{"version": 2, "width": 105, "height": 39, "timestamp": 1736880072, "idle_time_limit": 2.0, "env": {"SHELL": "/bin/bash", "TERM": "xterm-256color"}, "title": "paris/i-0f16098192d754ea1"} [0.019366, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [0.948297, "o", "c"] [1.058038, "o", "ur"] [1.168766, "o", "l"] [1.279402, "o", " "] [1.38994, "o", "-"] [1.530547, "o", "s"] [1.701523, "o", "v"] [1.824541, "o", " "] [1.935061, "o", "h"] [2.111326, "o", "t"] [2.221947, "o", "t"] [2.332512, "o", "p"] [2.442987, "o", "s"] [2.75195, "o", "\b\u001b[K"] [2.900383, "o", ":"] [3.04127, "o", "/"] [3.154143, "o", "/"] [3.435667, "o", "1"] [3.615237, "o", "2"] [3.745509, "o", "7"] [3.856099, "o", "."] [3.972545, "o", "0"] [4.083095, "o", "."] [4.193451, "o", "0"] [4.33076, "o", "1"] [5.005005, "o", "\b\u001b[K"] [5.475517, "o", "."] [5.678137, "o", "1"] [6.045626, "o", ":"] [9.764295, "o", "5"] [9.903544, "o", "0"] [10.014872, "o", "0"] [10.135469, "o", "0"] [10.776881, "o", "\r\n\u001b[?2004l\r"] [10.786087, "o", "* Trying 127.0.0.1:5000...\r\n"] [10.786718, "o", "* Connected to 127.0.0.1 (127.0.0.1) port 5000 (#0)\r\n"] [10.786931, "o", "> GET / HTTP/1.1\r\r\n> Host: 127.0.0.1:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n"] [10.788843, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 200 OK\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:41:23 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 12\r\r\n< Connection: close\r\r\n< \r\r\n* Closing connection 0\r\nUnauthorized"] [10.790196, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [14.243777, "o", "c"] [14.354434, "o", "u"] [14.464952, "o", "r"] [14.575503, "o", "l "] [14.763052, "o", "-"] [14.873683, "o", "-"] [15.010238, "o", "p"] [15.120755, "o", "a"] [15.231316, "o", "t"] [15.341933, "o", "h"] [15.452415, "o", "-"] [15.563403, "o", "a"] [15.829953, "o", "s"] [16.024456, "o", "-"] [16.201276, "o", "i"] [16.311987, "o", "s"] [16.47889, "o", " "] [17.28372, "o", "h"] [17.871705, "o", "\b\u001b[K"] [17.982124, "o", "'"] [18.092555, "o", "h"] [18.249797, "o", "t"] [18.361129, "o", "t"] [18.471627, "o", "p"] [18.664208, "o", ":"] [18.789672, "o", "/"] [18.913954, "o", "/"] [19.083282, "o", "1"] [19.269, "o", "2"] [19.482769, "o", "7"] [19.593563, "o", "."] [19.704039, "o", "0"] [19.814596, "o", "."] [19.925094, "o", "0."] [20.107893, "o", "1"] [20.456538, "o", ":"] [23.176604, "o", "5"] [23.29489, "o", "0"] [23.417286, "o", "0"] [23.531582, "o", "0"] [24.380938, "o", ":"] [25.089616, "o", "\b\u001b[K"] [25.305011, "o", "/"] [26.795409, "o", "a"] [26.905791, "o", "b"] [27.016252, "o", "g"] [27.698825, "o", "\b\u001b[K"] [27.918328, "o", "c"] [28.028777, "o", "'"] [28.422904, "o", "\r\n\u001b[?2004l\r"] [28.434374, "o", "\r\n\r\n404 Not Found\r\n"] [28.434665, "o", "

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n"] [28.436009, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [29.016047, "o", "curl --path-as-is 'http://127.0.0.1:5000/abc'"] [29.563145, "o", "\b\u001b[K"] [29.673781, "o", "\b\u001b[K"] [29.832556, "o", "\b\u001b[K"] [30.053441, "o", "\b\u001b[K"] [30.462978, "o", "t"] [30.57345, "o", "e"] [31.097029, "o", "\b\u001b[K"] [31.207618, "o", "\b\u001b[K"] [31.343528, "o", "e"] [31.457033, "o", "t"] [31.580793, "o", "c"] [31.917226, "o", "'"] [32.435188, "o", "\b\u001b[K"] [32.651229, "o", "/"] [33.129141, "o", "h"] [33.239567, "o", "o"] [33.350025, "o", "s"] [33.460483, "o", "ts"] [33.570816, "o", "'"] [33.703379, "o", "\r\n\u001b[?2004l\r"] [33.715555, "o", "\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n"] [33.715755, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [34.639106, "o", "curl --path-as-is 'http://127.0.0.1:5000/etc/hosts'"] [35.330442, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[K"] [35.59532, "o", "p"] [35.730366, "o", "s"] [35.840908, "o", " "] [35.951467, "o", "a"] [36.062139, "o", "w"] [36.172595, "o", "w"] [36.283197, "o", "w"] [36.413842, "o", "f"] [36.524262, "o", "u"] [36.634773, "o", "x"] [36.745297, "o", "\r\n\u001b[?2004l\r"] [36.755698, "o", "USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND\r\n"] [36.756033, "o", "root 2 0.0 0.0 0 0 ? S 18:39 0:00 [kthreadd]\r\nroot 3 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [rcu_gp]\r\nroot 4 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [rcu_par_gp]\r\nroot 5 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/0:0-events]\r\nroot 6 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/0:0H-events_highpri]\r\nroot 7 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/u4:0-events_unbound]\r\nroot 8 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [mm_percpu_wq]\r\nroot 9 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [rcu_tasks_rude_]\r\nroot 10 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [rcu_tasks_trace]\r\nroot 11 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [ksoftirqd/0]\r\nroot 12 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [rcu_sched]\r\nroot 13 0.0 0.0 0 0 ? "] [36.756095, "o", " S 18:39 0:00 \\_ [migration/0]\r\nroot 14 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/0:1-events]\r\nroot 15 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [cpuhp/0]\r\nroot 16 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [cpuhp/1]\r\nroot 17 0.3 0.0 0 0 ? S 18:39 0:00 \\_ [migration/1]\r\nroot 18 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [ksoftirqd/1]\r\nroot 19 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/1:0-cgroup_destroy]\r\nroot 20 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/1:0H-events_highpri]\r\nroot 22 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kdevtmpfs]\r\nroot 23 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [netns]\r\nroot 24 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kauditd]\r\nroot 25 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [khungtaskd]\r\nroot 26 0."] [36.756127, "o", "0 0.0 0 0 ? S 18:39 0:00 \\_ [oom_reaper]\r\nroot 27 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [writeback]\r\nroot 28 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kcompactd0]\r\nroot 29 0.0 0.0 0 0 ? SN 18:39 0:00 \\_ [ksmd]\r\nroot 48 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kintegrityd]\r\nroot 49 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kblockd]\r\nroot 50 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [blkcg_punt_bio]\r\nroot 51 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/1:1-events]\r\nroot 52 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/0:1H-kblockd]\r\nroot 53 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kswapd0]\r\nroot 54 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kthrotld]\r\n"] [36.756551, "o", "root 55 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [acpi_thermal_pm]\r\nroot 56 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [nvme-wq]\r\nroot 57 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [nvme-reset-wq]\r\nroot 58 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [nvme-delete-wq]\r\nroot 59 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/u4:1-events_unbound]\r\nroot 60 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/u4:2-events_unbound]\r\nroot 61 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/u4:3-flush-259:0]\r\nroot 62 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/1:1H-kblockd]\r\nroot 63 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [ipv6_addrconf]\r\nroot 72 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/1:2-cgroup_destroy]\r\nroot 73 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kstrp]\r\nroot "] [36.756606, "o", " 78 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/u5:0]\r\nroot 114 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [ena]\r\nroot 132 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [jbd2/nvme0n1p1-]\r\nroot 133 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [ext4-rsv-conver]\r\nroot 160 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/0:2-events]\r\nroot 235 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [cryptd]\r\nroot 626 0.0 0.0 0 0 ? I 18:40 0:00 \\_ [kworker/1:3-events]\r\nroot 708 0.0 0.0 0 0 ? I 18:41 0:00 \\_ [kworker/0:3-events]\r\nroot 1 1.8 2.1 98152 9912 ? Ss 18:39 0:02 /sbin/init\r\nroot 195 0.2 2.7 56592 12688 ? Ss 18:39 0:00 /lib/systemd/systemd-journald\r\nroot 212 0.0 1.0 19464 5088 ? Ss 18:39 0:00 /lib/systemd/systemd-udevd\r\nroot 388 0.0 1.2 99884 5620 ? Ssl 1"] [36.756632, "o", "8:40 0:00 /sbin/dhclient -4 -v -i -pf /run/dhclient.ens5.pid -lf /var/lib/dhcp/dhclient.ens5.leases -I -df /var/lib/dhcp/dhclient6.ens5.leases ens5\r\nroot 463 0.0 1.2 99884 5876 ? Ssl 18:40 0:00 /sbin/dhclient -6 -v -pf /run/dhclient6.ens5.pid -lf /var/lib/dhcp/dhclient6.ens5.leases -I -df /var/lib/dhcp/dhclient.ens5.leases -nw ens5\r\nadmin 558 0.3 2.7 1230408 12880 ? S\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n"] [123.478718, "o", "\u001b[?2004h"] [123.478844, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [124.084423, "o", "curl --path-as-is 'http://127.0.0.1:5000/../../..'"] [124.905425, "o", "\b"] [125.252424, "o", "\b\u001b[1P'\b"] [125.362954, "o", "\b\u001b[1P'\b"] [125.48663, "o", "\b\u001b[1P'\b"] [125.60712, "o", "\b\u001b[1P'\b"] [125.724651, "o", "\b\u001b[1P'\b"] [125.835233, "o", "\b\u001b[1P'\b"] [125.950651, "o", "\b\u001b[1P'\b"] [126.073153, "o", "\b\u001b[1P'\b"] [126.646369, "o", "e'\b"] [126.757025, "o", "t'\b"] [126.933457, "o", "c'\b"] [127.073856, "o", "/'\b"] [127.420668, "o", "h'\b"] [127.572777, "o", "o'\b"] [127.683483, "o", "s'\b"] [127.794182, "o", "ts'\b"] [128.01573, "o", "\r\n\u001b[?2004l\r"] [128.027766, "o", "\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n"] [128.029085, "o", "\u001b[?2004h"] [128.029227, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [129.537325, "o", "l"] [129.680351, "o", "s"] [129.790825, "o", " "] [129.901397, "o", "-a"] [130.011832, "o", "l"] [130.122465, "o", "rt"] [130.661836, "o", "\b\b\b\b\b\b\b\b\u001b[K"] [134.142257, "o", "t"] [134.252913, "o", "o"] [134.363518, "o", "uc"] [134.474235, "o", "h "] [134.584828, "o", "."] [135.238118, "o", "\b\b\b\b\b\b\b\u001b[K"] [135.494285, "o", "p"] [135.604801, "o", "s"] [135.715523, "o", " "] [135.82605, "o", "a"] [135.936689, "o", "w"] [136.202626, "o", "\b\b\b\b\b\u001b[K"] [136.313102, "o", "l"] [136.465358, "o", "s"] [136.576098, "o", " "] [136.686651, "o", "-a"] [136.797365, "o", "l"] [136.90782, "o", "rt"] [137.018294, "o", " "] [137.128703, "o", "/"] [137.239279, "o", "p"] [137.36311, "o", "r"] [137.473757, "o", "o"] [137.584264, "o", "c"] [137.697642, "o", "\r\n\u001b[?2004l\r"] [137.701168, "o", "total 4\r\n"] [137.702335, "o", "lrwxrwxrwx 1 root root 0 Jan 14 18:39 \u001b[0m\u001b[01;36mthread-self\u001b[0m -> \u001b[01;34m805/task/805\u001b[0m\r\nlrwxrwxrwx 1 root root 0 Jan 14 18:39 \u001b[01;36mself\u001b[0m -> \u001b[01;34m805\u001b[0m\r\ndr-xr-xr-x 135 root root 0 Jan 14 18:39 \u001b[01;34m.