{"version": 2, "width": 91, "height": 22, "timestamp": 1741440981, "idle_time_limit": 2.0, "env": {"SHELL": "/bin/bash", "TERM": "xterm-256color"}, "title": "paris/i-00c8d7508d4dbeee3"} [0.01872, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [0.71209, "o", "\r\n\u001b[?2004l\r"] [0.712373, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [0.881486, "o", "\r\n"] [0.881599, "o", "\u001b[?2004l\r"] [0.88168, "o", "\u001b[?2004h"] [0.881858, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [1.308137, "o", "l"] [1.433324, "o", "s"] [1.595559, "o", "\r\n\u001b[?2004l\r"] [1.597643, "o", "\u001b[0m\u001b[01;34magent\u001b[0m \u001b[01;32mwebserver.py\u001b[0m\r\n"] [1.598156, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [6.617168, "o", "c"] [6.686054, "o", "u"] [6.830851, "o", "r"] [6.933549, "o", "l"] [7.020982, "o", " "] [10.634854, "o", "\u001b[7mlocalhost:5000\u001b[27m"] [11.1878, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\blocalhost:5000\r\n\u001b[?2004l\r"] [11.200036, "o", "Unauthorized"] [11.200553, "o", "\u001b[?2004h"] [11.200605, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [12.827522, "o", "curl localhost:5000"] [14.84062, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[K"] [16.599972, "o", "curl localhost:5000"] [17.566503, "o", "/"] [17.966527, "o", "a"] [18.090462, "o", "d"] [18.18451, "o", "m"] [18.38834, "o", "i"] [18.60522, "o", "n"] [18.869726, "o", "\r\n\u001b[?2004l\r"] [18.88181, "o", "\r\n\r\n
The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.
\r\n"] [18.882251, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [20.348653, "o", "curl localhost:5000/admin"] [20.693073, "o", "\b\u001b[K"] [20.838934, "o", "\b\u001b[K"] [20.99232, "o", "\b\u001b[K"] [21.155522, "o", "\b\u001b[K"] [21.393105, "o", "\b\u001b[K"] [21.661126, "o", "."] [21.683343, "o", "l"] [21.907299, "o", "o"] [21.983186, "o", "g"] [22.409795, "o", "\b\u001b[K"] [22.569216, "o", "\b\u001b[K"] [22.749164, "o", "\b\u001b[K"] [22.971883, "o", "\b\u001b[K"] [23.257196, "o", "l"] [23.433316, "o", "o"] [23.69042, "o", "g"] [23.921904, "o", "i"] [24.078954, "o", "n"] [24.329128, "o", "\r\n\u001b[?2004l\r"] [24.341088, "o", "\r\n\r\nThe requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.
\r\n"] [24.341397, "o", "\u001b[?2004h"] [24.341641, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [26.309972, "o", "curl localhost:5000/login"] [26.689446, "o", "\b\u001b[K"] [26.880302, "o", "\b\u001b[K"] [27.037561, "o", "\b\u001b[K"] [27.217474, "o", "\b\u001b[K"] [27.445627, "o", "\b\u001b[K"] [30.291574, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [30.723975, "o", "\u001b[C"] [30.956928, "o", "\u001b[C"] [31.160986, "o", "\u001b[C"] [31.367381, "o", "\u001b[C"] [31.66777, "o", "\u001b[C localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [31.81762, "o", "- localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [32.133289, "o", "u localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [32.643927, "o", "\u001b[C localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [33.808743, "o", "a localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [33.912908, "o", "d localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [33.999209, "o", "m localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [34.162965, "o", "i localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [34.361793, "o", "n localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [34.657564, "o", "\r\n"] [34.657664, "o", "\u001b[?2004l\r"] [34.666399, "o", "Enter host password for user 'admin':"] [39.412969, "o", "\r\n"] [39.415679, "o", "Unauthorized"] [39.417614, "o", "\u001b[?2004h"] [39.417802, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [40.703748, "o", "\u001b[H\u001b[2J\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [41.345287, "o", "curl -u admin localhost:5000/"] [41.992083, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [42.188565, "o", "\u001b[C"] [42.686189, "o", "\u001b[C"] [42.719316, "o", "\u001b[C"] [42.752869, "o", "\u001b[C"] [42.805738, "o", "\u001b[C"] [42.823249, "o", "\u001b[C"] [42.858833, "o", "\u001b[C"] [42.888982, "o", "\u001b[C"] [42.923184, "o", "\u001b[C"] [42.964689, "o", "\u001b[C"] [43.224693, "o", "\u001b[C"] [43.413314, "o", "\u001b[C"] [43.614175, "o", "\u001b[C"] [43.935718, "o", ": localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [45.374357, "o", "p localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [45.441818, "o", "a localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [45.701487, "o", "s localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [46.012932, "o", "s localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [46.357646, "o", "w localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [46.487604, "o", "o localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [46.636669, "o", "r localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [46.799732, "o", "d localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [46.906113, "o", "\r\n\u001b[?2004l\r"] [46.917064, "o", "Unauthorized"] [46.918648, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [50.054801, "o", "l"] [50.494084, "o", "\b\u001b[K"] [50.844596, "o", "l"] [50.934289, "o", "s"] [51.052759, "o", " "] [51.147304, "o", "-"] [51.312813, "o", "l"] [51.450733, "o", " "] [51.72916, "o", "w"] [51.94928, "o", "ebserver.py "] [52.46778, "o", "\r\n"] [52.467888, "o", "\u001b[?2004l\r"] [52.470201, "o", "-rwxrwx--- 1 root root 360 Sep 24 2023 \u001b[0m\u001b[01;32mwebserver.py\u001b[0m\r\n"] [52.47096, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [53.801089, "o", "c"] [53.916276, "o", "a"] [54.073011, "o", "t"] [54.170876, "o", " "] [54.346914, "o", "w"] [54.498155, "o", "ebserver.py "] [54.819539, "o", "\r\n\u001b[?2004l\r"] [54.820846, "o", "cat: webserver.py"] [54.821003, "o", ": Permission denied\r\n"] [54.821436, "o", "\u001b[?2004h"] [54.821587, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [56.825407, "o", ";l"] [56.869003, "o", "s"] [56.999889, "o", " "] [57.16418, "o", "\b\u001b[K"] [57.330258, "o", "\b\u001b[K"] [57.487977, "o", "\b\u001b[K"] [57.671993, "o", "\b\u001b[K"] [58.054156, "o", "\u0007"] [58.31197, "o", "t"] [58.89071, "o", "\b\u001b[K"] [59.376314, "o", "l"] [59.75882, "o", "e"] [59.970012, "o", "s"] [60.093036, "o", "s"] [60.239867, "o", " "] [60.334107, "o", "l"] [60.404829, "o", "e"] [60.572424, "o", "\u0007"] [60.896525, "o", "\b\u001b[K"] [61.051045, "o", "\b\u001b[K"] [61.106926, "o", "w"] [61.159551, "o", "ebserver.py "] [61.421996, "o", "\r\n"] [61.422162, "o", "\u001b[?2004l\r"] [61.425733, "o", "webserver.py: Permission denied\r\n"] [61.426419, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [62.350717, "o", "less webserver.py "] [62.718841, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [62.94046, "o", "\u001b[1@s"] [63.160281, "o", "\u001b[1@d"] [63.508507, "o", "\b\u001b[1P"] [63.729205, "o", "\u001b[1@u"] [63.793191, "o", "\u001b[1@d"] [63.93408, "o", "\u001b[1@o"] [64.059889, "o", "\u001b[1@ "] [64.249073, "o", "\r\n\u001b[?2004l\r"] [64.276382, "o", "\r\nWe trust you have received the usual lecture from the local System\r\nAdministrator. It usually boils down to these three things:\r\n\r\n #1) Respect the privacy of others.\r\n #2) Think before you type.\r\n #3) With great power comes great responsibility.\r\n\r\r\n"] [64.276639, "o", "[sudo] password for admin: "] [66.052117, "o", "\r\n"] [66.052898, "o", "sudo: a password is required\r\r\n"] [66.054492, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [67.931388, "o", "l"] [68.010578, "o", "s"] [68.185256, "o", "\r\n\u001b[?2004l\r"] [68.18734, "o", "\u001b[0m\u001b[01;34magent\u001b[0m \u001b[01;32mwebserver.py\u001b[0m\r\n"] [68.187871, "o", "\u001b[?2004h"] [68.187955, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [75.733494, "o", "s"] [75.887081, "o", "u"] [75.99234, "o", "d"] [76.104428, "o", "o"] [76.225927, "o", " "] [76.301251, "o", "s"] [76.404306, "o", "u"] [76.701599, "o", "\r\n\u001b[?2004l\r"] [76.708398, "o", "\r\nWe trust you have received the usual lecture from the local System\r\nAdministrator. It usually boils down to these three things:\r\n\r\n #1) Respect the privacy of others.\r\n"] [76.708681, "o", " #2) Think before you type.\r\n #3) With great power comes great responsibility.\r\n\r\r\n[sudo] password for admin: "] [77.365916, "o", "\r\n"] [77.366606, "o", "sudo: a password is required\r\r\n"] [77.36821, "o", "\u001b[?2004h"] [77.368358, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [85.913543, "o", "\u001b[H\u001b[2J\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [86.596752, "o", "sudo su"] [86.777412, "o", "\b\b\b\b\b\b\bls\u001b[K"] [87.31057, "o", "\b\bsudo less webserver.py "] [88.073871, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[5P\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [88.401009, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[1Pcat\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [88.677148, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[2@ls -l\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [89.098541, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\bcurl -u admin:password localhost:5000/"] [90.931221, "o", "\r\n\u001b[?2004l\r"] [90.942967, "o", "Unauthorized"] [90.944689, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [92.679709, "o", "c"] [92.80158, "o", "d"] [92.954457, "o", " "] [93.071824, "o", "/"] [93.620704, "o", "\b\u001b[K"] [93.786951, "o", "\b\u001b[K"] [93.934008, "o", "\b\u001b[K"] [94.0833, "o", "\b\u001b[K"] [94.28561, "o", "l"] [94.335213, "o", "s"] [94.449784, "o", " "] [94.53358, "o", "/"] [94.653931, "o", "v"] [94.797975, "o", "a"] [95.009418, "o", "r/"] [95.369304, "o", "\u0007"] [95.525313, "o", "\r\n"] [95.525627, "o", "backups/ lib/ lock/ mail/ run/ tmp/ \r\ncache/ local/ log/ opt/ spool/ \r\n\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ ls /var/"] [96.110765, "o", "w"] [96.252022, "o", "\u0007"] [96.422105, "o", "\u0007"] [96.592642, "o", "\u0007"] [96.80154, "o", "\u0007"] [97.056636, "o", "w"] [97.265153, "o", "\u0007"] [97.42107, "o", "\u0007"] [97.656695, "o", "\u0007"] [97.929621, "o", "\b\u001b[K"] [98.113963, "o", "\b\u001b[K"] [98.362777, "o", "\b\u001b[K"] [99.228443, "o", "^C\u001b[?2004l\r"] [99.228784, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [99.228992, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [99.382054, "o", "c"] [99.469721, "o", "a"] [99.637633, "o", "t"] [99.656702, "o", " "] [99.789725, "o", "/"] [99.965747, "o", "\u0007"] [100.466581, "o", "e"] [101.680459, "o", "^C\u001b[?2004l\r"] [101.680828, "o", "\u001b[?2004h\u001b[?2004l\r\r\n\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [102.049395, "o", "k"] [102.152541, "o", "s"] [102.227916, "o", " "] [102.320575, "o", "0"] [102.702278, "o", "\b\u001b[K"] [102.898093, "o", "^C\u001b[?2004l\r"] [102.898292, "o", "\u001b[?2004h\u001b[?2004l\r"] [102.89854, "o", "\r\n"] [102.898866, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [102.993723, "o", "l"] [103.154098, "o", "s"] [103.248704, "o", " "] [103.55534, "o", "-"] [103.734187, "o", "l"] [103.881825, "o", "a"] [103.993227, "o", "\r\n\u001b[?2004l\r"] [103.995986, "o", "total 44\r\n"] [103.99619, "o", "drwxr-xr-x 6 admin admin 4096 Sep 24 2023 \u001b[0m\u001b[01;34m.