paris/i-02901696405e883e3
by SadServersMore by SadServers
admin@i-0030ca60c3dfc6307:~$ netstat -tupln (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN tcp6 0 0 :::22 :::* LISTEN tcp6 0 0 :::6767 :::* LISTEN tcp6 0 0 :::8080 :::* LISTEN udp 0 0 127.0.0.1:323 0.0.0.0:* udp 0 0 0.0.0.0:68 0.0.0.0:* udp6 0 0 fe80::841:92ff:fefb:546 :::* udp6 0 0 ::1:323 :::* admin@i-0030ca60c3dfc6307:~$
paris/i-0030ca60c3dfc6307 00:27
by SadServers[:delay_enter=DELAY][:delay_exit=DELAY][:when=WHEN], --inject=SET[:error=ERRNO|:retval=VALUE][:signal=SIG][:syscall=SYSCALL] [:delay_enter=DELAY][:delay_exit=DELAY][:when=WHEN] perform syscall tampering for the syscalls in SET delay: microseconds or NUMBER{s|ms|us|ns} when: FIRST[..LAST][+[STEP]] -e fault=SET[:error=ERRNO][:when=WHEN], --fault=SET[:error=ERRNO][:when=WHEN] synonym for -e inject with default ERRNO set to ENOSYS. Miscellaneous: -d, --debug enable debug output to stderr -h, --help print help message --seccomp-bpf enable seccomp-bpf filtering -V, --version print version admin@i-054157b3157fdc4cd:~$ strace ./kihei -v
kihei/i-054157b3157fdc4cd 01:21
by SadServers./main.go:64 +0x47d ) = ? +++ exited with 2 +++ admin@i-0b124a38a5b257dc0:~$ ls agent data datafile kihei admin@i-0b124a38a5b257dc0:~$ cd data/ admin@i-0b124a38a5b257dc0:~/data$ ls admin@i-0b124a38a5b257dc0:~/data$ mv ../datafile ./newdatafile admin@i-0b124a38a5b257dc0:~/data$ cd .. admin@i-0b124a38a5b257dc0:~$ ./kihei Done. admin@i-0b124a38a5b257dc0:~$ touch datafile admin@i-0b124a38a5b257dc0:~$ ./kihei Done. admin@i-0b124a38a5b257dc0:~$