\u001b[0m\r\n"] [137.702622, "o", "-r--r--r-- 1 root root 0 Jan 14 18:39 cmdline\r\ndr-xr-xr-x 1 root root 0 Jan 14 18:39 \u001b[01;34msys\u001b[0m\r\n-r--r--r-- 1 root root 0 Jan 14 18:39 filesystems\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m1\u001b[0m\r\n-r--r--r-- 1 root root 0 Jan 14 18:39 uptime\r\ndr-xr-xr-x 3 root root 0 Jan 14 18:39 \u001b[01;34macpi\u001b[0m\r\nlrwxrwxrwx 1 root root 8 Jan 14 18:39 \u001b[01;36mnet\u001b[0m -> \u001b[01;34mself/net\u001b[0m\r\n-r-------- 1 root root 140737471590400 Jan 14 18:39 kcore\r\n-r--r--r-- 1 root root 0 Jan 14 18:39 cpuinfo\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m9\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m8\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m78\u001b[0m\r\ndr-xr-xr-x 9 root root "] [137.702659, "o", " 0 Jan 14 18:39 \u001b[01;34m73\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m72\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m7\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m63\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m62\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m61\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m60\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m6\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m59\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m58\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m57\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m56\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m55\u001b[0m\r\ndr-xr-xr-"] [137.702685, "o", "x 9 root root 0 Jan 14 18:39 \u001b[01;34m54\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m53\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m52\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m51\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m50\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m5\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m49\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m48\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m4\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m3\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m29\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m28\u001b[0m\r\ndr-xr-xr-x 9 root root 0"] [137.702711, "o", " Jan 14 18:39 \u001b[01;34m27\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m26\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m25\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m24\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m23\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m22\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m20\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m2\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m19\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m18\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m17\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m160\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m16\u001b[0m\r\ndr-xr-xr-x"] [137.702752, "o", " 9 root root 0 Jan 14 18:39 \u001b[01;34m15\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m14\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m133\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m132\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m13\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m12\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m114\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m11\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m10\u001b[0m\r\n-r--r--r-- 1 root root 0 Jan 14 18:39 partitions\r\n-r--r--r-- 1 root root 0 Jan 14 18:39 swaps\r\n-r--r--r-- 1 root root 0 Jan 14 18:39 devices\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b"] [137.702799, "o", "[01;34m195\u001b[0m\r\n-r--r--r-- 1 root root 0 Jan 14 18:39 meminfo\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:39 \u001b[01;34m212\u001b[0m\r\nlrwxrwxrwx 1 root root 11 Jan 14 18:39 \u001b[01;36mmounts\u001b[0m -> self/mounts\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:40 \u001b[01;34m388\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:40 \u001b[01;34m463\u001b[0m\r\ndrwxr-xr-x 18 root root 4096 Jan 14 18:40 \u001b[01;34m..\u001b[0m\r\n-r--r--r-- 1 root root 0 Jan 14 18:40 cgroups\r\ndr-xr-xr-x 9 admin admin 0 Jan 14 18:40 \u001b[01;34m559\u001b[0m\r\ndr-xr-xr-x 9 admin admin 0 Jan 14 18:40 \u001b[01;34m558\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:40 \u001b[01;34m562\u001b[0m\r\ndr-xr-xr-x 9 messagebus messagebus 0 Jan 14 18:40 \u001b[01;34m563\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:40 \u001b[01;34m574\u001b[0m\r\ndr-xr-xr-x "] [137.702843, "o", " 9 root root 0 Jan 14 18:40 \u001b[01;34m575\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:40 \u001b[01;34m578\u001b[0m\r\n-r-------- 1 root root 0 Jan 14 18:40 kmsg\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:40 \u001b[01;34m583\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:40 \u001b[01;34m585\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:40 \u001b[01;34m586\u001b[0m\r\ndr-xr-xr-x 9 _chrony _chrony 0 Jan 14 18:40 \u001b[01;34m587\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:40 \u001b[01;34m596\u001b[0m\r\n-r--r--r-- 1 root root 0 Jan 14 18:40 stat\r\ndr-xr-xr-x 9 admin admin 0 Jan 14 18:41 \u001b[01;34m719\u001b[0m\r\ndr-xr-xr-x 9 admin admin 0 Jan 14 18:41 \u001b[01;34m718\u001b[0m\r\ndr-xr-xr-x 9 admin admin 0 Jan 14 18:41 \u001b[01;34m717\u001b[0m\r\ndr-xr-xr-x 9 admin admin 0 Jan 14 1"] [137.702887, "o", "8:41 \u001b[01;34m714\u001b[0m\r\ndr-xr-xr-x 9 admin admin 0 Jan 14 18:41 \u001b[01;34m710\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:41 \u001b[01;34m708\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:41 \u001b[01;34m626\u001b[0m\r\ndr-xr-xr-x 9 _chrony _chrony 0 Jan 14 18:41 \u001b[01;34m588\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:41 \u001b[01;34m235\u001b[0m\r\ndr-xr-xr-x 6 root root 0 Jan 14 18:41 \u001b[01;34mtty\u001b[0m\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 zoneinfo\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 vmstat\r\n-r-------- 1 root root 0 Jan 14 18:43 vmallocinfo\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 version\r\n-r-------- 1 root root 0 Jan 14 18:43 timer_list\r\ndr-xr-xr-x 5 root root 0 Jan 14 18:43 \u001b[01;34msysvipc\u001b[0m\r\n--w------- 1 root root "] [137.702926, "o", " 0 Jan 14 18:43 sysrq-trigger\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 softirqs\r\n-r-------- 1 root root 0 Jan 14 18:43 slabinfo\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 schedstat\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 sched_debug\r\ndr-xr-xr-x 5 root root 0 Jan 14 18:43 \u001b[01;34mpressure\u001b[0m\r\n-r-------- 1 root root 0 Jan 14 18:43 pagetypeinfo\r\n-rw-r--r-- 1 root root 0 Jan 14 18:43 mtrr\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 modules\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 misc\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 locks\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 loadavg\r\n-r-------- 1 root root 0 Jan 14 18:43 kpageflags\r\n-r-------- 1 root root 0 Jan "] [137.702989, "o", "14 18:43 kpagecount\r\n-r-------- 1 root root 0 Jan 14 18:43 kpagecgroup\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 keys\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 key-users\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 kallsyms\r\ndr-xr-xr-x 25 root root 0 Jan 14 18:43 \u001b[01;34mirq\u001b[0m\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 ioports\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 iomem\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 interrupts\r\ndr-xr-xr-x 5 root root 0 Jan 14 18:43 \u001b[01;34mfs\u001b[0m\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 fb\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 execdomains\r\ndr-xr-xr-x 3 root root 0 Jan 14 18:43 \u001b[01;34mdynamic_debug\u001b[0m\r\ndr-xr-xr-x 3 root root 0 Jan 14 18:43 "] [137.703031, "o", "\u001b[01;34mdriver\u001b[0m\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 diskstats\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 crypto\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 consoles\r\ndr-xr-xr-x 4 root root 0 Jan 14 18:43 \u001b[01;34mbus\u001b[0m\r\n-r--r--r-- 1 root root 0 Jan 14 18:43 buddyinfo\r\ndr-xr-xr-x 9 admin admin 0 Jan 14 18:43 \u001b[01;34m805\u001b[0m\r\ndr-xr-xr-x 9 root root 0 Jan 14 18:43 \u001b[01;34m764\u001b[0m\r\n\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [138.010719, "o", "i"] [138.404714, "o", "\b\u001b[K"] [138.640792, "o", "d"] [138.751333, "o", "a"] [138.861815, "o", "t"] [138.972269, "o", "e\r\n\u001b[?2004l\r"] [138.974043, "o", "Tue Jan 14 18:43:31 UTC 2025\r\n"] [138.974732, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [147.064677, "o", "l"] [147.222139, "o", "s"] [147.332571, "o", " "] [147.442871, "o", "-a"] [147.567803, "o", "l"] [147.678334, "o", "r"] [147.78881, "o", "t"] [147.899508, "o", " "] [148.009927, "o", "/"] [148.120744, "o", "t"] [148.231552, "o", "m"] [148.341989, "o", "p"] [148.452572, "o", "\r\n\u001b[?2004l\r"] [148.455502, "o", "total 36\r\n"] [148.455977, "o", "drwxrwxrwt 2 root root 4096 Jan 14 18:39 \u001b[0m\u001b[30;42m.font-unix\u001b[0m\r\ndrwxrwxrwt 2 root root 4096 Jan 14 18:39 \u001b[30;42m.XIM-unix\u001b[0m\r\ndrwxrwxrwt 2 root root 4096 Jan 14 18:39 \u001b[30;42m.X11-unix\u001b[0m\r\ndrwxrwxrwt 2 root root 4096 Jan 14 18:39 \u001b[30;42m.Test-unix\u001b[0m\r\ndrwxrwxrwt 2 root root 4096 Jan 14 18:39 \u001b[30;42m.ICE-unix\u001b[0m\r\ndrwxr-xr-x 18 root root 4096 Jan 14 18:40 \u001b[01;34m..\u001b[0m\r\ndrwx------ 3 root root 4096 Jan 14 18:40 \u001b[01;34msystemd-private-7b94b5b0ef3c4cc58eaa099bcccf90c3-chrony.service-cAiYuh\u001b[0m\r\ndrwx------ 3 root root 4096 Jan 14 18:40 \u001b[01;34msystemd-private-7b94b5b0ef3c4cc58eaa099bcccf90c3-systemd-logind.service-DsMI7e\u001b[0m\r\ndrwxrwxrwt 9 root root 4096 Jan 14 18:40 \u001b[30;42m.\u001b[0m\r\n"] [148.456313, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [150.289555, "o", "p"] [150.400897, "o", "s"] [150.511625, "o", " "] [150.622146, "o", "a"] [150.732661, "o", "w"] [150.843176, "o", "w"] [150.953707, "o", "w"] [151.116778, "o", "f"] [151.227427, "o", "u"] [151.34073, "o", "x"] [151.45125, "o", "\r\n\u001b[?2004l\r"] [151.462718, "o", "USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND\r\n"] [151.462968, "o", "root 2 0.0 0.0 0 0 ? S 18:39 0:00 [kthreadd]\r\nroot 3 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [rcu_gp]\r\n"] [151.463145, "o", "root 4 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [rcu_par_gp]\r\nroot 5 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/0:0-events]\r\n"] [151.463412, "o", "root 6 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/0:0H-events_highpri]\r\nroot 7 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/u4:0-events_unbound]\r\nroot 8 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [mm_percpu_wq]\r\nroot 9 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [rcu_tasks_rude_]\r\nroot 10 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [rcu_tasks_trace]\r\nroot 11 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [ksoftirqd/0]\r\nroot 12 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [rcu_sched]\r\nroot 13 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [migration/0]\r\nroot 14 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/0:1-events]\r\nroot 15 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [cpuhp/0]\r\nroot 16 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [cpuhp/1]\r\nroot 17 0.1 0.0 0 0 "] [151.463451, "o", "? S 18:39 0:00 \\_ [migration/1]\r\nroot 18 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [ksoftirqd/1]\r\nroot 19 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/1:0-cgroup_destroy]\r\nroot 20 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/1:0H-events_highpri]\r\nroot 22 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kdevtmpfs]\r\nroot 23 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [netns]\r\nroot 24 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kauditd]\r\nroot 25 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [khungtaskd]\r\nroot 26 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [oom_reaper]\r\nroot 27 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [writeback]\r\nroot 28 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kcompactd0]\r\nroot 29 0.0 0.0 0 0 ? SN 18:39 0:00 \\_ [ksmd]\r\nroot 48 0.0 0."] [151.463473, "o", "0 0 0 ? I< 18:39 0:00 \\_ [kintegrityd]\r\nroot 49 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kblockd]\r\nroot 50 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [blkcg_punt_bio]\r\n"] [151.463894, "o", "root 51 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/1:1-events]\r\nroot 52 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/0:1H-kblockd]\r\nroot 53 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kswapd0]\r\nroot 54 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kthrotld]\r\nroot 55 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [acpi_thermal_pm]\r\nroot 56 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [nvme-wq]\r\nroot 57 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [nvme-reset-wq]\r\nroot 58 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [nvme-delete-wq]\r\nroot 59 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/u4:1-events_unbound]\r\nroot 60 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/u4:2-flush-259:0]\r\nroot 61 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/u4:3-events_unbound]\r\nroot 62 0"] [151.463934, "o", ".0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/1:1H-kblockd]\r\nroot 63 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [ipv6_addrconf]\r\nroot 72 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/1:2-cgroup_destroy]\r\nroot 73 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kstrp]\r\nroot 78 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/u5:0]\r\nroot 114 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [ena]\r\nroot 132 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [jbd2/nvme0n1p1-]\r\nroot 133 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [ext4-rsv-conver]\r\nroot 160 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/0:2-events]\r\nroot 235 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [cryptd]\r\nroot 626 0.0 0.0 0 0 ? I 18:40 0:00 \\_ [kworker/1:3-events]\r\nroot 708 0.0 0.0 0 0 ? I 18:41 0:00 "] [151.463959, "o", " \\_ [kworker/0:3-events]\r\nroot 764 0.0 0.0 0 0 ? I 18:42 0:00 \\_ [kworker/u4:4-events_unbound]\r\nroot 1 0.9 2.1 98152 9912 ? Ss 18:39 0:02 /sbin/init\r\nroot 195 0.1 2.7 56592 12700 ? Ss 18:39 0:00 /lib/systemd/systemd-journald\r\nroot 212 0.0 1.0 19464 5088 ? Ss 18:39 0:00 /lib/systemd/systemd-udevd\r\nroot 388 0.0 1.2 99884 5620 ? Ssl 18:40 0:00 /sbin/dhclient -4 -v -i -pf /run/dhclient.ens5.pid -lf /var/lib/dhcp/dhclient.ens5.leases -I -df /var/lib/dhcp/dhclient6.ens5.leases ens5\r\nroot 463 0.0 1.2 99884 5876 ? Ssl 18:40 0:00 /sbin/dhclient -6 -v -pf /run/dhclient6.ens5.pid -lf /var/lib/dhcp/dhclient6.ens5.leases -I -df /var/lib/dhcp/dhclient.ens5.leases -nw ens5\r\nadmin 558 0.2 2.8 1304716 13104 ? S\r\n\r\n404 Not Found\r\n"] [207.489576, "o", "

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n"] [207.491039, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [208.846601, "o", "curl --path-as-is 'http://127.0.0.1:5000/../../../../../../../../etc/hosts'"] [209.061149, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Cfile sadagent\u001b[K"] [209.643364, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\bcat check.sh "] [210.218523, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[K"] [210.85703, "o", "f"] [210.967621, "o", "i"] [211.213091, "o", "\b\u001b[K"] [211.323501, "o", "\b\u001b[K"] [211.775569, "o", "file sadagent"] [211.886096, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[K"] [212.438877, "o", "ls -alrt"] [212.656534, "o", "\b\b\b\b\b\b\b\bcd agent"] [213.160135, "o", "\b\b\b\b\b\b\b\bls -alrt"] [213.539162, "o", "\b\b\b\b\b\b\b\bps awwwfux"] [213.990051, "o", "\b\b\b\b\b\b\b\b\b\bls -alrt /tmp"] [214.608256, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\bdate\u001b[K"] [215.138066, "o", "^C\u001b[?2004l\r"] [215.138135, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [215.138416, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [215.248728, "o", "^C\u001b[?2004l\r"] [215.248794, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [215.249094, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [215.592089, "o", "curl --path-as-is 'http://127.0.0.1:5000/../../../../../../../../etc/hosts'"] [216.362615, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[K"] [217.048668, "o", "'"] [217.237486, "o", "h"] [217.402834, "o", "t"] [217.517652, "o", "t"] [217.630314, "o", "p"] [218.079542, "o", ":"] [218.212591, "o", "/"] [218.324817, "o", "/"] [218.449587, "o", "1"] [218.627308, "o", "2"] [218.7492, "o", "7"] [218.883608, "o", "."] [218.994808, "o", "0"] [219.105522, "o", ".0"] [219.216053, "o", "."] [219.326724, "o", "1"] [219.617874, "o", ":"] [220.461761, "o", "5"] [220.620573, "o", "0"] [220.846175, "o", "0"] [220.969837, "o", "0"] [221.426549, "o", "'"] [221.849787, "o", "\r\n\u001b[?2004l\r"] [221.866244, "o", "Unauthorized"] [221.86933, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [223.16415, "o", "\u0007"] [223.275017, "o", "curl --path-as-is 'http://127.0.0.1:5000'"] [223.385766, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [224.423911, "o", "^C\u001b[?2004l\r"] [224.4242, "o", "\u001b[?2004h\u001b[?2004l\r\r\n\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [224.534642, "o", "^C\u001b[?2004l\r"] [224.534931, "o", "\u001b[?2004h\u001b[?2004l\r\r\n\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [224.940054, "o", "curl --path-as-is 'http://127.0.0.1:5000'"] [225.206734, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [225.683735, "o", "\u001b[C\u001b[C\u001b[C\u001b[C"] [226.026854, "o", "\u001b[C\u001b[1@ \b"] [226.141986, "o", "\u001b[1@-"] [226.313011, "o", "\u001b[1@s"] [226.456416, "o", "\u001b[1@v"] [226.672487, "o", "\r\n"] [226.672656, "o", "\u001b[?2004l\r"] [226.68256, "o", "* Trying 127.0.0.1:5000...\r\n"] [226.682897, "o", "* Connected to 127.0.0.1 (127.0.0.1) port 5000 (#0)\r\n> GET / HTTP/1.1\r\r\n> Host: 127.0.0.1:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n"] [226.684321, "o", "* Mark bundle as not supporting multiuse\r\n"] [226.684494, "o", "< HTTP/1.1 200 OK\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:44:59 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 12\r\r\n< Connection: close\r\r\n< \r\r\n* Closing connection 0\r\nUnauthorized"] [226.686235, "o", "\u001b[?2004h"] [226.686408, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [279.315007, "o", "curl -sv --path-as-is 'http://127.0.0.1:5000'"] [280.158538, "o", "\b\u001b[K"] [280.534789, "o", "c"] [280.645736, "o", "o"] [280.756334, "o", "n"] [280.866763, "o", "s"] [280.977414, "o", "o"] [281.087856, "o", "l"] [281.198301, "o", "e"] [281.333158, "o", "\b\u001b[K"] [281.443723, "o", "\b\u001b[K"] [281.554254, "o", "\b\u001b[K"] [281.664827, "o", "\b\u001b[K"] [281.77545, "o", "\b\u001b[K"] [281.890043, "o", "\b\u001b[K"] [282.000763, "o", "\b\u001b[K"] [282.27253, "o", "/"] [282.482, "o", "c"] [282.592421, "o", "o"] [282.703035, "o", "n"] [282.813995, "o", "s"] [282.924513, "o", "o"] [283.03516, "o", "le"] [283.164823, "o", "'"] [283.286491, "o", "\r\n\u001b[?2004l\r"] [283.302386, "o", "* Trying 127.0.0.1:5000...\r\n"] [283.302869, "o", "* Connected to 127.0.0.1 (127.0.0.1) port 5000 (#0)\r\n> GET /console HTTP/1.1\r\r\n> Host: 127.0.0.1:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n"] [283.305025, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< "] [283.30776, "o", "Date: Tue, 14 Jan 2025 18:45:56 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [283.30906, "o", "\u001b[?2004h"] [283.309279, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [332.415056, "o", "curl -sv --path-as-is 'http://127.0.0.1:5000/console'"] [333.331321, "o", "\b"] [337.144826, "o", "?'\b"] [337.671211, "o", "\r\n\u001b[?2004l\r"] [337.680687, "o", "* Trying 127.0.0.1:5000...\r\n"] [337.681102, "o", "* Connected to 127.0.0.1 (127.0.0.1) port 5000 (#0)\r\n> GET /console? HTTP/1.1\r\r\n> Host: 127.0.0.1:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n"] [337.683112, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:46:50 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n"] [337.683453, "o", "\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [337.684345, "o", "\u001b[?2004h"] [337.684506, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [338.397282, "o", "curl -sv --path-as-is 'http://127.0.0.1:5000/console?'"] [338.678562, "o", "\b"] [339.669483, "o", "_'\b"] [340.519818, "o", "_'\b"] [343.961276, "o", "\u001b[C"] [344.071853, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[K"] [370.920928, "o", "h"] [371.063885, "o", "t"] [371.57557, "o", "\b\bcurl -sv --path-as-is 'http://127.0.0.1:5000/console'"] [372.280892, "o", "\b"] [372.781802, "o", "\b"] [372.892272, "o", "\b"] [373.002855, "o", "\b"] [373.113489, "o", "\b"] [373.224114, "o", "\b"] [373.224293, "o", "\b"] [373.334734, "o", "\b"] [373.445355, "o", "\b"] [373.555876, "o", "\b"] [373.556047, "o", "\b"] [373.666437, "o", "\b"] [373.777019, "o", "\b"] [373.887417, "o", "\b\b"] [374.414365, "o", "\u001b[C"] [374.754354, "o", "\b\u001b[1P:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [374.890085, "o", "\b\u001b[1P:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [375.000666, "o", "\b\u001b[1P:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [375.111284, "o", "\b\u001b[1P:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [375.222646, "o", "\b\u001b[1P:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [375.334316, "o", "\b\u001b[1P:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [375.453162, "o", "\b\u001b[1P:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [375.569635, "o", "\b\u001b[1P:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [375.993789, "o", "\b\u001b[1P:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [376.738882, "o", "l:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [376.849466, "o", "o:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [376.960285, "o", "c:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [377.071021, "o", "al:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [377.206459, "o", "h:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [377.317078, "o", "o:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [377.427705, "o", "st:5000/console'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [377.699795, "o", "\r\n"] [377.700117, "o", "\u001b[?2004l\r"] [377.729516, "o", "* Trying 127.0.0.1:5000...\r\n"] [377.729975, "o", "* Connected to localhost (127.0.0.1) port 5000 (#0)\r\n"] [377.730175, "o", "> GET /console HTTP/1.1\r\r\n> Host: localhost:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n"] [377.732313, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:47:30 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< "] [377.732514, "o", "Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [377.734527, "o", "\u001b[?2004h"] [377.734685, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [378.93486, "o", "curl -sv --path-as-is 'http://localhost:5000/console'"] [400.086887, "o", "\b"] [400.403612, "o", "\b\u001b[1P'\b"] [400.541958, "o", "\b\u001b[1P'\b"] [400.870457, "o", "\b\u001b[1P'\b"] [400.981021, "o", "\b\u001b[1P'\b"] [401.09181, "o", "\b\u001b[1P'\b"] [401.202572, "o", "\b\u001b[1P'\b"] [401.678641, "o", "\b\u001b[1P'\b"] [401.92943, "o", "\r\n\u001b[?2004l\r"] [401.942456, "o", "* Trying 127.0.0.1:5000...\r\n"] [401.942519, "o", "*"] [401.943019, "o", " Connected to localhost (127.0.0.1) port 5000 (#0)\r\n> GET / HTTP/1.1\r\r\n> "] [401.943239, "o", "Host: localhost:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r"] [401.943287, "o", "\r\n"] [401.945698, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 200 OK\r\r\n< "] [401.94588, "o", "Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:47:54 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 12\r\r\n< Connection: close\r\r\n< \r\r\n"] [401.947528, "o", "* Closing connection 0\r\nUnauthorized"] [401.948081, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [403.299848, "o", "curl -sv --path-as-is 'http://localhost:5000/'"] [403.786822, "o", "\b"] [404.193009, "o", "a'\b"] [404.303627, "o", "b'\b"] [404.414282, "o", "c'\b"] [404.575481, "o", "\r\n\u001b[?2004l\r"] [404.584985, "o", "* Trying 127.0.0.1:5000...\r\n"] [404.585607, "o", "* Connected to localhost (127.0.0.1) port 5000 (#0)"] [404.585656, "o", "\r\n"] [404.586056, "o", "> "] [404.586185, "o", "GET /abc HTTP/1.1\r\r\n"] [404.586447, "o", ">"] [404.586598, "o", " Host: localhost:5000\r"] [404.586873, "o", "\r\n>"] [404.587016, "o", " User-Agent: curl/7.74.0\r"] [404.587258, "o", "\r\n"] [404.58738, "o", ">"] [404.587473, "o", " "] [404.587675, "o", "Accept: */*\r\r\n> "] [404.587722, "o", "\r\r\n"] [404.58865, "o", "*"] [404.588872, "o", " "] [404.589082, "o", "Mark bundle as not supporting multiuse"] [404.589283, "o", "\r\n"] [404.589512, "o", "<"] [404.589725, "o", " "] [404.589935, "o", "HTTP/1.1 404 NOT FOUND\r"] [404.590106, "o", "\r\n"] [404.590341, "o", "<"] [404.590574, "o", " Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:47:57 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r"] [404.590721, "o", "\r\n<"] [404.591003, "o", " Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [404.592673, "o", "\u001b[?2004h"] [404.592812, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [405.77533, "o", "curl -sv --path-as-is 'http://localhost:5000/abc'"] [405.988818, "o", "\b"] [407.741315, "o", "^C\u001b[?2004l\r"] [407.741608, "o", "\u001b[?2004h\u001b[?2004l\r\r\n\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [407.941949, "o", "l"] [408.078815, "o", "s"] [408.24346, "o", "\r\n\u001b[?2004l\r"] [408.245677, "o", "\u001b[0m\u001b[01;32mcheck.sh\u001b[0m \u001b[01;32msadagent\u001b[0m sadagent.txt\r\n"] [408.246808, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [409.018694, "o", "ls"] [409.241827, "o", "\b"] [409.688271, "o", "\bcurl -sv --path-as-is 'http://localhost:5000/abc'"] [409.958601, "o", "\b"] [410.130178, "o", "\b"] [410.474098, "o", "\u001b[C"] [410.724206, "o", "\b\u001b[1P'\b"] [410.855049, "o", "\b\u001b[1P'\b"] [410.965595, "o", "\b\u001b[1P'\b"] [411.209243, "o", "s'\b"] [411.319796, "o", "a'\b"] [411.430446, "o", "d'\b"] [411.541143, "o", "a'\b"] [411.65172, "o", "g'\b"] [411.762386, "o", "e'\b"] [411.873132, "o", "n'\b"] [411.983666, "o", "t.'\b"] [412.094227, "o", "t'\b"] [412.204862, "o", "x'\b"] [412.315394, "o", "t'\b"] [412.476253, "o", "\r\n"] [412.476586, "o", "\u001b[?2004l\r"] [412.485884, "o", "* Trying 127.0.0.1:5000...\r\n"] [412.486258, "o", "* Connected to localhost (127.0.0.1) port 5000 (#0)\r\n> GET /sadagent.txt HTTP/1.1\r\r\n> Host: localhost:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n"] [412.488233, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:48:05 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n"] [412.48857, "o", "

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [412.489493, "o", "\u001b[?2004h"] [412.489613, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [413.800769, "o", "curl -sv --path-as-is 'http://localhost:5000/sadagent.txt'"] [414.111084, "o", "\b"] [414.24509, "o", "\b"] [414.39273, "o", "\b"] [414.516758, "o", "\b"] [414.632372, "o", "\b"] [414.74289, "o", "\b"] [414.853425, "o", "\b"] [414.970454, "o", "\b"] [415.08981, "o", "\b"] [415.216811, "o", "\b"] [415.335959, "o", "\b"] [415.465215, "o", "\b"] [415.588193, "o", "\b"] [416.108814, "o", ".sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [416.21928, "o", ".sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [416.32989, "o", "/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [416.499348, "o", "\r\n\u001b[?2004l\r"] [416.508765, "o", "* Trying 127.0.0.1:5000...\r\n"] [416.509316, "o", "* Connected to localhost (127.0.0.1) port 5000 (#0)\r\n"] [416.511231, "o", "> "] [416.511384, "o", "GET /../sadagent.txt HTTP/1.1\r\r\n> Host: localhost:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:48:09 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [416.512773, "o", "\u001b[?2004h"] [416.51295, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [417.113856, "o", "curl -sv --path-as-is 'http://localhost:5000/../sadagent.txt'"] [417.315376, "o", "\b"] [417.814902, "o", "\b"] [417.925629, "o", "\b"] [418.036138, "o", "\b"] [418.146712, "o", "\b"] [418.257191, "o", "\b"] [418.257344, "o", "\b"] [418.36898, "o", "\b"] [418.479539, "o", "\b"] [418.590204, "o", "\b\b"] [418.700771, "o", "\b"] [419.075067, "o", "\b"] [419.413817, "o", ".sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [419.545632, "o", ".sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [419.656325, "o", "/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [419.785468, "o", "\r\n"] [419.785761, "o", "\u001b[?2004l\r"] [419.795039, "o", "* Trying 127.0.0.1:5000...\r\n"] [419.795596, "o", "*"] [419.79573, "o", " Connected to localhost (127.0.0.1) port 5000 (#0)"] [419.795925, "o", "\r\n"] [419.797877, "o", "> GET /../../sadagent.txt HTTP/1.1\r\r\n> Host: localhost:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:48:12 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [419.799375, "o", "\u001b[?2004h"] [419.799546, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [420.310663, "o", "curl -sv --path-as-is 'http://localhost:5000/../../sadagent.txt'"] [420.484473, "o", "\b"] [420.599454, "o", "\b"] [420.709955, "o", "\b"] [420.85072, "o", "\b"] [420.997838, "o", "\b"] [421.134864, "o", "\b"] [421.264466, "o", "\b"] [421.388359, "o", "\b"] [421.518316, "o", "\b"] [421.636427, "o", "\b"] [421.791237, "o", "\b"] [421.931769, "o", "\b"] [422.050023, "o", "\b"] [422.554397, "o", ".sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [422.669561, "o", ".sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [422.780079, "o", "/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [422.956052, "o", "\r\n\u001b[?2004l\r"] [422.965595, "o", "* Trying 127.0.0.1:5000...\r\n"] [422.966158, "o", "*"] [422.966359, "o", " Connected to localhost (127.0.0.1) port 5000 (#0)"] [422.966549, "o", "\r\n"] [422.968315, "o", "> GET /../../../sadagent.txt HTTP/1.1\r\r\n> Host: localhost:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:48:15 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [422.970028, "o", "\u001b[?2004h"] [422.970259, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [424.220082, "o", "curl -sv --path-as-is 'http://localhost:5000/../../../sadagent.txt'"] [424.484255, "o", "\b"] [424.621332, "o", "\b"] [424.759774, "o", "\b"] [425.067372, "o", "\u001b[C"] [425.585664, "o", "\u001b[C"] [425.852657, "o", "\b\u001b[1P'\b"] [425.963304, "o", "\b\u001b[1P'\b"] [426.078087, "o", "\b\u001b[1P'\b"] [426.189356, "o", "\b\u001b[1P'\b"] [426.30984, "o", "\b\u001b[1P'\b"] [426.441845, "o", "\b\u001b[1P'\b"] [426.557503, "o", "\b\u001b[1P'\b"] [426.676275, "o", "\b\u001b[1P'\b"] [427.063541, "o", "^C\u001b[?2004l\r"] [427.06383, "o", "\u001b[?2004h\u001b[?2004l\r\r\n\u001b[?2004h"] [427.063978, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [427.838171, "o", "m"] [427.948687, "o", "a"] [428.059181, "o", "n"] [428.169612, "o", " "] [428.28001, "o", "a"] [428.390369, "o", "sc"] [428.500813, "o", "i"] [428.615605, "o", "i"] [428.786109, "o", " "] [428.965879, "o", "|"] [429.076715, "o", " "] [429.187104, "o", "g"] [429.319876, "o", "r"] [429.430615, "o", "e"] [429.541044, "o", "p"] [430.537761, "o", "\b\b\b\b\u001b[K"] [430.687858, "o", "e"] [430.798516, "o", "g"] [431.377516, "o", "r"] [431.48814, "o", "e"] [431.623481, "o", "p"] [431.742992, "o", " "] [431.882509, "o", "'"] [432.552279, "o", "\\"] [432.793651, "o", "."] [432.968933, "o", "'"] [433.243307, "o", "\r\n\u001b[?2004l\r"] [433.381312, "o", " ASCII is the American Standard Code for Information Interchange. It is a 7-bit code. Many 8-bit codes (e.g., ISO 8859-1) contain ASCII as their\r\n lower half. The international counterpart of ASCII is known as ISO 646-IRV.\r\n The following table contains the 128 ASCII characters.\r\n C program '\\X' escapes are noted.\r\n 025 21 15 NAK (negative ack.) 125 85 55 U\r\n 027 23 17 ETB (end of trans. blk) 127 87 57 W\r\n 056 46 2E . 156 110 6E n\r\n For convenience, below are more compact tables in hex and decimal.\r\n 6: & 6 F V f v 6: $ . 8 B L V ` j t ~\r\n E: . > N ^ n ~\r\n An ascii manual page appeared in Version 7 of AT&T UNIX.\r\n has a hole in the middle.\r\n Uppercase and lowercase characters differ by just one bit and the ASCII character 2 differs from the double quote by just one bit, too. That made it\r\n much easier to encode character"] [433.381381, "o", "s mechanically or with a non-microcontroller-based electronic keyboard and that pairing was found on old teletypes.\r\n The ASCII standard was published by the United States of America Standards Institute (USASI) in 1968.\r\n This page is part of release 5.10 of the Linux man-pages project. A description of the project, information about reporting bugs, and the latest\r\n version of this page, can be found at https://www.kernel.org/doc/man-pages/.