nvme0n1      259:0    0    8G  0 disk                                           ├─nvme0n1p1  259:2    0  7.9G  0 part /                                         ├─nvme0n1p14 259:3    0    3M  0 part                                           └─nvme0n1p15 259:4    0  124M  0 part /boot/efi                                 nvme2n1      259:1    0    1G  0 disk                                           nvme1n1      259:5    0    1G  0 disk                                           admin@i-09cf4af9b2e96eac2:~$ df -h                                              Filesystem       Size  Used Avail Use% Mounted on                               udev             217M     0  217M   0% /dev                                     tmpfs             46M  368K   46M   1% /run                                     /dev/nvme0n1p1   7.7G  6.1G  1.2G  84% /                                        tmpfs            228M   12K  228M   1% /dev/shm                                 tmpfs            5.0M     0  5.0M   0% /run/lock                                /dev/nvme0n1p15  124M  5.9M  118M   5% /boot/efi                                admin@i-09cf4af9b2e96eac2:~$                                                    

brk(NULL)                               = 0x56054d8f4000                        brk(0x56054d915000)                     = 0x56054d915000                        openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = -1 ENOEopenat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3      fstat(3, {st_mode=S_IFREG|0644, st_size=2996, ...}) = 0                         read(3, "# Locale name alias data base.\n#"..., 4096) = 2996                    read(3, "", 4096)                       = 0                                     close(3)                                = 0                                     openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXECfstat(3, {st_mode=S_IFREG|0644, st_size=252, ...}) = 0                          mmap(NULL, 252, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbe8c59a000                  close(3)                                = 0                                     openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLYfstat(3, {st_mode=S_IFREG|0644, st_size=27002, ...}) = 0                        :                                                                               

admin@i-048f4d643e8d0b2aa:~$ cd home/                                           

with sobs, to sing this:--                                                                                                                                         'Beautiful Soup, so rich and green,                                             Waiting in a hot tureen!                                                        Who for such dainties would not stoop?                                          Soup of the evening, beautiful Soup!                                            Soup of the evening, beautiful Soup!                                              Beau--ootiful Soo--oop!                                                                                                                                    admin@i-0c362d82beebc795c:~/clmystery/mystery$ less crimescene                                                                                                  [1]+  Stopped                 less crimescene                                   admin@i-0c362d82beebc795c:~/clmystery/mystery$ ls                               crimescene  interviews  memberships  people  streets  vehicles                  admin@i-0c362d82beebc795c:~/clmystery/mystery$ head                             

LICENSE.md      cheatsheet.pdf  hint3           hint6           instructions    README.md       hint1           hint4           hint7           mystery/        admin@i-048ff169f86462cca:~$ cat clmystery/hint1                                Try poking around what's in a file by using the 'head' command:                                                                                                   head -n 20 people                                                                                                                                             This will show you the first 20 lines of the 'people' file.                     admin@i-048ff169f86462cca:~$ cd clmystery/                                      admin@i-048ff169f86462cca:~/clmystery$ ls                                       LICENSE.md  cheatsheet.md   hint1  hint3  hint5  hint7  instructions            README.md   cheatsheet.pdf  hint2  hint4  hint6  hint8  mystery                 admin@i-048ff169f86462cca:~/clmystery$ head -n 20 people                        head: cannot open 'people' for reading: No such file or directory               admin@i-048ff169f86462cca:~/clmystery$ c                                        

lsof      742                    admin  mem       REG              259,1    2700lsof      742                    admin  mem       REG              259,1   34613lsof      742                    admin  mem       REG              259,1   14952lsof      742                    admin  mem       REG              259,1    1868lsof      742                    admin  mem       REG              259,1   61712lsof      742                    admin  mem       REG              259,1  190153lsof      742                    admin  mem       REG              259,1   16612lsof      742                    admin  mem       REG              259,1   17792lsof      742                    admin    4r     FIFO               0,11      0tlsof      742                    admin    7w     FIFO               0,11      0tadmin@i-071b3e1fd1456ee07:~$ man lsof                                           admin@i-071b3e1fd1456ee07:~$ exec 1580&>-                                       admin@i-071b3e1fd1456ee07:~$ which ps                                           /usr/bin/ps                                                                     admin@i-071b3e1fd1456ee07:~$ ls /usr/bin/p                                      

