176     /var/lib/dpkg/alternatives                                              11832   /var/lib/dpkg/info                                                      12768   /var/lib/dpkg                                                           142352  /var/lib                                                                4       /var/local                                                              4       /var/opt                                                                4       /var/mail                                                               286216  /var                                                                    4       /srv                                                                    4       /opt                                                                    4       /mnt                                                                    6367108 /                                                                       admin@i-03fe695126a2ce962:~$ dh                                                 bash: dh: command not found                                                     admin@i-03fe695126a2ce962:~$ df                                                 

admin@i-0097164f9a793a3e0:~$ ls                                                 agent  data  datafile  kihei                                                    admin@i-0097164f9a793a3e0:~$                                                    

apache2                 cron.daily      ethertypes    hostname         ld.so.conapparmor                cron.hourly     fonts         hosts            ldap     apparmor.d              cron.monthly    fstab         hosts.allow      libaudit.apt                     cron.weekly     fstab.old     hosts.deny       lighttpd bash.bashrc             crontab         gai.conf      init.d           locale.albash_completion         dbus-1          gdb           initramfs-tools  locale.gebindresvport.blacklist  debconf.conf    groff         inputrc          localtimebinfmt.d                debian_version  group         iproute2         logcheck ca-certificates         default         group-        issue            login.defca-certificates.conf    deluser.conf    grub.d        issue.net        logrotateadmin@i-0503741ac0962d518:~$ ls /etc/python3                                    python3/   python3.9/                                                           admin@i-0503741ac0962d518:~$ ls /etc/python3/debian_config                      .ansible/      .bash_history  .bash_logout   .bashrc        .config/       .profadmin@i-0503741ac0962d518:~$ ls /etc/python3/debian_config                      

total 8                                                                         drwxr-xr-x  2 root root 4096 Sep 28  2021 .                                     drwxr-xr-x 18 root root 4096 Mar  3 20:06 ..                                    root@i-0bd285e932f3bd091:/home/admin# lsblk                                     NAME         MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT                                nvme1n1      259:0    0    1G  0 disk                                           nvme0n1      259:1    0    8G  0 disk                                           ├─nvme0n1p1  259:3    0  7.9G  0 part /                                         ├─nvme0n1p14 259:4    0    3M  0 part                                           └─nvme0n1p15 259:5    0  124M  0 part /boot/efi                                 nvme2n1      259:2    0    1G  0 disk                                           root@i-0bd285e932f3bd091:/home/admin# fdisk /dev/^C                             root@i-0bd285e932f3bd091:/home/admin# ls /dev/sd*                               /dev/sdb  /dev/sdc                                                              root@i-0bd285e932f3bd091:/home/admin# fdisk /dev/sd                             

drwxrwxrwt  2 root root 4096 Mar  3 19:55 .ICE-unix/                            drwxrwxrwt  2 root root 4096 Mar  3 19:55 .Test-unix/                           drwxrwxrwt  2 root root 4096 Mar  3 19:55 .X11-unix/                            drwxrwxrwt  2 root root 4096 Mar  3 19:55 .XIM-unix/                            drwxrwxrwt  2 root root 4096 Mar  3 19:55 .font-unix/                           drwx------  3 root root 4096 Mar  3 19:56 systemd-private-ae51ce1ae4234c22ab3262drwx------  3 root root 4096 Mar  3 19:56 systemd-private-ae51ce1ae4234c22ab3262admin@i-09003b20608883cd1:/tmp$ ls -lap iCE                                     ls: cannot access 'iCE': No such file or directory                              admin@i-09003b20608883cd1:/tmp$ ls -lap ICE^C                                   admin@i-09003b20608883cd1:/tmp$ ls -lap .ICE-unix/                              total 8                                                                         drwxrwxrwt 2 root root 4096 Mar  3 19:55 ./                                     drwxrwxrwt 9 root root 4096 Mar  3 19:56 ../                                    admin@i-09003b20608883cd1:/tmp$ df                                              

admin@i-0e4ebb3175e1346a0:~$ cd /home/admin/                                    admin@i-0e4ebb3175e1346a0:~$ ls                                                 agent  data  datafile  kihei                                                    admin@i-0e4ebb3175e1346a0:~$ cat kihei                                          

total 12                                                                        -rwxrwx--- 1 root  root   360 Sep 24  2023 webserver.py                         drwxr-xr-x 2 admin root  4096 Sep 24  2023 agent                                -rw-r--r-- 1 admin admin   79 Mar  2 05:22 py-wrapper.sh                        admin@i-02f98745e2b363f17:~$ losetup                                            admin@i-02f98745e2b363f17:~$ losetup -l                                         admin@i-02f98745e2b363f17:~$ ls -ltr                                            total 12                                                                        -rwxrwx--- 1 root  root   360 Sep 24  2023 webserver.py                         drwxr-xr-x 2 admin root  4096 Sep 24  2023 agent                                -rw-r--r-- 1 admin admin   79 Mar  2 05:22 py-wrapper.sh                        admin@i-02f98745e2b363f17:~$ mkdir /tmp/test                                    admin@i-02f98745e2b363f17:~$ mount -o bind,ro /home/admin /tmp/test             mount: /tmp/test: must be superuser to use mount.                               admin@i-02f98745e2b363f17:~$                                                    