\r\n"] [433.383257, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [434.501626, "o", "man ascii | egrep '\\.'"] [434.641756, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\bcurl -sv --path-as-is 'http://localhost:5000/../../../sadagent.txt'"] [435.592447, "o", "\b"] [435.729451, "o", "\b"] [435.973151, "o", "\b"] [436.947971, "o", "\b"] [437.064854, "o", "\b"] [437.185731, "o", "\b"] [437.29616, "o", "\b"] [437.425645, "o", "\b"] [437.554363, "o", "\b"] [437.682926, "o", "\b"] [437.813997, "o", "\b"] [437.941282, "o", "\b"] [438.074221, "o", "\b"] [438.677225, "o", "\b"] [439.253558, "o", "\b\u001b[1P/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [439.382372, "o", "\b\u001b[1P/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [439.492878, "o", "\u001b[1Psadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [439.629404, "o", "\b\u001b[1P/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [439.74102, "o", "\b\u001b[1P/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [439.85362, "o", "\u001b[1Psadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [439.964219, "o", "\b\u001b[1P/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [440.074783, "o", "\b\u001b[1P/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [441.077533, "o", "%/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [441.300682, "o", "2/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [441.500001, "o", "e/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [442.50533, "o", "\u001b[C/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [442.878311, "o", "$/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [443.86783, "o", "\b\u001b[1P/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [444.579063, "o", "%/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [445.036483, "o", "2/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [445.282541, "o", "./sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [445.733884, "o", "\u001b[C/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [446.041027, "o", "\u001b[1Psadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [446.152542, "o", "\b\u001b[1P/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [446.263169, "o", "e/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [446.373747, "o", "\u001b[C/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [447.449517, "o", "%/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [447.840351, "o", "2/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [448.073613, "o", "e/sadagent.txt'\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [449.757373, "o", "\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [450.165061, "o", "\b\u001b[K"] [450.28055, "o", "\b\u001b[K"] [450.404551, "o", "\b\u001b[K"] [450.515103, "o", "\b\u001b[K"] [450.6257, "o", "\b\u001b[K"] [450.743503, "o", "\b\u001b[K"] [450.86283, "o", "\b\u001b[K"] [450.973377, "o", "\b\u001b[K"] [451.084056, "o", "\b\u001b[K"] [451.20926, "o", "\b\u001b[K"] [451.324797, "o", "\b\u001b[K"] [451.443607, "o", "\b\u001b[K"] [451.561133, "o", "\b\u001b[K"] [452.019789, "o", "e"] [452.130397, "o", "t"] [452.240896, "o", "c"] [452.353895, "o", "/"] [452.507576, "o", "h"] [452.618324, "o", "o"] [452.730911, "o", "s"] [452.841471, "o", "t"] [452.952018, "o", "s"] [453.72893, "o", "'"] [454.366825, "o", "\r\n\u001b[?2004l\r"] [454.37642, "o", "* Trying 127.0.0.1:5000...\r\n"] [454.376918, "o", "* Connected to localhost (127.0.0.1) port 5000 (#0)\r\n> GET /%2e/%2e/%2e/etc/hosts HTTP/1.1\r\r\n> Host: localhost:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n"] [454.37705, "o", "> Accept: */*\r\r\n>"] [454.377159, "o", " \r\r\n"] [454.379585, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:48:47 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [454.380909, "o", "\u001b[?2004h"] [454.381026, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [455.725667, "o", "curl -sv --path-as-is 'http://localhost:5000/%2e/%2e/%2e/etc/hosts'"] [462.77731, "o", "^C\u001b[?2004l\r"] [462.777608, "o", "\u001b[?2004h\u001b[?2004l\r\r\n\u001b[?2004h"] [462.777725, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [463.075882, "o", "e"] [463.254221, "o", "c"] [463.364755, "o", "ho"] [463.475235, "o", " "] [463.585761, "o", "'"] [463.801482, "o", "\u001b[7m574\u001b[27m"] [463.912138, "o", "\b\b\b574'"] [464.320961, "o", " "] [464.97377, "o", "\b\u001b[K"] [465.084486, "o", "\b\u001b[K"] [465.195219, "o", "\b\u001b[K"] [465.305839, "o", "\b\u001b[K"] [465.416644, "o", "\b\u001b[K"] [471.393146, "o", "\u001b[7m%2e/%2e/%2e/etc/hosts\u001b[27m"] [472.009135, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b%2e/%2e/%2e/etc/hosts'"] [472.175234, "o", " "] [472.353021, "o", "|"] [472.463649, "o", " "] [472.73596, "o", "t"] [472.846497, "o", "r"] [473.23468, "o", "\b\u001b[K"] [473.345087, "o", "\b\u001b[K"] [473.533005, "o", "s"] [473.643483, "o", "e"] [473.753791, "o", "d"] [473.864245, "o", " "] [474.562709, "o", "'"] [475.074157, "o", "s"] [475.234205, "o", "/"] [475.545139, "o", "\\"] [475.72567, "o", "/"] [476.172219, "o", "s"] [476.90865, "o", "\b\u001b[K"] [477.931111, "o", "%"] [478.156757, "o", "2"] [478.306776, "o", "f"] [478.51177, "o", "/"] [478.674191, "o", "g"] [478.938101, "o", "'"] [479.555744, "o", "\r\n"] [479.555806, "o", "\u001b[?2004l\r"] [479.558654, "o", "sed: -e expression #1, char 9: unterminated `s' command\r\n"] [479.559242, "o", "\u001b[?2004h"] [479.559289, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [480.706968, "o", "echo '%2e/%2e/%2e/etc/hosts' | sed 's/\\/%2f/g'"] [480.95877, "o", "\b"] [481.098473, "o", "\b"] [481.2282, "o", "\b"] [481.591443, "o", "\u001b[C"] [481.701874, "o", "\u001b[C"] [482.447698, "o", "\b"] [482.587968, "o", "\b"] [482.725539, "o", "\b"] [482.854308, "o", "\b"] [482.964992, "o", "\b"] [483.081812, "o", "\b"] [483.645528, "o", "\u001b[C/%2f/g'\b\b\b\b\b\b\b"] [483.902754, "o", "\r\n\u001b[?2004l\r"] [483.905656, "o", "%2e%2f%2e%2f%2e%2fetc%2fhosts\r\n"] [483.906225, "o", "\u001b[?2004h"] [483.906425, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [488.016751, "o", "echo '%2e/%2e/%2e/etc/hosts' | sed 's/\\//%2f/g'"] [488.137784, "o", "\b\b\b\b\b\b\b\u001b[1P%2f/g'"] [488.663006, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Ccurl -sv --path-as-is 'http://localhost:5000/%2e/%2e/%2e/etc/hosts'"] [489.2953, "o", "\b"] [489.769086, "o", "\b\u001b[1P'\b"] [490.271605, "o", "\b\u001b[1P'\b"] [490.382194, "o", "\b\u001b[1P'\b"] [490.492719, "o", "\b\u001b[1P'\b"] [490.603156, "o", "\b\u001b[1P'\b"] [490.603331, "o", "\b\u001b[1P'\b"] [490.713534, "o", "\b\u001b[1P'\b"] [490.82399, "o", "\b\u001b[1P'\b"] [490.936284, "o", "\b\u001b[1P'\b\b\u001b[1P'\b"] [491.047071, "o", "\b\u001b[1P'\b"] [491.157566, "o", "\b\u001b[1P'\b"] [491.268134, "o", "\b\u001b[1P'\b"] [491.268327, "o", "\b\u001b[1P'\b"] [491.378622, "o", "\b\u001b[1P'\b"] [491.489014, "o", "\b\u001b[1P'\b"] [491.599516, "o", "\b\u001b[1P'\b"] [491.599705, "o", "\b\u001b[1P'\b"] [491.710111, "o", "\b\u001b[1P'\b"] [491.820633, "o", "\b\u001b[1P'\b"] [491.931087, "o", "\b\u001b[1P'\b"] [492.218946, "o", "\b\u001b[1P'\b"] [492.85648, "o", "/'\b"] [493.047788, "o", "\u001b[7m%2e%2f%2e%2f%2e%2fetc%2fhosts\u001b[27m'\b"] [493.877604, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b%2e%2f%2e%2f%2e%2fetc%2fhosts'\b\r\n"] [493.877944, "o", "\u001b[?2004l\r"] [493.887177, "o", "* Trying 127.0.0.1:5000...\r\n"] [493.887733, "o", "* "] [493.887908, "o", "Connected to localhost (127.0.0.1) port 5000 (#0)\r\n> GET /%2e%2f%2e%2f%2e%2fetc%2fhosts HTTP/1.1\r\r\n> Host: localhost:5000\r\r\n"] [493.888122, "o", "> User-Agent: curl/7.74.0\r\r\n>"] [493.888266, "o", " Accept: */*\r\r\n> \r\r\n"] [493.890648, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:49:26 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n"] [493.89083, "o", "

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [493.892105, "o", "\u001b[?2004h"] [493.892318, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [519.263667, "o", "curl -sv --path-as-is 'http://localhost:5000/%2e%2f%2e%2f%2e%2fetc%2fhosts'"] [520.103176, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[28Pecho '%2e/%2e/%2e/etc/hosts' | sed 's/\\//%2f/g'"] [520.625759, "o", "\b\b\b\b\b\b\b\u001b[1P%2f/g'"] [521.06574, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Ccurl -sv --path-as-is 'http://localhost:5000/%2e/%2e/%2e/etc/hosts'"] [521.307547, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Cman ascii | egrep '\\.'\u001b[K"] [521.851493, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\bcurl -sv --path-as-is 'http://localhost:5000/../../../sadagent.txt'"] [522.777256, "o", "\b"] [523.173269, "o", "\b\u001b[1P'\b"] [523.302522, "o", "\b\u001b[1P'\b"] [523.413161, "o", "\b\u001b[1P'\b"] [523.52381, "o", "\b\u001b[1P'\b"] [523.648327, "o", "\b\u001b[1P'\b"] [525.761282, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C'\u001b[K\b"] [526.283763, "o", "l'\b"] [526.417061, "o", "s'\b"] [526.527853, "o", " '\b"] [526.638477, "o", "-a'\b"] [526.749101, "o", "l'\b"] [526.860372, "o", "rt'\b"] [527.043858, "o", "\r\n\u001b[?2004l\r"] [527.044062, "o", "\u001b[?2004h> "] [528.200096, "o", "^C\u001b[?2004l\r"] [528.200399, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [528.200574, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [528.374199, "o", "l"] [528.516909, "o", "s"] [528.627467, "o", " "] [528.737935, "o", "-"] [528.848541, "o", "al"] [528.959221, "o", "rt"] [529.112591, "o", "\r\n\u001b[?2004l\r"] [529.115833, "o", "total 11144\r\n"] [529.116224, "o", "-rwxr-xr-x 1 admin root 11397096 Sep 20 2023 \u001b[0m\u001b[01;32msadagent\u001b[0m\r\n-rw-r--r-- 1 admin admin 0 Sep 20 2023 sadagent.txt\r\ndrwxr-xr-x 6 admin admin 4096 Sep 24 2023 \u001b[01;34m..\u001b[0m\r\n-rwxr-xr-x 1 admin admin 230 Sep 24 2023 \u001b[01;32mcheck.sh\u001b[0m\r\ndrwxr-xr-x 2 admin root 4096 Sep 24 2023 \u001b[01;34m.