└─nvme0n1p15 259:4    0  124M  0 part /boot/efi                                 nvme2n1      259:1    0    1G  0 disk                                           nvme1n1      259:5    0    1G  0 disk                                           admin@i-0bb5606ea3f199d25:~$ lsblk -l                                           NAME       MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT                                  nvme0n1    259:0    0    8G  0 disk                                             nvme2n1    259:1    0    1G  0 disk                                             nvme0n1p1  259:2    0  7.9G  0 part /                                           nvme0n1p14 259:3    0    3M  0 part                                             nvme0n1p15 259:4    0  124M  0 part /boot/efi                                   nvme1n1    259:5    0    1G  0 disk                                             admin@i-0bb5606ea3f199d25:~$                                                    admin@i-0bb5606ea3f199d25:~$                                                    admin@i-0bb5606ea3f199d25:~$                                                    admin@i-0bb5606ea3f199d25:~$ sudo pvcreate /dev/nvme1n1 /dev/nvme2n1            

admin@i-0e1a3ad942e59d79e:~$ /home/admin/kihei                                  panic: exit status 1                                                                                                                                            goroutine 1 [running]:                                                          main.main()                                                                             ./main.go:64 +0x47d                                                     admin@i-0e1a3ad942e59d79e:~$ strace                                             

admin@i-07093ab6abb78f705:~$ nc localhost 5000                                  

   12  2025-02-06T12:08:17 curl localhost:5000                                     13  2025-02-06T12:08:20 ls                                                      14  2025-02-06T12:08:23 cat webserver.py                                        15  2025-02-06T12:08:31 ls -la                                                  16  2025-02-06T12:08:49 history                                              admin@i-06266520ce0c16bec:~$ sudo su                                                                                                                            We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                      

write(2, "  -v\tVerbose mode (print extra i"..., 37  -v Verbose mode (print extr) = 37                                                                          write(2, "  -verbose\n    \tVerbose mode (pr"..., 48  -verbose                          Verbose mode (print extra info)                                         ) = 48                                                                          exit_group(2)                           = ?                                     +++ exited with 2 +++                                                           admin@i-0e235312469363df1:~$ strace ./kihei -o output.txtstrace -o output.txt ./admin@i-0e235312469363df1:~$ strace -o output.txt ./kihei                       panic: exit status 1                                                                                                                                            goroutine 1 [running]:                                                          main.main()                                                                             ./main.go:64 +0x47d                                                     admin@i-0e235312469363df1:~$ cat output.tx                                      

nvme0n1      259:0    0    8G  0 disk                                           ├─nvme0n1p1  259:1    0  7.9G  0 part /                                         ├─nvme0n1p14 259:4    0    3M  0 part                                           └─nvme0n1p15 259:5    0  124M  0 part /boot/efi                                 nvme1n1      259:2    0    1G  0 disk                                           nvme2n1      259:3    0    1G  0 disk                                           admin@i-0dfc03c672b434eed:~$ pvcreate /dev/nvme1n1                                WARNING: Running as a non-root user. Functionality may be unavailable.          /run/lock/lvm/P_global:aux: open failed: Permission denied                    admin@i-0dfc03c672b434eed:~$ sudo pvcreate /dev/nvme1n1                           Physical volume "/dev/nvme1n1" successfully created.                          admin@i-0dfc03c672b434eed:~$ pvs                                                  WARNING: Running as a non-root user. Functionality may be unavailable.          /run/lock/lvm/P_global:aux: open failed: Permission denied                    admin@i-0dfc03c672b434eed:~$ sudo pvs                                           

admin@i-0888e336bb63f4e82:~$ stra                                               

total 44                                                                        -rw-r--r-- 1 admin admin  807 Aug  4  2021 .profile                             -rw-r--r-- 1 admin admin 3526 Aug  4  2021 .bashrc                              -rw-r--r-- 1 admin admin  220 Aug  4  2021 .bash_logout                         drwxr-xr-x 3 root  root  4096 Sep 17  2023 ..                                   drwx------ 2 admin admin 4096 Sep 17  2023 .ssh                                 drwx------ 3 admin admin 4096 Sep 20  2023 .ansible                             drwxr-xr-x 3 admin admin 4096 Sep 20  2023 .config                              -rwxrwx--- 1 root  root   360 Sep 24  2023 webserver.py                         drwxr-xr-x 6 admin admin 4096 Sep 24  2023 .                                    drwxr-xr-x 2 admin root  4096 Sep 24  2023 agent                                -rw------- 1 admin admin  641 Feb  5 20:33 .bash_history                        admin@i-03c39b2616f8de2c3:~$ cat /etc/sudoers                                   cat: /etc/sudoers: Permission denied                                            admin@i-03c39b2616f8de2c3:~$ cd /etc/ng                                         

nvme2n1      259:5    0    1G  0 disk                                           admin@i-08d337eedbe8625d4:/var/tmp$ pvcreate /dev/nvme1n1 /dev/nvme2n1            WARNING: Running as a non-root user. Functionality may be unavailable.          /run/lock/lvm/P_global:aux: open failed: Permission denied                    admin@i-08d337eedbe8625d4:/var/tmp$ sudo pvcreate /dev/nvme1n1 /dev/nvme2n1       Physical volume "/dev/nvme1n1" successfully created.                            Physical volume "/dev/nvme2n1" successfully created.                          admin@i-08d337eedbe8625d4:/var/tmp$ vgcreate vg /dev/nvme1n1 /dev/nvme2n1         WARNING: Running as a non-root user. Functionality may be unavailable.          /run/lock/lvm/P_global:aux: open failed: Permission denied                    admin@i-08d337eedbe8625d4:/var/tmp$ sudo vgcreate vg /dev/nvme1n1 /dev/nvme2n1    Volume group "vg" successfully created                                        admin@i-08d337eedbe8625d4:/var/tmp$ sudo lvcreate -n lv -l 100%FREE vg            Logical volume "lv" created.                                                  admin@i-08d337eedbe8625d4:/var/tmp$                                             

goroutine 1 [running]:                                                          main.main()                                                                             ./main.go:64 +0x47d                                                     admin@i-0f6d76d4e64ebbaa3:~$ less  /home/admin/kihei                            "/home/admin/kihei" may be a binary file.  See it anyway?                       admin@i-0f6d76d4e64ebbaa3:~$                                                    admin@i-0f6d76d4e64ebbaa3:~$ df -h                                              Filesystem       Size  Used Avail Use% Mounted on                               udev             217M     0  217M   0% /dev                                     tmpfs             46M  368K   46M   1% /run                                     /dev/nvme0n1p1   7.7G  6.1G  1.2G  84% /                                        tmpfs            228M   12K  228M   1% /dev/shm                                 tmpfs            5.0M     0  5.0M   0% /run/lock                                /dev/nvme0n1p15  124M  5.9M  118M   5% /boot/efi                                admin@i-0f6d76d4e64ebbaa3:~$                                                    

admin@i-0f9b21ac3ff1d1766:~$ ls                                                 agent  data  datafile  kihei                                                    admin@i-0f9b21ac3ff1d1766:~$ strings kihei                                      bash: strings: command not found                                                admin@i-0f9b21ac3ff1d1766:~$                                                    

#1738765594                                                                     ps -aux                                                                         #1738765628                                                                     cat /var/log/cast/i-0eaded03159cbb69b                                           #1738765663                                                                     ps -aux                                                                         #1738765697                                                                     cat webserver.py                                                                #1738765720                                                                     lsof | grep 576                                                                 #1738765732                                                                     ls -lsh                                                                         #1738765740                                                                     ls -lah                                                                         admin@i-0eaded03159cbb69b:~$ en                                                 

Connecting to localhost (localhost)|127.0.0.1|:5000... connected.               HTTP request sent, awaiting response... 200 OK                                  Length: 12 [text/html]                                                          Saving to: ‘index.html’                                                                                                                                         index.html                                     0%[                              index.html                                   100%[===================================================================>]      12  --.-KB/s    in 0s                                                                                              2025-02-05 00:23:50 (1.79 MB/s) - ‘index.html’ saved [12/12]                                                                                                    admin@i-00106663cc89b7917:~$ ls                                                 agent  index.html  webserver.py                                                 admin@i-00106663cc89b7917:~$ cat index.html                                     Unauthorizedadmin@i-00106663cc89b7917:~$ nc localh                              

total 44                                                                        drwxr-xr-x 6 admin admin 4096 Sep 24  2023 .                                    drwxr-xr-x 3 root  root  4096 Sep 17  2023 ..                                   drwx------ 3 admin admin 4096 Sep 20  2023 .ansible                             -rw------- 1 admin admin  496 Feb  5 00:09 .bash_history                        -rw-r--r-- 1 admin admin  220 Aug  4  2021 .bash_logout                         -rw-r--r-- 1 admin admin 3526 Aug  4  2021 .bashrc                              drwxr-xr-x 3 admin admin 4096 Sep 20  2023 .config                              -rw-r--r-- 1 admin admin  807 Aug  4  2021 .profile                             drwx------ 2 admin admin 4096 Sep 17  2023 .ssh                                 drwxr-xr-x 2 admin root  4096 Sep 24  2023 agent                                -rwxrwx--- 1 root  root   360 Sep 24  2023 webserver.py                         admin@i-005e623c973fc92ea:~$ chown admin:admin webserver.py                     chown: changing ownership of 'webserver.py': Operation not permitted            admin@i-005e623c973fc92ea:~$ cp -pr webserver.py test