\u001b[0m\r\ndrwxr-xr-x 3 root root 4096 Sep 17 2023 \u001b[01;34m..\u001b[0m\r\n"] [103.996493, "o", "drwx------ 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.ansible\u001b[0m\r\n"] [103.996667, "o", "-rw------- 1 admin admin 488 Mar 8 13:37 .bash_history\r\n"] [103.996893, "o", "-rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout\r\n-rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc"] [103.99698, "o", "\r\ndrwxr-xr-x 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.config\u001b[0m"] [103.997185, "o", "\r\n-rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile\r\ndrwx------ 2 admin admin 4096 Sep 17 2023 \u001b[01;34m.ssh\u001b[0m\r\n"] [103.997272, "o", "drwxr-xr-x 2 admin root 4096 Sep 24 2023 \u001b[01;34magent\u001b[0m"] [103.997478, "o", "\r\n-rwxrwx--- 1 root root 360 Sep 24 2023 \u001b[01;32mwebserver.py\u001b[0m\r\n"] [103.998227, "o", "\u001b[?2004h"] [103.99838, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [110.209903, "o", "c"] [110.307068, "o", "a"] [110.497575, "o", "t"] [110.85231, "o", " "] [110.966496, "o", "."] [111.223158, "o", "p"] [111.329658, "o", "r"] [111.438181, "o", "o"] [111.456607, "o", "file "] [111.746575, "o", "\r\n\u001b[?2004l\r"] [111.749344, "o", "# ~/.profile: executed by the command interpreter for login shells.\r\n# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login\r\n# exists.\r\n"] [111.74963, "o", "# see /usr/share/doc/bash/examples/startup-files for examples.\r\n# the files are located in the bash-doc package.\r\n\r\n# the default umask is set in /etc/profile; for setting the umask\r\n# for ssh logins, install and configure the libpam-umask package.\r\n#umask 022\r\n\r\n# if running bash\r\nif [ -n \"$BASH_VERSION\" ]; then\r\n # include .bashrc if it exists\r\n if [ -f \"$HOME/.bashrc\" ]; then\r\n\t. \"$HOME/.bashrc\"\r\n fi\r\nfi\r\n\r\n# set PATH so it includes user's private bin if it exists\r\nif [ -d \"$HOME/bin\" ] ; then\r\n PATH=\"$HOME/bin:$PATH\"\r\nfi\r\n\r\n# set PATH so it includes user's private bin if it exists\r\nif [ -d \"$HOME/.local/bin\" ] ; then\r\n PATH=\"$HOME/.local/bin:$PATH\"\r\nfi\r\n"] [111.750107, "o", "\u001b[?2004h"] [111.750275, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [113.591664, "o", "\u001b[H\u001b[2J\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [114.258865, "o", "\u0007"] [114.506174, "o", "cat .profile "] [114.773341, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[7Pls -la"] [115.351575, "o", "\b\b\b\b\b\bcurl -u admin:password localhost:5000/"] [116.777081, "o", "\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[Csudo su\u001b[K"] [117.069444, "o", "\b\b\b\b\b\b\bls\u001b[K"] [117.625299, "o", "\b\bsudo less webserver.py "] [117.906639, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[5P\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [118.264827, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[1Pcat\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [118.721717, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[1@less\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [119.598416, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[1Pcat\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [120.154879, "o", "\r\n\u001b[?2004l\r"] [120.156226, "o", "cat: webserver.py"] [120.156438, "o", ": Permission denied\r\n"] [120.156743, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [122.792567, "o", "l"] [122.942785, "o", "s"] [122.998205, "o", " "] [123.097939, "o", "="] [123.333274, "o", "l"] [123.722647, "o", "\b\u001b[K"] [123.855513, "o", "\b\u001b[K"] [124.030248, "o", "-"] [124.235017, "o", "l"] [124.451543, "o", "\r\n\u001b[?2004l\r"] [124.454088, "o", "total 8\r\n"] [124.454461, "o", "drwxr-xr-x 2 admin root 4096 Sep 24 2023 \u001b[0m\u001b[01;34magent\u001b[0m\r\n-rwxrwx--- 1 root root 360 Sep 24 2023 \u001b[01;32mwebserver.py\u001b[0m\r\n"] [124.454743, "o", "\u001b[?2004h"] [124.454788, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [125.152904, "o", "c"] [125.2615, "o", "p"] [125.442405, "o", " "] [125.634534, "o", "w"] [125.877131, "o", "ebserver.py "] [127.929427, "o", "w"] [128.137474, "o", "ebserver.py "] [129.178523, "o", "\b\u001b[K"] [130.302299, "o", "1"] [130.600377, "o", "\b\u001b[K"] [131.074083, "o", "\b"] [131.269392, "o", "\b"] [131.44181, "o", "\b"] [131.809943, "o", "1.py\b\b\b"] [131.93398, "o", "\r\n\u001b[?2004l\r"] [131.937514, "o", "cp: cannot open 'webserver.py' for reading"] [131.937712, "o", ": Permission denied\r\n"] [131.938596, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [133.702161, "o", "cp webserver.py webserver1.py"] [134.322234, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [134.526157, "o", "\u001b[C"] [135.161688, "o", "\u001b[C"] [138.528873, "o", "^C\u001b[?2004l\r"] [138.529038, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [138.529159, "o", "\u001b[?2004h"] [138.529265, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [138.642664, "o", "l"] [138.802728, "o", "s"] [138.887765, "o", "\r\n\u001b[?2004l\r"] [138.889907, "o", "\u001b[0m\u001b[01;34magent\u001b[0m \u001b[01;32mwebserver.py\u001b[0m\r\n"] [138.890708, "o", "\u001b[?2004h"] [138.89095, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [140.17072, "o", "c"] [140.34198, "o", "h"] [140.372105, "o", "m"] [140.60952, "o", "o"] [140.692331, "o", "w"] [140.842334, "o", "\u0007"] [141.524382, "o", "\b\u001b[K"] [141.695888, "o", "\b\u001b[K"] [141.89823, "o", "\b\u001b[K"] [142.059523, "o", "o"] [142.135987, "o", "w"] [142.23938, "o", "n "] [142.792961, "o", "u"] [142.863692, "o", "s"] [143.051547, "o", "e"] [143.194232, "o", "r"] [143.561391, "o", ":"] [144.05035, "o", "\b\u001b[K"] [144.217808, "o", "\b\u001b[K"] [144.366182, "o", "\b\u001b[K"] [144.532923, "o", "\b\u001b[K"] [145.332357, "o", "\b\u001b[K"] [145.458212, "o", "a"] [145.530744, "o", "d"] [145.648598, "o", "m"] [145.868888, "o", "i"] [146.030015, "o", "n"] [146.148859, "o", " "] [150.29966, "o", "w"] [150.391298, "o", "ebserver.py "] [151.04994, "o", "\r\n\u001b[?2004l\r"] [151.052004, "o", "chown: changing ownership of 'webserver.py'"] [151.05229, "o", ": Operation not permitted\r\n"] [151.052653, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [155.369467, "o", "l"] [155.441393, "o", "s"] [155.542066, "o", " "] [155.609791, "o", "-"] [155.787529, "o", "l"] [155.938057, "o", "s"] [156.27589, "o", "\b\u001b[K"] [156.321321, "o", "d"] [156.470352, "o", "\r\n\u001b[?2004l\r"] [156.472854, "o", "drwxr-xr-x 6 admin admin 4096 Sep 24 2023 \u001b[0m\u001b[01;34m.\u001b[0m\r\n"] [156.473434, "o", "\u001b[?2004h"] [156.473488, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [163.122647, "o", "ls -ld"] [164.741709, "o", "\b\b\b\b\b\bchown admin webserver.py "] [166.184258, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [167.527028, "o", "ls -ld\u001b[K"] [168.673959, "o", "^C\u001b[?2004l\r"] [168.674251, "o", "\u001b[?2004h\u001b[?2004l\r\r\n\u001b[?2004h"] [168.674453, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [171.471277, "o", "c"] [171.60177, "o", "p"] [171.753961, "o", "r"] [171.897363, "o", " "] [172.085394, "o", "\b\u001b[K"] [172.251751, "o", "\b\u001b[K"] [172.35753, "o", " "] [172.453802, "o", "-"] [172.549999, "o", "r"] [172.678066, "o", " "] [174.018974, "o", "\b\u001b[K"] [174.170566, "o", "\b\u001b[K"] [174.345146, "o", "\b\u001b[K"] [175.670784, "o", "-"] [175.785545, "o", "a"] [175.891526, "o", " "] [176.582949, "o", "\b\u001b[K"] [176.733477, "o", "\b\u001b[K"] [177.073512, "o", "\b\u001b[K"] [177.250792, "o", "w"] [177.410646, "o", "ebserver.py "] [184.52632, "o", "w"] [184.685912, "o", "e"] [184.88572, "o", "bserver.py "] [186.26196, "o", "\b\u001b[K"] [186.43831, "o", "2"] [186.818556, "o", "\r\n"] [186.81885, "o", "\u001b[?2004l\r"] [186.820949, "o", "cp: cannot open 'webserver.py' for reading: Permission denied\r\n"] [186.821736, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [190.144693, "o", "m"] [190.428324, "o", "k"] [190.543785, "o", "d"] [190.657337, "o", "i"] [190.853588, "o", " "] [191.157341, "o", "\b\u001b[K"] [191.255664, "o", "r"] [191.360856, "o", " "] [191.453863, "o", "t"] [191.512199, "o", "e"] [191.685915, "o", "s"] [191.737092, "o", "t"] [191.918766, "o", "\r\n\u001b[?2004l\r"] [191.921445, "o", "\u001b[?2004h"] [191.921604, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [192.884381, "o", "c"] [192.970808, "o", "p"] [193.130436, "o", " "] [193.26484, "o", "w"] [193.396772, "o", "ebserver.py "] [194.235926, "o", "t"] [194.307766, "o", "e"] [194.489405, "o", "s"] [194.573369, "o", "t"] [194.721112, "o", "\r\n\u001b[?2004l\r"] [194.723436, "o", "cp: "] [194.723625, "o", "cannot open 'webserver.py' for reading: Permission denied\r\n"] [194.724377, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [198.502, "o", "\u001b[H\u001b[2J\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [199.876397, "o", "\r(reverse-i-search)`': \u001b[K"] [200.130208, "o", "\b\b\bc': \u001b[7mc\u001b[27mp webserver.py test\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [200.19768, "o", "\b\b\bu': \u001b[7mcu\u001b[27mrl -u admin:password localhost:5000/\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [200.372055, "o", "\b\b\b\u001b[1@r': \u001b[7mcur\u001b[27m\b\b\b"] [200.520265, "o", "\b\b\b\u001b[1@l': \u001b[7mcurl\u001b[27m\b\b\b\b"] [201.705749, "o", "\r\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ curl -u admin:password localhost:5000/\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [202.399951, "o", "\b"] [202.896588, "o", "\b"] [202.928697, "o", "\b"] [202.953564, "o", "\b"] [202.995738, "o", "\b"] [203.017473, "o", "\b"] [203.057768, "o", "\b"] [203.101472, "o", "\b"] [203.120256, "o", "\b"] [203.154478, "o", "\b"] [203.186061, "o", "\b"] [203.219244, "o", "\b"] [203.251952, "o", "\b"] [203.285328, "o", "\b"] [203.333623, "o", "\b"] [203.35396, "o", "\b"] [203.387708, "o", "\b"] [203.418678, "o", "\b"] [203.456004, "o", "\b"] [203.485592, "o", "\b"] [203.739639, "o", "\u001b[C"] [203.974626, "o", "\u001b[C"] [204.137304, "o", "\u001b[C"] [204.337719, "o", "\u001b[C"] [204.735053, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.234739, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.266896, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.317136, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.336062, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.368392, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.415648, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.439487, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.473658, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.506818, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.537768, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.56777, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.598328, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [205.774303, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [206.262011, "o", "r localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [206.403696, "o", "o localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [206.559224, "o", "o localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [206.645563, "o", "t localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [206.838058, "o", "\r\n"] [206.838371, "o", "\u001b[?2004l\r"] [206.847141, "o", "Enter host password for user 'root':"] [212.642097, "o", "\r\n"] [212.645085, "o", "Unauthorized"] [212.646561, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [222.600441, "o", "s"] [222.706061, "o", "d"] [222.876558, "o", "ad"] [223.122623, "o", "\b\u001b[K"] [223.266551, "o", "\b\u001b[K"] [223.42675, "o", "\b\u001b[K"] [223.574806, "o", "\b\u001b[K"] [223.86677, "o", "."] [224.094051, "o", "."] [224.370235, "o", "/"] [224.677643, "o", "\b\u001b[K"] [224.79745, "o", "\b\u001b[K"] [225.009743, "o", "/"] [225.103877, "o", "w"] [225.202296, "o", "\u0007"] [226.03259, "o", "e"] [226.170569, "o", "\u0007"] [226.357037, "o", "\u0007"] [226.725806, "o", "^C\u001b[?2004l\r"] [226.72588, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [226.726147, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [226.936095, "o", "l"] [227.196493, "o", "s"] [227.37693, "o", "\r\n\u001b[?2004l\r"] [227.379117, "o", "\u001b[0m\u001b[01;34magent\u001b[0m \u001b[01;34mtest\u001b[0m \u001b[01;32mwebserver.py\u001b[0m\r\n"] [227.379678, "o", "\u001b[?2004h"] [227.379866, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [227.658323, "o", "p"] [227.749681, "o", "y"] [227.91975, "o", "t"] [227.977768, "o", "h"] [228.117891, "o", "\u0007on3"] [228.301486, "o", " "] [228.541747, "o", "w"] [228.790857, "o", "ebserver.py "] [230.178365, "o", "-"] [230.292263, "o", "-"] [230.692641, "o", "\b\u001b[K"] [231.120182, "o", "-"] [231.241717, "o", "h"] [231.325951, "o", "e"] [231.390527, "o", "l"] [231.585819, "o", "p"] [231.809503, "o", "\r\n\u001b[?2004l\r"] [231.823585, "o", "python3: can't open file '/home/admin/webserver.py': [Errno 13] Permission denied\r\n"] [231.826366, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [233.094767, "o", "python3 webserver.py --help"] [233.626209, "o", "\b\u001b[K"] [234.135602, "o", "\b\u001b[K"] [234.165732, "o", "\b\u001b[K"] [234.188673, "o", "\b\u001b[K"] [234.222059, "o", "\b\u001b[K"] [234.414154, "o", "\b\u001b[K"] [234.833328, "o", "\r\n\u001b[?2004l\r"] [234.847355, "o", "python3: can't open file '/home/admin/webserver.py': [Errno 13] Permission denied\r\n"] [234.850113, "o", "\u001b[?2004h"] [234.85028, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [237.81247, "o", "l"] [237.937452, "o", "s"] [238.082525, "o", "\r\n\u001b[?2004l\r"] [238.084726, "o", "\u001b[0m\u001b[01;34magent\u001b[0m \u001b[01;34mtest\u001b[0m \u001b[01;32mwebserver.py\u001b[0m\r\n"] [238.085487, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [242.543698, "o", "."] [242.76051, "o", "/"] [242.890885, "o", "w"] [243.1143, "o", "e"] [243.262804, "o", "\u0007"] [243.602133, "o", "b"] [243.873919, "o", "s"] [244.054404, "o", "e"] [244.218456, "o", "r"] [244.30773, "o", "v"] [244.439142, "o", "e"] [244.638289, "o", "r"] [244.761454, "o", "."] [245.054792, "o", "p"] [245.10882, "o", "h"] [245.370822, "o", "\r\n"] [245.371152, "o", "\u001b[?2004l\r"] [245.371786, "o", "bash: ./webserver.ph: No such file or directory\r\n"] [245.372533, "o", "\u001b[?2004h"] [245.372631, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [245.867546, "o", "./webserver.ph"] [246.130441, "o", "\b\u001b[K"] [246.227621, "o", "y"] [246.445563, "o", "\r\n\u001b[?2004l\r"] [246.446445, "o", "bash: ./webserver.py: Permission denied\r\n"] [246.447189, "o", "\u001b[?2004h"] [246.447367, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [258.093688, "o", "\u001b[H\u001b[2J\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [259.523032, "o", "\r(reverse-i-search)`': \u001b[K"] [259.785809, "o", "\b\b\bc': curl -u root lo\u001b[7mc\u001b[27malhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b"] [259.991875, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\bu': \u001b[7mcu\u001b[27mrl -u root localhost:5000/\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [260.011994, "o", "\b\b\b\u001b[1@r': \u001b[7mcur\u001b[27m\b\b\b"] [260.30664, "o", "\b\b\b\u001b[1@l': \u001b[7mcurl\u001b[27m\b\b\b\b"] [261.917952, "o", "\r\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ curl -u root localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [262.326825, "o", "\u001b[C"] [262.821537, "o", "\u001b[C"] [262.839843, "o", "\u001b[C"] [262.874727, "o", "\u001b[C"] [262.906444, "o", "\u001b[C"] [262.941504, "o", "\u001b[C"] [262.974833, "o", "\u001b[C"] [263.006074, "o", "\u001b[C"] [263.050111, "o", "\u001b[C"] [263.0724, "o", "\u001b[C"] [263.10682, "o", "\u001b[C"] [263.150809, "o", "\u001b[C"] [263.470674, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [263.628393, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [263.793286, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [263.968016, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [264.118881, "o", "\u001b[1Plocalhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [264.298269, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [264.439845, "o", "\b\u001b[1P localhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [264.605692, "o", "\u001b[1Plocalhost:5000/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [264.87962, "o", "\r\n"] [264.87984, "o", "\u001b[?2004l\r"] [264.891151, "o", "Unauthorized"] [264.892817, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [273.510317, "o", "curl localhost:5000/"] [275.006685, "o", "s"] [275.207509, "o", "e"] [275.436603, "o", "c"] [275.607671, "o", "r"] [275.826969, "o", "e"] [275.955987, "o", "t"] [276.077581, "o", "\r\n\u001b[?2004l\r"] [276.089806, "o", "\r\n\r\nThe requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.