\u001b[0m\r\n"] [529.116533, "o", "\u001b[?2004h"] [529.11658, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~/agent\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~/agent\u001b[00m$ "] [529.380666, "o", "c"] [529.491397, "o", "d"] [529.601941, "o", " ."] [529.71327, "o", "."] [529.845704, "o", "\r\n\u001b[?2004l\r"] [529.846074, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [530.083438, "o", "l"] [530.219737, "o", "s"] [530.364451, "o", "\r\n\u001b[?2004l\r"] [530.366821, "o", "\u001b[0m\u001b[01;34magent\u001b[0m \u001b[01;32mwebserver.py\u001b[0m\r\n"] [530.368125, "o", "\u001b[?2004h"] [530.368347, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [532.56222, "o", "ls"] [533.029321, "o", "\b\bcd .."] [533.465887, "o", "\b\b\b\b\bls -alrt"] [533.942922, "o", "'"] [534.384254, "o", "\b\b\b\b\b\b\b\b\b\u001b[K"] [534.585397, "o", "t"] [534.718713, "o", "o"] [534.829605, "o", "uch"] [534.940048, "o", " "] [535.276842, "o", "\b\b\b\b\b\b\u001b[K"] [535.443576, "o", "d"] [535.554066, "o", "a"] [535.664676, "o", "t"] [535.775204, "o", "e"] [535.885686, "o", " "] [535.996671, "o", ">"] [536.107017, "o", " "] [536.217482, "o", "fo"] [536.328178, "o", "o"] [536.440507, "o", "\r\n\u001b[?2004l\r"] [536.442838, "o", "\u001b[?2004h"] [536.443016, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [536.757601, "o", "date > foo"] [537.02256, "o", "\b\b\b\b\b\b\b\b\b\bls\u001b[K"] [537.455989, "o", "\b\bcd .."] [537.877483, "o", "\b\b\b\b\bls -alrt"] [538.208174, "o", "'"] [538.443337, "o", "\b\b\b\b\b\b\b\b\bcurl -sv --path-as-is 'http://localhost:5000/%2e%2f%2e%2f%2e%2fetc%2fhosts'"] [538.639673, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[28Pecho '%2e/%2e/%2e/etc/hosts' | sed 's/\\//%2f/g'"] [539.121794, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Ccurl -sv --path-as-is 'http://localhost:5000/%2e%2f%2e%2f%2e%2fetc%2fhosts'"] [539.23242, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[28Pecho '%2e/%2e/%2e/etc/hosts' | sed 's/\\//%2f/g'"] [539.590698, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\u001b[K"] [540.280417, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[K"] [540.560912, "o", "c"] [540.671414, "o", "u"] [540.781808, "o", "rl"] [540.892081, "o", " "] [541.002527, "o", "-"] [541.119828, "o", "s"] [541.361984, "o", " "] [541.655488, "o", "\b\u001b[K"] [541.82461, "o", "v"] [541.935039, "o", " "] [542.151693, "o", "-"] [542.271897, "o", "-"] [542.430277, "o", "p"] [542.54082, "o", "a"] [542.651351, "o", "t"] [542.76197, "o", "h"] [542.872425, "o", "-"] [542.982912, "o", "a"] [543.093438, "o", "s"] [543.20403, "o", "-"] [543.383744, "o", "i"] [543.494257, "o", "s"] [543.632988, "o", " "] [543.755177, "o", "'"] [543.913196, "o", "h"] [544.071286, "o", "t"] [544.181901, "o", "t"] [544.292401, "o", "p"] [544.532874, "o", ":"] [544.747331, "o", "/"] [544.876585, "o", "/"] [545.544841, "o", "l"] [545.65543, "o", "o"] [545.765972, "o", "ca"] [545.876552, "o", "l"] [545.987236, "o", "hg"] [546.097899, "o", "os"] [546.208425, "o", "t"] [546.319007, "o", ":"] [546.877515, "o", "\b\u001b[K"] [546.987976, "o", "\b\u001b[K"] [547.104365, "o", "\b\u001b[K"] [547.21494, "o", "\b\u001b[K"] [547.327442, "o", "\b\u001b[K"] [547.437972, "o", "\b\u001b[K"] [547.716566, "o", "h"] [547.827017, "o", "o"] [547.937534, "o", "s"] [548.048084, "o", "t"] [548.323883, "o", ":"] [553.30041, "o", "5"] [553.443478, "o", "0"] [553.563622, "o", "0"] [553.674067, "o", "0"] [553.981692, "o", "/"] [555.037674, "o", "f"] [555.148394, "o", "o"] [555.259052, "o", "o"] [555.496053, "o", "'"] [556.360761, "o", "\r\n"] [556.360938, "o", "\u001b[?2004l\r"] [556.370331, "o", "* Trying 127.0.0.1:5000...\r\n"] [556.370686, "o", "* Connected to localhost (127.0.0.1) port 5000 (#0)\r\n"] [556.370915, "o", "> GET /foo HTTP/1.1\r\r\n> Host: localhost:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n"] [556.372862, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:50:29 GMT\r"] [556.373177, "o", "\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [556.374308, "o", "\u001b[?2004h"] [556.374429, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [558.361228, "o", "p"] [558.471754, "o", "w"] [558.582329, "o", "d"] [558.735311, "o", "\r\n\u001b[?2004l\r"] [558.735626, "o", "/home/admin\r\n\u001b[?2004h"] [558.735766, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [559.52192, "o", "pwd"] [560.101961, "o", "\b\b\bcurl -sv --path-as-is 'http://localhost:5000/foo'"] [560.571477, "o", "\b"] [560.945863, "o", "\b"] [561.088699, "o", "\b"] [561.265364, "o", "\b"] [561.920706, "o", ".foo'\b\b\b\b"] [562.031228, "o", ".foo'\b\b\b\b"] [562.214608, "o", "/foo'\b\b\b\b"] [562.874135, "o", "\r\n"] [562.874277, "o", "\u001b[?2004l\r"] [562.883686, "o", "* Trying 127.0.0.1:5000...\r\n"] [562.884083, "o", "* Connected to localhost (127.0.0.1) port 5000 (#0)\r\n> GET /../foo HTTP/1.1\r\r\n> Host: localhost:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n"] [562.886029, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< "] [562.886304, "o", "Date: Tue, 14 Jan 2025 18:50:35 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [562.887312, "o", "\u001b[?2004h"] [562.887438, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [563.329517, "o", "curl -sv --path-as-is 'http://localhost:5000/../foo'"] [563.603727, "o", "\b"] [563.7556, "o", "\b"] [563.884487, "o", "\b"] [563.995135, "o", "\b"] [564.11155, "o", "\b"] [564.236277, "o", "\b"] [564.878183, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Cpwd\u001b[K"] [564.988566, "o", "\b\b\bcurl -sv --path-as-is 'http://localhost:5000/foo'"] [565.408433, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Cpwd\u001b[K"] [565.692153, "o", "\b\b\bcurl -sv --path-as-is 'http://localhost:5000/../foo'"] [566.156911, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[K"] [567.022602, "o", "curl -sv --path-as-is 'http://localhost:5000/../foo'"] [567.952794, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Cpwd\u001b[K"] [568.097861, "o", "\b\b\bcurl -sv --path-as-is 'http://localhost:5000/foo'"] [568.21998, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Cdate > foo\u001b[K"] [568.34201, "o", "\b\b\b\b\b\b\b\b\b\bls\u001b[K"] [568.7526, "o", "\b\bcd .."] [569.190824, "o", "\b\b\b\b\bls -alrt"] [569.503939, "o", "'"] [569.732324, "o", "\b\b\b\b\b\b\b\b\bcurl -sv --path-as-is 'http://localhost:5000/%2e%2f%2e%2f%2e%2fetc%2fhosts'"] [570.094773, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[28Pecho '%2e/%2e/%2e/etc/hosts' | sed 's/\\//%2f/g'"] [570.367787, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Ccurl -sv --path-as-is 'http://localhost:5000/%2e%2f%2e%2f%2e%2fetc%2fhosts'"] [571.018088, "o", "\b"] [571.190062, "o", "\b"] [571.336151, "o", "\b"] [571.473523, "o", "\b"] [571.907832, "o", "\u001b[C"] [572.242432, "o", "\u001b[C"] [572.625963, "o", "\b\u001b[1Ps'\b\b"] [572.771022, "o", "\u001b[1P'\b\b"] [573.281159, "o", "\u001b[C"] [573.583717, "o", "\b\u001b[1P'\b"] [573.694189, "o", "\b\u001b[1P'\b"] [573.933256, "o", "\b\u001b[1P'\b"] [574.043893, "o", "\b\u001b[1P'\b"] [574.154434, "o", "\b\u001b[1P'\b"] [574.265066, "o", "\b\u001b[1P'\b"] [574.375709, "o", "\b\u001b[1P'\b"] [574.489031, "o", "\b\u001b[1P'\b"] [574.599612, "o", "\b\u001b[1P'\b"] [576.045095, "o", "h'\b"] [576.155617, "o", "o'\b"] [576.266155, "o", "m'\b"] [576.376781, "o", "e'\b"] [576.94047, "o", "%'\b"] [577.16469, "o", "2'\b"] [577.315391, "o", "f'\b"] [577.737305, "o", "a'\b"] [577.866006, "o", "d'\b"] [578.059364, "o", "m'\b"] [578.169937, "o", "i'\b"] [578.28039, "o", "n'\b"] [578.929832, "o", "%'\b"] [579.173374, "o", "2'\b"] [579.319335, "o", "f'\b"] [580.097345, "o", "f'\b"] [580.208, "o", "o'\b"] [580.318467, "o", "o'\b"] [580.625102, "o", "\r\n\u001b[?2004l\r"] [580.634804, "o", "* Trying 127.0.0.1:5000...\r\n"] [580.635178, "o", "* Connected to localhost (127.0.0.1) port 5000 (#0)\r\n> "] [580.635413, "o", "GET /%2e%2f%2e%2f%2e%2fhome%2fadmin%2ffoo HTTP/1.1\r\r\n> Host: localhost:5000\r\r\n> User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n"] [580.637294, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:50:53 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [580.638708, "o", "\u001b[?2004h"] [580.638828, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [581.251555, "o", "curl -sv --path-as-is 'http://localhost:5000/%2e%2f%2e%2f%2e%2fhome%2fadmin%2ffoo'"] [581.40951, "o", "\b"] [581.580396, "o", "\b"] [581.895221, "o", "\u001b[C"] [582.721783, "o", "\b\u001b[1P'\b"] [582.843405, "o", "\b\u001b[1P'\b"] [582.967942, "o", "\b\u001b[1P'\b"] [583.08722, "o", "\b\u001b[1P'\b"] [583.209861, "o", "\b\u001b[1P'\b"] [583.331598, "o", "\b\u001b[1P'\b"] [583.452476, "o", "\b\u001b[1P'\b"] [583.585754, "o", "\b\u001b[1P'\b"] [583.7093, "o", "\b\u001b[1P'\b"] [584.005024, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C'\u001b[K\b"] [585.077552, "o", "\u001b[C"] [585.187936, "o", "\b\u001b[K"] [585.527427, "o", "l"] [585.671046, "o", "s"] [585.78151, "o", " "] [585.891975, "o", "-a"] [586.002452, "o", "l"] [586.113084, "o", "rt"] [586.303402, "o", "\r\n"] [586.303581, "o", "\u001b[?2004l\r"] [586.306263, "o", "total 48\r\n"] [586.30664, "o", "-rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile\r\n-rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc\r\n-rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout\r\ndrwxr-xr-x 3 root root 4096 Sep 17 2023 \u001b[0m\u001b[01;34m..\u001b[0m\r\ndrwx------ 2 admin admin 4096 Sep 17 2023 \u001b[01;34m.ssh\u001b[0m\r\ndrwx------ 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.ansible\u001b[0m\r\ndrwxr-xr-x 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.config\u001b[0m\r\n-rwxrwx--- 1 root root 360 Sep 24 2023 \u001b[01;32mwebserver.py\u001b[0m\r\ndrwxr-xr-x 2 admin root 4096 Sep 24 2023 \u001b[01;34magent\u001b[0m\r\n-rw-r--r-- 1 admin admin 29 Jan 14 18:50 foo\r\ndrwxr-xr-x 6 admin admin 4096 Jan 14 18:50 \u001b[01;34m.\u001b[0m\r\n-rw------- 1 admin admin 2289 Jan 14 18:50 .bash_history\r\n"] [586.307107, "o", "\u001b[?2004h"] [586.307221, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [586.853705, "o", "ls -alrt"] [587.075868, "o", "\b"] [587.338808, "o", "\b\b\b\b\b\b\bcurl -sv --path-as-is 'http://localhost:5000/%2e%2f%2e%2f%2e%2fhome%2fadmin%2ffoo'"] [587.579049, "o", "\b"] [587.739774, "o", "\b"] [587.940707, "o", "\u001b[C"] [588.100793, "o", "\u001b[C"] [588.687594, "o", "\b"] [588.987428, "o", "\b\u001b[1P'\b"] [589.491623, "o", "\b\u001b[1P'\b"] [589.602234, "o", "\b\u001b[1P'\b"] [589.712783, "o", "\b\u001b[1P'\b"] [589.823336, "o", "\b\u001b[1P'\b"] [589.823552, "o", "\b\u001b[1P'\b"] [589.933827, "o", "\b\u001b[1P'\b"] [590.044268, "o", "\b\u001b[1P'\b"] [590.154814, "o", "\b\u001b[1P'\b"] [590.154974, "o", "\b\u001b[1P'\b"] [590.265431, "o", "\b\u001b[1P'\b"] [590.37608, "o", "\b\u001b[1P'\b"] [590.48659, "o", "\b\u001b[1P'\b"] [590.597682, "o", "\b\u001b[1P'\b"] [590.597859, "o", "\b\u001b[1P'\b"] [590.708969, "o", "\b\u001b[1P'\b"] [590.819451, "o", "\b\u001b[1P'\b"] [590.929999, "o", "\b\u001b[1P'\b"] [590.930181, "o", "\b\u001b[1P'\b"] [591.040507, "o", "\b\u001b[1P'\b"] [591.151323, "o", "\b\u001b[1P'\b"] [591.261814, "o", "\b\u001b[1P'\b"] [591.262036, "o", "\b\u001b[1P'\b"] [591.372487, "o", "\b\u001b[1P'\b"] [591.48348, "o", "\b\u001b[1P'\b"] [591.594458, "o", "\b\u001b[1P'\b"] [591.594619, "o", "\b\u001b[1P'\b"] [591.705338, "o", "\b\u001b[1P'\b"] [591.815933, "o", "\b\u001b[1P'\b"] [591.926726, "o", "\b\u001b[1P'\b\b\u001b[1P'\b"] [592.037572, "o", "\b\u001b[1P'\b"] [592.148214, "o", "\b\u001b[1P'\b"] [592.258767, "o", "\b\u001b[1P'\b"] [592.393504, "o", "\b\u001b[1P'\b"] [592.623413, "o", "\b\u001b[1P'\b"] [593.121152, "o", "w'\b"] [593.23166, "o", "e'\b"] [593.34206, "o", "b'\b"] [593.452681, "o", "s'\b"] [593.56317, "o", "e'\b"] [593.67361, "o", "r'\b"] [593.78411, "o", "v'\b"] [593.894704, "o", "e'\b"] [594.005311, "o", "r'\b"] [594.115707, "o", ".'\b"] [594.254236, "o", "p'\b"] [594.398, "o", "y'\b"] [594.607691, "o", "\r\n\u001b[?2004l\r"] [594.620251, "o", "*"] [594.620435, "o", " "] [594.620548, "o", " Trying 127.0.0.1:5000..."] [594.620643, "o", "\r\n"] [594.621176, "o", "*"] [594.621332, "o", " "] [594.621474, "o", "Connected to localhost (127.0.0.1) port 5000 (#0)"] [594.621514, "o", "\r\n"] [594.62167, "o", ">"] [594.621807, "o", " "] [594.621977, "o", "GET /webserver.py HTTP/1.1\r"] [594.622056, "o", "\r\n"] [594.622187, "o", ">"] [594.622377, "o", " Host: localhost:5000\r\r\n>"] [594.622725, "o", " User-Agent: curl/7.74.0\r\r\n> Accept: */*\r\r\n> \r\r\n"] [594.624859, "o", "* Mark bundle as not supporting multiuse\r\n"] [594.62503, "o", "< "] [594.625076, "o", "HTTP/1.1 404 NOT FOUND\r"] [594.625145, "o", "\r\n"] [594.625209, "o", "<"] [594.625657, "o", " "] [594.62569, "o", "Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:51:07 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n"] [594.625709, "o", "