-rw-r--r-- 1 root root 0 Mar  2 05:08 overflowgid                               -rw-r--r-- 1 root root 0 Mar  2 05:08 mount-max                                 -rw-r--r-- 1 root root 0 Mar  2 05:08 leases-enable                             -rw-r--r-- 1 root root 0 Mar  2 05:08 lease-break-time                          dr-xr-xr-x 1 root root 0 Mar  2 05:08 inotify                                   -r--r--r-- 1 root root 0 Mar  2 05:08 inode-state                               -r--r--r-- 1 root root 0 Mar  2 05:08 inode-nr                                  -r--r--r-- 1 root root 0 Mar  2 05:08 file-nr                                   dr-xr-xr-x 1 root root 0 Mar  2 05:08 epoll                                     -rw-r--r-- 1 root root 0 Mar  2 05:08 dir-notify-enable                         -r--r--r-- 1 root root 0 Mar  2 05:08 dentry-state                              -r--r--r-- 1 root root 0 Mar  2 05:08 aio-nr                                    -rw-r--r-- 1 root root 0 Mar  2 05:08 aio-max-nr                                drwxr-xr-x 2 root root 0 Mar  2 05:08 binfmt_misc                               admin@i-0e43863c72b6409f1:/proc/sys/fs$ cd /home/ad                             

admin@i-080818b7cdb9f789c:~/agent$ ls                                           check.sh  sadagent  sadagent.txt                                                admin@i-080818b7cdb9f789c:~/agent$ ping localhost:500                           ping: localhost:500: Name or service not known                                  admin@i-080818b7cdb9f789c:~/agent$ ping localhost:5000                          ping: localhost:5000: Name or service not known                                 admin@i-080818b7cdb9f789c:~/agent$ ping localhost:5000                          

ls                                        #1740693057                               pwd                                       #1740693069                               ls -a                                     #1740693085                               cd bash_history                           #1740693116                               cd .bash_history                          admin@i-04b1619a31d169ee7:~$ ls           agent  webserver.py                       admin@i-04b1619a31d169ee7:~$ python ./webserver.py                                  bash: python: command not found           admin@i-04b1619a31d169ee7:~$              

admin@i-0a1bcc85d0fd2797c:~$                                                    

  -l, --lock                    lock the password of the named account            -n, --mindays MIN_DAYS        set minimum number of days before password                                      change to MIN_DAYS                                -q, --quiet                   quiet mode                                        -r, --repository REPOSITORY   change password in REPOSITORY repository          -R, --root CHROOT_DIR         directory to chroot into                          -S, --status                  report password status on the named account       -u, --unlock                  unlock the password of the named account          -w, --warndays WARN_DAYS      set expiration warning days to WARN_DAYS          -x, --maxdays MAX_DAYS        set maximum number of days before password                                      change to MAX_DAYS                                                                                                              admin@i-05d764fc7a0200ea6:~$ passwd                                             Changing password for admin.                                                    Current password:                                                               

Unauthorizedadmin@i-01f465ecb0e6b6e62:~$ curl localhost:5000                    Unauthorizedadmin@i-01f465ecb0e6b6e62:~$ ls                                     agent  webserver.py                                                             admin@i-01f465ecb0e6b6e62:~$ nano webserver.py                                  admin@i-01f465ecb0e6b6e62:~$ sudo nano webserver.py                                                                                                             We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                                                                                                      

strings: webserver.py: Permission denied                                        admin@i-0eed1c77d78127958:~$ ls -al                                             total 44                                                                        drwxr-xr-x 6 admin admin 4096 Sep 24  2023 .                                    drwxr-xr-x 3 root  root  4096 Sep 17  2023 ..                                   drwx------ 3 admin admin 4096 Sep 20  2023 .ansible                             -rw------- 1 admin admin  530 Feb 26 17:43 .bash_history                        -rw-r--r-- 1 admin admin  220 Aug  4  2021 .bash_logout                         -rw-r--r-- 1 admin admin 3526 Aug  4  2021 .bashrc                              drwxr-xr-x 3 admin admin 4096 Sep 20  2023 .config                              -rw-r--r-- 1 admin admin  807 Aug  4  2021 .profile                             drwx------ 2 admin admin 4096 Sep 17  2023 .ssh                                 drwxr-xr-x 2 admin root  4096 Sep 24  2023 agent                                -rwxrwx--- 1 root  root   360 Sep 24  2023 webserver.py                         admin@i-0eed1c77d78127958:~$