\r\n"] [276.090198, "o", "\u001b[?2004h"] [276.090374, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [280.086814, "o", "curl localhost:5000/secret"] [280.521971, "o", "\b\u001b[K"] [280.669948, "o", "\b\u001b[K"] [280.834415, "o", "\b\u001b[K"] [281.017838, "o", "\b\u001b[K"] [281.222687, "o", "\b\u001b[K"] [281.462613, "o", "\b\u001b[K"] [282.12172, "o", "\b\u001b[K"] [283.250587, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [283.413914, "o", "\u001b[C"] [283.925463, "o", "\u001b[C"] [283.95225, "o", "\u001b[C"] [283.992651, "o", "\u001b[C"] [284.015043, "o", "\u001b[C"] [284.065961, "o", "\u001b[C"] [284.079906, "o", "\u001b[C"] [284.268315, "o", "\u001b[C"] [284.568477, "o", "\b"] [284.772688, "o", "\b"] [284.944838, "o", "\b"] [287.230105, "o", "^C\u001b[?2004l\r"] [287.230168, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [287.230472, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [287.451639, "o", "n"] [287.735622, "o", "c"] [287.892375, "o", " "] [288.202228, "o", "-"] [288.499044, "o", "z"] [288.649668, "o", "z"] [288.731534, "o", "c"] [289.270069, "o", "\b\u001b[K"] [289.420076, "o", "\b\u001b[K"] [289.498738, "o", "c"] [290.024063, "o", "\b\u001b[K"] [290.193952, "o", "^C\u001b[?2004l\r"] [290.194095, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [290.194241, "o", "\u001b[?2004h"] [290.19434, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [290.975009, "o", "s"] [291.125904, "o", "s"] [291.208275, "o", " -"] [291.448459, "o", "l"] [291.546696, "o", "4"] [291.6793, "o", "n"] [291.89771, "o", "\r\n\u001b[?2004l\r"] [291.926095, "o", "Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port Process \r\nudp UNCONN 0 0 127.0.0.1:323 0.0.0.0:* \r\n"] [291.926171, "o", "udp UNCONN 0 0 0.0.0.0:68 0.0.0.0:* \r\ntcp LISTEN 0 128 127.0.0.1:5000 0.0.0.0:* \r\ntcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:* \r\n"] [291.926797, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [296.203682, "o", "ss -l4n"] [296.538784, "o", "\b\b\b\b\b\b\b"] [296.6816, "o", "\u001b[C"] [296.917648, "o", "\u001b[C"] [297.095147, "o", "\u001b[C"] [297.289984, "o", "\u001b[C"] [297.417857, "o", "\u001b[C"] [298.228458, "o", "\u001b[C"] [298.905641, "o", "\b\u001b[1Pn\b"] [299.01425, "o", "an\b"] [299.20615, "o", "\r\n"] [299.206335, "o", "\u001b[?2004l\r"] [299.225289, "o", "Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port Process \r\nnl UNCONN 0 0 0:0 * \r\nnl UNCONN 768 0 4:0 * \r\nnl UNCONN 4352 0 4:980 * \r\nnl UNCONN 0 0 7:0 * \r\nnl UNCONN 0 0 9:0 "] [299.225469, "o", " * \r\nnl UNCONN 0 0 9:1 * \r\nnl UNCONN 0 0 9:-803681818 * \r\nnl UNCONN 0 0 9:1 * \r\nnl UNCONN 0 0 10:0 * \r\nnl UNCONN 0 0 11:0 * \r\nnl UNCONN 0 "] [299.225506, "o", " 0 15:580 * \r\nnl UNCONN 0 0 15:-1292002143 * \r\nnl UNCONN 0 0 15:-2135457697 * \r\nnl UNCONN 0 0 15:-854937632 * \r\nnl UNCONN 0 0 15:1 * \r\nnl UNCONN 0 0 15:0 "] [299.225531, "o", " * \r\nnl UNCONN 0 0 15:213 * \r\nnl UNCONN 0 0 15:-858942302 * \r\nnl UNCONN 0 0 15:-1292002143 * \r\nnl UNCONN 0 0 15:-854937632 * \r\nnl UNCONN 0 0 15:-2135457697 * \r\nnl UNCONN 0 0 "] [299.225558, "o", " 15:580 * \r\nnl UNCONN 0 0 15:-858942302 * \r\nnl UNCONN 0 0 15:1 * \r\nnl UNCONN 0 0 16:0 * \r\np_raw UNCONN 0 0 *:ens5 * \r\nu_str LISTEN 0 4096 /run/dbus/system_bus_socket 11434 * 0 "] [299.225976, "o", " \r\nu_str LISTEN 0 4096 /run/uuidd/request 11436 * 0 \r\nu_dgr UNCONN 0 0 /run/chrony/chronyd.sock 10664 * 0 \r\nu_dgr UNCONN 0 0 /run/systemd/notify 9666 * 0 \r\nu_str LISTEN 0 4096 /run/systemd/private 9669 * 0 \r\nu_str LISTEN 0 4096 /run/systemd/userdb/io.systemd.DynamicUser 9671 * 0 \r\nu_str LISTEN 0 4096 /run/systemd/io.system.Mana"] [299.226014, "o", "gedOOM 9672 * 0 \r\nu_dgr UNCONN 0 0 /run/systemd/journal/syslog 9682 * 0 \r\nu_str LISTEN 0 4096 /run/systemd/fsck.progress 9684 * 0 \r\nu_dgr UNCONN 0 0 /run/systemd/journal/dev-log 9688 * 0 \r\nu_dgr UNCONN 0 0 /run/systemd/journal/socket 9690 * 0 \r\nu_str LISTEN 0 4096 /run/systemd/journal/stdout 9692 * 0 "] [299.226039, "o", " \r\nu_seq LISTEN 0 4096 /run/udev/control 9694 * 0 \r\nu_str LISTEN 0 4096 /run/systemd/journal/io.systemd.journal 1651 * 0 \r\nu_str ESTAB 0 0 * 10671 * 10672 \r\nu_dgr UNCONN 0 0 * 9742 * 9690 \r\nu_seq ESTAB 0 0 * 10665 * 10666 \r\nu_str ESTAB 0 0 * 10617 "] [299.226064, "o", " * 10618 \r\nu_dgr UNCONN 0 0 * 1653 * 9666 \r\nu_str ESTAB 0 0 /run/dbus/system_bus_socket 11582 * 10729 \r\nu_str ESTAB 0 0 /run/systemd/journal/stdout 10618 * 10617 \r\nu_seq ESTAB 0 0 * 10666 * 10665 \r\nu_dgr UNCONN 0 0 * 9668 * 9667 \r\nu_dgr UNCONN "] [299.226648, "o", " 0 0 * 10570 * 9688 \r\nu_str ESTAB 0 0 * 10531 * 10530 \r\nu_str ESTAB 0 0 * 10708 * 10709 \r\nu_str ESTAB 0 0 * 10530 * 10531 \r\nu_str ESTAB 0 0 /run/systemd/journal/stdout 10587 * 10568 \r\nu_dgr UNCONN 0 0 * 9667 "] [299.226687, "o", " * 9668 \r\nu_str ESTAB 0 0 /run/systemd/journal/stdout 10709 * 10708 \r\nu_str ESTAB 0 0 * 10729 * 11582 \r\nu_str ESTAB 0 0 * 10568 * 10587 \r\nu_dgr UNCONN 0 0 * 10647 * 9688 \r\nu_str ESTAB 0 0 * 1724 * 9834 \r\nu_str ESTAB 0 0 "] [299.226711, "o", " /run/systemd/journal/stdout 10527 * 11465 \r\nu_dgr UNCONN 0 0 * 1733 * 9690 \r\nu_str ESTAB 0 0 /run/systemd/journal/stdout 9834 * 1724 \r\nu_str ESTAB 0 0 /run/dbus/system_bus_socket 10672 * 10671 \r\nu_str ESTAB 0 0 * 10487 * 11442 \r\nu_str ESTAB 0 0 * 11450 * 10532 "] [299.226733, "o", " \r\nu_dgr UNCONN 0 0 * 1737 * 1736 \r\nu_str ESTAB 0 0 * 10507 * 10508 \r\nu_dgr UNCONN 0 0 * 11460 * 9688 \r\nu_dgr UNCONN 0 0 * 10325 * 9688 \r\nu_str ESTAB 0 0 /run/dbus/system_bus_socket 10532 * 11450 \r\nu_str ESTAB 0 0 /run/system"] [299.226802, "o", "d/journal/stdout 10496 * 10495 \r\nu_str ESTAB 0 0 * 11456 * 10510 \r\nu_str ESTAB 0 0 * 10495 * 10496 \r\nu_str ESTAB 0 0 /run/systemd/journal/stdout 10510 * 11456 \r\nu_str ESTAB 0 0 /run/systemd/journal/stdout 11442 * 10487 \r\nu_dgr UNCONN 0 0 * 10137 * 9688 "] [299.226829, "o", " \r\nu_dgr UNCONN 0 0 * 11521 * 9690 \r\nu_dgr UNCONN 0 0 * 1736 * 1737 \r\nu_str ESTAB 0 0 /run/systemd/journal/stdout 10508 * 10507 \r\nu_str ESTAB 0 0 * 11465 * 10527 \r\nudp UNCONN 0 0 127.0.0.1:323 0.0.0.0:* \r\nudp UNCONN 0 0 0.0.0.0:68 "] [299.226855, "o", " 0.0.0.0:* \r\nudp UNCONN 0 0 [fe80::8ea:f1ff:fe28:962b]%ens5:546 [::]:* \r\nudp UNCONN 0 0 [::1]:323 [::]:* \r\ntcp LISTEN 0 128 127.0.0.1:5000 0.0.0.0:* \r\ntcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:* \r\ntcp TIME-WAIT 0 0 172.31.45.67:58572 172.31.18.4:9000 \r\ntcp "] [299.226876, "o", " TIME-WAIT 0 0 172.31.45.67:45590 172.31.18.4:9000 \r\ntcp TIME-WAIT 0 0 172.31.45.67:46864 172.31.18.4:9000 \r\ntcp TIME-WAIT 0 0 172.31.45.67:45626 172.31.18.4:9000 \r\ntcp TIME-WAIT 0 0 127.0.0.1:48132 127.0.0.1:5000 \r\ntcp TIME-WAIT 0 0 127.0.0.1:51822 127.0.0.1:5000 \r\ntcp TIME-WAIT 0 0 172.31.45.67:45600 "] [299.226917, "o", " 172.31.18.4:9000 \r\ntcp TIME-WAIT 0 0 172.31.45.67:46848 172.31.18.4:9000 \r\ntcp TIME-WAIT 0 0 172.31.45.67:46880 172.31.18.4:9000 \r\ntcp TIME-WAIT 0 0 172.31.45.67:45610 172.31.18.4:9000 \r\ntcp LISTEN 0 4096 *:6767 *:* \r\ntcp LISTEN 0 4096 *:8080 *:* \r\ntcp LISTEN 0 12"] [299.226941, "o", "8 [::]:22 [::]:* \r\ntcp ESTAB 0 0 [::ffff:172.31.45.67]:8080 [::ffff:172.31.16.109]:59956 \r\n"] [299.227347, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [300.990674, "o", "\u0007"] [300.990833, "o", "ss -lan"] [301.473598, "o", "\b"] [301.66198, "o", "\b"] [302.164042, "o", "4an\b\b"] [302.629925, "o", "6an\b\b"] [302.937804, "o", "\u001b[C"] [303.258723, "o", "\b\u001b[1Pn\b"] [303.493501, "o", "\r\n"] [303.493675, "o", "\u001b[?2004l\r"] [303.498257, "o", "Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port Process \r\nudp UNCONN 0 0 [fe80::8ea:f1ff:fe28:962b]%ens5:546 [::]:* \r\nudp UNCONN 0 0 [::1]:323 [::]:* \r\ntcp LISTEN 0 4096 *:6767 *:* \r\ntcp LISTEN 0 4096 *:8080 *:* \r\n"] [303.498389, "o", "tcp LISTEN 0 128 [::]:22 [::]:* \r\n"] [303.499329, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [310.427041, "o", "n"] [310.547213, "o", "s"] [311.270122, "o", "\b\u001b[K"] [311.430514, "o", "\b\u001b[K"] [311.59568, "o", "\u0007"] [311.907893, "o", "n"] [311.94529, "o", "c"] [312.072385, "o", " "] [312.19483, "o", "-"] [312.259877, "o", "z"] [312.370265, "o", "v"] [312.519269, "o", " "] [312.82036, "o", "l"] [312.969503, "o", "o"] [313.077737, "o", "c"] [313.161915, "o", "a"] [313.317529, "o", "l"] [313.457645, "o", "h"] [313.586792, "o", "o"] [313.64679, "o", "s"] [313.731755, "o", "t"] [313.893938, "o", " "] [314.243387, "o", "8"] [314.326207, "o", "0"] [314.458705, "o", "8"] [314.555606, "o", "0"] [314.846327, "o", "\r\n\u001b[?2004l\r"] [314.850245, "o", "Connection to localhost"] [314.850507, "o", " (127.0.0.1) 8080 port [tcp/http-alt] succeeded!\r\n"] [314.851298, "o", "\u001b[?2004h"] [314.851545, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [316.822298, "o", "c"] [316.992748, "o", "u"] [317.148008, "o", "r"] [317.25901, "o", "l"] [317.377556, "o", " "] [317.506025, "o", "l"] [317.658642, "o", "o"] [317.770219, "o", "c"] [317.869516, "o", "a"] [317.934015, "o", "l"] [318.069923, "o", "h"] [318.194084, "o", "o"] [318.273956, "o", "s"] [318.353828, "o", "t"] [318.532209, "o", ":"] [318.897377, "o", "8"] [319.024482, "o", "0"] [319.156718, "o", "8"] [319.275817, "o", "0"] [319.519761, "o", "\r\n\u001b[?2004l\r"] [319.530023, "o", "\r\n\r\n\r\n\r\nThe requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.
\r\n"] [377.289411, "o", "\u001b[?2004h"] [377.289575, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [379.970521, "o", "curl localhost:5000/manifest.json"] [381.206727, "o", "\b\u001b[K"] [381.701874, "o", "\b\u001b[K"] [381.734709, "o", "\b\u001b[K"] [381.765984, "o", "\b\u001b[K"] [381.802304, "o", "\b\u001b[K"] [381.833662, "o", "\b\u001b[K"] [381.892432, "o", "\b\u001b[K"] [381.912036, "o", "\b\u001b[K"] [381.934536, "o", "\b\u001b[K"] [382.806101, "o", "\b\u001b[K"] [382.984873, "o", "\b\u001b[K"] [383.158466, "o", "\b\u001b[K"] [383.753419, "o", "\b\u001b[K"] [384.02704, "o", "c"] [384.106259, "o", "o"] [384.328134, "o", "n"] [384.397828, "o", "f"] [384.531608, "o", "i"] [384.608269, "o", "g"] [384.778711, "o", "."] [385.054351, "o", "j"] [385.14521, "o", "s"] [385.298767, "o", "\r\n\u001b[?2004l\r"] [385.310935, "o", "\r\n\r\nThe requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.
\r\n"] [385.311376, "o", "\u001b[?2004h"] [385.31152, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [386.4617, "o", "curl localhost:5000/config.js"] [386.8201, "o", "\b\u001b[K"] [387.324671, "o", "\b\u001b[K"] [387.354878, "o", "\b\u001b[K"] [387.391884, "o", "\b\u001b[K"] [387.418851, "o", "\b\u001b[K"] [387.453448, "o", "\b\u001b[K"] [387.486329, "o", "\b\u001b[K"] [387.537412, "o", "\b\u001b[K"] [387.554275, "o", "\b\u001b[K"] [391.600297, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [392.678156, "o", "\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [392.938146, "o", "\b\u001b[K"] [393.552456, "o", "/"] [393.734599, "o", "t"] [393.849172, "o", "e"] [393.991581, "o", "r"] [394.087642, "o", "m"] [394.762004, "o", "i"] [394.973994, "o", "n"] [395.052299, "o", "a"] [395.203486, "o", "l"] [395.438691, "o", "\r\n\u001b[?2004l\r"] [395.450199, "o", "\r\n\r\nThe requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.