Not Found

\r\n"] [594.625747, "o", "

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n"] [594.626309, "o", "* Closing connection 0\r\n"] [594.627738, "o", "\u001b[?2004h"] [594.628082, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [595.71803, "o", "curl -sv --path-as-is 'http://localhost:5000/webserver.py'"] [595.949073, "o", "\b"] [596.096807, "o", "\b"] [596.223511, "o", "\b"] [596.336217, "o", "\b"] [596.464954, "o", "\b"] [596.599464, "o", "\b"] [596.73755, "o", "\b"] [596.849981, "o", "\b"] [596.966272, "o", "\b"] [597.078393, "o", "\b"] [597.19082, "o", "\b"] [597.326314, "o", "\b"] [597.464288, "o", "\b"] [598.125144, "o", ".webserver.py'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [598.252097, "o", ".webserver.py'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [598.401418, "o", "/webserver.py'\b\b\b\b\b\b\b\b\b\b\b\b\b"] [598.650434, "o", "\r\n\u001b[?2004l\r"] [598.660148, "o", "* Trying 127.0.0.1:5000...\r\n"] [598.660579, "o", "*"] [598.660693, "o", " "] [598.660739, "o", "Connected to localhost (127.0.0.1) port 5000 (#0)"] [598.660791, "o", "\r\n"] [598.660899, "o", ">"] [598.661008, "o", " "] [598.661196, "o", "GET /../webserver.py HTTP/1.1\r\r\n>"] [598.661259, "o", " "] [598.66132, "o", "Host: localhost:5000\r"] [598.661484, "o", "\r\n> User-Agent: curl/7.74.0\r"] [598.661526, "o", "\r\n"] [598.661579, "o", ">"] [598.661637, "o", " "] [598.661851, "o", "Accept: */*\r\r\n> "] [598.661894, "o", "\r"] [598.661949, "o", "\r\n"] [598.663882, "o", "* Mark bundle as not supporting multiuse\r\n< HTTP/1.1 404 NOT FOUND\r\r\n< Server: Werkzeug/2.3.7 Python/3.9.2\r\r\n< Date: Tue, 14 Jan 2025 18:51:11 GMT\r\r\n< Content-Type: text/html; charset=utf-8\r\r\n< Content-Length: 207\r\r\n< Connection: close\r\r\n< \r\r\n\r\n\r\n404 Not Found\r\n

Not Found

\r\n

The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

\r\n* Closing connection 0\r\n"] [598.66538, "o", "\u001b[?2004h"] [598.665562, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [599.032138, "o", "curl -sv --path-as-is 'http://localhost:5000/../webserver.py'"] [599.22804, "o", "\b"] [599.38035, "o", "\b"] [599.490782, "o", "\b"] [599.612873, "o", "\b"] [599.749058, "o", "\b"] [599.859677, "o", "\b"] [600.219878, "o", "\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [600.330411, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[K"] [610.941384, "o", "curl -sv --path-as-is 'http://localhost:5000/webserver.py'"] [611.176262, "o", "\b"] [611.678765, "o", "\b"] [611.789375, "o", "\b"] [611.899975, "o", "\b"] [612.010611, "o", "\b"] [612.121071, "o", "\b\b"] [615.856654, "o", "\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [615.967038, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[K"] [616.393856, "o", "l"] [616.531035, "o", "s"] [616.64145, "o", " "] [616.751748, "o", "-a"] [616.862083, "o", "l"] [616.972505, "o", "rt"] [617.180968, "o", "\r\n"] [617.181035, "o", "\u001b[?2004l\r"] [617.183681, "o", "total 48\r\n"] [617.183972, "o", "-rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile\r\n-rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc\r\n-rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout\r\ndrwxr-xr-x 3 root root 4096 Sep 17 2023 \u001b[0m\u001b[01;34m..\u001b[0m\r\ndrwx------ 2 admin admin 4096 Sep 17 2023 \u001b[01;34m.ssh\u001b[0m\r\ndrwx------ 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.ansible\u001b[0m\r\ndrwxr-xr-x 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.config\u001b[0m\r\n-rwxrwx--- 1 root root 360 Sep 24 2023 \u001b[01;32mwebserver.py\u001b[0m\r\ndrwxr-xr-x 2 admin root 4096 Sep 24 2023 \u001b[01;34magent\u001b[0m\r\n-rw-r--r-- 1 admin admin 29 Jan 14 18:50 foo\r\ndrwxr-xr-x 6 admin admin 4096 Jan 14 18:50 \u001b[01;34m.\u001b[0m\r\n-rw------- 1 admin admin 2455 Jan 14 18:51 .bash_history\r\n"] [617.184397, "o", "\u001b[?2004h"] [617.184487, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [618.164427, "o", "s"] [618.27496, "o", "u"] [618.385491, "o", "do"] [618.496119, "o", " "] [618.606632, "o", "-"] [619.05812, "o", "l"] [619.168537, "o", " "] [619.278999, "o", "-"] [619.405589, "o", "S"] [620.11423, "o", "\b\b\b\b\b\b\b\b\b\b"] [620.862813, "o", "\u001b[1@e"] [620.973254, "o", "\u001b[1@c"] [621.083752, "o", "\u001b[2@ho"] [621.223154, "o", "\u001b[1@ "] [621.367782, "o", "\u001b[1@-"] [621.578921, "o", "\u001b[1@n"] [621.703118, "o", "\u001b[1@ "] [621.880431, "o", "\u001b[1@|"] [621.990834, "o", "\u001b[1@ "] [622.398676, "o", "\r\n\u001b[?2004l\r"] [622.433316, "o", "Matching Defaults entries for admin on i-0f16098192d754ea1:\r\r\n env_reset, mail_badpass, secure_path=/usr/local/sbin\\:/usr/local/bin\\:/usr/sbin\\:/usr/bin\\:/sbin\\:/bin\r\r\n\r\r\nUser admin may run the following commands on i-0f16098192d754ea1:\r\r\n"] [622.433605, "o", " (ALL : ALL) ALL\r\r\n (ALL) NOPASSWD: /sbin/shutdown\r\r\n"] [622.435818, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [626.475418, "o", "s"] [626.586129, "o", "ud"] [626.696825, "o", "o "] [626.807514, "o", "i"] [626.918045, "o", "d"] [627.028513, "o", " "] [627.687796, "o", "\b\u001b[K"] [627.877837, "o", "\r\n\u001b[?2004l\r"] [627.88571, "o", "\r\nWe trust you have received the usual lecture from the local System\r\nAdministrator. It usually boils down to these three things:\r\n\r\n #1) Respect the privacy of others.\r\n #2) Think before you type.\r\n #3) With great power comes great responsibility.\r\n\r\r\n"] [627.88598, "o", "[sudo] password for admin: "] [629.550878, "o", "\r\n"] [629.55232, "o", "sudo: a password is required\r\r\n"] [629.552987, "o", "\u001b[?2004h"] [629.553063, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [631.011598, "o", "f"] [631.122155, "o", "i"] [631.232625, "o", "le"] [631.34302, "o", " "] [631.453462, "o", "/"] [631.563924, "o", "s"] [631.683334, "o", "b"] [631.793844, "o", "i"] [631.904315, "o", "n"] [632.014884, "o", "/"] [632.156024, "o", "s"] [632.266611, "o", "h"] [632.37708, "o", "u"] [632.487661, "o", "t"] [632.598246, "o", "d"] [632.708722, "o", "ow"] [632.819323, "o", "n"] [632.929717, "o", "\r\n\u001b[?2004l\r"] [632.931573, "o", "/sbin/shutdown: symbolic link to /bin/systemctl\r\n"] [632.932317, "o", "\u001b[?2004h"] [632.932434, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [633.656123, "o", "l"] [633.809764, "o", "s"] [633.920325, "o", " "] [634.030934, "o", "-a"] [634.141416, "o", "l"] [634.251888, "o", "rt"] [636.17365, "o", " "] [636.284142, "o", "/"] [636.77619, "o", "s"] [636.981545, "o", "b"] [637.09211, "o", "i"] [637.2026, "o", "n"] [637.313202, "o", "/"] [637.438325, "o", "s"] [637.548823, "o", "h"] [637.659385, "o", "u"] [637.769885, "o", "t"] [637.880366, "o", "do"] [637.990714, "o", "w"] [638.101174, "o", "n"] [638.268027, "o", "\r\n\u001b[?2004l\r"] [638.270618, "o", "lrwxrwxrwx 1 root root 14 Jul 13 2021 \u001b[0m\u001b[01;36m/sbin/shutdown\u001b[0m -> \u001b[01;32m/bin/systemctl\u001b[0m\r\n"] [638.271246, "o", "\u001b[?2004h"] [638.271485, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [653.686848, "o", "s"] [653.797362, "o", "u"] [653.90782, "o", "do"] [654.018122, "o", " "] [654.637208, "o", "s"] [654.747657, "o", "h"] [654.858585, "o", "u"] [654.969144, "o", "t"] [655.080674, "o", "d"] [655.191025, "o", "ow"] [655.301357, "o", "n"] [655.429774, "o", " "] [656.729292, "o", "r"] [657.69054, "o", "\b\u001b[K"] [661.366745, "o", "r"] [661.477297, "o", "e"] [661.587999, "o", "s"] [661.698416, "o", "t"] [661.808987, "o", "a"] [661.919594, "o", "rt"] [662.030116, "o", " "] [662.140603, "o", "s"] [662.251107, "o", "s"] [662.361693, "o", "h"] [663.583257, "o", "d"] [663.814877, "o", "\r\n\u001b[?2004l\r"] [663.825084, "o", "Failed to parse time specification: restart\r\n"] [663.827251, "o", "\u001b[?2004h"] [663.82741, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [710.803706, "o", "s"] [710.914194, "o", "u"] [711.024683, "o", "d"] [711.135152, "o", "o "] [711.245594, "o", "s"] [711.35604, "o", "h"] [711.466496, "o", "u"] [711.577289, "o", "t"] [711.687807, "o", "d"] [711.798375, "o", "o"] [711.909102, "o", "wn"] [712.01965, "o", " "] [712.130582, "o", "-"] [712.241105, "o", "-"] [712.401242, "o", "s"] [712.511646, "o", "h"] [712.622119, "o", "ow"] [712.797374, "o", "\r\n\u001b[?2004l\r"] [712.807655, "o", "shutdown: unrecognized option '--show'\r\n"] [712.809929, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [714.999746, "o", "s"] [715.11048, "o", "h"] [715.221167, "o", "u"] [715.331639, "o", "t"] [715.468645, "o", "d"] [715.931382, "o", "u"] [716.267829, "o", "\b\u001b[K"] [716.378289, "o", "o"] [716.488676, "o", "wn"] [716.59908, "o", " "] [716.731473, "o", "-"] [717.178878, "o", "-"] [717.337841, "o", "h"] [717.448296, "o", "e"] [717.558613, "o", "l"] [717.668998, "o", "p"] [717.779347, "o", "\r\n\u001b[?2004l\r"] [717.782371, "o", "shutdown [OPTIONS...] [TIME] [WALL...]\r\n\r\n\u001b[0;1;39mShut down the system.\u001b[0m\r\n\r\nOptions:\r\n --help Show this help\r\n"] [717.782636, "o", " -H --halt Halt the machine\r\n -P --poweroff Power-off the machine\r\n -r --reboot Reboot the machine\r\n -h Equivalent to --poweroff, overridden by --halt\r\n -k Don't halt/power-off/reboot, just send warnings\r\n --no-wall Don't send wall message before halt/power-off/reboot\r\n -c Cancel a pending shutdown\r\n\r\nSee the \u001b]8;;man:shutdown(8)\u0007shutdown(8) man page\u001b]8;;\u0007 for details.\r\n"] [717.783602, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [756.119011, "o", "\u001b[7mecho /bin/sh > /tmp/poweroff\u001b[27m"] [757.067808, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\becho /bin/sh > /tmp/poweroff\r\n\u001b[?2004l\r"] [757.068215, "o", "\u001b[?2004h"] [757.068281, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [761.287516, "o", "\u001b[7mchmod +x /tmp/poweroff\u001b[27m\r\n\r\u001b[7mexport PATH=/tmp:$PATH\u001b[27m\r\n\r"] [762.096791, "o", "\u001b[A\u001b[A\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Cchmod +x /tmp/poweroff\r\n\rexport PATH=/tmp:$PATH\r\n\r\u001b[A\r\n\u001b[?2004l\r"] [762.099229, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [764.097538, "o", "t"] [764.208257, "o", "y"] [764.318722, "o", "p"] [764.429304, "o", "e"] [764.557996, "o", " "] [764.720167, "o", "p"] [764.901992, "o", "o"] [765.050754, "o", "w"] [765.161444, "o", "e"] [765.272009, "o", "r"] [765.382585, "o", "o"] [765.492979, "o", "f"] [765.603373, "o", "f"] [765.727381, "o", "\r\n\u001b[?2004l\r"] [765.727743, "o", "poweroff is /tmp/poweroff\r\n"] [765.727952, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [769.47823, "o", "\u001b[7msudo /usr/sbin/shutdown\u001b[27m"] [769.763146, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\bsudo /usr/sbin/shutdown\r\n\u001b[?2004l\r"] [769.776159, "o", "Shutdown scheduled for Tue 2025-01-14 18:55:02 UTC, use 'shutdown -c' to cancel.\r\n"] [769.777949, "o", "\u001b[?2004h"] [769.778179, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [772.704253, "o", "i"] [772.814693, "o", "d"] [772.952664, "o", "\r\n\u001b[?2004l\r"] [772.955439, "o", "uid=1000(admin) gid=1000(admin) groups=1000(admin),4(adm),20(dialout),24(cdrom),25(floppy),27(sudo),29(audio),30(dip),44(video),46(plugdev),109(netdev)\r\n"] [772.9565, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [773.516485, "o", "s"] [773.626958, "o", "h"] [773.740628, "o", "u"] [773.851074, "o", "t"] [773.961488, "o", "do"] [774.07213, "o", "w"] [774.18266, "o", "n "] [774.293396, "o", "-"] [774.426262, "o", "c"] [774.536648, "o", " "] [775.01604, "o", "\b\b\b\b\b\b\b\b\b\b\b\b"] [775.256262, "o", "\u001b[C\u001b[1@s\b"] [775.38009, "o", "\u001b[1@u"] [775.490478, "o", "\u001b[1@d"] [775.600905, "o", "\u001b[2@o "] [775.792739, "o", "\r\n\u001b[?2004l\r"] [775.807149, "o", "\u001b[?2004h"] [775.807498, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [778.596265, "o", "r"] [778.706797, "o", "m"] [778.81731, "o", " /"] [778.929245, "o", "t"] [779.039589, "o", "m"] [779.150022, "o", "p/"] [779.26037, "o", "p"] [779.370885, "o", "o"] [779.511198, "o", "weroff "] [780.008981, "o", "\r\n\u001b[?2004l\r"] [780.011472, "o", "\u001b[?2004h"] [780.011716, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [782.006346, "o", "e"] [782.116982, "o", "n"] [782.254385, "o", "v"] [785.104062, "o", "\b\b\b\u001b[K"] [785.254289, "o", "e"] [785.416105, "o", "c"] [785.526618, "o", "ho"] [785.64916, "o", " "] [785.759747, "o", "\""] [786.302048, "o", "$"] [786.496256, "o", "P"] [786.66779, "o", "A"] [786.778327, "o", "TH"] [786.892215, "o", "\""] [787.302163, "o", "\r\n\u001b[?2004l\r"] [787.302477, "o", "/tmp:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\r\n"] [787.302621, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [787.807829, "o", "e"] [787.945521, "o", "x"] [788.139207, "o", "p"] [788.273007, "o", "o"] [788.383437, "o", "r"] [788.494197, "o", "t "] [788.605065, "o", "P"] [788.715526, "o", "A"] [788.825832, "o", "T"] [788.936171, "o", "H"] [789.04668, "o", "="] [792.063617, "o", "\u001b[7m/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\u001b[27m"] [792.304462, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\r\n\u001b[?2004l\r"] [792.304815, "o", "\u001b[?2004h"] [792.30497, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [793.394009, "o", "e"] [793.506439, "o", "n"] [793.617078, "o", "v"] [793.738038, "o", " "] [794.218178, "o", "\b\b\b\b\u001b[K"] [794.600038, "o", "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"] [794.746111, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Ccho \"$PATH\"\u001b[K"] [794.915326, "o", "\r\n\u001b[?2004l\r"] [794.915655, "o", "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\r\n"] [794.915869, "o", "\u001b[?2004h"] [794.916117, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [795.921568, "o", "p"] [796.032017, "o", "s"] [796.142686, "o", " a"] [796.253446, "o", "w"] [796.364066, "o", "w"] [796.474827, "o", "w"] [796.638555, "o", "f"] [796.749163, "o", "u"] [796.86057, "o", "x"] [796.971134, "o", "\r\n"] [796.971378, "o", "\u001b[?2004l\r"] [796.979579, "o", "USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND\r\n"] [796.979716, "o", "root 2 0.0 0.0 0 0 ? S 18:39 0:00 [kthreadd]\r\nroot 3 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [rcu_gp]\r\nroot 4 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [rcu_par_gp]\r\nroot 6 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/0:0H-events_highpri]\r\nroot 8 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [mm_percpu_wq]\r\nroot 9 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [rcu_tasks_rude_]\r\nroot 10 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [rcu_tasks_trace]\r\nroot 11 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [ksoftirqd/0]\r\nroot 12 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [rcu_sched]\r\nroot 13 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [migration/0]\r\nroot 14 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/0:1-events]\r\n"] [796.979971, "o", "root 15 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [cpuhp/0]\r\n"] [796.980088, "o", "root 16 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [cpuhp/1]\r\nroot 17 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [migration/1]\r\nroot 18 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [ksoftirqd/1]\r\nroot 20 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/1:0H-events_highpri]\r\nroot 22 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kdevtmpfs]\r\nroot 23 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [netns]\r\nroot 24 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kauditd]\r\nroot 25 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [khungtaskd]\r\nroot 26 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [oom_reaper]\r\nroot 27 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [writeback]\r\nroot 28 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kcompactd0]\r\nroot 29 0.0 0.0 0 0 ? SN 18:39 0:00 \\_ [ksmd]\r\n"] [796.980219, "o", "root 48 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kintegrityd]\r\n"] [796.980468, "o", "root 49 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kblockd]\r\n"] [796.980596, "o", "root 50 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [blkcg_punt_bio]\r\nroot 51 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/1:1-cgroup_destroy]\r\nroot 52 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/0:1H-kblockd]\r\nroot 53 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [kswapd0]\r\nroot 54 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kthrotld]\r\nroot 55 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [acpi_thermal_pm]\r\nroot 56 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [nvme-wq]\r\nroot 57 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [nvme-reset-wq]\r\nroot 58 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [nvme-delete-wq]\r\nroot 59 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/u4:1-events_unbound]\r\nroot 60 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/u4:2-events_unbound]\r\n"] [796.980905, "o", "root 61 0.0 0.0 0 0 ? I 18:39 0:00 \\_ [kworker/u4:3-events_unbound]\r\nroot 62 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/1:1H-kblockd]\r\nroot 63 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [ipv6_addrconf]\r\n"] [796.981056, "o", "root 73 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kstrp]\r\nroot 78 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [kworker/u5:0]\r\nroot 114 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [ena]\r\nroot 132 0.0 0.0 0 0 ? S 18:39 0:00 \\_ [jbd2/nvme0n1p1-]\r\nroot 133 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [ext4-rsv-conver]\r\nroot 235 0.0 0.0 0 0 ? I< 18:39 0:00 \\_ [cryptd]\r\nroot 764 0.0 0.0 0 0 ? I 18:42 0:00 \\_ [kworker/u4:4-events_unbound]\r\nroot 942 0.0 0.0 0 0 ? I 18:47 0:00 \\_ [kworker/1:0-events]\r\nroot 1102 0.0 0.0 0 0 ? I 18:49 0:00 \\_ [kworker/0:0-events]\r\nroot 1260 0.0 0.0 0 0 ? I 18:53 0:00 \\_ [kworker/1:2-events]\r\nroot 1310 0.0 0.0 0 0 ? I 18:54 0:00 \\_ [kworker/u4:0-events_unbound]\r\n"] [796.981383, "o", "root 1 0.2 2.1 98152 9928 ? Ss 18:39 0:02 /sbin/init\r\nroot 195 0.0 2.7 64788 12832 ? Ss 18:39 0:00 /lib/systemd/systemd-journald\r\n"] [796.981524, "o", "root 212 0.0 1.0 19464 5088 ? Ss 18:39 0:00 /lib/systemd/systemd-udevd\r\nroot 388 0.0 1.2 99884 5620 ? Ssl 18:40 0:00 /sbin/dhclient -4 -v -i -pf /run/dhclient.ens5.pid -lf /var/lib/dhcp/dhclient.ens5.leases -I -df /var/lib/dhcp/dhclient6.ens5.leases ens5\r\nroot 463 0.0 1.2 99884 5876 ? Ssl 18:40 0:00 /sbin/dhclient -6 -v -pf /run/dhclient6.ens5.pid -lf /var/lib/dhcp/dhclient6.ens5.leases -I -df /var/lib/dhcp/dhclient.ens5.leases -nw ens5\r\nadmin 558 0.2 2.4 1304716 11532 ? S \u001b[40;33;01m/dev/null\u001b[0m\r\nlrwx------ 1 admin admin 64 Jan 14 18:41 \u001b[40;31;01m1\u001b[0m -> \u001b[40;31;01m'socket:[10579]'\u001b[0m\r\nlrwx------ 1 admin admin 64 Jan 14 18:41 \u001b[40;31;01m2\u001b[0m -> \u001b[40;31;01m'socket:[10579]'\u001b[0m\r\nl-wx------ 1 admin admin 64 Jan 14 18:41 \u001b[01;36m3\u001b[0m -> /home/admin/agent/sadagent.txt\r\nlrwx------ 1 admin admin 64 Jan 14 18:41 \u001b[40;31;01m4\u001b[0m -> \u001b[40;31;01m'anon_inode:[eventpoll]'\u001b[0m\r\nlr-x------ 1 admin admin 64 Jan 14 18:41 \u001b[40;31;01m5\u001b[0m -> \u001b[40;31;01m'pipe:[10624]'\u001b[0m\r\nl-wx------ 1 admin admin 64 Jan 14 18:41 \u001b[40;31;01m6\u001b[0m -> \u001b[40;31;01m'pipe:[10624]'\u001b[0m\r\nlrwx------ 1 admin admin 64 Jan 14 18:41 \u001b[40;31;01m7\u001b[0m -> \u001b[40;31;01m'socket:[10640]'\u001b[0m\r\n"] [842.745726, "o", "\u001b[?2004h"] [842.745894, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [852.916995, "o", "f"] [853.027495, "o", "i"] [853.137949, "o", "l"] [853.248399, "o", "e "] [853.378136, "o", "\u001b[7m/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\u001b[27m"] [853.513669, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\r\n\u001b[?2004l\r"] [853.515533, "o", "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin: cannot open `/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin' (No such file or directory)\r\n"] [853.516281, "o", "\u001b[?2004h"] [853.516396, "o", "\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [859.30135, "o", "f"] [859.411801, "o", "i"] [859.522336, "o", "le"] [859.63282, "o", " "] [859.767527, "o", "\u001b[7m/home/admin/agent/sadagent.txt\u001b[27m"] [859.949717, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b/home/admin/agent/sadagent.txt\r\n\u001b[?2004l\r"] [859.951568, "o", "/home/admin/agent/sadagent.txt: empty\r\n"] [859.952104, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [861.309398, "o", "l"] [861.463475, "o", "s"] [861.573852, "o", " "] [861.684379, "o", "-a"] [861.807043, "o", "l"] [861.917547, "o", "r"] [862.028075, "o", "t"] [862.306483, "o", "\r\n\u001b[?2004l\r"] [862.309172, "o", "total 48\r\n"] [862.309491, "o", "-rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile\r\n-rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc\r\n-rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout\r\ndrwxr-xr-x 3 root root 4096 Sep 17 2023 \u001b[0m\u001b[01;34m..\u001b[0m\r\ndrwx------ 2 admin admin 4096 Sep 17 2023 \u001b[01;34m.ssh\u001b[0m\r\ndrwx------ 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.ansible\u001b[0m\r\ndrwxr-xr-x 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.config\u001b[0m\r\n-rwxrwx--- 1 root root 360 Sep 24 2023 \u001b[01;32mwebserver.py\u001b[0m"] [862.309619, "o", "\r\ndrwxr-xr-x 2 admin root 4096 Sep 24 2023 \u001b[01;34magent\u001b[0m\r\n-rw-r--r-- 1 admin admin 29 Jan 14 18:50 foo\r\ndrwxr-xr-x 6 admin admin 4096 Jan 14 18:50 \u001b[01;34m.\u001b[0m\r\n-rw------- 1 admin admin 3300 Jan 14 18:55 .bash_history\r\n"] [862.310299, "o", "\u001b[?2004h\u001b]0;admin@i-0f16098192d754ea1: ~\u0007\u001b[01;32madmin@i-0f16098192d754ea1\u001b[00m:\u001b[01;34m~\u001b[00m$ "]