drwxr-xr-x 2 admin root  4096 Sep 24 23:20 agent                                -rwxrwx--- 1 root  root   360 Sep 24 23:20 webserver.py                         admin@i-0607715dd43c3c574:~$ sudo vi webserver.py                                                                                                               We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                      sudo: a password is required                                                    admin@i-0607715dd43c3c574:~$ curl localhost:5000                                Unauthorizedadmin@i-0607715dd43c3c574:~$ curl localhost:5000                    

/cpu.CacheLineSizeinternal/cpu.X86internal/cpu.optionsinternal/cpu.maxExtendedFunittaskpath.ErrBadPatterngo.itab.*flag.boolValue,flag.Valuego.itab.*os.File,io.WmError,errorgo.itab.*reflect.rtype,reflect.Typego.itab.*flag.durationValue,flag.64Value,flag.Valuego.itab.*flag.intValue,flag.Valuego.itab.*flag.int64Value,flagngValue,flag.Valuego.itab.*flag.uintValue,flag.Valuego.itab.*flag.uint64Value,fl.Builder,io.Writergo.itab.*errors.errorString,errorgo.itab.*fmt.wrapError,errorggo.itab.*os.File,io.Readergo.itab.syscall.Signal,os.Signalgo.itab.*io/fs.PathErrallError,errorgo.itab.syscall.Errno,errorgo.itab.os.onlyWriter,io.Writergo.itab.nfogo.itab.*io.LimitedReader,io.Readergo.itab.*os.File,io.Closergo.itab.*os/exec*os/exec.Error,errorgo.itab.*bufio.Reader,io.Readergo.itab.os/user.UnknownUserIdrnal/reflectlite.rtype,internal/reflectlite.Typego.itab.time.fileSizeError,errort.SortedMap,sort.Interfacego.itab.runtime.errorString,error_cgo_init_cgo_thread__init_done_cgo_callers_cgo_yield_cgo_mmap_cgo_munmap_cgo_sigactionruntime.mainPCeadlineExceededError,errorgo.itab.internal/poll.errNetClosing,errorruntime.defaudVersion.strruntime.modinfo.strtype.*runtime.textsectionmapadmin@i-04a6e764e9245

admin@i-0b6822c8b00d24d31:~/clmystery$ ls                            LICENSE.md  cheatsheet.md   hint1  hint3  hint5  hint7  instructions README.md   cheatsheet.pdf  hint2  hint4  hint6  hint8  mystery      admin@i-0b6822c8b00d24d31:~/clmystery$ cat i                         

            [:delay_enter=DELAY][:delay_exit=DELAY][:when=WHEN],                  --inject=SET[:error=ERRNO|:retval=VALUE][:signal=SIG][:syscall=SYSCALL]                  [:delay_enter=DELAY][:delay_exit=DELAY][:when=WHEN]                                   perform syscall tampering for the syscalls in SET                   delay:      microseconds or NUMBER{s|ms|us|ns}                                  when:       FIRST[..LAST][+[STEP]]                                           -e fault=SET[:error=ERRNO][:when=WHEN], --fault=SET[:error=ERRNO][:when=WHEN]                  synonym for -e inject with default ERRNO set to ENOSYS.                                                                                        Miscellaneous:                                                                    -d, --debug    enable debug output to stderr                                    -h, --help     print help message                                               --seccomp-bpf  enable seccomp-bpf filtering                                     -V, --version  print version                                                  admin@i-054157b3157fdc4cd:~$ strace ./kihei -v