    %n %s %b %f %u %g %D %i %h %t %T %X %Y %Z %W %o %C                          --terse --file-system is equivalent to the following FORMAT:                        %n %i %l %t %s %S %b %f %a %c %d                                                                                                                            NOTE: your shell may have its own version of stat, which usually supersedes     the version described here.  Please refer to your shell's documentation         for details about the options it supports.                                                                                                                      GNU coreutils online help: <https://www.gnu.org/software/coreutils/>            Report any translation bugs to <https://translationproject.org/team/>           Full documentation <https://www.gnu.org/software/coreutils/stat>                or available locally via: info '(coreutils) stat invocation'                    admin@i-0d77cecfeb6f45e24:~$ stat tty                                           stat: cannot statx 'tty': No such file or directory                             admin@i-0d77cecfeb6f45e24:~$ stat tty                                           

uuidd:x:102:102::/run/uuidd:/usr/sbin/nologin                                   tcpdump:x:103:103::/nonexistent:/usr/sbin/nologin                               _chrony:x:104:104:Chrony daemon,,,:/var/lib/chrony:/usr/sbin/nologin            systemd-network:x:105:106:systemd Network Management,,,:/run/systemd:/usr/sbin/nsystemd-resolve:x:106:107:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin    sshd:x:107:65534::/run/sshd:/usr/sbin/nologin                                   systemd-timesync:x:999:999:systemd Time Synchronization:/:/usr/sbin/nologin     systemd-coredump:x:998:998:systemd Core Dumper:/:/usr/sbin/nologin              admin:x:1000:1000:Debian:/home/admin:/bin/bash                                  admin@i-0a102db10be3dbe04:~$ whoami                                             admin                                                                           admin@i-0a102db10be3dbe04:~$ whoami -h                                          whoami: invalid option -- 'h'                                                   Try 'whoami --help' for more information.                                       admin@i-0a102db10be3dbe04:~$ whoami -h                                          

--                                                                              License Plate L3375A9                                                           Make: Honda                                                                     Color: Blue                                                                     Owner: Jeremy Bowers                                                            Height: 6'1"                                                                    Weight: 204 lbs                                                                 --                                                                              License Plate L337WR9                                                           Make: Honda                                                                     Color: Blue                                                                     Owner: Jacqui Maher                                                             Height: 6'2"                                                                    Weight: 130 lbs                                                                 admin@i-09a7631fb5e1cb879:~$ grep -A 5 "L337.*9" clmystery/mystery/vehicles | gr

-637928    interview-75633580  interview-901603                                 admin@i-097742c345d995775:~/clmystery/mystery/interviews$ nano interview-699607 admin@i-097742c345d995775:~/clmystery/mystery/interviews$ nano interview-4724602admin@i-097742c345d995775:~/clmystery/mystery/interviews$ cd ..                 admin@i-097742c345d995775:~/clmystery/mystery$ ls                               crimescene  interviews  memberships  people  streets  vehicles                  admin@i-097742c345d995775:~/clmystery/mystery$ nanp vehicles                    bash: nanp: command not found                                                   admin@i-097742c345d995775:~/clmystery/mystery$ nano vehicles                                                                                                                                                                                    Use "fg" to return to nano.                                                                                                                                     [1]+  Stopped                 nano vehicles                                     admin@i-097742c345d995775:~/clmystery/mystery$                                  

>>>                                                                   admin@i-0026829048e290c6e:~/clmystery/mystery$ grep CLUE crimescene   CLUE: Footage from an ATM security camera is blurry but shows that the perpetrator is a tall male, at least 6'.                             CLUE: Found a wallet believed to belong to the killer: no ID, just loose change, and membership cards for Rotary_Club, Delta SkyMiles, the local library, and the Museum of Bash History. The cards are totally untraceable and have no name, for some reason.                          CLUE: Questioned the barista at the local coffee shop. He said a woman left right before they heard the shots. The name on her latte was Annabel, she had blond spiky hair and a New Zealand accent.              admin@i-0026829048e290c6e:~/clmystery/mystery$ ls                     crimescene  interviews  memberships  people  streets  vehicles        admin@i-0026829048e290c6e:~/clmystery/mystery$ cd interviews/         admin@i-0026829048e290c6e:~/clmystery/mystery/interviews$             

admin@i-0ad6c08cadcda54ab:~$ curl -su 'user' localhost:5000                     Enter host password for user 'user':                                            Unauthorizedadmin@i-0ad6c08cadcda54ab:~$ curl -su 'root' localhost:5000         Enter host password for user 'root':                                            

                                                                                *******                                                                         Crime Scene Report #066820028026                                                ********                                                                        The Mock Turtle sighed deeply, and began, in a voice sometimes choked           with sobs, to sing this:--                                                                                                                                         'Beautiful Soup, so rich and green,                                             Waiting in a hot tureen!                                                        Who for such dainties would not stoop?                                          Soup of the evening, beautiful Soup!                                            Soup of the evening, beautiful Soup!                                              Beau--ootiful Soo--oop!                                                                                                                                    admin@i-07378e98c8174004e:~/clmystery/mystery$ grep                             

Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                      sudo: a password is required                                                    admin@i-0f9d17817910b720d:~$ ls -l                                              total 8                                                                         drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent                                 -rwxrwx--- 1 root  root  360 Sep 24 23:20 webserver.py                          admin@i-0f9d17817910b720d:~$ cat webserver.py                                   cat: webserver.py: Permission denied                                            admin@i-0f9d17817910b720d:~$ nc localhost: