64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.020 ms                        64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.033 ms                        64 bytes from 127.0.0.1: icmp_seq=3 ttl=64 time=0.033 ms                        ^C                                                                              --- 127.0.0.1 ping statistics ---                                               3 packets transmitted, 3 received, 0% packet loss, time 2029ms                  rtt min/avg/max/mdev = 0.020/0.028/0.033/0.006 ms                               admin@i-07e8450481f52abd6:~$ ssh 127.0.0.1                                      The authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.          ECDSA key fingerprint is SHA256:MaQ1ByNhlAiN8nHi+ywSTGpSLwVjOTmxS8w3ktrOQ9A.    Are you sure you want to continue connecting (yes/no/[fingerprint])? y          Please type 'yes', 'no' or the fingerprint: yes                                 Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts.      admin@127.0.0.1: Permission denied (publickey).                                 admin@i-07e8450481f52abd6:~$ ssh --                                             

admin@i-0ff8052777bfebd18:~$ du -sh /home/admin/*                               11M     /home/admin/agent                                                       4.0K    /home/admin/data                                                        5.1G    /home/admin/datafile                                                    2.2M    /home/admin/kihei                                                       admin@i-0ff8052777bfebd18:~$ cd /home/admin/                                    admin@i-0ff8052777bfebd18:~$ ls -ll                                             total 5245048                                                                   drwxr-xr-x 2 admin root       4096 Sep 17  2023 agent                           drwxr-xr-x 2 admin root       4096 Feb 13 13:20 data                            -rw-r--r-- 1 root  root 5368709120 Sep 17  2023 datafile                        -rwxr-xr-x 1 admin root    2207109 Sep 17  2023 kihei                           admin@i-0ff8052777bfebd18:~$ mv /home/admin/datafile /opt/                      mv: cannot move '/home/admin/datafile' to '/opt/datafile': Permission denied    admin@i-0ff8052777bfebd18:~$ mv /home/admin                                     

The partition table has been altered.                                           Calling ioctl() to re-read partition table.                                     Syncing disks.                                                                                                                                                  admin@i-0d87227a67f8b769e:~$ lsblk -f                                           NAME         FSTYPE FSVER LABEL UUID                                 FSAVAIL FSUnvme0n1                                                                         ├─nvme0n1p1  ext4   1.0         811e12d8-f542-4650-9330-8d96633bd90c    1.2G    ├─nvme0n1p14                                                                    └─nvme0n1p15 vfat   FAT16       8690-F844                             117.8M    nvme2n1                                                                         └─nvme2n1p1                                                                     nvme1n1                                                                         └─nvme1n1p1                                                                     admin@i-0d87227a67f8b769e:~$ sudo vgcreate VG01                                 

-rw-r--r--   1 root root 0 Feb 10 16:15 setgroups                               -r--r--r--   1 root root 0 Feb 10 16:15 smaps                                   -r--r--r--   1 root root 0 Feb 10 16:15 smaps_rollup                            -r--------   1 root root 0 Feb 10 16:15 stack                                   -r--r--r--   1 root root 0 Feb 10 16:10 stat                                    -r--r--r--   1 root root 0 Feb 10 16:15 statm                                   -r--r--r--   1 root root 0 Feb 10 16:10 status                                  -r--------   1 root root 0 Feb 10 16:15 syscall                                 dr-xr-xr-x   3 root root 0 Feb 10 16:13 task                                    -rw-r--r--   1 root root 0 Feb 10 16:15 timens_offsets                          -r--r--r--   1 root root 0 Feb 10 16:15 timers                                  -rw-rw-rw-   1 root root 0 Feb 10 16:15 timerslack_ns                           -rw-r--r--   1 root root 0 Feb 10 16:15 uid_map                                 -r--r--r--   1 root root 0 Feb 10 16:15 wchan                                   admin@i-09ee8de58a0c22547:/proc/579$                                            

ile="unconfined" name="/usr/bin/man" pid=336 comm="apparmor_parser"             [    4.839178] audit: type=1400 audit(1739149489.855:5): apparmor="STATUS" operaile="unconfined" name="man_filter" pid=336 comm="apparmor_parser"               [    4.853673] audit: type=1400 audit(1739149489.855:6): apparmor="STATUS" operaile="unconfined" name="man_groff" pid=336 comm="apparmor_parser"                [    4.870219] audit: type=1400 audit(1739149489.891:7): apparmor="STATUS" operaile="unconfined" name="tcpdump" pid=338 comm="apparmor_parser"                  [    4.884118] audit: type=1400 audit(1739149489.907:8): apparmor="STATUS" operaile="unconfined" name="/usr/sbin/chronyd" pid=339 comm="apparmor_parser"        [    4.884121] audit: type=1400 audit(1739149489.927:9): apparmor="STATUS" operaile="unconfined" name="lsb_release" pid=337 comm="apparmor_parser"              [   56.427427] IPv6: ADDRCONF(NETDEV_CHANGE): ens5: link becomes ready          [   58.862552] device-mapper: uevent: version 1.0.3                             [   58.867273] device-mapper: ioctl: 4.43.0-ioctl (2020-10-01) initialised: dm-dadmin@i-0db84b7794affbe97:~$                                                    

0ef35856b482e3494 (DSA)                                                         Feb 10 00:54:59 i-0ef35856b482e3494 ec2: 256 SHA256:P94uHIGmD/z2viiScrIibozGKOmOef35856b482e3494 (ECDSA)                                                        Feb 10 00:54:59 i-0ef35856b482e3494 ec2: 256 SHA256:REyM2XPzJ0VEVV14EXpOZazaTWasef35856b482e3494 (ED25519)                                                      Feb 10 00:54:59 i-0ef35856b482e3494 ec2: 3072 SHA256:vMSIjLcN3qaIfiUsZDlz3u1dhOS0ef35856b482e3494 (RSA)                                                         Feb 10 00:54:59 i-0ef35856b482e3494 ec2: -----END SSH HOST KEY FINGERPRINTS-----Feb 10 00:54:59 i-0ef35856b482e3494 ec2: #######################################admin@i-0ef35856b482e3494:/var/log$ su -                                        Password:                                                                       admin@i-0ef35856b482e3494:/var/log$ su -                                        Password:                                                                       ^C                                                                              admin@i-0ef35856b482e3494:/var/log$ cd /proc/                                   

  chrony.service                                                           loade  cloud-config.service                                                     loade  cloud-final.service                                                      loade  cloud-init-local.service                                                 loade  cloud-init.service                                                       loade  cron.service                                                             loade  dbus.service                                                             loade  flaskapp.service                                                         loade  getty@tty1.service                                                       loade  gotty.service                                                            loade  ifup@ens5.service                                                        loade  ifupdown-pre.service                                                     loade  kmod-static-nodes.service                                                loade  networking.service                                                       loadeadmin@i-0494d9b5fd1c92c57:~$ s                                                  

admin@i-05afb2f0462ee35dd:~$ ls                                                 agent  data  datafile  kihei                                                    admin@i-05afb2f0462ee35dd:~$ pwd                                                /home/admin                                                                     admin@i-05afb2f0462ee35dd:~$ ls                                                 agent  data  datafile  kihei                                                    admin@i-05afb2f0462ee35dd:~$                                                    

write(2, ")\n", 2)                                                              )                      = 2                                                      write(2, "\t", 1        )                       = 1                             write(2, "./main.go", 9./main.go)                = 9                            write(2, ":", 1:)                        = 1                                    write(2, "64", 264)                       = 2                                   write(2, " +", 2 +)                       = 2                                   write(2, "0x47d", 50x47d)                    = 5                                write(2, "\n", 1                                                                )                       = 1                                                     exit_group(2)                           = ?                                     +++ exited with 2 +++                                                           admin@i-0133da7c108576538:~$ cd /home/admin/data/newdatafile                    bash: cd: /home/admin/data/newdatafile: No such file or directory               admin@i-0133da7c108576538:~$ mkdir                                              

admin@i-05ea6cc0264e6ce20:~$                                                    admin@i-05ea6cc0264e6ce20:~$                                                    admin@i-05ea6cc0264e6ce20:~$                                                    admin@i-05ea6cc0264e6ce20:~$                                                    admin@i-05ea6cc0264e6ce20:~$ lsof +D                                            lsof: +d not followed by a directory path                                       lsof 4.93.2                                                                      latest revision: https://github.com/lsof-org/lsof                               latest FAQ: https://github.com/lsof-org/lsof/blob/master/00FAQ                  latest (non-formatted) man page: https://github.com/lsof-org/lsof/blob/master/L usage: [-?abhKlnNoOPRtUvVX] [+|-c c] [+|-d s] [+D D] [+|-E] [+|-e s] [+|-f[gG]] [-F [f]] [-g [s]] [-i [i]] [+|-L [l]] [+m [m]] [+|-M] [-o [o]] [-p s]           [+|-r [t]] [-s [p:s]] [-S [t]] [-T [t]] [-u s] [+|-w] [-x [fl]] [--] [names]   Use the ``-h'' option to get more help information.                             admin@i-05ea6cc0264e6ce20:~$ lsof +D                                            

                                                                                We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                      Sorry, try again.                                                               [sudo] password for admin:                                                      Sorry, try again.                                                               [sudo] password for admin:                                                      sudo: 2 incorrect password attempts                                             admin@i-0cf55633730360868:~$                                                    

  media-types python-apt-common python3-minimal python3.9 python3.9-minimal qemuUse 'sudo apt autoremove' to remove them.                                       The following additional packages will be installed:                              vim-common vim-tiny                                                           Suggested packages:                                                               indent                                                                        The following packages will be REMOVED:                                           vim* vim-runtime*                                                             The following packages will be upgraded:                                          vim-common vim-tiny                                                           2 upgraded, 0 newly installed, 2 to remove and 102 not upgraded.                Need to get 970 kB of archives.                                                 After this operation, 36.3 MB disk space will be freed.                         Do you want to continue? [Y/n] Y                                                0% [Connecting to cdn-aws.deb.debian.org (2600:9000:25f5:9e00:c:a756:bac0:93a1)]

total 5250172                                                                   drwxr-xr-x 7 admin admin       4096 Feb  7 20:00 .                              drwxr-xr-x 3 root  root        4096 Sep 17  2023 ..                             drwx------ 3 admin admin       4096 Sep 17  2023 .ansible                       -rw-r--r-- 1 admin admin        220 Aug  4  2021 .bash_logout                   -rw-r--r-- 1 admin admin       3526 Aug  4  2021 .bashrc                        drwxr-xr-x 3 admin admin       4096 Feb  7 19:55 .config                        -rw-r--r-- 1 admin admin        807 Aug  4  2021 .profile                       drwx------ 2 admin admin       4096 Sep 17  2023 .ssh                           drwxr-xr-x 2 admin root        4096 Sep 17  2023 agent                          drwxr-xr-x 2 admin root        4096 Feb  7 20:00 data                           -rw-r--r-- 1 admin admin 5368709120 Feb  7 19:57 datafile                       -rw-r--r-- 1 admin admin    5210219 Sep 17  2023 datafile.gz                    -rwxr-xr-x 1 admin root     2207109 Sep 17  2023 kihei                          admin@i-0e30ea8b74f198298:~$ .                                                  

goroutine 1 [running]:                                                          main.main()                                                                             ./main.go:64 +0x47d                                                     admin@i-0b7ecaf1b65fe9efe:~$ type /home/admin/kihei                             /home/admin/kihei is /home/admin/kihei                                          admin@i-0b7ecaf1b65fe9efe:~$ file /home/admin/kihei                             /home/admin/kihei: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), staticaladmin@i-0b7ecaf1b65fe9efe:~$ ls -la /home/admin/kihei                           -rwxr-xr-x 1 admin root 2207109 Sep 17  2023 /home/admin/kihei                  admin@i-0b7ecaf1b65fe9efe:~$ cd /var/log                                        admin@i-0b7ecaf1b65fe9efe:/var/log$ ls                                          alternatives.log  btmp    cloud-init-output.log  debug     journal   messages   apt               cast    cloud-init.log         dpkg.log  kern.log  minio.log  auth.log          chrony  daemon.log             faillog   lastlog   private    admin@i-0b7ecaf1b65fe9efe:/var/log$