Notwithstanding HN's very reasonable ideas about right and wrong in this case, getting an unauthorized shell on someone's server and cd'ing/ls'ing around is probably illegal in most jurisdictions.