{"version": 2, "width": 129, "height": 36, "timestamp": 1730931212, "idle_time_limit": 2.0, "env": {"SHELL": "/bin/bash", "TERM": "xterm-256color"}, "title": "paris/i-0e8108e3a59a33ce2"} [0.022015, "o", "\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [8.02138, "o", "c"] [8.217259, "o", "u"] [8.685945, "o", "r"] [8.795215, "o", "l"] [9.050337, "o", " "] [9.621828, "o", "-"] [11.329043, "o", "X"] [11.756027, "o", " "] [13.864772, "o", "G"] [14.036002, "o", "E"] [14.210933, "o", "T"] [14.878623, "o", " "] [20.474313, "o", "l"] [20.668453, "o", "o"] [20.807989, "o", "c"] [20.980756, "o", "a"] [21.676715, "o", "l"] [21.910096, "o", "h"] [22.048302, "o", "o"] [22.239752, "o", "s"] [22.448549, "o", "t"] [22.948354, "o", ":"] [24.040652, "o", "5"] [24.242159, "o", "0"] [24.391779, "o", "0"] [24.516026, "o", "0"] [24.853912, "o", "\r\n\u001b[?2004l\r"] [24.867333, "o", "Unauthorized"] [24.869008, "o", "\u001b[?2004h"] [24.86928, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [25.853947, "o", "curl -X GET localhost:5000"] [26.332995, "o", "\b\u001b[K"] [26.476239, "o", "\b\u001b[K"] [26.602638, "o", "\b\u001b[K"] [27.141016, "o", "\b\u001b[K"] [28.149134, "o", "8"] [28.437798, "o", "0"] [28.734288, "o", "8"] [28.93955, "o", "0"] [29.254132, "o", "\r\n\u001b[?2004l\r"] [29.265543, "o", "\r\n\r\n\r\n\r\n bash@i-0e8108e3a59a33ce2\r\n \r\n \r\n"] [29.266001, "o", " \r\n \r\n \r\n \r\n \r\n\r\n\r\n\r\n

\r\n \r\n \r\n \r\n\r\n\r\n"] [29.266825, "o", "\u001b[?2004h"] [29.266897, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [34.292902, "o", "curl -X GET localhost:8080"] [34.993005, "o", "\b\u001b[K"] [35.234554, "o", "\b\u001b[K"] [35.477025, "o", "\b\u001b[K"] [35.711486, "o", "\b\u001b[K"] [37.63152, "o", "5"] [37.853054, "o", "0"] [38.001261, "o", "0"] [38.118387, "o", "0"] [39.459264, "o", "\r\n\u001b[?2004l\r"] [39.473681, "o", "Unauthorized"] [39.475472, "o", "\u001b[?2004h"] [39.475645, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [40.448091, "o", "curl -X GET localhost:5000"] [40.890678, "o", "\b"] [41.143842, "o", "\b"] [41.171428, "o", "\b"] [41.208595, "o", "\b"] [41.241421, "o", "\b"] [41.300929, "o", "\b"] [41.311523, "o", "\b"] [41.340099, "o", "\b"] [41.373833, "o", "\b"] [41.408237, "o", "\b"] [41.441102, "o", "\b"] [41.475146, "o", "\b"] [41.52634, "o", "\b"] [41.541707, "o", "\b"] [41.752986, "o", "\b"] [45.489262, "o", "\u001b[C localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [47.223455, "o", "_ localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [47.819742, "o", "F localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [48.235414, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [48.342389, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [49.060093, "o", "- localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [49.535098, "o", "F localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [50.160182, "o", "a localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [50.569923, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [50.71913, "o", "\u001b[C localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [50.985075, "o", "a localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [51.167726, "o", "b localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [51.478252, "o", "o localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [51.783605, "o", "b localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [52.014712, "o", "a localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [52.378032, "o", "= localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [52.677545, "o", "a localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [52.843311, "o", "d localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [53.092233, "o", "a localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [53.583307, "o", "\r\n\u001b[?2004l\r"] [53.596642, "o", "Unauthorized"] [53.598808, "o", "\u001b[?2004h"] [53.59896, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [54.791442, "o", "curl -X GET -F aboba=ada localhost:5000"] [55.452548, "o", "\b"] [55.710943, "o", "\b"] [55.723299, "o", "\b"] [55.759093, "o", "\b"] [55.792491, "o", "\b"] [55.828557, "o", "\b"] [55.861809, "o", "\b"] [55.89508, "o", "\b"] [55.929228, "o", "\b"] [55.960569, "o", "\b"] [56.141539, "o", "\b"] [56.355261, "o", "\b"] [56.530564, "o", "\b"] [56.69101, "o", "\b"] [56.837204, "o", "\b"] [57.879739, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [58.05728, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [58.211905, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [59.061788, "o", "p localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [59.239262, "o", "w localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [59.654921, "o", "s localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [60.160808, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [60.294152, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [60.539354, "o", "a localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [60.905828, "o", "s localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [61.109079, "o", "s localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [61.470074, "o", "w localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [62.076615, "o", "o localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [62.378455, "o", "r localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [62.681016, "o", "d localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [62.839339, "o", "\r\n\u001b[?2004l\r"] [62.877689, "o", "Unauthorized"] [62.878662, "o", "\u001b[?2004h"] [62.878842, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [66.510356, "o", "curl -X GET -F aboba=password localhost:5000"] [66.937646, "o", "\b"] [67.181339, "o", "\b"] [67.259311, "o", "\b\b"] [67.281195, "o", "\b"] [67.313294, "o", "\b"] [67.345939, "o", "\b"] [67.377213, "o", "\b"] [67.410028, "o", "\b"] [67.44408, "o", "\b"] [67.477243, "o", "\b"] [67.511613, "o", "\b"] [67.703692, "o", "\b"] [68.055939, "o", "\b"] [68.582935, "o", "\b"] [69.098459, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.347029, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.379068, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.412515, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.447201, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.483098, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.517648, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.548934, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.583229, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.618023, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.651356, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.684867, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.719608, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.754076, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.786811, "o", "\u001b[1Plocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [69.993482, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [70.313018, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [70.661104, "o", "\u001b[1Plocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [70.946542, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [71.171336, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [71.410439, "o", "\b\u001b[1P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [72.34296, "o", "P localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [72.429391, "o", "O localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [73.084968, "o", "S localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [73.47409, "o", "T localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [73.997161, "o", "\r\n\u001b[?2004l\r"] [74.011693, "o", "\r\n\r\n405 Method Not Allowed\r\n

Method Not Allowed

\r\n

The method is not allowed for the requested URL.

\r\n"] [74.012175, "o", "\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [94.636092, "o", "p"] [94.800378, "o", "i"] [94.923001, "o", "n"] [95.047403, "o", "g"] [95.5968, "o", " "] [96.391425, "o", "\b\u001b[K"] [96.519214, "o", "\b\u001b[K"] [96.643378, "o", "\b\u001b[K"] [96.74237, "o", "\b\u001b[K"] [96.870244, "o", "\b\u001b[K"] [97.18732, "o", "\u0007"] [99.682523, "o", "n"] [100.539406, "o", "m"] [100.67067, "o", "a"] [100.772931, "o", "p"] [100.938183, "o", " "] [102.020165, "o", "\b\u001b[K"] [102.26833, "o", "\b\u001b[K"] [102.302367, "o", "\b\u001b[K"] [102.338677, "o", "\b\u001b[K"] [102.369854, "o", "\b\u001b[K"] [102.405206, "o", "\u0007"] [102.440434, "o", "\u0007"] [102.473085, "o", "\u0007"] [102.505668, "o", "\u0007"] [102.537769, "o", "\u0007"] [102.574121, "o", "\u0007"] [103.255519, "o", "l"] [103.387271, "o", "s"] [103.521376, "o", "\r\n\u001b[?2004l\r"] [103.524044, "o", "\u001b[0m\u001b[01;34magent\u001b[0m \u001b[01;32mwebserver.py\u001b[0m\r\n"] [103.525282, "o", "\u001b[?2004h"] [103.525501, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [109.125159, "o", "l"] [109.252945, "o", "s"] [109.372551, "o", " "] [109.541773, "o", "-"] [109.83323, "o", "l"] [109.948414, "o", "a"] [110.103791, "o", "\r\n\u001b[?2004l\r"] [110.107769, "o", "total 44\r\n"] [110.108241, "o", "drwxr-xr-x 6 admin admin 4096 Sep 24 2023 \u001b[0m\u001b[01;34m.\u001b[0m\r\ndrwxr-xr-x 3 root root 4096 Sep 17 2023 \u001b[01;34m..\u001b[0m\r\ndrwx------ 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.ansible\u001b[0m\r\n-rw------- 1 admin admin 338 Nov 6 22:15 .bash_history\r\n-rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout\r\n-rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc\r\ndrwxr-xr-x 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.config\u001b[0m\r\n-rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile\r\ndrwx------ 2 admin admin 4096 Sep 17 2023 \u001b[01;34m.ssh\u001b[0m\r\ndrwxr-xr-x 2 admin root 4096 Sep 24 2023 \u001b[01;34magent\u001b[0m\r\n-rwxrwx--- 1 root root 360 Sep 24 2023 \u001b[01;32mwebserver.py\u001b[0m\r\n"] [110.108558, "o", "\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [112.503843, "o", "c"] [112.711935, "o", "a"] [113.504995, "o", "t"] [113.774001, "o", " "] [114.924212, "o", "/"] [115.190949, "o", "e"] [115.379258, "o", "tc/"] [115.809873, "o", "s"] [115.957996, "o", "u"] [116.041049, "o", "d"] [116.17501, "o", "o"] [116.29321, "o", "\u0007"] [116.723391, "o", "e"] [116.967656, "o", "\u0007rs"] [117.86816, "o", "\r\n\u001b[?2004l\r"] [117.869886, "o", "cat: /etc/sudoers"] [117.870295, "o", ": Permission denied\r\n"] [117.870454, "o", "\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [120.025007, "o", "cat /etc/sudoers"] [120.472198, "o", "."] [120.631329, "o", "d/"] [120.93615, "o", "\u0007"] [121.344497, "o", "\u0007"] [121.577675, "o", "\u0007"] [121.810059, "o", "\u0007"] [122.04328, "o", "\u0007"] [122.25018, "o", "\u0007"] [123.694842, "o", "\r\n\u001b[?2004l\r"] [123.696651, "o", "cat: /etc/sudoers.d/: Permission denied"] [123.697064, "o", "\r\n"] [123.697259, "o", "\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [125.095773, "o", "cat /etc/sudoers.d/"] [125.574358, "o", "\b\u001b[K"] [125.800227, "o", "\b\u001b[K"] [125.832011, "o", "\b\u001b[K"] [125.865893, "o", "\b\u001b[K"] [125.9306, "o", "\b\u001b[K"] [125.934957, "o", "\b\u001b[K"] [125.983061, "o", "\b\u001b[K"] [126.097696, "o", "\b\u001b[K"] [126.521689, "o", "\u0007"] [127.559099, "o", "d"] [127.775174, "o", "\u0007o"] [128.167199, "o", "\u0007"] [128.577794, "o", "\r\n"] [128.57806, "o", "sudo.conf sudo_logsrvd.conf sudoers sudoers.d/ \r\n\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ cat /etc/sudo"] [129.466879, "o", "."] [130.30106, "o", "c"] [132.183075, "o", "o"] [132.570424, "o", "nf "] [133.168471, "o", "\r\n\u001b[?2004l\r"] [133.171041, "o", "#\r\n# Default /etc/sudo.conf file\r\n#\r\n# Sudo plugins:\r\n# Plugin plugin_name plugin_path plugin_options ...\r\n#\r\n# The plugin_path is relative to /usr/lib/sudo unless\r\n# fully qualified.\r\n# The plugin_name corresponds to a global symbol in the plugin\r\n# that contains the plugin interface structure.\r\n# The plugin_options are optional.\r\n#\r\n"] [133.171342, "o", "# The sudoers plugin is used by default if no Plugin lines are present.\r\n#Plugin sudoers_policy sudoers.so\r\n#Plugin sudoers_io sudoers.so\r\n#Plugin sudoers_audit sudoers.so\r\n\r\n#\r\n# Sudo askpass:\r\n# Path askpass /path/to/askpass\r\n#\r\n# An askpass helper program may be specified to provide a graphical\r\n# password prompt for \"sudo -A\" support. Sudo does not ship with its\r\n# own askpass program but can use the OpenSSH askpass.\r\n#\r\n# Use the OpenSSH askpass\r\n#Path askpass /usr/X11R6/bin/ssh-askpass\r\n#\r\n# Use the Gnome OpenSSH askpass\r\n#Path askpass /usr/libexec/openssh/gnome-ssh-askpass\r\n\r\n#\r\n# Sudo device search path:\r\n# Path devsearch /dev/path1:/dev/path2:/dev\r\n#\r\n# A colon-separated list of paths to check when searching for a user's\r\n# terminal device.\r\n#\r\n#Path devsearch /dev/pts:/dev/vt:/dev/term:/dev/zcons:/dev/pty:/dev\r\n\r\n#\r\n# Sudo noexec:\r\n# Path noexec /path/to/sudo_noexec.so\r\n#\r\n# Path to a shared library containing replacements for the execv(),\r\n# execve() and fexecve() library functions that just"] [133.171526, "o", " return an error.\r\n# This is used to implement the \"noexec\" functionality on systems that\r\n# support LD_PRELOAD or its equivalent.\r\n#\r\n# The compiled-in value is usually sufficient and should only be changed\r\n# if you rename or move the sudo_noexec.so file.\r\n#\r\n#Path noexec /usr/lib/sudo/sudo_noexec.so\r\n\r\n#\r\n# Sudo plugin directory:\r\n# Path plugin_dir /path/to/plugins\r\n#\r\n# The default directory to use when searching for plugins that are\r\n# specified without a fully qualified path name.\r\n#\r\n#Path plugin_dir /usr/lib/sudo\r\n\r\n#\r\n# Sudo developer mode:\r\n# Set developer_mode true|false\r\n#\r\n# Allow loading of plugins that are owned by non-root or are writable\r\n# by \"group\" or \"other\". Should only be used during plugin development.\r\n#Set developer_mode true\r\n\r\n#\r\n# Core dumps:\r\n# Set disable_coredump true|false\r\n#\r\n# By default, sudo disables core dumps while it is executing (they\r\n# are re-enabled for the command that is run).\r\n# To aid in debugging sudo problems, you may wish to enable core\r\n# dumps by set"] [133.171625, "o", "ting \"disable_coredump\" to false.\r\n#\r\n#Set disable_coredump false\r\n\r\n#\r\n# User groups:\r\n# Set group_source static|dynamic|adaptive\r\n#\r\n# Sudo passes the user's group list to the policy plugin.\r\n# If the user is a member of the maximum number of groups (usually 16),\r\n# sudo will query the group database directly to be sure to include\r\n# the full list of groups.\r\n#\r\n# On some systems, this can be expensive so the behavior is configurable.\r\n# The \"group_source\" setting has three possible values:\r\n# static - use the user's list of groups returned by the kernel.\r\n# dynamic - query the group database to find the list of groups.\r\n# adaptive - if user is in less than the maximum number of groups.\r\n#\t use the kernel list, else query the group database.\r\n#\r\n#Set group_source static\r\n\r\n#\r\n# Sudo interface probing:\r\n# Set probe_interfaces true|false\r\n#\r\n# By default, sudo will probe the system's network interfaces and\r\n# pass the IP address of each enabled interface to the policy plugin.\r\n# On systems "] [133.171769, "o", "with a large number of virtual interfaces this may take\r\n# a noticeable amount of time.\r\n#\r\n#Set probe_interfaces false\r\n\r\n#\r\n# Sudo debug files:\r\n# Debug program /path/to/debug_log subsystem@priority[,subsyste@priority]\r\n#\r\n# Sudo and related programs support logging debug information to a file.\r\n# The program is typically sudo, sudoers.so, sudoreplay or visudo.\r\n#\r\n# Subsystems vary based on the program; \"all\" matches all subsystems.\r\n# Priority may be crit, err, warn, notice, diag, info, trace or debug.\r\n# Multiple subsystem@priority may be specified, separated by a comma.\r\n#\r\n#Debug sudo /var/log/sudo_debug all@debug\r\n#Debug sudoers.so /var/log/sudoers_debug all@debug\r\n"] [133.173821, "o", "\u001b[?2004h"] [133.174177, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [146.299883, "o", "c"] [146.393239, "o", "l"] [146.535093, "o", "e"] [146.651936, "o", "a"] [146.786362, "o", "r"] [146.890901, "o", "\r\n\u001b[?2004l\r"] [146.893126, "o", "\u001b[H\u001b[2J\u001b[3J"] [146.893837, "o", "\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [147.161584, "o", "l"] [147.288748, "o", "s"] [147.468424, "o", "\r\n\u001b[?2004l\r"] [147.470864, "o", "\u001b[0m\u001b[01;34magent\u001b[0m \u001b[01;32mwebserver.py\u001b[0m\r\n"] [147.47251, "o", "\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [150.718446, "o", "l"] [150.859665, "o", "s"] [150.908118, "o", " "] [151.054331, "o", "-"] [151.33338, "o", "l"] [151.424575, "o", "a"] [151.594156, "o", "\r\n\u001b[?2004l\r"] [151.597048, "o", "total 44\r\n"] [151.597481, "o", "drwxr-xr-x 6 admin admin 4096 Sep 24 2023 \u001b[0m\u001b[01;34m.\u001b[0m\r\ndrwxr-xr-x 3 root root 4096 Sep 17 2023 \u001b[01;34m..\u001b[0m\r\ndrwx------ 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.ansible\u001b[0m\r\n-rw------- 1 admin admin 483 Nov 6 22:16 .bash_history\r\n-rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout\r\n-rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc\r\ndrwxr-xr-x 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.config\u001b[0m\r\n-rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile\r\ndrwx------ 2 admin admin 4096 Sep 17 2023 \u001b[01;34m.ssh\u001b[0m\r\ndrwxr-xr-x 2 admin root 4096 Sep 24 2023 \u001b[01;34magent\u001b[0m\r\n-rwxrwx--- 1 root root 360 Sep 24 2023 \u001b[01;32mwebserver.py\u001b[0m\r\n"] [151.597798, "o", "\u001b[?2004h"] [151.597994, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [192.100973, "o", "l"] [192.240692, "o", "s"] [192.271776, "o", " "] [192.588718, "o", "-"] [192.898322, "o", "l"] [193.002266, "o", "a"] [193.129241, "o", " "] [193.568305, "o", "a"] [193.760737, "o", "g"] [193.977102, "o", "ent/"] [195.185438, "o", "\r\n\u001b[?2004l\r"] [195.19027, "o", "total 11144\r\n"] [195.190532, "o", "drwxr-xr-x 2 admin root 4096 Sep 24 2023 \u001b[0m\u001b[01;34m.\u001b[0m\r\ndrwxr-xr-x 6 admin admin 4096 Sep 24 2023 \u001b[01;34m..\u001b[0m\r\n-rwxr-xr-x 1 admin admin 230 Sep 24 2023 \u001b[01;32mcheck.sh\u001b[0m\r\n-rwxr-xr-x 1 admin root 11397096 Sep 20 2023 \u001b[01;32msadagent\u001b[0m\r\n-rw-r--r-- 1 admin admin 0 Sep 20 2023 sadagent.txt\r\n"] [195.191772, "o", "\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [374.773771, "o", "p"] [374.90724, "o", "s"] [375.132212, "o", " "] [375.455422, "o", "a"] [375.675837, "o", "u"] [375.963773, "o", "x"] [376.060982, "o", "\r\n\u001b[?2004l\r"] [376.067882, "o", "USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND\r\n"] [376.068357, "o", "root 1 0.4 2.1 98156 9852 ? Ss 22:12 0:02 /sbin/init\r\n"] [376.069282, "o", "root 2 0.0 0.0 0 0 ? S 22:12 0:00 [kthreadd]\r\n"] [376.069495, "o", "root 3 0.0 0.0 0 0 ? I< 22:12 0:00 [rcu_gp]\r\n"] [376.069829, "o", "root 4 0.0 0.0 0 0 ? I< 22:12 0:00 [rcu_par_gp]\r\n"] [376.070115, "o", "root 5 0.0 0.0 0 0 ? I 22:12 0:00 [kworker/0:0-cgroup_destroy]\r\n"] [376.070404, "o", "root 6 0.0 0.0 0 0 ? I< 22:12 0:00 [kworker/0:0H-events_highpri]"] [376.070491, "o", "\r\n"] [376.070804, "o", "root 7 0.0 0.0 0 0 ? I 22:12 0:00 [kworker/u4:0-events_unbound]\r\n"] [376.071055, "o", "root 8 0.0 0.0 0 0 ? I< 22:12 0:00 [mm_percpu_wq]\r\n"] [376.071311, "o", "root 9 0.0 0.0 0 0 ? S 22:12 0:00 [rcu_tasks_rude_]\r\n"] [376.071568, "o", "root 10 0.0 0.0 0 0 ? S 22:12 0:00 [rcu_tasks_trace]\r\n"] [376.071825, "o", "root 11 0.0 0.0 0 0 ? S 22:12 0:00 [ksoftirqd/0]\r\n"] [376.072094, "o", "root 12 0.0 0.0 0 0 ? I 22:12 0:00 [rcu_sched]\r\n"] [376.072367, "o", "root 13 0.0 0.0 0 0 ? S 22:12 0:00 [migration/0]\r\n"] [376.072611, "o", "root 15 0.0 0.0 0 0 ? S 22:12 0:00 [cpuhp/0]"] [376.072798, "o", "\r\nroot 16 0.0 0.0 0 0 ? S 22:12 0:00 [cpuhp/1]\r\n"] [376.072987, "o", "root 17 0.0 0.0 0 0 ? S 22:12 0:00 [migration/1]\r\n"] [376.07318, "o", "root 18 0.0 0.0 0 0 ? S 22:12 0:00 [ksoftirqd/1]\r\nroot 20 0.0 0.0 0 0 ? I< 22:12 0:00 [kworker/1:0H-events_highpri]\r\n"] [376.073375, "o", "root 22 0.0 0.0 0 0 ? S 22:12 0:00 [kdevtmpfs]\r\n"] [376.073609, "o", "root 23 0.0 0.0 0 0 ? I< 22:12 0:00 [netns]\r\n"] [376.073802, "o", "root 24 0.0 0.0 0 0 ? S 22:12 0:00 [kauditd]\r\n"] [376.07399, "o", "root 25 0.0 0.0 0 0 ? S 22:12 0:00 [khungtaskd]\r\n"] [376.074177, "o", "root 26 0.0 0.0 0 0 ? S 22:12 0:00 [oom_reaper]\r\nroot 27 0.0 0.0 0 0 ? I< 22:12 0:00 [writeback]\r\n"] [376.074398, "o", "root 28 0.0 0.0 0 0 ? S 22:12 0:00 [kcompactd0]\r\n"] [376.074586, "o", "root 29 0.0 0.0 0 0 ? SN 22:12 0:00 [ksmd]\r\n"] [376.074795, "o", "root 31 0.0 0.0 0 0 ? I 22:12 0:00 [kworker/1:1-events]\r\n"] [376.07499, "o", "root 49 0.0 0.0 0 0 ? I< 22:12 0:00 [kintegrityd]\r\n"] [376.075352, "o", "root 50 0.0 0.0 0 0 ? I< 22:12 0:00 [kblockd]\r\nroot 51 0.0 0.0 0 0 ? I< 22:12 0:00 [blkcg_punt_bio]\r\n"] [376.075559, "o", "root 52 0.0 0.0 0 0 ? I< 22:12 0:00 [kworker/0:1H-kblockd]\r\nroot 53 0.0 0.0 0 0 ? S 22:12 0:00 [kswapd0]\r\n"] [376.075791, "o", "root 54 0.0 0.0 0 0 ? I< 22:12 0:00 [kthrotld]\r\nroot 55 0.0 0.0 0 0 ? I< 22:12 0:00 [acpi_thermal_pm]\r\n"] [376.076011, "o", "root 56 0.0 0.0 0 0 ? I< 22:12 0:00 [nvme-wq]\r\nroot 57 0.0 0.0 0 0 ? I< 22:12 0:00 [nvme-reset-wq]\r\n"] [376.076244, "o", "root 58 0.0 0.0 0 0 ? I< 22:12 0:00 [nvme-delete-wq]\r\nroot 59 0.0 0.0 0 0 ? I 22:12 0:00 [kworker/u4:1-events_unbound]\r\n"] [376.076454, "o", "root 60 0.0 0.0 0 0 ? R 22:12 0:00 [kworker/u4:2+events_unbound]\r\nroot 61 0.0 0.0 0 0 ? I 22:12 0:00 [kworker/u4:3-events_unbound]\r\n"] [376.076684, "o", "root 62 0.0 0.0 0 0 ? I< 22:12 0:00 [kworker/1:1H-kblockd]\r\nroot 63 0.0 0.0 0 0 ? I< 22:12 0:00 [ipv6_addrconf]\r\n"] [376.076913, "o", "root 73 0.0 0.0 0 0 ? I< 22:12 0:00 [kstrp]\r\nroot 78 0.0 0.0 0 0 ? I< 22:12 0:00 [kworker/u5:0]\r\n"] [376.07714, "o", "root 114 0.0 0.0 0 0 ? I< 22:12 0:00 [ena]\r\nroot 132 0.0 0.0 0 0 ? S 22:12 0:00 [jbd2/nvme0n1p1-]\r\n"] [376.077404, "o", "root 133 0.0 0.0 0 0 ? I< 22:12 0:00 [ext4-rsv-conver]\r\nroot 195 0.0 2.7 64792 12748 ? Ss 22:12 0:00 /lib/systemd/systemd-journald\r\n"] [376.077641, "o", "root 212 0.0 1.0 19440 5096 ? Ss 22:12 0:00 /lib/systemd/systemd-udevd\r\nroot 234 0.0 0.0 0 0 ? I< 22:12 0:00 [cryptd]\r\n"] [376.077873, "o", "root 311 0.0 0.0 0 0 ? I 22:12 0:00 [kworker/1:3-cgroup_destroy]\r\nroot 388 0.0 1.2 99884 5616 ? Ssl 22:13 0:00 /sbin/dhclient -4 -v -i -pf /run/dhclient.ens5.pid -lf /var/li\r\n"] [376.078105, "o", "root 462 0.0 1.2 99884 5892 ? Ssl 22:13 0:00 /sbin/dhclient -6 -v -pf /run/dhclient6.ens5.pid -lf /var/lib/\r\nadmin 557 0.1 2.6 1304716 12372 ? S'\r\n or 'ps --help '\r\n for additional help text.\r\n\r\nFor more details see ps(1).\r\n"] [395.225824, "o", "\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [399.423024, "o", "h"] [399.666508, "o", "t"] [399.742703, "o", "o"] [399.889724, "o", "p"] [400.152996, "o", "\r\n\u001b[?2004l\r"] [400.153915, "o", "bash: htop: command not found\r\n"] [400.154911, "o", "\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [401.118247, "o", "t"] [401.210666, "o", "o"] [401.315137, "o", "p"] [401.612464, "o", "\r\n\u001b[?2004l\r"] [401.617754, "o", "\u001b[?1h\u001b=\u001b[?25l"] [401.774609, "o", "\u001b[H\u001b[2J\u001b(B\u001b[mtop - 22:20:14 up 8 min, 0 users, load average: 0.00, 0.00, 0.00\u001b(B\u001b[m\u001b[39;49m\u001b(B\u001b[m\u001b[39;49m\u001b[K\r\nTasks:\u001b(B\u001b[m\u001b[39;49m\u001b[1m 76 \u001b(B\u001b[m\u001b[39;49mtotal,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 1 \u001b(B\u001b[m\u001b[39;49mrunning,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 75 \u001b(B\u001b[m\u001b[39;49msleeping,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0 \u001b(B\u001b[m\u001b[39;49mstopped,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0 \u001b(B\u001b[m\u001b[39;49mzombie\u001b(B\u001b[m\u001b[39;49m\u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n"] [401.775095, "o", "%Cpu(s):\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0.0 \u001b(B\u001b[m\u001b[39;49mus,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0.0 \u001b(B\u001b[m\u001b[39;49msy,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0.0 \u001b(B\u001b[m\u001b[39;49mni,\u001b(B\u001b[m\u001b[39;49m\u001b[1m100.0 \u001b(B\u001b[m\u001b[39;49mid,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0.0 \u001b(B\u001b[m\u001b[39;49mwa,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0.0 \u001b(B\u001b[m\u001b[39;49mhi,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0.0 \u001b(B\u001b[m\u001b[39;49msi,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0.0 \u001b(B\u001b[m\u001b[39;49mst\u001b(B\u001b[m\u001b[39;49m\u001b(B\u001b[m\u001b[39;49m\u001b[K\r\nMiB Mem :\u001b(B\u001b[m\u001b[39;49m\u001b[1m 455.6 \u001b(B\u001b[m\u001b[39;49mtotal,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 190.9 \u001b(B\u001b[m\u001b[39;49mfree,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 93.2 \u001b(B\u001b[m\u001b[39;49mused,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 171.5 \u001b(B\u001b[m\u001b[39;49mbuff/cache\u001b(B\u001b[m\u001b[39;49m\u001b(B\u001b[m\u001b[39;49m\u001b[K\r\nMiB Swap:\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0.0 \u001b(B\u001b[m\u001b[39;49mtotal,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0.0 \u001b(B\u001b[m\u001b[39;49mfree,\u001b(B\u001b[m\u001b[39;49m\u001b[1m 0.0 \u001b(B\u001b[m\u001b[39;49mused.\u001b(B\u001b[m\u001b[39;49m\u001b[1m 350.0 \u001b(B\u001b[m\u001b[39;49mavail Mem \u001b(B\u001b[m\u001b[39;49m\u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b[K\r\n\u001b[7m PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 1 root 20 "] [401.775135, "o", " 0 98156 9852 7580 S 0.0 2.1 0:02.27 systemd \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 2 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kthreadd \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 3 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_gp \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 4 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_par_gp \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 5 root 20 0 0 0 0 I 0.0 0.0 0:00.00 kworker/0:0-cgroup_destroy \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 6 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/0:0H-events_highpri \u001b(B\u001b[m\u001b[39;49m\u001b[K"] [401.775243, "o", "\r\n"] [401.77541, "o", "\u001b(B\u001b[m 7 root 20 0 0 0 0 I 0.0 0.0 0:00.06 kworker/u4:0-flush-259:0 \u001b(B\u001b[m\u001b[39;49m\u001b[K"] [401.77564, "o", "\r\n"] [401.775712, "o", "\u001b(B\u001b[m 8 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 mm_percpu_wq \u001b(B\u001b[m\u001b[39;49m\u001b[K"] [401.775877, "o", "\r\n"] [401.776083, "o", "\u001b(B\u001b[m 9 root 20 0 0 0 0 S 0.0 0.0 0:00.00 rcu_tasks_rude_ \u001b(B\u001b[m\u001b[39;49m\u001b[K"] [401.776211, "o", "\r\n"] [401.776386, "o", "\u001b(B\u001b[m 10 root 20 0 0 0 0 S 0.0 0.0 0:00.00 rcu_tasks_trace \u001b(B\u001b[m\u001b[39;49m\u001b[K"] [401.776486, "o", "\r\n"] [401.776607, "o", "\u001b(B\u001b[m 11 root 20 0 0 0 0 S 0.0 0.0 0:00.01 ksoftirqd/0 \u001b(B\u001b[m\u001b[39;49m\u001b[K"] [401.776822, "o", "\r\n"] [401.776998, "o", "\u001b(B\u001b[m 12 root 20 0 0 0 0 I 0.0 0.0 0:00.04 rcu_sched \u001b(B\u001b[m\u001b[39;49m\u001b[K"] [401.777169, "o", "\r\n\u001b(B\u001b[m 13 root rt 0 0 0 0 S 0.0 0.0 0:00.00 migration/0 \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 15 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/0 \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 16 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/1 \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 17 root rt 0 0 0 0 S 0.0 0.0 0:00.45 migration/1 \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 18 root 20 0 0 0 0 S 0.0 0.0 0:00.01 ksoftirqd/1 \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 20 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/1:0H-events_highpri "] [401.777562, "o", " \u001b(B\u001b[m\u001b[39;49m\u001b[K"] [401.777735, "o", "\r\n\u001b(B\u001b[m 22 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kdevtmpfs \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 23 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 netns \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 24 root 20 0 0 0 0 S 0.0 0.0 0:00.12 kauditd \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 25 root 20 0 0 0 0 S 0.0 0.0 0:00.00 khungtaskd \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 26 root 20 0 0 0 0 S 0.0 0.0 0:00.00 oom_reaper \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 27 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 writeback \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 28 root 20 0 0 0 0 S 0.0 0.0 0:00.01 kcompactd0 "] [401.777872, "o", " \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 29 root 25 5 0 0 0 S 0.0 0.0 0:00.00 ksmd \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 31 root 20 0 0 0 0 I 0.0 0.0 0:00.06 kworker/1:1-events \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 49 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kintegrityd \u001b(B\u001b[m\u001b[39;49m\u001b[K\r\n\u001b(B\u001b[m 50 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kblockd \u001b(B\u001b[m\u001b[39;49m\u001b[K"] [403.71911, "o", "\u001b[?1l\u001b>\u001b[37;1H\r\n\u001b[?12l\u001b[?25h\u001b[K"] [403.720146, "o", "\u001b[?2004h"] [403.72027, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [429.647258, "o", "\u001b[7mps -ef --forest\u001b[27m"] [430.073078, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\bps -ef --forest\r\n\u001b[?2004l\r"] [430.091753, "o", "UID PID PPID C STIME TTY TIME CMD\r\n"] [430.092204, "o", "root 2 0 0 22:12 ? 00:00:00 [kthreadd]\r\nroot 3 2 0 22:12 ? 00:00:00 \\_ [rcu_gp]\r\nroot 4 2 0 22:12 ? 00:00:00 \\_ [rcu_par_gp]\r\nroot 5 2 0 22:12 ? 00:00:00 \\_ [kworker/0:0-cgroup_destroy]\r\nroot 6 2 0 22:12 ? 00:00:00 \\_ [kworker/0:0H-events_highpri]\r\nroot 7 2 0 22:12 ? 00:00:00 \\_ [kworker/u4:0-events_unbound]\r\nroot 8 2 0 22:12 ? 00:00:00 \\_ [mm_percpu_wq]\r\nroot 9 2 0 22:12 ? 00:00:00 \\_ [rcu_tasks_rude_]\r\nroot 10 2 0 22:12 ? 00:00:00 \\_ [rcu_tasks_trace]\r\nroot 11 2 0 22:12 ? 00:00:00 \\_ [ksoftirqd/0]\r\nroot 12 2 0 22:12 ? 00:00:00 \\_ [rcu_sched]\r\nroot 13 2 0 22:12 ? 00:00:00 \\_ [migration/0]\r\nroot 15 2 0 22:12 ? 00:00:00 \\_ [cpuhp/0]\r\nroot 16 2 0 22:12 ? 00:00:00 \\_ [cpuhp/1"] [430.092264, "o", "]\r\nroot 17 2 0 22:12 ? 00:00:00 \\_ [migration/1]\r\nroot 18 2 0 22:12 ? 00:00:00 \\_ [ksoftirqd/1]\r\nroot 20 2 0 22:12 ? 00:00:00 \\_ [kworker/1:0H-events_highpri]\r\nroot 22 2 0 22:12 ? 00:00:00 \\_ [kdevtmpfs]\r\nroot 23 2 0 22:12 ? 00:00:00 \\_ [netns]\r\nroot 24 2 0 22:12 ? 00:00:00 \\_ [kauditd]\r\nroot 25 2 0 22:12 ? 00:00:00 \\_ [khungtaskd]\r\nroot 26 2 0 22:12 ? 00:00:00 \\_ [oom_reaper]\r\nroot 27 2 0 22:12 ? 00:00:00 \\_ [writeback]\r\nroot 28 2 0 22:12 ? 00:00:00 \\_ [kcompactd0]\r\nroot 29 2 0 22:12 ? 00:00:00 \\_ [ksmd]\r\nroot 31 2 0 22:12 ? 00:00:00 \\_ [kworker/1:1-mm_percpu_wq]\r\nroot 49 2 0 22:12 ? 00:00:00 \\_ [kintegrityd]\r\nroot 50 2 0 22:12 ? 00:00:00 \\_ [kblockd]\r\nroot 51 2 "] [430.092288, "o", "0 22:12 ? 00:00:00 \\_ [blkcg_punt_bio]\r\nroot 52 2 0 22:12 ? 00:00:00 \\_ [kworker/0:1H-kblockd]\r\nroot 53 2 0 22:12 ? 00:00:00 \\_ [kswapd0]\r\nroot 54 2 0 22:12 ? 00:00:00 \\_ [kthrotld]\r\nroot 55 2 0 22:12 ? 00:00:00 \\_ [acpi_thermal_pm]\r\nroot 56 2 0 22:12 ? 00:00:00 \\_ [nvme-wq]\r\nroot 57 2 0 22:12 ? 00:00:00 \\_ [nvme-reset-wq]\r\nroot 58 2 0 22:12 ? 00:00:00 \\_ [nvme-delete-wq]\r\nroot 59 2 0 22:12 ? 00:00:00 \\_ [kworker/u4:1-events_unbound]\r\nroot 60 2 0 22:12 ? 00:00:00 \\_ [kworker/u4:2-events_unbound]\r\nroot 61 2 0 22:12 ? 00:00:00 \\_ [kworker/u4:3-events_unbound]\r\nroot 62 2 0 22:12 ? 00:00:00 \\_ [kworker/1:1H-kblockd]\r\nroot 63 2 0 22:12 ? 00:00:00 \\_ [ipv6_addrconf]\r\nroot 73 2 0 22:12 ? 00:00:00 \\_ [k"] [430.092316, "o", "strp]\r\nroot 78 2 0 22:12 ? 00:00:00 \\_ [kworker/u5:0]\r\nroot 114 2 0 22:12 ? 00:00:00 \\_ [ena]\r\nroot 132 2 0 22:12 ? 00:00:00 \\_ [jbd2/nvme0n1p1-]\r\nroot 133 2 0 22:12 ? 00:00:00 \\_ [ext4-rsv-conver]\r\nroot 234 2 0 22:12 ? 00:00:00 \\_ [cryptd]\r\nroot 311 2 0 22:12 ? 00:00:00 \\_ [kworker/1:3-cgroup_destroy]\r\nroot 675 2 0 22:13 ? 00:00:00 \\_ [kworker/0:4-events]\r\nroot 804 2 0 22:16 ? 00:00:00 \\_ [kworker/u4:4-flush-259:0]\r\nroot 900 2 0 22:18 ? 00:00:00 \\_ [kworker/1:0-events]\r\nroot 930 2 0 22:19 ? 00:00:00 \\_ [kworker/0:1]\r\nroot 1 0 0 22:12 ? 00:00:02 /sbin/init\r\nroot 195 1 0 22:12 ? 00:00:00 /lib/systemd/systemd-journald\r\nroot 212 1 0 22:12 ? 00:00:00 /lib/systemd/systemd-udevd\r\nroot 388 1 0 22:13 ? "] [430.092982, "o", " 00:00:00 /sbin/dhclient -4 -v -i -pf /run/dhclient.ens5.pid -lf /var/lib/dhcp/dhclient\r\nroot 462 1 0 22:13 ? 00:00:00 /sbin/dhclient -6 -v -pf /run/dhclient6.ens5.pid -lf /var/lib/dhcp/dhclient6.\r\nadmin 557 1 0 22:13 ? 00:00:00 /usr/local/gotty --permit-write --reconnect --max-connection 5 bash -l\r\nadmin 678 557 0 22:13 pts/0 00:00:00 \\_ bash -l\r\nadmin 682 678 0 22:13 pts/0 00:00:00 \\_ /usr/bin/python3 /usr/bin/asciinema rec -t paris/i-0e8108e3a59a33ce2 \r\nadmin 685 682 0 22:13 pts/0 00:00:00 \\_ /usr/bin/python3 /usr/bin/asciinema rec -t paris/i-0e8108e3a59a33\r\nadmin 686 682 0 22:13 pts/1 00:00:00 \\_ sh -c /bin/bash\r\nadmin 687 686 0 22:13 pts/1 00:00:00 \\_ /bin/bash\r\nadmin 964 687 0 22:20 pts/1 00:00:00 \\_ ps -ef --forest\r\nadmin 558 1 0 22:13 ? 00:00:00 /home/admin/agent/sadagent\r\nroot 570 "] [430.093021, "o", "1 0 22:13 ? 00:00:00 /usr/sbin/cron -f\r\nmessage+ 571 1 0 22:13 ? 00:00:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --syste\r\nroot 573 1 0 22:13 ? 00:00:00 /usr/bin/python3 /home/admin/webserver.py\r\nroot 574 1 0 22:13 ? 00:00:00 /usr/sbin/rsyslogd -n -iNONE\r\n_chrony 578 1 0 22:13 ? 00:00:00 /usr/sbin/chronyd -F 1\r\n_chrony 583 578 0 22:13 ? 00:00:00 \\_ /usr/sbin/chronyd -F 1\r\nroot 582 1 0 22:13 ? 00:00:00 /lib/systemd/systemd-logind\r\nroot 600 1 0 22:13 ? 00:00:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups\r\nroot 602 1 0 22:13 tty1 00:00:00 /sbin/agetty -o -p -- \\u --noclear tty1 linux\r\nroot 603 1 0 22:13 ttyS0 00:00:00 /sbin/agetty -o -p -- \\u --keep-baud 115200,57600,38400,9600 ttyS0 vt220\r\nroot 604 1 0 22:13 ? 00:00:00 /usr/bin/python3 /usr/share/unattended-upgrad"] [430.093057, "o", "es/unattended-upgrade-shutdown -\r\n"] [430.093497, "o", "\u001b[?2004h"] [430.093666, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [496.221208, "o", "f"] [496.357181, "o", "i"] [496.485951, "o", "n"] [496.610887, "o", "d"] [496.617574, "o", " "] [497.269311, "o", "/"] [497.50616, "o", " "] [497.766611, "o", "-"] [498.003655, "o", "n"] [498.112495, "o", "a"] [498.25502, "o", "m"] [498.394797, "o", "e"] [498.533364, "o", " "] [498.830774, "o", "\b\u001b[K"] [499.082256, "o", "\b\u001b[K"] [499.112125, "o", "\b\u001b[K"] [499.149596, "o", "\b\u001b[K"] [499.181483, "o", "\b\u001b[K"] [499.222875, "o", "\b\u001b[K"] [499.251539, "o", "\b\u001b[K"] [499.280712, "o", "\b\u001b[K"] [499.314731, "o", "\b\u001b[K"] [499.361644, "o", "\b\u001b[K"] [499.381986, "o", "\b\u001b[K"] [499.426679, "o", "\b\u001b[K"] [499.449397, "o", "\b\u001b[K"] [499.484839, "o", "\u0007"] [499.517267, "o", "\u0007"] [499.55383, "o", "\u0007"] [499.589262, "o", "\u0007"] [499.622351, "o", "\u0007"] [499.656782, "o", "\u0007"] [499.691315, "o", "\u0007"] [499.724554, "o", "\u0007"] [499.757615, "o", "\u0007"] [499.791389, "o", "\u0007"] [499.835861, "o", "g"] [500.063172, "o", "r"] [500.159198, "o", "e"] [500.781341, "o", "p"] [501.57637, "o", "\b\b\b\bps -ef --forest"] [502.50106, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\bgrep\u001b[K"] [503.024916, "o", " "] [503.258729, "o", "-"] [503.485066, "o", "r"] [503.599675, "o", " "] [504.082228, "o", "\""] [504.953609, "o", "p"] [505.124636, "o", "y"] [505.21664, "o", "t"] [506.30459, "o", "\b\u001b[K"] [506.436033, "o", "\b\u001b[K"] [506.85343, "o", "\b\u001b[K"] [507.074034, "o", "w"] [507.205207, "o", "e"] [507.344715, "o", "r"] [507.730157, "o", "b"] [508.047373, "o", "s"] [508.113876, "o", "e"] [508.229182, "o", "r"] [509.823593, "o", "v"] [510.040966, "o", "e"] [510.181298, "o", "r"] [510.532809, "o", "."] [510.768763, "o", "p"] [510.920151, "o", "y"] [511.299502, "o", "\""] [511.856019, "o", " "] [513.946969, "o", "/"] [514.784092, "o", "*"] [515.667689, "o", "\r\n\u001b[?2004l\r"] [517.393006, "o", "grep: /etc/shadow-"] [517.393362, "o", ": Permission denied\r\n"] [517.409163, "o", "grep: /etc/gshadow-: Permission denied\r\n"] [517.409532, "o", "grep: /etc/.pwd.lock: Permission denied\r\n"] [517.508563, "o", "grep: /etc/security/opasswd: Permission denied\r\n"] [517.527113, "o", "^C"] [517.528685, "o", "\r\n"] [517.529054, "o", "\u001b[?2004h"] [517.529291, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [518.257759, "o", "grep -r \"werbserver.py\" /*"] [518.779946, "o", " "] [519.159098, "o", "2"] [519.741201, "o", ">"] [519.965326, "o", " "] [520.212431, "o", "/"] [520.315127, "o", "d"] [520.493513, "o", "e"] [520.75702, "o", "v"] [521.953322, "o", "/"] [522.173301, "o", "n"] [522.413383, "o", "u"] [522.653749, "o", "l"] [522.80724, "o", "l"] [523.079414, "o", "\r\n"] [523.079754, "o", "\u001b[?2004l\r"] [523.723501, "o", "/home/admin/.bash_history:grep -r \"werbserver.py\" /*\r\n"] [720.477076, "o", "^C"] [720.479018, "o", "\r\n\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [721.429121, "o", "v"] [721.544904, "o", "i"] [721.673477, "o", "m"] [721.742769, "o", " "] [721.978441, "o", "/"] [722.035045, "o", "e"] [722.236091, "o", "tc/"] [722.70879, "o", "d"] [722.895441, "o", "e"] [723.123779, "o", "\u0007"] [723.783708, "o", "\r\n"] [723.783894, "o", "debconf.conf debian_version default/ deluser.conf \r\n\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ vim /etc/de"] [724.032437, "o", "\r\n"] [724.032626, "o", "debconf.conf debian_version default/ deluser.conf \r\n\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ vim /etc/de"] [724.950929, "o", "f"] [725.332323, "o", "ault/"] [725.989694, "o", "\u0007"] [726.683526, "o", "\r\n"] [726.683801, "o", "chrony dbus grub.d/ locale nss useradd \r\ncron grub hwclock networking ssh \r\n\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ vim /etc/default/"] [727.019749, "o", "\r\n"] [727.020099, "o", "chrony dbus grub.d/ locale nss useradd \r\ncron grub hwclock networking ssh \r\n\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ vim /etc/default/"] [728.765494, "o", "c"] [729.457012, "o", "r"] [730.048788, "o", "\b\u001b[K"] [730.283086, "o", "h"] [730.490711, "o", "r"] [730.617046, "o", "o"] [730.807049, "o", "n"] [730.951582, "o", "y "] [733.001877, "o", "\r\n\u001b[?2004l\r"] [733.074206, "o", "\u001b[?1000h\u001b[?1049h\u001b[22;0;0t\u001b[>4;2m\u001b[?1h\u001b=\u001b[?2004h\u001b[?1004h\u001b[1;36r\u001b[?12h\u001b[?12l\u001b[22;2t\u001b[22;1t"] [733.074669, "o", "\u001b[27m\u001b[23m\u001b[29m\u001b[m\u001b[H\u001b[2J\u001b[?25l\u001b[36;1H\"/etc/default/chrony\""] [733.07498, "o", " [readonly] 6L, 255B"] [733.085565, "o", "\u001b[2;1H▽\u001b[6n\u001b[2;1H \u001b[3;1H\u001bPzz\u001b\\\u001b[0%m\u001b[6n\u001b[3;1H \u001b[1;1H\u001b[>c"] [733.085986, "o", "\u001b]10;?\u0007\u001b]11;?\u0007"] [733.086355, "o", "\u001b[1;1H\u001b[34m# This is a configuration file for /etc/init.d/chrony and\r\n# /lib/systemd/system/chrony.service; it allows you to pass various options to\u001b[m\u001b[2;79H\u001b[K\u001b[3;1H\u001b[34m# the chrony daemon without editing the init script or service file.\u001b[m\u001b[3;69H\u001b[K\u001b[5;1H\u001b[34m# Options to pass to chrony.\u001b[m\r\nDAEMON_OPTS=\u001b[31m\"-F 1\"\u001b[m\r\n\u001b[94m~ \u001b[8;1H~ \u001b[9;1H~ \u001b[10;1H~ \u001b[11;1H~ \u001b[12;1H~ "] [733.086394, "o", " \u001b[13;1H~ \u001b[14;1H~ \u001b[15;1H~ \u001b[16;1H~ \u001b[17;1H~ \u001b[18;1H~ \u001b[19;1H~ "] [733.086518, "o", " \u001b[20;1H~ \u001b[21;1H~ \u001b[22;1H~ \u001b[23;1H~ \u001b[24;1H~ \u001b[25;1H~ \u001b[26;1H~ \u001b[27;1H~ "] [733.08658, "o", " \u001b[28;1H~ \u001b[29;1H~ \u001b[30;1H~ \u001b[31;1H~ \u001b[32;1H~ \u001b[33;1H~ \u001b[34;1H~ "] [733.086604, "o", " \u001b[35;1H~ \u001b[m\u001b[36;112H1,1\u001b[11CAll\u001b[1;1H\u001b[?25h"] [733.223596, "o", "\u001bP+q436f\u001b\\\u001bP+q6b75\u001b\\\u001bP+q6b64\u001b\\\u001bP+q6b72\u001b\\\u001bP+q6b6c\u001b\\\u001bP+q2332\u001b\\\u001bP+q2334\u001b\\\u001bP+q2569\u001b\\\u001bP+q2a37\u001b\\\u001bP+q6b31\u001b\\\u001b[?1000l\u001b[?1002h\u001b[?12$p"] [733.231603, "o", "\u001b[27m\u001b[23m\u001b[29m\u001b[m\u001b[H\u001b[2J\u001b[?25l\u001b[1;1H\u001b[96m# This is a configuration file for /etc/init.d/chrony and\r\n# /lib/systemd/system/chrony.service; it allows you to pass various options to\r\n# the chrony daemon without editing the init script or service file.\r\n\r\n# Options to pass to chrony.\u001b[m\r\nDAEMON_OPTS=\u001b[95m\"-F 1\"\u001b[m\r\n\u001b[94m~ \u001b[8;1H~ \u001b[9;1H~ \u001b[10;1H~ \u001b[11;1H~ \u001b[12;1H~ "] [733.231679, "o", " \u001b[13;1H~ \u001b[14;1H~ \u001b[15;1H~ \u001b[16;1H~ \u001b[17;1H~ \u001b[18;1H~ \u001b[19;1H~ "] [733.232228, "o", " \u001b[20;1H~ \u001b[21;1H~ \u001b[22;1H~ \u001b[23;1H~ \u001b[24;1H~ \u001b[25;1H~ \u001b[26;1H~ \u001b[27;1H~ "] [733.232377, "o", " \u001b[28;1H~ \u001b[29;1H~ \u001b[30;1H~ \u001b[31;1H~ \u001b[32;1H~ \u001b[33;1H~ \u001b[34;1H~ "] [733.232628, "o", " \u001b[35;1H~ \u001b[m\u001b[36;112H1,1\u001b[11CAll\r\"/etc/default/chrony\" [readonly] 6L, 255B\u001b[1;1H\u001b[?25h"] [734.167709, "o", "\u001b[?25l\u001b[36;102Hj\u001b[1;1H"] [734.16813, "o", "\u001b[36;102H \u001b[2;1H\u001b[36;112H2\u001b[2;1H\u001b[?25h"] [734.365235, "o", "\u001b[?25l\u001b[36;102Hj\u001b[2;1H"] [734.365582, "o", "\u001b[36;102H \u001b[3;1H\u001b[36;112H3\u001b[3;1H\u001b[?25h"] [734.533809, "o", "\u001b[?25l\u001b[36;102Hj\u001b[3;1H"] [734.534283, "o", "\u001b[36;102H \u001b[4;1H\u001b[36;112H4,0-1\u001b[4;1H\u001b[?25h"] [734.668172, "o", "\u001b[?25l\u001b[36;102Hj\u001b[4;1H"] [734.668643, "o", "\u001b[36;102H \u001b[5;1H\u001b[36;112H5,1 \u001b[5;1H\u001b[?25h"] [734.966892, "o", "\u001b[?25l\u001b[36;102Hj\u001b[5;1H"] [734.967221, "o", "\u001b[36;102H \u001b[6;1H\u001b[36;112H6\u001b[6;1H\u001b[?25h"] [735.931508, "o", "\u001b[?25l\u001b[36;102H:\u001b[6;1H\u001b[36;1H\u001b[K\u001b[36;1H:\u001b[?25h"] [736.222474, "o", "q"] [736.361018, "o", "\r"] [736.361349, "o", "\u001b[?25l\u001b[?1002l\u001b[?2004l\u001b[>4;m\u001b[23;2t\u001b[23;1t\u001b[36;1H\u001b[K\u001b[36;1H\u001b[?1004l\u001b[?2004l\u001b[?1l\u001b>\u001b[?25h\u001b[>4;m\u001b[?1049l\u001b[23;0;0t"] [736.362917, "o", "\u001b[?2004h"] [736.363098, "o", "\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [736.976895, "o", "vim /etc/default/chrony "] [737.44284, "o", "\b\u001b[K"] [737.575191, "o", "\b\u001b[K"] [737.70293, "o", "\b\u001b[K"] [738.409986, "o", "\b\u001b[K"] [738.581481, "o", "\b\u001b[K"] [738.726685, "o", "\b\u001b[K"] [739.348926, "o", "r"] [739.416572, "o", "o"] [739.544022, "o", "n"] [739.775048, "o", "\r\n\u001b[?2004l\r"] [739.795873, "o", "\u001b[?1000h\u001b[?1049h\u001b[22;0;0t\u001b[>4;2m\u001b[?1h\u001b=\u001b[?2004h\u001b[?1004h\u001b[1;36r\u001b[?12h\u001b[?12l\u001b[22;2t\u001b[22;1t"] [739.796323, "o", "\u001b[27m\u001b[23m\u001b[29m\u001b[m\u001b[H\u001b[2J\u001b[?25l\u001b[36;1H\"/etc/default/cron\""] [739.796614, "o", " [readonly] 28L, 955B"] [739.799768, "o", "\u001b[2;1H▽\u001b[6n\u001b[2;1H \u001b[3;1H\u001bPzz\u001b\\\u001b[0%m\u001b[6n\u001b[3;1H \u001b[1;1H"] [739.800165, "o", "\u001b[>c\u001b]10;?\u0007\u001b]11;?\u0007"] [739.801107, "o", "\u001b[1;1H\u001b[34m# Cron configuration options\u001b[m\u001b[2;1H\u001b[K\u001b[3;1H\u001b[34m# Whether to read the system's default environment files (if present)\u001b[m\u001b[3;70H\u001b[K\u001b[4;1H\u001b[34m# If set to \"yes\", cron will set a proper mail charset from the\r\n# locale information. If set to something other than 'yes', the default\r\n# charset 'C' (canonical name: ANSI_X3.4-1968) will be used.\r\n#\r\n# This has no effect on tasks running under cron; their environment can\r\n# only be changed via PAM or from within the crontab; see crontab(5).\u001b[m\r\nREAD_ENV=\u001b[31m\"yes\"\u001b[m\r\n\r\n\u001b[34m# Extra options for cron, see cron(8)\r\n#\r\n# For example, to enable LSB name support in /etc/cron.d/, use\r\n# EXTRA_OPTS='-l' \r\n#\r\n# Or, to log standard messages, plus jobs with exit status != 0:\r\n# EXTRA_OPTS='-L 5'\r\n#\r\n# For quick reference, the currently available log levels are:\r\n# 0 no logging (errors are logged regardless)\r\n# 1 log start of jobs\r\n# 2 log end of jobs\r\n# 4 log jobs with exit status != 0\r\n# 8 log the process identifier of child process (in all l"] [739.801177, "o", "ogs)\r\n#\r\n#EXTRA_OPTS=\"\"\u001b[m\r\n\r\n\u001b[94m~ \u001b[30;1H~ \u001b[31;1H~ \u001b[32;1H~ \u001b[33;1H~ \u001b[34;1H~ \u001b[35;1H~ \u001b[m\u001b[36;112H1,1\u001b[11CAll\u001b[1;1H\u001b[?25h"] [739.935429, "o", "\u001bP+q436f\u001b\\\u001bP+q6b75\u001b\\\u001bP+q6b64\u001b\\\u001bP+q6b72\u001b\\\u001bP+q6b6c\u001b\\\u001bP+q2332\u001b\\\u001bP+q2334\u001b\\\u001bP+q2569\u001b\\\u001bP+q2a37\u001b\\\u001bP+q6b31\u001b\\\u001b[?1000l\u001b[?1002h\u001b[?12$p"] [739.937129, "o", "\u001b[27m\u001b[23m\u001b[29m\u001b[m\u001b[H\u001b[2J\u001b[?25l\u001b[1;1H\u001b[96m# Cron configuration options\r\n\r\n# Whether to read the system's default environment files (if present)\r\n# If set to \"yes\", cron will set a proper mail charset from the\r\n# locale information. If set to something other than 'yes', the default\r\n# charset 'C' (canonical name: ANSI_X3.4-1968) will be used.\r\n#\r\n# This has no effect on tasks running under cron; their environment can\r\n# only be changed via PAM or from within the crontab; see crontab(5).\u001b[m\r\nREAD_ENV=\u001b[95m\"yes\"\u001b[m\r\n\r\n\u001b[96m# Extra options for cron, see cron(8)\r\n#\r\n# For example, to enable LSB name support in /etc/cron.d/, use\r\n# EXTRA_OPTS='-l' \r\n#\r\n# Or, to log standard messages, plus jobs with exit status != 0:\r\n# EXTRA_OPTS='-L 5'\r\n#\r\n# For quick reference, the currently available log levels are:\r\n# 0 no logging (errors are logged regardless)\r\n# 1 log start of jobs\r\n# 2 log end of jobs\r\n# 4 log jobs with exit status != 0\r\n# 8 log the process identifier of child process (in all logs)\r\n#\r\n#"] [739.937203, "o", "EXTRA_OPTS=\"\"\u001b[m\r\n\r\n\u001b[94m~ \u001b[30;1H~ \u001b[31;1H~ \u001b[32;1H~ \u001b[33;1H~ \u001b[34;1H~ \u001b[35;1H~ \u001b[m\u001b[36;112H1,1\u001b[11CAll\r\"/etc/default/cron\" [readonly]"] [739.937226, "o", " 28L, 955B\u001b[1;1H\u001b[?25h"] [740.676317, "o", "\u001b[?25l\u001b[36;102Hj\u001b[1;1H"] [740.676837, "o", "\u001b[36;102H \u001b[2;1H\u001b[36;112H2,0-1\u001b[2;1H\u001b[?25h"] [740.944708, "o", "\u001b[?25l\u001b[36;102Hj\u001b[2;1H"] [740.945144, "o", "\u001b[36;102H \u001b[3;1H\u001b[36;112H3,1 \u001b[3;1H\u001b[?25h"] [740.958922, "o", "\u001b[?25l\u001b[36;102Hj\u001b[3;1H"] [740.959268, "o", "\u001b[36;102H \u001b[4;1H\u001b[36;112H4\u001b[4;1H\u001b[?25h"] [740.992483, "o", "\u001b[?25l\u001b[36;102Hj\u001b[4;1H"] [740.99281, "o", "\u001b[36;102H \u001b[5;1H\u001b[36;112H5\u001b[5;1H\u001b[?25h"] [741.025394, "o", "\u001b[?25l\u001b[36;102Hj\u001b[5;1H"] [741.025554, "o", "\u001b[36;102H \u001b[6;1H\u001b[36;112H6\u001b[6;1H\u001b[?25h"] [741.059828, "o", "\u001b[?25l\u001b[36;102Hj\u001b[6;1H"] [741.060047, "o", "\u001b[36;102H \u001b[7;1H\u001b[36;112H7\u001b[7;1H\u001b[?25h"] [741.093677, "o", "\u001b[?25l\u001b[36;102Hj\u001b[7;1H"] [741.094352, "o", "\u001b[36;102H \u001b[8;1H\u001b[36;112H8\u001b[8;1H\u001b[?25h"] [741.127946, "o", "\u001b[?25l\u001b[36;102Hj\u001b[8;1H"] [741.128432, "o", "\u001b[36;102H \u001b[9;1H\u001b[36;112H9\u001b[9;1H\u001b[?25h"] [741.161461, "o", "\u001b[?25l\u001b[36;102Hj\u001b[9;1H"] [741.161931, "o", "\u001b[36;102H \u001b[10;1H\u001b[36;112H10,1\u001b[10;1H\u001b[?25h"] [741.6367, "o", "\u001b[?25l\u001b[36;102Hj\u001b[10;1H"] [741.637204, "o", "\u001b[36;102H \u001b[11;1H\u001b[36;113H1,0-1\u001b[11;1H\u001b[?25h"] [742.328612, "o", "\u001b[?25l\u001b[36;102Hk\u001b[11;1H"] [742.328942, "o", "\u001b[36;102H \u001b[10;1H\u001b[36;113H0,1 \u001b[10;1H\u001b[?25h"] [742.87996, "o", "\u001b[?25l\u001b[36;102Hj\u001b[10;1H"] [742.880527, "o", "\u001b[36;102H \u001b[11;1H\u001b[36;113H1,0-1\u001b[11;1H\u001b[?25h"] [743.267329, "o", "\u001b[?25l\u001b[36;102H:\u001b[11;1H\u001b[36;1H\u001b[K\u001b[36;1H:\u001b[?25h"] [743.475199, "o", "q"] [743.560431, "o", "\r"] [743.561312, "o", "\u001b[?25l\u001b[?1002l\u001b[?2004l\u001b[>4;m\u001b[23;2t\u001b[23;1t"] [743.561577, "o", "\u001b[36;1H\u001b[K\u001b[36;1H\u001b[?1004l\u001b[?2004l\u001b[?1l\u001b>\u001b[?25h\u001b[>4;m\u001b[?1049l\u001b[23;0;0t"] [743.564695, "o", "\u001b[?2004h\u001b]0;admin@i-0e8108e3a59a33ce2: ~\u0007\u001b[01;32madmin@i-0e8108e3a59a33ce2\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [763.253847, "o", "e"] [763.476151, "o", "x"] [764.236983, "o", "i"] [764.771909, "o", "t"] [765.197632, "o", "\r\n\u001b[?2004l\r"] [765.197701, "o", "exit\r\n"]