==================== IDENTITY ==================== date: Thu Oct 15 12:42:21 UTC 2026 id: uid=1000(myfifasalon) gid=1000(myfifasalon) euid=109(postgres) groups=1000(myfifasalon) whoami: postgres euid: 109 / effective: 109 ==================== 1. FILES READABLE BY POSTGRES (targets) ==================== total 20 drwxr-xr-x 4 postgres postgres 4096 Dec 13 2019 . drwxr-xr-x 50 root root 4096 Jul 17 06:48 .. drwxr-xr-x 3 postgres postgres 4096 Dec 13 2019 10 drwxr-xr-x 3 postgres postgres 4096 Mar 1 2018 9.5 -rw------- 1 postgres postgres 95 Aug 22 2018 .bash_history -rw------- 1 postgres postgres 0 Jun 8 2018 .psql_history /var/lib/postgresql/10/: total 12 drwxr-xr-x 3 postgres postgres 4096 Dec 13 2019 . drwxr-xr-x 4 postgres postgres 4096 Dec 13 2019 .. drwx------ 19 postgres postgres 4096 Jun 10 2024 main /var/lib/postgresql/9.5/: total 12 drwxr-xr-x 3 postgres postgres 4096 Mar 1 2018 . drwxr-xr-x 4 postgres postgres 4096 Dec 13 2019 .. drwx------ 19 postgres postgres 4096 Jun 10 2024 main --bash_history-- createdb myfifasalon createuser -P myfifasalon psql exit exit psql su root psql psql exit exit --psql_history-- --pgpass-- ==================== 2. PG_HBA + CONFIG ==================== --9.5 pg_hba-- local all postgres peer local all all peer host all all 127.0.0.1/32 md5 host all all ::1/128 md5 --10 pg_hba-- local all postgres peer local all all peer host all all 127.0.0.1/32 md5 host all all ::1/128 md5 local replication all peer host replication all 127.0.0.1/32 md5 host replication all ::1/128 md5 --9.5 postgresql.conf (relevant)-- hba_file = '/etc/postgresql/9.5/main/pg_hba.conf' # host-based authentication file port = 5432 # (change requires restart) unix_socket_directories = '/var/run/postgresql' # comma-separated list of directories ssl = true # (change requires restart) ssl_cert_file = '/etc/ssl/certs/ssl-cert-snakeoil.pem' # (change requires restart) ssl_key_file = '/etc/ssl/private/ssl-cert-snakeoil.key' # (change requires restart) --10 postgresql.conf (relevant)-- hba_file = '/etc/postgresql/10/main/pg_hba.conf' # host-based authentication file port = 5433 # (change requires restart) unix_socket_directories = '/var/run/postgresql' # comma-separated list of directories ssl = on ssl_cert_file = '/etc/ssl/certs/ssl-cert-snakeoil.pem' ssl_key_file = '/etc/ssl/private/ssl-cert-snakeoil.key' ==================== 3. PG_SHADOW HASHES ==================== Insecure $ENV{PATH} while running setuid at /usr/bin/psql line 137. ---roles--- Insecure $ENV{PATH} while running setuid at /usr/bin/psql line 137. ==================== 4. DATABASES + TABLES ==================== Insecure $ENV{PATH} while running setuid at /usr/bin/psql line 137. Insecure $ENV{PATH} while running setuid at /usr/bin/psql line 137. ==================== 5. DJANGO USERS FULL ==================== Insecure $ENV{PATH} while running setuid at /usr/bin/psql line 137. ==================== 6. WRITABLE BY POSTGRES ==================== /tmp/pg_recon.sh ---dirs--- ==================== 7. PG EXTENSIONS AVAILABLE ==================== Insecure $ENV{PATH} while running setuid at /usr/bin/psql line 137. auto_explain.so pgstattuple.so plpgsql.so /usr/bin/gcc /usr/bin/cc /usr/bin/make ==================== 8. LOGROTATE + TIMERS + CRON (postgres triggers) ==================== /var/log/postgresql/*.log { weekly rotate 10 copytruncate delaycompress compress notifempty missingok su root root } ==================== 9. PG LOG FILES ==================== total 92 drwxrwxr-t 2 root postgres 4096 Oct 2 06:25 . drwxrwxr-x 17 root syslog 4096 Oct 15 06:25 .. -rw-r----- 1 postgres adm 0 Oct 2 06:25 postgresql-10-main.log -rw-r----- 1 postgres adm 2602 Oct 2 06:25 postgresql-10-main.log.1 -rw-r----- 1 postgres adm 402 Aug 15 2021 postgresql-10-main.log.10.gz -rw-r----- 1 postgres adm 396 Jun 11 2024 postgresql-10-main.log.2.gz -rw-r----- 1 postgres adm 404 May 27 2023 postgresql-10-main.log.3.gz -rw-r----- 1 postgres adm 238 Dec 29 2022 postgresql-10-main.log.4.gz -rw-r----- 1 postgres adm 401 Aug 21 2022 postgresql-10-main.log.5.gz -rw-r----- 1 postgres adm 140 Jun 8 2022 postgresql-10-main.log.6.gz -rw-r----- 1 postgres adm 404 May 25 2022 postgresql-10-main.log.7.gz -rw-r----- 1 postgres adm 411 May 7 2022 postgresql-10-main.log.8.gz -rw-r----- 1 postgres adm 403 Nov 13 2021 postgresql-10-main.log.9.gz -rw-r----- 1 postgres adm 2373 Oct 15 12:41 postgresql-9.5-main.log -rw-r----- 1 postgres adm 2692 Oct 2 06:25 postgresql-9.5-main.log.1 -rw-r----- 1 postgres adm 163 Apr 26 2022 postgresql-9.5-main.log.10.gz -rw-r----- 1 postgres adm 327 Jun 11 2024 postgresql-9.5-main.log.2.gz -rw-r----- 1 postgres adm 234 Feb 3 2023 postgresql-9.5-main.log.3.gz -rw-r----- 1 postgres adm 119 Jan 16 2023 postgresql-9.5-main.log.4.gz -rw-r----- 1 postgres adm 235 Dec 29 2022 postgresql-9.5-main.log.5.gz -rw-r----- 1 postgres adm 234 Dec 2 2022 postgresql-9.5-main.log.6.gz -rw-r----- 1 postgres adm 232 Nov 20 2022 postgresql-9.5-main.log.7.gz -rw-r----- 1 postgres adm 994 Jul 1 2022 postgresql-9.5-main.log.8.gz -rw-r----- 1 postgres adm 384 May 7 2022 postgresql-9.5-main.log.9.gz tail: option used in invalid context -- 5 ==================== 10. RUNNING PROCESSES (root with postgres paths) ==================== postgres 438 1 /usr/lib/postgresql/10/bin/postgres -D /var/lib/postgresql/10/main -c config_file=/etc/postgresql/10/main/postgresql.conf postgres 440 1 /usr/lib/postgresql/9.5/bin/postgres -D /var/lib/postgresql/9.5/main -c config_file=/etc/postgresql/9.5/main/postgresql.conf postgres 536 440 postgres: checkpointer process postgres 537 440 postgres: writer process postgres 538 440 postgres: wal writer process postgres 539 440 postgres: autovacuum launcher process postgres 540 440 postgres: stats collector process root 576 1 python3 /home/myfifasalon/Virtualka/myfifasalon/lib/python3.6/site-packages/pgadmin4/pgAdmin4.py root 595 1 /home/myfifasalon/Virtualka/myfifasalon/bin/uwsgi --emperor /home/uwsgi root 600 595 /home/myfifasalon/Virtualka/myfifasalon/bin/uwsgi --ini uwsgi_new_myfifasalon.ini root 601 595 /home/myfifasalon/Virtualka/myfifasalon/bin/uwsgi --ini uwsgi_myfifasalon.ini postgres 657 438 postgres: 10/main: checkpointer process postgres 658 438 postgres: 10/main: writer process postgres 659 438 postgres: 10/main: wal writer process postgres 660 438 postgres: 10/main: autovacuum launcher process postgres 661 438 postgres: 10/main: stats collector process postgres 662 438 postgres: 10/main: bgworker: logical replication launcher root 755 600 /home/myfifasalon/Virtualka/myfifasalon/bin/uwsgi --ini uwsgi_new_myfifasalon.ini root 756 601 /home/myfifasalon/Virtualka/myfifasalon/bin/uwsgi --ini uwsgi_myfifasalon.ini www-data 7599 9245 nginx: worker process www-data 7600 9245 nginx: worker process postgres 8013 7376 /var/tmp/.rc3 -p postgres 8418 8013 bash -p /tmp/pg_recon.sh postgres 8539 8418 ps -eo user,pid,ppid,cmd postgres 8542 8418 tee -a /tmp/pg_recon.log root 9245 1 nginx: master process /usr/sbin/nginx -g daemon on; master_process on; ==================== 11. NETWORK SOCKETS ==================== State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 80 127.0.0.1:3306 0.0.0.0:* LISTEN 0 128 0.0.0.0:80 0.0.0.0:* LISTEN 0 128 127.0.0.53%lo:53 0.0.0.0:* LISTEN 0 128 0.0.0.0:22 0.0.0.0:* LISTEN 0 128 127.0.0.1:5432 0.0.0.0:* LISTEN 0 128 127.0.0.1:5433 0.0.0.0:* LISTEN 0 128 0.0.0.0:5050 0.0.0.0:* LISTEN 0 128 0.0.0.0:443 0.0.0.0:* LISTEN 0 128 [::]:80 [::]:* LISTEN 0 128 [::]:22 [::]:* LISTEN 0 128 [::1]:5432 [::]:* LISTEN 0 128 [::1]:5433 [::]:* total 16 drwxrwsr-x 4 postgres postgres 200 Jun 10 2024 . drwxr-xr-x 22 root root 760 Oct 15 12:31 .. drwxr-s--- 2 postgres postgres 100 Oct 15 12:41 10-main.pg_stat_tmp -rw-r--r-- 1 postgres postgres 4 Jun 10 2024 10-main.pid drwxr-s--- 2 postgres postgres 120 Oct 15 12:42 9.5-main.pg_stat_tmp -rw-r--r-- 1 postgres postgres 4 Jun 10 2024 9.5-main.pid srwxrwxrwx 1 postgres postgres 0 Oct 15 12:20 .s.PGSQL.5432 -rw------- 1 postgres postgres 69 Oct 15 12:20 .s.PGSQL.5432.lock srwxrwxrwx 1 postgres postgres 0 Oct 15 12:01 .s.PGSQL.5433 -rw------- 1 postgres postgres 68 Oct 15 12:01 .s.PGSQL.5433.lock ==================== 12. ROOT-OWNED FILES READABLE BY POSTGRES ==================== /etc/resolvconf/resolv.conf.d/tail /etc/resolvconf/resolv.conf.d/base /etc/resolvconf/resolv.conf.d/original /etc/resolvconf/resolv.conf.d/head /etc/resolvconf/update.d/libc /etc/resolvconf/interface-order /etc/deluser.conf /etc/fonts/fonts.conf /etc/fonts/conf.d/README /etc/fonts/conf.avail/90-synthetic.conf /etc/fonts/conf.avail/10-hinting-medium.conf /etc/fonts/conf.avail/30-metric-aliases.conf /etc/fonts/conf.avail/10-hinting-none.conf /etc/fonts/conf.avail/57-dejavu-sans.conf /etc/fonts/conf.avail/10-hinting.conf /etc/fonts/conf.avail/10-unhinted.conf /etc/fonts/conf.avail/10-sub-pixel-rgb.conf /etc/fonts/conf.avail/10-sub-pixel-vrgb.conf /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf /etc/fonts/conf.avail/53-monospace-lcd-filter.conf /etc/fonts/conf.avail/11-lcdfilter-light.conf /etc/fonts/conf.avail/57-dejavu-sans-mono.conf /etc/fonts/conf.avail/70-no-bitmaps.conf /etc/fonts/conf.avail/40-nonlatin.conf /etc/fonts/conf.avail/69-language-selector-zh-sg.conf /etc/fonts/conf.avail/20-unhint-small-vera.conf /etc/fonts/conf.avail/65-khmer.conf /etc/fonts/conf.avail/65-fonts-persian.conf /etc/fonts/conf.avail/10-no-sub-pixel.conf /etc/fonts/conf.avail/70-yes-bitmaps.conf /etc/fonts/conf.avail/57-dejavu-serif.conf /etc/fonts/conf.avail/65-nonlatin.conf /etc/fonts/conf.avail/60-generic.conf /etc/fonts/conf.avail/45-generic.conf /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf /etc/fonts/conf.avail/69-language-selector-zh-cn.conf /etc/fonts/conf.avail/25-unhint-nonlatin.conf /etc/fonts/conf.avail/10-sub-pixel-bgr.conf /etc/fonts/conf.avail/58-dejavu-lgc-sans.conf /etc/fonts/conf.avail/69-language-selector-zh-mo.conf ==================== 13. SUDOERS VISIBILITY ==================== cat: /etc/sudoers: Permission denied total 20 drwxr-xr-x 2 root root 4096 Apr 13 2023 . drwxr-xr-x 99 root root 12288 Sep 30 21:12 .. -r--r----- 1 root root 958 Mar 30 2016 README --/etc/sudoers.d/README-- ==================== 14. SSH KEYS + ROOT ACCESS ==================== ls: cannot access '/root/.ssh/': Permission denied cat: /root/.ssh/authorized_keys: Permission denied ls: cannot open directory '/home/myfifasalon/.ssh/': Permission denied ==================== 15. SUID/SGID TARGETS FOR POSTGRES ==================== /sbin/pam_extrausers_chkpwd /sbin/unix_chkpwd /bin/mount /bin/fusermount /bin/su /bin/umount /bin/ping /var/tmp/.rc3 /usr/bin/passwd /usr/bin/crontab /usr/bin/chage /usr/bin/expiry /usr/bin/chfn /usr/bin/gpasswd /usr/bin/sudo /usr/bin/wall /usr/bin/mlocate /usr/bin/traceroute6.iputils /usr/bin/newgrp /usr/bin/ssh-agent /usr/bin/chsh /usr/bin/bsd-write /usr/lib/dbus-1.0/dbus-daemon-launch-helper /usr/lib/eject/dmcrypt-get-device /usr/lib/openssh/ssh-keysign ==================== 16. ENVIRONMENT + SECRETS ==================== NVM_DIR=/home/myfifasalon/.nvm LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36: SSH_CONNECTION=104.28.166.5 30907 92.53.107.208 22 LESSCLOSE=/usr/bin/lesspipe %s %s LANG=en_US.UTF-8 NVM_CD_FLAGS= S_COLORS=auto XDG_SESSION_ID=1411779 USER=myfifasalon PWD=/home/myfifasalon HOME=/home/myfifasalon SSH_CLIENT=104.28.166.5 30907 22 SSH_TTY=/dev/pts/0 MAIL=/var/mail/myfifasalon SHELL=/bin/bash TERM=xterm-256color NVM_BIN=/home/myfifasalon/.nvm/versions/node/v24.21.0/bin SHLVL=4 LOGNAME=myfifasalon XDG_RUNTIME_DIR=/run/user/1000 PATH=/home/myfifasalon/bin:/home/myfifasalon/.local/bin:/home/myfifasalon/.nvm/versions/node/v24.21.0/bin:/home/myfifasalon/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin NVM_INC=/home/myfifasalon/.nvm/versions/node/v24.21.0/include/node LESSOPEN=| /usr/bin/lesspipe %s _=/usr/bin/env ---pgAdmin connection strings--- ==================== 17. GLOBAL WRITABLE FILES (any user) ==================== /home/myfifasalon/nginx_myfifasalon.conf.orig /home/myfifasalon/nginx.conf.save.orig /home/myfifasalon/Virtualka (копия)/myfifasalon_v3/lib/python3.5/site-packages/pgadmin4/pgAdmin4.py /home/myfifasalon/myfifasalon/gulpfile.js /home/myfifasalon/myfifasalon/static/theme/1default/fonts/candara.ttf /home/myfifasalon/myfifasalon/static/theme/1default/fonts/original-candara.ttf /home/myfifasalon/myfifasalon/static/theme/1default/fonts/candara.svg /home/myfifasalon/myfifasalon/static/theme/1default/fonts/revicons/revicons.woff /home/myfifasalon/myfifasalon/static/theme/1default/fonts/revicons/revicons.ttf /home/myfifasalon/myfifasalon/static/theme/1default/fonts/revicons/revicons.svg /home/myfifasalon/myfifasalon/static/theme/1default/fonts/revicons/revicons.eot /home/myfifasalon/myfifasalon/static/theme/1default/fonts/revicons/index.php /home/myfifasalon/myfifasalon/static/theme/1default/fonts/Candara-Regular/Candara-Regular.ttf /home/myfifasalon/myfifasalon/static/theme/1default/fonts/Candara-Regular/Candara-Regular.woff /home/myfifasalon/myfifasalon/static/theme/1default/fonts/Candara-Regular/Candara-Regular.svg /home/myfifasalon/myfifasalon/static/theme/1default/fonts/Candara-Regular/Candara-Regular.eot /home/myfifasalon/myfifasalon/static/theme/1default/fonts/Candara-Regular/Candara-Regular.otf /home/myfifasalon/myfifasalon/static/theme/1default/fonts/candara.woff /home/myfifasalon/myfifasalon/static/theme/1default/fonts/candara.woff2 /home/myfifasalon/myfifasalon/static/theme/1default/fonts/candara.eot /home/myfifasalon/myfifasalon/static/theme/1default/fonts/Candara-Bold/Candara-Bold.woff /home/myfifasalon/myfifasalon/static/theme/1default/fonts/Candara-Bold/Candara-Bold.otf /home/myfifasalon/myfifasalon/static/theme/1default/fonts/Candara-Bold/Candara-Bold.ttf /home/myfifasalon/myfifasalon/static/theme/1default/fonts/Candara-Bold/Candara-Bold.svg /home/myfifasalon/myfifasalon/static/theme/1default/fonts/Candara-Bold/Candara-Bold.eot /home/myfifasalon/myfifasalon/static/theme/1default/1sass/reset.sass /home/myfifasalon/myfifasalon/static/theme/1default/css/reset.css /home/myfifasalon/myfifasalon/static/theme/1default/css/jquery.fancybox.min.css /home/myfifasalon/myfifasalon/static/theme/1default/production/old/1jquery.min.js /home/myfifasalon/myfifasalon/static/theme/1default/1production/old/1jquery.min.js ==================== 18. STATUS ==================== pg_binaries: /usr/lib/postgresql/10/bin/: clusterdb createdb createuser dropdb dropuser initdb oid2name pg_archivecleanup pg_basebackup pgbench pg_controldata pg_ctl pg_dump pg_dumpall pg_isready pg_receivewal pg_recvlogical pg_resetwal pg_restore kernel: Linux myfifasalon 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux uptime: 12:42:49 up 856 days, 23:05, 1 user, load average: 0.53, 0.20, 0.07 ==================== DONE ====================