admin@i-0b94011fc9b466a01:~$ rm datafile                                        rm: remove write-protected regular file 'datafile'? y                           admin@i-0b94011fc9b466a01:~$ ls                                                 agent  data  kihei                                                              admin@i-0b94011fc9b466a01:~$ ./kihei                                            Done.                                                                           admin@i-0b94011fc9b466a01:~$ tou                                                

admin@i-0d84239b021e2c09b:~$ ls                                                 agent  data  datafile  kihei                                                    admin@i-0d84239b021e2c09b:~$ cd kihei                                           bash: cd: kihei: Not a directory                                                admin@i-0d84239b021e2c09b:~$ cd kihei                                           bash: cd: kihei: Not a directory                                                admin@i-0d84239b021e2c09b:~$ ./kihei                                            panic: exit status 1                                                                                                                                            goroutine 1 [running]:                                                          main.main()                                                                             ./main.go:64 +0x47d                                                     admin@i-0d84239b021e2c09b:~$ dmesg                                              dmesg: read kernel buffer failed: Operation not permitted                       admin@i-0d84239b021e2c09b:~$ sudo dmesg | grep                                  

drwx------ 3 admin admin 4.0K Sep 20  2023 .ansible                             -rw------- 1 admin admin  471 Apr  5 14:55 .bash_history                        -rw-r--r-- 1 admin admin  220 Aug  4  2021 .bash_logout                         -rw-r--r-- 1 admin admin 3.5K Aug  4  2021 .bashrc                              drwxr-xr-x 3 admin admin 4.0K Sep 20  2023 .config                              -rw-r--r-- 1 admin admin  807 Aug  4  2021 .profile                             drwx------ 2 admin admin 4.0K Sep 17  2023 .ssh                                 drwxr-xr-x 2 admin root  4.0K Sep 24  2023 agent                                -rwxrwx--- 1 root  root   360 Sep 24  2023 webserver.py                         admin@i-000557d38915e9a6c:~$ chown                                              chown: missing operand                                                          Try 'chown --help' for more information.                                        admin@i-000557d38915e9a6c:~$ chown admin:admin webserver.py                     chown: changing ownership of 'webserver.py': Operation not permitted            admin@i-000557d38915e9a6c:~$ curl localhost:5000                                

admin@i-03c6b3f5c52c11cfc:~$ ls                                                 agent  data  datafile  kihei                                                    admin@i-03c6b3f5c52c11cfc:~$ pwd                                                /home/admin                                                                     admin@i-03c6b3f5c52c11cfc:~$                                                    

_chrony      590  0.0  0.1  10724   556 ?        S    09:28   0:00 /usr/sbin/chrroot         599  0.0  3.7  26612 17340 ?        Ss   09:28   0:00 /usr/bin/pythroot         678  0.0  0.0      0     0 ?        I    09:28   0:00 [kworker/1:4-admin        682  0.0  0.9   6704  4572 pts/0    S<s+ 09:28   0:00 bash -l      admin        686  0.0  4.1  98188 19244 pts/0    R<l+ 09:28   0:00 /usr/bin/pythadmin        689  0.0  3.1  24456 14512 pts/0    S<+  09:28   0:00 /usr/bin/pythadmin        690  0.0  0.1   2480   572 pts/1    S<s  09:28   0:00 sh -c /bin/baadmin        691  0.0  0.9   6820  4560 pts/1    S<   09:28   0:00 /bin/bash    root         872  0.0  0.0      0     0 ?        I    09:34   0:00 [kworker/1:1]admin        873  0.0  0.6   8648  3152 pts/1    R<+  09:34   0:00 ps aux       admin@i-041d7351af3904de5:~$ ps aux | grep 5000                                 admin        906  0.0  0.1   5264   636 pts/1    S<+  09:35   0:00 grep 5000    admin@i-041d7351af3904de5:~$ ls -i :5000                                        ls: cannot access ':5000': No such file or directory                            admin@i-041d7351af3904de5:~$                                                    

  PV UUID               xTEa7y-sQcC-Tmjd-VSH2-MlAO-C2u2-sWZAXO                                                                                                    "/dev/sdc" is a new physical volume of "1.00 GiB"                               --- NEW Physical volume ---                                                     PV Name               /dev/sdc                                                  VG Name                                                                         PV Size               1.00 GiB                                                  Allocatable           NO                                                        PE Size               0                                                         Total PE              0                                                         Free PE               0                                                         Allocated PE          0                                                         PV UUID               9X9f4F-6vBb-Nan3-dd22-Qmcz-GoV2-5ftAX1                                                                                                  root@i-0af4ddd14bb1492e4:~# root@i-0af4ddd14bb1492e4:~#                         

admin@i-01f2b35ff8b369239:~$ vim kihei                                      admin@i-01f2b35ff8b369239:~$                                                admin@i-01f2b35ff8b369239:~$                                                admin@i-01f2b35ff8b369239:~$ ./kihei                                        panic: exit status 1                                                                                                                                    goroutine 1 [running]:                                                      main.main()                                                                         ./main.go:64 +0x47d                                                 admin@i-01f2b35ff8b369239:~$                                                admin@i-01f2b35ff8b369239:~$                                                admin@i-01f2b35ff8b369239:~$ ls                                             agent  data  datafile  kihei                                                admin@i-01f2b35ff8b369239:~$ vim data                                       admin@i-01f2b35ff8b369239:~$ vim daa                                        

