$ cat /etc/os-release | head -3 NAME="Ubuntu" VERSION="20.04.5 LTS (Focal Fossa)" ID=ubuntu $ dpkg -l | grep -E "policykit-1|sudo |openssh-server|libc6" | head -8 ii libc6:amd64 2.31-0ubuntu9.18 amd64 GNU C Library: Shared libraries ii openssh-server 1:8.2p1-4ubuntu0.13 amd64 secure shell (SSH) server, for secure access from remote machines ii policykit-1 0.105-26ubuntu1.3 amd64 framework for managing administrative policies and privileges ii sudo 1.8.31-1ubuntu1.5 amd64 Provide limited super user privileges to specific users $ sudo --version 2>&1 | head -2; pkexec --version 2>&1 | head -2 Sudo version 1.8.31 Sudoers policy plugin version 1.8.31 pkexec version 0.105 $ which docker mysql git python3; ls -la /var/run/docker.sock 2>&1 /usr/bin/mysql /usr/bin/git /usr/bin/python3 ls: cannot access '/var/run/docker.sock': No such file or directory $ ss -tln 2>/dev/null | head -20 State Recv-Q Send-Q Local Address:Port Peer Address:Port Process LISTEN 0 128 0.0.0.0:22 0.0.0.0:* LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* LISTEN 0 128 [::]:22 [::]:* LISTEN 0 511 *:80 *:* LISTEN 0 511 *:443 *:* $ ls -la /etc/letsencrypt/live/ 2>&1 | head -8; ls -la /etc/letsencrypt/archive/ 2>&1 | head -6 ls: cannot open directory '/etc/letsencrypt/live/': Permission denied ls: cannot open directory '/etc/letsencrypt/archive/': Permission denied $ cat /var/www/foxpay/application/config/database.php db->last_query() and profiling of DB queries. | When you run a query, with this setting set to TRUE (default), | CodeIgniter will store the SQL statement for debugging purposes. | However, this may cause high memory usage, especially if you run | a lot of SQL queries ... disable this to avoid that problem. | | The $active_group variable lets you choose which connection group to | make active. By default there is only one group (the 'default' group). | | The $query_builder variables lets you determine whether or not to load | the query builder class. */ $active_group = 'default'; $query_builder = TRUE; $db['default'] = array( 'dsn' => '', 'hostname' => 'ehfldbinstance-new-v2.cns7meh4xg84.ap-south-1.rds.amazonaws.com', 'username' => 'easy_web_site_user', 'password' => '87hkjfh678h3##', 'database' => 'easy_web_site', 'dbdriver' => 'mysqli', 'dbprefix' => '', 'pconnect' => FALSE, 'db_debug' => (ENVIRONMENT !== 'production'), 'cache_on' => FALSE, 'cachedir' => '', 'char_set' => 'utf8', 'dbcollat' => 'utf8_general_ci', 'swap_pre' => '', 'encrypt' => FALSE, 'compress' => FALSE, 'stricton' => FALSE, 'failover' => array(), 'save_queries' => TRUE ); $ cat /var/www/foxpay/application/config/database.php.bak 2>/dev/null | head -18 /dev/null | head -22 /dev/null && git log --oneline -3 2>&1 | head -5; echo "--- .git config ---"; head -15 /var/www/foxpay_old/.git/config 2>&1 fatal: detected dubious ownership in repository at '/var/www/foxpay_old' To add an exception for this directory, call: git config --global --add safe.directory /var/www/foxpay_old --- .git config --- [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://bitbucket.org/easyhomefinance/foxpay/ fetch = +refs/heads/*:refs/remotes/origin/* $ grep -c ssh- /home/foxpay/.ssh/authorized_keys; head -c 240 /home/foxpay/.ssh/authorized_keys 10 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDvIXzCd2Bo4jUrnr7U5tkLz/ZU68xywt1Qh/ReeD3VPXIrbiE0vtdCBnXtzYtGkhMVdvAFxjnWJC/yw2TVhm1PFaXKxYol7QVlZ66cPedlWGw/v2gKXNqvHD+QLIGWlSSo7/AM5ZmCsyWzei6tz8Avqazr5ShZz2vDp+Fn+Gp0MbBr3SLYrunC12Y9rauni83qWVpFD0x7 $ grep -hE "DocumentRoot|ServerName|AuthUserFile" /etc/apache2/sites-enabled/*.conf 2>/dev/null | head -20 ServerName fox.easyhomefinance.in DocumentRoot /var/www/fox_main ServerName fox.easyhomefinance.in DocumentRoot /var/www/fox_main ServerName knowledge.easyhomefinance.in DocumentRoot /var/www/html/wordpress ServerName knowledge.easyhomefinance.in DocumentRoot /var/www/html/wordpress ServerName easyhomefinance.in DocumentRoot /var/www/foxpay/ ServerName www.easyhomefinance.in ServerName easyhomefinance.in DocumentRoot /var/www/foxpay ServerName www.easyhomefinance.in $ ls -la /var/www/foxpay/EASYHL 2>&1 | head -15 total 12 drwxr-xr-x 2 foxpay_sftp sftp 4096 May 4 09:38 . drwxr-xr-x 8 foxpay_sftp sftp 4096 Sep 22 07:12 .. -rw-rw-r-- 1 foxpay_sftp sftp 1240 May 4 09:38 Video.php $ find /var/www -maxdepth 4 \( -name "*.bak" -o -name "*.sql" -o -name "*.zip" -o -name ".env" \) 2>/dev/null | head -20 /var/www/foxpay/upload/branch/branch_photo.zip /var/www/foxpay/site/web_uat_v1.0.0.zip /var/www/foxpay/site/apply.zip /var/www/foxpay/application/config/config.php.bak /var/www/foxpay/application/config/database.php.bak /var/www/foxpay_old/site/apply/liveweb.zip /var/www/foxpay_old/site/web_uat_v1.0.0.zip /var/www/foxpay_old/site/apply.zip == 应用库账号: easy_web_site_user @ ehfldbinstance-new-v2.cns7meh4xg84.ap-south-1.rds.amazonaws.com / easy_web_site == == admin_user == 1 | admin | admin | admin@gmail.com | 12345687891 | 1 | admin@123 3 | hr@easyhomefinance.in | HR Manager | hr@easyhomefinance.in | 1212121212 | 3 | hr@1234 4 | sub | Prerak | p@gmail.com | 8989898989 | 3 | sub 5 | compliance | compliance | compliance@easyhomefinance.in | 1234567898 | 4 | compliance@123 6 | legal | Legal | | 123456789 | 4 | legal@123 == mysql.user 可见性: 不可读 == wp_users (库 easy_web_wordpress) == 1 | prerak | pm@easyhomefinance.in | $wp$2y$10$wCdu65AgHkQRJR80NthQRugZOAZlV0CYk5g6ESYP9oOqnC6gDnTzW | 2025-07-03 03:49:54 2 | ehfl-marketing | vikram.mishra619@gmail.com | $wp$2y$10$oEq62Xw2t9WmpNbdgZMhv.92jV4gpnKsAWADLLIS/GTafd9pprDea | 2025-10-30 10:51:03 == wp 角色 == ehfl-marketing => a:1:{s:13:"administrator";b:1;} prerak => a:1:{s:13:"administrator";b:1;}