\r\n"] [395.451474, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [412.338433, "o", "curl localhost:5000/terminal"] [413.107122, "o", "\b"] [413.610027, "o", "\b"] [413.649376, "o", "\b"] [413.674026, "o", "\b"] [413.72149, "o", "\b"] [413.740888, "o", "\b"] [413.775243, "o", "\b"] [413.831753, "o", "\u001b[C"] [414.336864, "o", "\u001b[C"] [414.362533, "o", "\u001b[C"] [414.405516, "o", "\u001b[C"] [414.43977, "o", "\u001b[C"] [414.475183, "o", "\u001b[C"] [414.497566, "o", "\u001b[C"] [414.530122, "o", "\u0007"] [414.560201, "o", "\u0007"] [414.602747, "o", "\u0007"] [414.637468, "o", "\u0007"] [414.659667, "o", "\u0007"] [414.70546, "o", "\u0007"] [414.881363, "o", "\b\u001b[K"] [415.369438, "o", "\b\u001b[K"] [415.398923, "o", "\b\u001b[K"] [415.434277, "o", "\b\u001b[K"] [415.463784, "o", "\b\u001b[K"] [415.503756, "o", "\b\u001b[K"] [415.534357, "o", "\b\u001b[K"] [415.574897, "o", "\b\u001b[K"] [415.597884, "o", "\b\u001b[K"] [415.645794, "o", "\b\u001b[K"] [415.661494, "o", "\b\u001b[K"] [415.696339, "o", "\b\u001b[K"] [415.735781, "o", "\b\u001b[K"] [415.760571, "o", "\b\u001b[K"] [416.648987, "o", ":"] [417.426982, "o", "6"] [417.52183, "o", "7"] [417.658936, "o", "6"] [417.984227, "o", "7"] [418.365375, "o", "\r\n\u001b[?2004l\r"] [418.379769, "o", "404 page not found"] [418.381576, "o", "\u001b[?2004h"] [418.381807, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [419.942589, "o", "curl localhost:6767"] [420.806649, "o", "/"] [421.728015, "o", "\r\n\u001b[?2004l\r"] [421.737874, "o", "404 page not found"] [421.73944, "o", "\u001b[?2004h"] [421.739581, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [427.62881, "o", "\u0007"] [427.647444, "o", "curl localhost:6767/"] [427.912035, "o", "\b\u001b[K"] [428.459381, "o", "/"] [428.905825, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [429.070281, "o", "\u001b[C"] [429.25176, "o", "\u001b[C"] [429.450704, "o", "\u001b[C"] [429.644247, "o", "\u001b[C"] [429.810283, "o", "\u001b[C localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [429.958125, "o", "- localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [430.185817, "o", "u localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [430.342322, "o", "\u001b[C localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [430.426535, "o", "a localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [430.546254, "o", "d localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [430.621874, "o", "m localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [430.789449, "o", "i localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [430.957747, "o", "n localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [431.194611, "o", "\r\n\u001b[?2004l\r"] [431.203448, "o", "Enter host password for user 'admin':"] [434.715032, "o", "\r\n"] [434.716626, "o", "404 page not found"] [434.71894, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [435.928658, "o", "curl -u admin localhost:6767/"] [437.405354, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[K"] [438.010355, "o", "l"] [438.146496, "o", "s"] [438.309903, "o", "\r\n"] [438.310072, "o", "\u001b[?2004l\r"] [438.312145, "o", "\u001b[0m\u001b[01;34magent\u001b[0m \u001b[01;34mtest\u001b[0m \u001b[01;32mwebserver.py\u001b[0m\r\n"] [438.312694, "o", "\u001b[?2004h"] [438.312809, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [440.362224, "o", "l"] [440.694261, "o", "\b\u001b[K"] [440.84832, "o", "\u0007"] [440.941438, "o", "r"] [441.049871, "o", "m"] [441.105933, "o", " "] [441.294672, "o", "-"] [441.34708, "o", "r"] [441.43491, "o", "f"] [441.550174, "o", " "] [442.450115, "o", "t"] [442.53493, "o", "e"] [442.703376, "o", "s"] [442.790595, "o", "t"] [442.906672, "o", "\r\n\u001b[?2004l\r"] [442.908932, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [443.153494, "o", "l"] [443.313106, "o", "s"] [443.399872, "o", "\r\n\u001b[?2004l\r"] [443.401953, "o", "\u001b[0m\u001b[01;34magent\u001b[0m \u001b[01;32mwebserver.py\u001b[0m\r\n"] [443.402574, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [444.086289, "o", "l"] [444.191755, "o", "s"] [444.264307, "o", " "] [444.336934, "o", "-"] [444.562083, "o", "l"] [444.617864, "o", "a"] [444.763091, "o", "\r\n\u001b[?2004l\r"] [444.765603, "o", "total 44\r\n"] [444.765839, "o", "drwxr-xr-x 6 admin admin 4096 Mar 8 13:43 \u001b[0m\u001b[01;34m.\u001b[0m\r\ndrwxr-xr-x 3 root root 4096 Sep 17 2023 \u001b[01;34m..\u001b[0m\r\ndrwx------ 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.ansible\u001b[0m\r\n-rw------- 1 admin admin 1481 Mar 8 13:43 .bash_history\r\n-rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout\r\n-rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc\r\ndrwxr-xr-x 3 admin admin 4096 Sep 20 2023 \u001b[01;34m.config\u001b[0m\r\n-rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile\r\ndrwx------ 2 admin admin 4096 Sep 17 2023 \u001b[01;34m.ssh\u001b[0m\r\ndrwxr-xr-x 2 admin root 4096 Sep 24 2023 \u001b[01;34magent\u001b[0m\r\n-rwxrwx--- 1 root root 360 Sep 24 2023 \u001b[01;32mwebserver.py\u001b[0m\r\n"] [444.766396, "o", "\u001b[?2004h"] [444.766604, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [452.485463, "o", "l"] [452.569273, "o", "s"] [452.658197, "o", " "] [452.738607, "o", "."] [452.914295, "o", "c"] [453.060649, "o", "o"] [453.154845, "o", "nfig/"] [453.311906, "o", "asciinema/"] [453.460032, "o", "install-id "] [453.578367, "o", "\u0007"] [454.518366, "o", "^C\u001b[?2004l\r"] [454.518778, "o", "\u001b[?2004h\u001b[?2004l\r"] [454.518958, "o", "\r\n"] [454.519301, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [454.778725, "o", "\u001b[H\u001b[2J\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [455.158603, "o", "l"] [455.362275, "o", "s"] [455.441408, "o", "\r\n\u001b[?2004l\r"] [455.443614, "o", "\u001b[0m\u001b[01;34magent\u001b[0m \u001b[01;32mwebserver.py\u001b[0m\r\n"] [455.444405, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [468.286916, "o", "ls"] [468.970768, "o", " -la"] [469.359742, "o", "\b\b\b\b\u001b[K"] [471.230352, "o", "l"] [471.389544, "o", "s"] [471.49507, "o", " "] [471.641381, "o", "a"] [471.940973, "o", "g"] [472.157858, "o", "\b\u001b[K"] [472.406329, "o", "^C\u001b[?2004l\r"] [472.406521, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [472.406676, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [472.573964, "o", "l"] [472.675667, "o", "s"] [472.82221, "o", " "] [472.991097, "o", "g"] [473.074208, "o", "a"] [473.344555, "o", "\b\u001b[K"] [473.51794, "o", "\b\u001b[K"] [473.522966, "o", "a"] [473.584917, "o", "g"] [473.738193, "o", "ent/"] [473.897012, "o", "\u0007"] [474.053297, "o", "\r\n"] [474.053583, "o", "check.sh sadagent sadagent.txt \r\n"] [474.053732, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ ls agent/"] [474.917839, "o", "c"] [475.042586, "o", "h"] [475.153334, "o", "eck.sh "] [476.028939, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [476.710073, "o", "\u001b[C"] [476.869504, "o", "\u001b[C"] [477.130163, "o", "\b\u001b[1P"] [477.254262, "o", "\b\u001b[1P"] [477.341952, "o", "\u001b[1@c"] [477.43893, "o", "\u001b[1@a"] [477.562386, "o", "\u001b[1@t"] [477.662025, "o", "\r\n"] [477.6623, "o", "\u001b[?2004l\r"] [477.664112, "o", "#!/bin/bash\r\n\r\nexpected_checksum=\"d8bee9d7f830d5fb59b89e1e120cce8e\"\r\nactual_checksum=$(md5sum /home/admin/mysolution | awk '{print $1}')\r\n"] [477.664256, "o", "\r\nif [[ \"$actual_checksum\" == \"$expected_checksum\" ]]; then\r\n echo -n \"OK\"\r\nelse\r\n echo -n \"NO\"\r\nfi"] [477.665075, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [482.352365, "o", "cat agent/check.sh "] [482.782149, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\bls\u001b[K"] [483.286681, "o", " -la"] [483.475638, "o", "\b\b\b\b\u001b[K"] [483.773629, "o", "\b\brm -rf test"] [484.038408, "o", "\b\b\b\b\b\b\b\b\b\b\bls\u001b[K"] [484.062202, "o", "\b\brm -rf test"] [484.445006, "o", "^C\u001b[?2004l\r"] [484.445262, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [484.445436, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [484.714058, "o", "\r(reverse-i-search)`': \u001b[K"] [484.974053, "o", "\b\b\b\u001b[20@c': cat agent/che\u001b[7mc\u001b[27mk.sh\b\b\b\b\b"] [485.083013, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\bu': \u001b[7mcu\u001b[27mrl -u admin localhost:6767/\r\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [485.23462, "o", "\b\b\b\u001b[1@r': \u001b[7mcur\u001b[27m\b\b\b"] [485.371193, "o", "\b\b\b\u001b[1@l': \u001b[7mcurl\u001b[27m\b\b\b\b"] [487.085645, "o", "\r\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ curl -u admin localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\u001b[C"] [487.573891, "o", "\u001b[C"] [487.621423, "o", "\u001b[C"] [487.643656, "o", "\u001b[C"] [487.691665, "o", "\u001b[C"] [487.707115, "o", "\u001b[C"] [487.744643, "o", "\u001b[C"] [487.775427, "o", "\u001b[C"] [487.814024, "o", "\u001b[C"] [487.83897, "o", "\u001b[C"] [487.926544, "o", "\u001b[C"] [487.933384, "o", "\u001b[C"] [487.942881, "o", "\u001b[C"] [487.972034, "o", "\u001b[C"] [488.005408, "o", "\u001b[C"] [488.256269, "o", "\u001b[C"] [488.666675, "o", "\b"] [489.136795, "o", "\b"] [489.376852, "o", "\b"] [489.909531, "o", "\b\u001b[1P localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [490.414817, "o", "\b\u001b[1P localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [490.447019, "o", "\b\u001b[1P localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [490.478622, "o", "\b\u001b[1P localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [490.522417, "o", "\b\u001b[1P localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [490.545634, "o", "\u001b[1Plocalhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [490.592237, "o", "\b\u001b[1P localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [490.611902, "o", "\b\u001b[1P localhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [490.761295, "o", "\u001b[1Plocalhost:6767/\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [491.518862, "o", "\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C\u001b[C"] [491.784009, "o", "\b\u001b[K"] [491.960971, "o", "\b\u001b[K"] [492.117652, "o", "\b\u001b[K"] [492.301916, "o", "\b\u001b[K"] [492.509907, "o", "\b\u001b[K"] [492.652725, "o", "5"] [492.798155, "o", "0"] [492.932307, "o", "0"] [493.10286, "o", "0"] [493.418098, "o", "\r\n\u001b[?2004l\r"] [493.429644, "o", "Unauthorized"] [493.430684, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [494.31687, "o", "curl localhost:5000"] [505.602863, "o", "/"] [515.11874, "o", "^C\u001b[?2004l\r"] [515.11906, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [515.119231, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [531.31793, "o", "c"] [531.423373, "o", "u"] [531.533528, "o", "r"] [531.709587, "o", "l"] [531.868124, "o", " "] [532.378384, "o", "h"] [532.632742, "o", "t"] [532.862842, "o", "t"] [532.986551, "o", "p"] [533.15079, "o", "s"] [533.157782, "o", "d"] [533.660717, "o", "\b\u001b[K"] [533.866708, "o", "\b\u001b[K"] [534.120635, "o", "s"] [534.358292, "o", ":"] [534.604389, "o", "/"] [534.769447, "o", "/"] [535.005096, "o", "l"] [535.151937, "o", "o"] [535.22905, "o", "c"] [535.306156, "o", "a"] [535.407002, "o", "l"] [535.570415, "o", "h"] [535.688115, "o", "o"] [535.789879, "o", "s"] [535.890824, "o", "t"] [536.021408, "o", ":"] [536.347606, "o", "4"] [536.673552, "o", "\b\u001b[K"] [536.730265, "o", "5"] [536.881208, "o", "0"] [537.02787, "o", "0"] [537.326886, "o", "0"] [537.645464, "o", "\r\n\u001b[?2004l\r"] [537.667691, "o", "curl: ("] [537.667954, "o", "35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number\r\n"] [537.669631, "o", "\u001b[?2004h"] [537.669762, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [538.690336, "o", "curl https://localhost:5000"] [538.972684, "o", "\b"] [540.672177, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [541.03543, "o", "\u001b[C\u001b[C\u001b[C\u001b[C"] [541.535701, "o", "\u001b[C"] [541.579577, "o", "\u001b[C"] [541.613463, "o", "\u001b[C"] [541.634803, "o", "\u001b[C"] [541.829439, "o", "\u001b[C"] [542.039166, "o", "\u001b[C"] [542.246074, "o", "\u001b[C"] [542.430525, "o", "\u001b[C"] [542.593171, "o", "\u001b[C"] [542.866156, "o", "\b\u001b[1Plocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [543.022649, "o", "\b\u001b[1Plocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [543.197518, "o", "\b\u001b[1Plocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [543.365405, "o", "\b\u001b[1Plocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [543.536397, "o", "\b\u001b[1Plocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [543.724184, "o", "\b\u001b[1Plocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [543.929037, "o", "\b\u001b[1Plocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [544.062762, "o", "\b\u001b[1Plocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [544.625524, "o", "\r\n\u001b[?2004l\r"] [544.63687, "o", "Unauthorized"] [544.638557, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [545.924107, "o", "curl localhost:5000"] [546.605517, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [546.846532, "o", "\u001b[C"] [547.34045, "o", "\u001b[C"] [547.362478, "o", "\u001b[C"] [547.397276, "o", "\u001b[C"] [547.433178, "o", "\u001b[C"] [547.467995, "o", "\u001b[C"] [548.676298, "o", "\b"] [564.097759, "o", "slocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [565.462718, "o", "\b\u001b[1Plocalhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [566.054374, "o", "^C\u001b[?2004l\r"] [566.054677, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [566.054853, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [566.238301, "o", "c"] [566.326282, "o", "a"] [566.486889, "o", "t"] [566.553774, "o", " "] [566.656776, "o", "/"] [566.757164, "o", "e"] [566.905468, "o", "tc/"] [567.253254, "o", "pa"] [567.311099, "o", "s"] [567.470791, "o", "s"] [567.602689, "o", "\u0007"] [567.602876, "o", "wd"] [567.722278, "o", "\r\n\u001b[?2004l\r"] [567.723853, "o", "root:x:0:0:root:/root:/bin/bash\r\ndaemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin\r\nbin:x:2:2:bin:/bin:/usr/sbin/nologin\r\nsys:x:3:3:sys:/dev:/usr/sbin/nologin\r\nsync:x:4:65534:sync:/bin:/bin/sync\r\ngames:x:5:60:games:/usr/games:/usr/sbin/nologin\r\nman:x:6:12:man:/var/cache/man:/usr/sbin/nologin\r\nlp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin\r\nmail:x:8:8:mail:/var/mail:/usr/sbin/nologin\r\n"] [567.724028, "o", "news:x:9:9:news:/var/spool/news:/usr/sbin/nologin\r\nuucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin\r\nproxy:x:13:13:proxy:/bin:/usr/sbin/nologin\r\nwww-data:x:33:33:www-data:/var/www:/usr/sbin/nologin\r\nbackup:x:34:34:backup:/var/backups:/usr/sbin/nologin\r\nlist:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin\r\nirc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin\r\ngnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin\r\nnobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin\r\n_apt:x:100:65534::/nonexistent:/usr/sbin/nologin\r\nmessagebus:x:101:101::/nonexistent:/usr/sbin/nologin\r\nuuidd:x:102:102::/run/uuidd:/usr/sbin/nologin\r\ntcpdump:x:103:103::/nonexistent:/usr/sbin/nologin\r\n_chrony:x:104:104:Chrony daemon,,,:/var/lib/chrony:/usr/sbin/nologin\r\nsystemd-network:x:105:106:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin\r\nsystemd-resolve:x:106:107:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin\r\nsshd:x:107:65534::/run/sshd:/usr/sbin/nologin\r\nsystemd-timesync:x:999:999:syst"] [567.724068, "o", "emd Time Synchronization:/:/usr/sbin/nologin\r\nsystemd-coredump:x:998:998:systemd Core Dumper:/:/usr/sbin/nologin\r\nadmin:x:1000:1000:Debian:/home/admin:/bin/bash\r\n"] [567.72497, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [571.222985, "o", "cat /etc/passwd"] [571.456411, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\burl localhost:5000"] [579.990426, "o", "^C"] [579.990601, "o", "\u001b[?2004l\r\u001b[?2004h\u001b[?2004l\r"] [579.990871, "o", "\r\n"] [579.991302, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [580.142444, "o", "u"] [580.20646, "o", "d"] [580.500947, "o", "\b\u001b[K"] [580.658437, "o", "\b\u001b[K"] [580.845391, "o", "i"] [580.923201, "o", "d"] [581.107706, "o", "\r\n\u001b[?2004l\r"] [581.110387, "o", "uid=1000(admin) gid=1000(admin) groups=1000(admin),4(adm),20(dialout),24(cdrom),25(floppy),27(sudo),29(audio),30(dip),44(video),46(plugdev),109(netdev)\r\n"] [581.111224, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [587.56046, "o", "c"] [587.649373, "o", "a"] [587.842783, "o", "t"] [587.990331, "o", " "] [587.992734, "o", "/"] [588.595504, "o", "^C\u001b[?2004l\r"] [588.595918, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [588.596012, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [588.786303, "o", "s"] [588.833372, "o", "u"] [588.990241, "o", "d"] [589.094983, "o", "o"] [589.159629, "o", " "] [589.255628, "o", "s"] [589.328893, "o", "u"] [589.568873, "o", "\r\n\u001b[?2004l\r"] [589.575635, "o", "\r\nWe trust you have received the usual lecture from the local System\r\n"] [589.575846, "o", "Administrator. It usually boils down to these three things:\r\n\r\n #1) Respect the privacy of others.\r\n #2) Think before you type.\r\n #3) With great power comes great responsibility.\r\n\r\r\n"] [589.576155, "o", "[sudo] password for admin: "] [593.705078, "o", "\r\n"] [593.70622, "o", "sudo: a password is required\r\r\n"] [593.707298, "o", "\u001b[?2004h"] [593.70755, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [594.328683, "o", "p"] [594.411206, "o", "a"] [594.497767, "o", "s"] [594.689125, "o", "s"] [594.929637, "o", "wd "] [595.089799, "o", "\r\n\u001b[?2004l\r"] [595.095289, "o", "Changing password for admin.\r\nCurrent password: "] [599.34608, "o", "\r\n"] [601.421025, "o", "passwd: Authentication token manipulation error\r\npasswd: password unchanged\r\n"] [601.422217, "o", "\u001b[?2004h"] [601.422351, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [626.194742, "o", "^C\u001b[?2004l\r"] [626.194811, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [626.195139, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [629.156462, "o", "c"] [629.452784, "o", "u"] [629.588916, "o", "r"] [629.770215, "o", "l"] [634.636925, "o", "^C\u001b[?2004l\r"] [634.636991, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [634.637278, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [635.39156, "o", "s"] [635.575019, "o", "s"] [635.774037, "o", " "] [636.312895, "o", "-"] [636.547149, "o", "l"] [636.617211, "o", "4"] [636.77834, "o", "n"] [637.052203, "o", "\r\n\u001b[?2004l\r"] [637.056897, "o", "Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port Process "] [637.057106, "o", "\r\nudp UNCONN 0 0 127.0.0.1:323 0.0.0.0:* \r\nudp UNCONN 0 0 0.0.0.0:68 0.0.0.0:* \r\ntcp LISTEN 0 128 127.0.0.1:5000 0.0.0.0:* \r\ntcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:* \r\n"] [637.057583, "o", "\u001b[?2004h"] [637.057744, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [638.498849, "o", "p"] [638.574861, "o", "s"] [638.681022, "o", " "] [638.764258, "o", "-"] [638.942905, "o", "f"] [639.361776, "o", "\b\u001b[K"] [639.581492, "o", "\b\u001b[K"] [639.692334, "o", "e"] [639.789484, "o", "f"] [640.000388, "o", "\b\u001b[K"] [640.170435, "o", "\b\u001b[K"] [640.308202, "o", "-"] [640.367511, "o", "e"] [640.433508, "o", "f"] [640.599578, "o", "\r\n\u001b[?2004l\r"] [640.605459, "o", "UID PID PPID C STIME TTY TIME CMD\r\n"] [640.60568, "o", "root 1 0 0 13:35 ? 00:00:02 /sbin/init\r\n"] [640.605941, "o", "root 2 0 0 13:35 ? 00:00:00 [kthreadd]\r\nroot 3 2 0 13:35 ? 00:00:00 [rcu_gp]\r\n"] [640.606228, "o", "root 4 2 0 13:35 ? 00:00:00 [rcu_par_gp]\r\nroot 6 2 0 13:35 ? 00:00:00 [kworker/0:0H-events_highpri]\r\nroot 7 2 0 13:35 ? 00:00:00 [kworker/u4:0-events_unbound]\r\nroot 8 2 0 13:35 ? 00:00:00 [mm_percpu_wq]\r\n"] [640.606505, "o", "root 9 2 0 13:35 ? 00:00:00 [rcu_tasks_rude_]\r\nroot 10 2 0 13:35 ? 00:00:00 [rcu_tasks_trace]\r\nroot 11 2 0 13:35 ? 00:00:00 [ksoftirqd/0]\r\n"] [640.606797, "o", "root 12 2 0 13:35 ? 00:00:00 [rcu_sched]\r\nroot 13 2 0 13:35 ? 00:00:00 [migration/0]\r\nroot 15 2 0 13:35 ? 00:00:00 [cpuhp/0]\r\n"] [640.607048, "o", "root 16 2 0 13:35 ? 00:00:00 [cpuhp/1]\r\nroot 17 2 0 13:35 ? 00:00:00 [migration/1]\r\n"] [640.607296, "o", "root 18 2 0 13:35 ? 00:00:00 [ksoftirqd/1]\r\nroot 20 2 0 13:35 ? 00:00:00 [kworker/1:0H-events_highpri]\r\nroot 22 2 0 13:35 ? 00:00:00 [kworker/u4:1+events_unbound]\r\n"] [640.607557, "o", "root 23 2 0 13:35 ? 00:00:00 [kdevtmpfs]\r\nroot 24 2 0 13:35 ? 00:00:00 [netns]\r\n"] [640.60782, "o", "root 25 2 0 13:35 ? 00:00:00 [kauditd]\r\nroot 26 2 0 13:35 ? 00:00:00 [khungtaskd]\r\nroot 27 2 0 13:35 ? 00:00:00 [oom_reaper]\r\nroot 28 2 0 13:35 ? 00:00:00 [writeback]\r\n"] [640.608052, "o", "root 29 2 0 13:35 ? 00:00:00 [kcompactd0]\r\nroot 30 2 0 13:35 ? 00:00:00 [ksmd]\r\n"] [640.608294, "o", "root 49 2 0 13:35 ? 00:00:00 [kintegrityd]\r\nroot 50 2 0 13:35 ? 00:00:00 [kblockd]\r\nroot 51 2 0 13:35 ? 00:00:00 [blkcg_punt_bio]\r\n"] [640.60852, "o", "root 54 2 0 13:35 ? 00:00:00 [kworker/0:1H-kblockd]\r\nroot 55 2 0 13:35 ? 00:00:00 [kswapd0]\r\n"] [640.608761, "o", "root 56 2 0 13:35 ? 00:00:00 [kthrotld]\r\nroot 57 2 0 13:35 ? 00:00:00 [acpi_thermal_pm]\r\nroot 58 2 0 13:35 ? 00:00:00 [nvme-wq]\r\n"] [640.608998, "o", "root 59 2 0 13:35 ? 00:00:00 [nvme-reset-wq]\r\nroot 60 2 0 13:35 ? 00:00:00 [nvme-delete-wq]\r\n"] [640.609249, "o", "root 62 2 0 13:35 ? 00:00:00 [kworker/u4:3-flush-259:0]\r\nroot 63 2 0 13:35 ? 00:00:00 [kworker/1:1H-kblockd]\r\nroot 64 2 0 13:35 ? 00:00:00 [ipv6_addrconf]\r\n"] [640.609501, "o", "root 65 2 0 13:35 ? 00:00:00 [kworker/0:2-mm_percpu_wq]\r\nroot 74 2 0 13:35 ? 00:00:00 [kstrp]\r\nroot 79 2 0 13:35 ? 00:00:00 [kworker/u5:0]\r\n"] [640.609728, "o", "root 115 2 0 13:35 ? 00:00:00 [ena]\r\nroot 134 2 0 13:35 ? 00:00:00 [jbd2/nvme0n1p1-]\r\n"] [640.609971, "o", "root 135 2 0 13:35 ? 00:00:00 [ext4-rsv-conver]\r\nroot 196 1 0 13:35 ? 00:00:00 /lib/systemd/systemd-journald\r\nroot 213 1 0 13:35 ? 00:00:00 /lib/systemd/systemd-udevd\r\n"] [640.610201, "o", "root 229 2 0 13:35 ? 00:00:00 [kworker/1:3-mm_percpu_wq]\r\n"] [640.610467, "o", "root 239 2 0 13:35 ? 00:00:00 [cryptd]\r\nroot 390 1 0 13:35 ? 00:00:00 /sbin/dhclient -4 -v -i -pf /run/dhclie\r\nroot 465 1 0 13:35 ? 00:00:00 /sbin/dhclient -6 -v -pf /run/dhclient6\r\n"] [640.610749, "o", "admin 560 1 0 13:35 ? 00:00:01 /usr/local/gotty --permit-write --recon\r\nadmin 561 1 0 13:35 ? 00:00:00 /home/admin/agent/sadagent\r\nroot 564 1 0 13:35 ? 00:00:00 /usr/sbin/cron -f\r\n"] [640.610979, "o", "message+ 565 1 0 13:35 ? 00:00:00 /usr/bin/dbus-daemon --system --address\r\nroot 567 1 0 13:35 ? 00:00:00 /usr/bin/python3 /home/admin/webserver.\r\n"] [640.611253, "o", "root 577 1 0 13:35 ? 00:00:00 /usr/sbin/rsyslogd -n -iNONE\r\nroot 580 1 0 13:35 ? 00:00:00 /lib/systemd/systemd-logind\r\n"] [640.611494, "o", "root 585 1 0 13:35 tty1 00:00:00 /sbin/agetty -o -p -- \\u --noclear tty1\r\n"] [640.611737, "o", "root 586 1 0 13:35 ttyS0 00:00:00 /sbin/agetty -o -p -- \\u --keep-baud 11\r\nroot 588 1 0 13:35 ? 00:00:00 sshd: /usr/sbin/sshd -D [listener] 0 of\r\n_chrony 590 1 0 13:35 ? 00:00:00 /usr/sbin/chronyd -F 1\r\n"] [640.611978, "o", "_chrony 591 590 0 13:35 ? 00:00:00 /usr/sbin/chronyd -F 1\r\nroot 598 1 0 13:35 ? 00:00:00 /usr/bin/python3 /usr/share/unattended-\r\n"] [640.612223, "o", "admin 710 560 0 13:36 pts/0 00:00:00 bash -l\r\nadmin 715 710 0 13:36 pts/0 00:00:00 /usr/bin/python3 /usr/bin/asciinema rec\r\n"] [640.612453, "o", "admin 718 715 0 13:36 pts/0 00:00:00 /usr/bin/python3 /usr/bin/asciinema rec\r\n"] [640.612695, "o", "admin 719 715 0 13:36 pts/1 00:00:00 sh -c /bin/bash\r\nadmin 720 719 0 13:36 pts/1 00:00:00 /bin/bash\r\n"] [640.61294, "o", "root 842 2 0 13:38 ? 00:00:00 [kworker/u4:4-events_unbound]\r\nroot 949 2 0 13:41 ? 00:00:00 [kworker/1:0-events]\r\nroot 979 2 0 13:41 ? 00:00:00 [kworker/0:0-cgroup_destroy]\r\n"] [640.613152, "o", "root 1193 2 0 13:46 ? 00:00:00 [kworker/0:1-events]\r\nadmin 1196 720 0 13:47 pts/1 00:00:00 ps -ef\r\n"] [640.613933, "o", "\u001b[?2004h"] [640.614038, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [649.9699, "o", "l"] [650.129972, "o", "s"] [650.432657, "o", "\b\u001b[K"] [650.589334, "o", "\b\u001b[K"] [650.962102, "o", "c"] [651.017424, "o", "d"] [651.12069, "o", " "] [651.184994, "o", "/"] [651.340824, "o", "v"] [651.424819, "o", "a"] [651.610263, "o", "r/"] [651.678214, "o", "l"] [651.885527, "o", "o"] [651.933542, "o", "g"] [652.021212, "o", "/"] [652.188834, "o", "\u0007"] [652.341431, "o", "\r\n"] [652.341597, "o", "apt/ chrony/ private/ unattended-upgrades/\r\n"] [652.341831, "o", "cast/ journal/ runit/ \r\n"] [652.341994, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ cd /var/log/"] [654.212677, "o", "\r\n\u001b[?2004l\r"] [654.213206, "o", "\u001b[?2004h"] [654.213326, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: /var/log\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m/var/log\u001b[00m$ "] [654.435113, "o", "l"] [654.571335, "o", "s"] [654.70666, "o", "\r\n\u001b[?2004l\r"] [654.709002, "o", "alternatives.log \u001b[0m\u001b[34;42mcast\u001b[0m debug.1 \u001b[01;31mkern.log.2.gz\u001b[0m syslog\r\nalternatives.log.1 \u001b[01;34mchrony\u001b[0m \u001b[01;31mdebug.2.gz\u001b[0m lastlog syslog.1\r\n"] [654.709219, "o", "\u001b[01;34mapt\u001b[0m cloud-init-output.log dpkg.log messages \u001b[01;31msyslog.2.gz\u001b[0m\r\nauth.log cloud-init.log dpkg.log.1 messages.1 \u001b[01;34munattended-upgrades\u001b[0m\r\nauth.log.1 daemon.log faillog \u001b[01;31mmessages.2.gz\u001b[0m user.log\r\n\u001b[01;31mauth.log.2.gz\u001b[0m daemon.log.1 \u001b[01;34mjournal\u001b[0m minio.log user.log.1\r\nbtmp \u001b[01;31mdaemon.log.2.gz\u001b[0m kern.log \u001b[01;34mprivate\u001b[0m \u001b[01;31muser.log.2.gz\u001b[0m\r\nbtmp.1 debug kern.log.1 \u001b[01;34mrunit\u001b[0m wtmp\r\n"] [654.709903, "o", "\u001b[?2004h"] [654.710155, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: /var/log\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m/var/log\u001b[00m$ "] [665.923677, "o", "c"] [665.992249, "o", "d"] [666.243484, "o", "\r\n\u001b[?2004l\r"] [666.243854, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [666.724464, "o", "j"] [666.934883, "o", "o"] [667.097013, "o", "u"] [667.210096, "o", "rnalctl "] [667.356187, "o", "-"] [667.502733, "o", "e"] [667.59472, "o", "u"] [667.861539, "o", "\r\n"] [667.861702, "o", "\u001b[?2004l\r"] [667.867748, "o", "journalctl: option requires an argument -- 'u'\r\n"] [667.868704, "o", "\u001b[?2004h"] [667.868832, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [668.970757, "o", "journalctl -eu"] [669.274438, "o", "\b\u001b[K"] [669.427144, "o", "\b\u001b[K"] [669.625022, "o", "\b\u001b[K"] [670.42666, "o", "-"] [670.588854, "o", "e"] [671.02273, "o", "\r\n\u001b[?2004l\r"] [671.035244, "o", "\u001b[?1h\u001b=\r\r\u001b[K"] [671.046799, "o", "Mar 08 13:44:20 i-00c8d7508d4dbeee3 systemd[1]: mc.service: Succeeded.\u001b[m\r\nMar 08 13:44:20 i-00c8d7508d4dbeee3 systemd[1]: \u001b[0;1;39m\u001b[0;1;31m\u001b[0;1;39mmc.service: Consumed 1.380s CPU time.\u001b[0m\u001b[m\r\nMar 08 13:44:27 i-00c8d7508d4dbeee3 dhclient[465]: XMT: Solicit on ens5, interval 116700ms.\u001b[m\r\nMar 08 13:44:35 i-00c8d7508d4dbeee3 python3[567]: 127.0.0.1 - - [08/Mar/2025 13:44:35] \"GE\u001b[m\u001b[7m>\u001b[27m\r\nMar 08 13:45:19 i-00c8d7508d4dbeee3 python3[567]: 127.0.0.1 - - [08/Mar/2025 13:45:19] cod\u001b[m\u001b[7m>\u001b[27m\r\nMar 08 13:45:19 i-00c8d7508d4dbeee3 python3[567]: 127.0.0.1 - - [08/Mar/2025 13:45:19] \"\\x\u001b[m\u001b[7m>\u001b[27m\r\nMar 08 13:45:26 i-00c8d7508d4dbeee3 python3[567]: 127.0.0.1 - - [08/Mar/2025 13:45:26] \"GE\u001b[m\u001b[7m>\u001b[27m\r\nMar 08 13:45:29 i-00c8d7508d4dbeee3 systemd[1]: Started Hammer Time.\u001b[m"] [671.046983, "o", "\r\n"] [671.047162, "o", "Mar 08 13:45:32 i-00c8d7508d4dbeee3 systemd[1]: mc.service: Succeeded.\u001b[m"] [671.047426, "o", "\r\nMar 08 13:45:32 i-00c8d7508d4dbeee3 systemd[1]: \u001b[0;1;39m\u001b[0;1;31m\u001b[0;1;39mmc.service: Consumed 1.389s CPU time.\u001b[0m\u001b[m\r\nMar 08 13:46:00 i-00c8d7508d4dbeee3 rsyslogd[577]: ["] [671.047896, "o", "origin software=\"rsyslogd\" swVersion=\"\u001b[m\u001b[7m>\u001b[27m\r\nMar 08 13:46:15 i-00c8d7508d4dbeee3 sudo[1162]: \u001b[0;1;31m\u001b[0;1;39m\u001b[0;1;31mpam_unix(sudo:auth): conversation failed\u001b[0m\u001b[m\r\nMar 08 13:46:15 i-00c8d7508d4dbeee3 sudo[1162]: \u001b[0;1;31m\u001b[0;1;39m\u001b[0;1;31mpam_unix(sudo:auth): auth could not identi\u001b[m\u001b[7m>\u001b[27m\r\nMar 08 13:46:21 i-00c8d7508d4dbeee3 passwd[1163]: \u001b[0;1;39m\u001b[0;1;31m\u001b[0;1;39mpam_unix(passwd:chauthtok): authenticati\u001b[m\u001b[7m>\u001b[27m\r\nMar 08 13:46:23 i-00c8d7508d4dbeee3 dhclient[465]: XMT: Solicit on ens5, interval 120650ms.\u001b[m\r\nMar 08 13:46:29 i-00c8d7508d4dbeee3 systemd[1]: Started Hammer Time.\u001b[m\r\nMar 08 13:46:32 i-00c8d7508d4dbeee3 systemd[1]: mc.service: Succeeded.\u001b[m"] [671.04807, "o", "\r\n"] [671.048228, "o", "Mar 08 13:46:32 i-00c8d7508d4dbeee3 systemd[1]: \u001b[0;1;39m\u001b[0;1;31m\u001b[0;1;39mmc.service: Consumed 1.390s CPU time.\u001b[0m\u001b[m"] [671.048361, "o", "\r\n"] [671.048587, "o", "Mar 08 13:47:17 i-00c8d7508d4dbeee3 systemd[1]: Started Hammer Time.