New Kernel with iptables logs]
- -tux279 [Done | New Kernel with iptables logs]
- -tux299 [Done | New Kernel with iptables logs]
- -tux319 [Done | New Kernel with iptables logs]
- -tux237 [Done | New Kernel with iptables logs]
- -tux99 [Done | New Kernel with iptables logs]
- -tux107 [Done | New Kernel with iptables logs]
- -tux251 [Done | New Kernel with iptables logs]
- -tux11 [Done | New Kernel with iptables logs]
- -tux9 [Done | New Kernel with iptables logs]
- -tux51 [Done | New Kernel with iptables logs]
- -tux175 [Done | New Kernel with iptables logs]
- -tux229 [Done | New Kernel with iptables logs]