*flag.int64Value,flag.Valuego.itab.*flag.stringValue,flag.Valuego.itab.*flag.uin*flag.uint64Value,flag.Valuego.itab.*strings.Builder,io.Writergo.itab.*errors.ermt.wrapError,errorgo.itab.*fmt.pp,fmt.Statego.itab.*os.File,io.Readergo.itab.systab.*io/fs.PathError,errorgo.itab.*os.SyscallError,errorgo.itab.syscall.Errno,erio.Writergo.itab.*os.fileStat,io/fs.FileInfogo.itab.*io.LimitedReader,io.Readerggo.itab.*os/exec.ExitError,errorgo.itab.*os/exec.Error,errorgo.itab.*bufio.Reader.UnknownUserIdError,errorgo.itab.*internal/reflectlite.rtype,internal/reflectliizeError,errorgo.itab.*internal/fmtsort.SortedMap,sort.Interfacego.itab.runtime.t_cgo_thread_start_cgo_notify_runtime_init_done_cgo_callers_cgo_yield_cgo_mmap_cntime.mainPCgo.itab.*internal/poll.DeadlineExceededError,errorgo.itab.internal/pntime.defaultGOROOT.strruntime.buildVersion.strruntime.modinfo.strtype.*runtime.7db86749869597:~$ ^C                                                            admin@i-0687db86749869597:~$ ./home/admin/kihei                                 bash: ./home/admin/kihei: No such file or directory                             admin@i-0687db86749869597:~$                                                    

udp        0      0 127.0.0.1:323           0.0.0.0:*                           udp        0      0 0.0.0.0:68              0.0.0.0:*                           udp6       0      0 fe80::80a:72ff:fe39:546 :::*                                udp6       0      0 ::1:323                 :::*                                admin@i-0a6259e5e5d577ae2:~$ sudo netstat -tupln                                                                                                                We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                      q                                                                               

admin        680  0.1  4.1  98188 19460 pts/0    R<l+ 04:47   0:00 /usr/bin/pythc -t paris/i-02e1488c6b3b7615d -q -i 2 /var/log/cast/i-02e148                   admin        683  0.0  3.1  24456 14808 pts/0    S<+  04:47   0:00 /usr/bin/pythc -t paris/i-02e1488c6b3b7615d -q -i 2 /var/log/cast/i-02e148                   admin        684  0.0  0.1   2480   512 pts/1    S<s  04:47   0:00 sh -c /bin/baadmin        685  0.0  1.0   7216  5060 pts/1    S<   04:47   0:00 /bin/bash    admin        877  0.0  0.7   8648  3284 pts/1    R<+  04:50   0:00 ps aux       admin@i-02e1488c6b3b7615d:~$ pwd                                                /home/admin                                                                     admin@i-02e1488c6b3b7615d:~$ ls                                                 agent  webserver.py                                                             admin@i-02e1488c6b3b7615d:~$ vim webserver.py                                   admin@i-02e1488c6b3b7615d:~$ cat webserver.py                                   cat: webserver.py: Permission denied                                            admin@i-02e1488c6b3b7615d:~$                                                    

udev             217M     0  217M   0% /dev                                     tmpfs             46M  368K   46M   1% /run                                     /dev/nvme0n1p1   7.7G  6.1G  1.2G  84% /                                        tmpfs            228M   12K  228M   1% /dev/shm                                 tmpfs            5.0M     0  5.0M   0% /run/lock                                /dev/nvme0n1p15  124M  5.9M  118M   5% /boot/efi                                admin@i-0aa7b9c7142e9f812:~$ df -i                                              Filesystem      Inodes IUsed  IFree IUse% Mounted on                            udev             55457   307  55150    1% /dev                                  tmpfs            58292   440  57852    1% /run                                  /dev/nvme0n1p1  516096 32800 483296    7% /                                     tmpfs            58292     4  58288    1% /dev/shm                              tmpfs            58292     3  58289    1% /run/lock                             /dev/nvme0n1p15      0     0      0     - /boot/efi                             admin@i-0aa7b9c7142e9f812:~$                                                    

admin@i-06f09f3099a79913a:~$ curl -v https:/ 2>&1 | grep -i "User-Agent"        

admin@i-0d7b1e633f1eba49f:~$ ls                                                 agent  webserver.py                                                             admin@i-0d7b1e633f1eba49f:~$ curl -A "Mozilla/5.0 (X11; Linux x86_64; rv:60.0) G

    #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                                                                                                      [1]+  Stopped                 sudo cat webserver.py                             admin@i-03f882b0543e6e7c2:~$ ls -l webserver.py                                 -rwxrwx--- 1 root root 360 Sep 24  2023 webserver.py                            admin@i-03f882b0543e6e7c2:~$ vi webserver.py                                                                                                                    [2]+  Stopped                 vi webserver.py                                   admin@i-03f882b0543e6e7c2:~$ local                                              local       locale      locale-gen  localectl   localedef                       admin@i-03f882b0543e6e7c2:~$ curl: