83 -q -i 2 /var/log/cast/i-0df1765d3                                            admin        681  0.0  3.0  24456 14444 pts/0    R<+  02:55   0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d3                                            admin        682  0.0  0.1   2480   572 pts/1    S<s  02:55   0:00 sh -c /bin/baadmin        683  0.0  0.9   6820  4536 pts/1    S<   02:55   0:00 /bin/bash    admin        716  0.0  0.6   8648  3136 pts/1    R<+  02:56   0:00 ps -aux      admin@i-0df1765d381c3a083:~$ ps -aux  | grep kihei                              admin        678  0.4  4.1  98188 19260 pts/0    S<l+ 02:55   0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d381c3a083                                    admin        681  0.0  3.0  24456 14444 pts/0    S<+  02:55   0:00 /usr/bin/pyth83 -q -i 2 /var/log/cast/i-0df1765d381c3a083                                    admin        718  0.0  0.1   5264   704 pts/1    S<+  02:56   0:00 grep kihei   admin@i-0df1765d381c3a083:~$ ls                                                 agent  data  datafile  kihei                                                    admin@i-0df1765d381c3a083:~$                                                    

root         570  0.1  6.0 107132 28456 ?        Ss   20:44   0:00 /usr/bin/pyth.py                                                                             root         574  0.0  0.9 220796  4352 ?        Ssl  20:44   0:00 /usr/sbin/rsyroot         579  0.0  1.4  13500  6772 ?        Ss   20:44   0:00 /lib/systemd/root         582  0.0  0.3   2872  1676 tty1     Ss+  20:44   0:00 /sbin/agetty 1 linux                                                                         root         583  0.0  0.4   4396  2104 ttyS0    Ss+  20:44   0:00 /sbin/agetty 15200,57600,38400,9600 ttyS0 vt220                                              root         584  0.0  1.5  13352  7184 ?        Ss   20:44   0:00 sshd: /usr/sbf 10-100 startups                                                               _chrony      586  0.0  0.7  10852  3700 ?        S    20:44   0:00 /usr/sbin/chr_chrony      588  0.0  0.1  10724   552 ?        S    20:44   0:00  \_ /usr/sbinroot         589  0.0  3.6  26612 17248 ?        Ss   20:44   0:00 /usr/bin/pyth-upgrades/unattended-upgrade-shutdown --wait-for-signal                         admin@i-07f79c3179505d899:~$                                                    

HTTP request sent, awaiting response... 200 OK                                  Length: 12 [text/html]                                                          Saving to: ‘index.html’                                                                                                                                         index.html                                             0%[                                                                                              ]       index.html                                           100%[=============================================================================================>]      1                                                                                                                                                                2024-11-19 13:52:42 (1.72 MB/s) - ‘index.html’ saved [12/12]                                                                                                    admin@i-000f3b7345baf2e3d:~$ ls                                                 agent  index.html  webserver.py                                                 admin@i-000f3b7345baf2e3d:~$ vim                                                

ls: cannot access '/pid/579': No such file or directory                         admin@i-02fded2ca795f43ce:~$ ls /proc/579                                       ls: cannot read symbolic link '/proc/579/cwd': Permission denied                ls: cannot read symbolic link '/proc/579/root': Permission denied               ls: cannot read symbolic link '/proc/579/exe': Permission denied                arch_status  cgroup      coredump_filter     environ  gid_map   map_files  mountattr         clear_refs  cpu_resctrl_groups  exe      io        maps       mountautogroup    cmdline     cpuset              fd       limits    mem        net  auxv         comm        cwd                 fdinfo   loginuid  mountinfo  ns   admin@i-02fded2ca795f43ce:~$ ls /proc/579^C                                     admin@i-02fded2ca795f43ce:~$ ^C                                                 admin@i-02fded2ca795f43ce:~$ ^C                                                 admin@i-02fded2ca795f43ce:~$ /proc/579/root curl localhost:5000                 bash: /proc/579/root: Permission denied                                         admin@i-02fded2ca795f43ce:~$                                                    

lsof      791                    admin  mem       REG              259,1   149524-linux-gnu/libpthread-2.31.so                                                  lsof      791                    admin  mem       REG              259,1    18684-linux-gnu/libdl-2.31.so                                                       lsof      791                    admin  mem       REG              259,1   617124-linux-gnu/libpcre2-8.so.0.10.1                                                lsof      791                    admin  mem       REG              259,1  1901534-linux-gnu/libc-2.31.so                                                        lsof      791                    admin  mem       REG              259,1   166124-linux-gnu/libselinux.so.1                                                     lsof      791                    admin  mem       REG              259,1   177924-linux-gnu/ld-2.31.so                                                          lsof      791                    admin    4r     FIFO               0,11      0tlsof      791                    admin    7w     FIFO               0,11      0tadmin@i-08470b485bf6eb405:~$ ss -tulnp                                          

tmpfs             46M  368K   46M   1% /run                                     /dev/nvme0n1p1   7.7G  6.1G  1.2G  84% /                                        tmpfs            228M   12K  228M   1% /dev/shm                                 tmpfs            5.0M     0  5.0M   0% /run/lock                                /dev/nvme0n1p15  124M  5.9M  118M   5% /boot/efi                                admin@i-09424d19be2c310c3:~$ df -h /home                                        Filesystem      Size  Used Avail Use% Mounted on                                /dev/nvme0n1p1  7.7G  6.1G  1.2G  84% /                                         admin@i-09424d19be2c310c3:~$ df -h /home/admin/                                 Filesystem      Size  Used Avail Use% Mounted on                                /dev/nvme0n1p1  7.7G  6.1G  1.2G  84% /                                         admin@i-09424d19be2c310c3:~$ pvcreate /dev/nvme1n1 /dev/nvme2n1                   WARNING: Running as a non-root user. Functionality may be unavailable.          /run/lock/lvm/P_global:aux: open failed: Permission denied                    admin@i-09424d19be2c310c3:~$                                                    

udev               221828       0    221828   0% /dev                           tmpfs               46636     368     46268   1% /run                           /dev/nvme0n1p1    8026128 6354488   1242384  84% /                              tmpfs              233168      12    233156   1% /dev/shm                       tmpfs                5120       0      5120   0% /run/lock                      /dev/nvme0n1p15    126678    6016    120662   5% /boot/efi                      admin@i-0ed3208f72b7149da:~$ df -i                                              Filesystem      Inodes IUsed  IFree IUse% Mounted on                            udev             55457   307  55150    1% /dev                                  tmpfs            58292   441  57851    1% /run                                  /dev/nvme0n1p1  516096 32800 483296    7% /                                     tmpfs            58292     4  58288    1% /dev/shm                              tmpfs            58292     3  58289    1% /run/lock                             /dev/nvme0n1p15      0     0      0     - /boot/efi                             admin@i-0ed3208f72b7149da:~$                                                    

     24 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 netns         25 root      20   0       0      0      0 S   0.0   0.0   0:00.12 kauditd       26 root      20   0       0      0      0 S   0.0   0.0   0:00.00 khungtask     27 root      20   0       0      0      0 S   0.0   0.0   0:00.00 oom_reape     28 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 writeback     29 root      20   0       0      0      0 S   0.0   0.0   0:00.00 kcompactd     30 root      25   5       0      0      0 S   0.0   0.0   0:00.00 ksmd          49 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 kintegrit     50 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 kblockd       51 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 blkcg_pun     52 root      20   0       0      0      0 I   0.0   0.0   0:00.03 kworker/1     53 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 kworker/0     54 root      20   0       0      0      0 S   0.0   0.0   0:00.00 kswapd0       55 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 kthrotld admin@i-0bc8be230e1a6d230:~$ lso                                                

rtt min/avg/max/mdev = 0.023/0.031/0.034/0.004 ms                               admin@i-06ccaf22127d79ccf:~$ curl localhost                                     curl: (7) Failed to connect to localhost port 80: Connection refused            admin@i-06ccaf22127d79ccf:~$ dig localhost                                      bash: dig: command not found                                                    admin@i-06ccaf22127d79ccf:~$ apt install dig                                    E: Could not open lock file /var/lib/dpkg/lock-frontend - open (13: Permission dE: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), are yadmin@i-06ccaf22127d79ccf:~$ netcat localhost                                   netcat: missing port number                                                     admin@i-06ccaf22127d79ccf:~$ netcat localhost:5000                              netcat: missing port number                                                     admin@i-06ccaf22127d79ccf:~$ ls                                                 agent  webserver.py                                                             admin@i-06ccaf22127d79ccf:~$                                                    

lsof      881                    admin  mem       REG              259,1   14952linux-gnu/libpthread-2.31.so                                                    lsof      881                    admin  mem       REG              259,1    1868linux-gnu/libdl-2.31.so                                                         lsof      881                    admin  mem       REG              259,1   61712linux-gnu/libpcre2-8.so.0.10.1                                                  lsof      881                    admin  mem       REG              259,1  190153linux-gnu/libc-2.31.so                                                          lsof      881                    admin  mem       REG              259,1   16612linux-gnu/libselinux.so.1                                                       lsof      881                    admin  mem       REG              259,1   17792linux-gnu/ld-2.31.so                                                            lsof      881                    admin    4r     FIFO               0,11      0tlsof      881                    admin    7w     FIFO               0,11      0tadmin@i-004e377b1bc91ea0e:/proc/572$ ls                                         

udp        0      0 0.0.0.0:68              0.0.0.0:*                           udp6       0      0 fe80::813:15ff:fe50:546 :::*                                udp6       0      0 ::1:323                 :::*                                Active UNIX domain sockets (only servers)                                       Proto RefCnt Flags       Type       State         I-Node   PID/Program name     unix  2      [ ACC ]     STREAM     LISTENING     9661     -                    unix  2      [ ACC ]     STREAM     LISTENING     10561    -                    unix  2      [ ACC ]     STREAM     LISTENING     10563    -                    unix  2      [ ACC ]     STREAM     LISTENING     9615     -                    unix  2      [ ACC ]     STREAM     LISTENING     9617     -                    unix  2      [ ACC ]     STREAM     LISTENING     9618     -                    unix  2      [ ACC ]     STREAM     LISTENING     9630     -                    unix  2      [ ACC ]     STREAM     LISTENING     9638     -                    unix  2      [ ACC ]     SEQPACKET  LISTENING     9640     -                    admin@i-05f9095b8fa200e0d:~$ ls                                                 

admin@i-0dad2dbc8977defc7:~$ ls                                                 agent  webserver.py                                                             admin@i-0dad2dbc8977defc7:~$ who ami                                            admin@i-0dad2dbc8977defc7:~$ whoami                                             admin                                                                           admin@i-0dad2dbc8977defc7:~$                                                    

admin@i-0774872585694a6b9:~$ curl http://localhost:5000                         Unauthorizedadmin@i-0774872585694a6b9:~$                                        admin@i-0774872585694a6b9:~$ nano /etc/apache2/                                 

admin@i-0014ea79decd6a02f:~$ sudo su -                                          root@i-0014ea79decd6a02f:~#                                                     root@i-0014ea79decd6a02f:~#                                                     root@i-0014ea79decd6a02f:~#                                                     root@i-0014ea79decd6a02f:~#