\u001b[m"] [671.048768, "o", "\r\n"] [671.048927, "o", "Mar 08 13:47:20 i-00c8d7508d4dbeee3 systemd[1]: mc.service: Succeeded.\u001b[m"] [671.049086, "o", "\r\n"] [671.049257, "o", "Mar 08 13:47:20 i-00c8d7508d4dbeee3 systemd[1]: \u001b[0;1;39m\u001b[0;1;31m\u001b[0;1;39mmc.s"] [671.050414, "o", "ervice: Consumed 1.393s CPU time.\u001b[0m\u001b[m\r\n\u001b[7mlines 982-1002/1002 (END)\u001b[27m\u001b[K"] [674.174636, "o", "\r\u001b[K\u001b[?1l\u001b>"] [674.176532, "o", "\u001b[?2004h"] [674.176787, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [674.569073, "o", "\u001b[H\u001b[2J\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [680.753642, "o", "p"] [680.877449, "o", "s"] [680.966204, "o", " "] [681.435191, "o", "\b\u001b[K"] [681.601206, "o", "\b\u001b[K"] [681.75454, "o", "\b\u001b[K"] [681.947767, "o", "\u0007"] [682.731027, "o", "l"] [682.798805, "o", "s"] [682.909547, "o", "o"] [682.978337, "o", "f "] [683.364388, "o", "\u0007"] [683.699856, "o", "\r\n\u001b[?2004l\r"] [683.741618, "o", "COMMAND PID TID TASKCMD USER FD TYPE DEVICE SIZE/OFF NODE NAME\r\n"] [683.741788, "o", "systemd 1 root cwd unknown /proc/1/cwd (readlink: Permission denied)\r\nsystemd 1 root rtd unknown /proc/1/root (readlink: Permission denied)\r\nsystemd 1 root txt unknown /proc/1/exe (readlink: Permission denied)\r\nsystemd 1 root NOFD /proc/1/fd (opendir: Permission denied)\r\nkthreadd 2 root cwd unknown /proc/2/cwd (readlink: Permission denied)\r\nkthreadd 2 root rtd unknown /proc/2/root (readlink: Permission denied)\r\nkthreadd 2 root txt unknown /proc/2/exe (readlink: Permission denied)\r\nkthreadd 2 root NOFD /pr"] [683.741824, "o", "oc/2/fd (opendir: Permission denied)\r\nrcu_gp 3 root cwd unknown /proc/3/cwd (readlink: Permission denied)\r\n"] [683.74206, "o", "rcu_gp 3 root rtd unknown /proc/3/root (readlink: Permission denied)"] [683.742362, "o", "\r\n"] [683.742401, "o", "rcu_gp 3 root txt unknown /proc/3/exe (readlink: Permission denied)\r\nrcu_gp 3 root NOFD /proc/3/fd (opendir: Permission denied)\r\nrcu_par_g 4 root cwd unknown /proc/4/cwd (readlink: Permission denied)\r\nrcu_par_g 4 root rtd unknown /proc/4/root (readlink: Permission denied)\r\n"] [683.742558, "o", "rcu_par_g 4 root txt unknown /proc/4/exe (readlink: Permission denied)"] [683.74278, "o", "\r\nrcu_par_g 4 root NOFD /proc/4/fd (opendir: Permission denied)"] [683.742826, "o", "\r\n"] [683.74297, "o", "kworker/0 6 root cwd unknown /proc/6/cwd (readlink: Permission denied)"] [683.743146, "o", "\r\n"] [683.743302, "o", "kworker/0 6 root rtd unknown /proc/6/root (readlink: Permission denied)"] [683.743447, "o", "\r\n"] [683.743606, "o", "kworker/0 6 root txt unknown /proc/6/exe (readlink: Permission denied)"] [683.743809, "o", "\r\nkworker/0 6 root NOFD /proc/6/fd (opendir: Permission denied)\r\n"] [683.743841, "o", "kworker/u 7 root cwd unknown /proc/7/cwd (readlink: Permission denied)\r\n"] [683.744219, "o", "kworker/u 7 root rtd unknown /proc/7/root (readlink: Permission denied)\r\nkworker/u 7 root txt unknown /proc/7/exe (readlink: Permission denied)\r\nkworker/u 7 root NOFD /proc/7/fd (opendir: Permission denied)\r\nmm_percpu 8 root cwd unknown /proc/8/cwd (readlink: Permission denied)\r\nmm_percpu 8 root rtd unknown /proc/8/root (readlink: Permission denied)\r\nmm_percpu 8 root txt unknown /proc/8/exe (readlink: Permission denied)\r\nmm_percpu 8 root NOFD /proc/8/fd (opendir: Permission denied)\r\nrcu_tasks 9 root cwd unknown /proc"] [683.744273, "o", "/9/cwd (readlink: Permission denied)\r\nrcu_tasks 9 root rtd unknown /proc/9/root (readlink: Permission denied)\r\nrcu_tasks 9 root txt unknown /proc/9/exe (readlink: Permission denied)\r\nrcu_tasks 9 root NOFD /proc/9/fd (opendir: Permission denied)\r\nrcu_tasks 10 root cwd unknown /proc/10/cwd (readlink: Permission denied)\r\nrcu_tasks 10 root rtd unknown /proc/10/root (readlink: Permission denied)\r\nrcu_tasks 10 root txt unknown /proc/10/exe (readlink: Permission denied)\r\nrcu_tasks 10 root NOFD /proc/10/fd (opendir: Permission denied)\r\nksoftirqd 11 root cwd unknow"] [683.7443, "o", "n /proc/11/cwd (readlink: Permission denied)\r\nksoftirqd 11 root rtd unknown /proc/11/root (readlink: Permission denied)\r\nksoftirqd 11 root txt unknown /proc/11/exe (readlink: Permission denied)\r\nksoftirqd 11 root NOFD /proc/11/fd (opendir: Permission denied)\r\nrcu_sched 12 root cwd unknown /proc/12/cwd (readlink: Permission denied)\r\nrcu_sched 12 root rtd unknown /proc/12/root (readlink: Permission denied)\r\nrcu_sched 12 root txt unknown /proc/12/exe (readlink: Permission denied)\r\nrcu_sched 12 root NOFD /proc/12/fd (opendir: Permission denied)\r\nmigrati"] [683.744322, "o", "on 13 root cwd unknown /proc/13/cwd (readlink: Permission denied)\r\nmigration 13 root rtd unknown /proc/13/root (readlink: Permission denied)\r\nmigration 13 root txt unknown /proc/13/exe (readlink: Permission denied)\r\nmigration 13 root NOFD /proc/13/fd (opendir: Permission denied)\r\ncpuhp/0 15 root cwd unknown /proc/15/cwd (readlink: Permission denied)\r\ncpuhp/0 15 root rtd unknown /proc/15/root (readlink: Permission denied)\r\ncpuhp/0 15 root txt unknown /proc/15/exe (readlink: Permission denied)\r\ncpuhp/0 15 root NOFD /p"] [683.744872, "o", "roc/15/fd (opendir: Permission denied)\r\ncpuhp/1 16 root cwd unknown /proc/16/cwd (readlink: Permission denied)\r\ncpuhp/1 16 root rtd unknown /proc/16/root (readlink: Permission denied)\r\ncpuhp/1 16 root txt unknown /proc/16/exe (readlink: Permission denied)\r\ncpuhp/1 16 root NOFD /proc/16/fd (opendir: Permission denied)\r\nmigration 17 root cwd unknown /proc/17/cwd (readlink: Permission denied)\r\nmigration 17 root rtd unknown /proc/17/root (readlink: Permission denied)\r\nmigration 17 root txt unknown /proc/17/exe (readlink: Permission denied)\r\nmigration 17 root NOFD "] [683.74491, "o", " /proc/17/fd (opendir: Permission denied)\r\nksoftirqd 18 root cwd unknown /proc/18/cwd (readlink: Permission denied)\r\nksoftirqd 18 root rtd unknown /proc/18/root (readlink: Permission denied)\r\nksoftirqd 18 root txt unknown /proc/18/exe (readlink: Permission denied)\r\nksoftirqd 18 root NOFD /proc/18/fd (opendir: Permission denied)\r\nkworker/1 20 root cwd unknown /proc/20/cwd (readlink: Permission denied)\r\nkworker/1 20 root rtd unknown /proc/20/root (readlink: Permission denied)\r\nkworker/1 20 root txt unknown /proc/20/exe (readlink: Permission denied)\r\n"] [683.744933, "o", "kworker/1 20 root NOFD /proc/20/fd (opendir: Permission denied)\r\nkworker/u 22 root cwd unknown /proc/22/cwd (readlink: Permission denied)\r\nkworker/u 22 root rtd unknown /proc/22/root (readlink: Permission denied)\r\nkworker/u 22 root txt unknown /proc/22/exe (readlink: Permission denied)\r\nkworker/u 22 root NOFD /proc/22/fd (opendir: Permission denied)\r\nkdevtmpfs 23 root cwd unknown /proc/23/cwd (readlink: Permission denied)\r\nkdevtmpfs 23 root rtd unknown /proc/23/root (readlink: Permission denied)\r\nkdevtmpfs 23 root txt unknown "] [683.744957, "o", " /proc/23/exe (readlink: Permission denied)\r\nkdevtmpfs 23 root NOFD /proc/23/fd (opendir: Permission denied)\r\nnetns 24 root cwd unknown /proc/24/cwd (readlink: Permission denied)\r\nnetns 24 root rtd unknown /proc/24/root (readlink: Permission denied)\r\nnetns 24 root txt unknown /proc/24/exe (readlink: Permission denied)\r\nnetns 24 root NOFD /proc/24/fd (opendir: Permission denied)\r\nkauditd 25 root cwd unknown /proc/25/cwd (readlink: Permission denied)\r\nkauditd 25 root rtd unknown /proc/25/root (readlink: Permission denied)\r\nkauditd 25 root "] [683.745701, "o", "txt unknown /proc/25/exe (readlink: Permission denied)\r\nkauditd 25 root NOFD /proc/25/fd (opendir: Permission denied)\r\nkhungtask 26 root cwd unknown /proc/26/cwd (readlink: Permission denied)\r\nkhungtask 26 root rtd unknown /proc/26/root (readlink: Permission denied)\r\nkhungtask 26 root txt unknown /proc/26/exe (readlink: Permission denied)\r\nkhungtask 26 root NOFD /proc/26/fd (opendir: Permission denied)\r\noom_reape 27 root cwd unknown /proc/27/cwd (readlink: Permission denied)\r\noom_reape 27 root rtd unknown /proc/27/root (readlink: Permission deni"] [683.745759, "o", "ed)\r\noom_reape 27 root txt unknown /proc/27/exe (readlink: Permission denied)\r\noom_reape 27 root NOFD /proc/27/fd (opendir: Permission denied)\r\nwriteback 28 root cwd unknown /proc/28/cwd (readlink: Permission denied)\r\nwriteback 28 root rtd unknown /proc/28/root (readlink: Permission denied)\r\nwriteback 28 root txt unknown /proc/28/exe (readlink: Permission denied)\r\nwriteback 28 root NOFD /proc/28/fd (opendir: Permission denied)\r\nkcompactd 29 root cwd unknown /proc/29/cwd (readlink: Permission denied)\r\nkcompactd 29 root rtd unknown "] [683.745785, "o", " /proc/29/root (readlink: Permission denied)\r\nkcompactd 29 root txt unknown /proc/29/exe (readlink: Permission denied)\r\nkcompactd 29 root NOFD /proc/29/fd (opendir: Permission denied)\r\nksmd 30 root cwd unknown /proc/30/cwd (readlink: Permission denied)\r\nksmd 30 root rtd unknown /proc/30/root (readlink: Permission denied)\r\nksmd 30 root txt unknown /proc/30/exe (readlink: Permission denied)\r\nksmd 30 root NOFD /proc/30/fd (opendir: Permission denied)\r\nkintegrit 49 root cwd unknown /proc/49/cwd (readlink: Permission denied)\r\nkintegrit 49 roo"] [683.745841, "o", "t rtd unknown /proc/49/root (readlink: Permission denied)\r\nkintegrit 49 root txt unknown /proc/49/exe (readlink: Permission denied)\r\nkintegrit 49 root NOFD /proc/49/fd (opendir: Permission denied)\r\nkblockd 50 root cwd unknown /proc/50/cwd (readlink: Permission denied)\r\nkblockd 50 root rtd unknown /proc/50/root (readlink: Permission denied)\r\nkblockd 50 root txt unknown /proc/50/exe (readlink: Permission denied)\r\nkblockd 50 root NOFD /proc/50/fd (opendir: Permission denied)\r\nblkcg_pun 51 root cwd unknown /proc/51/cwd (readlink: Permission d"] [683.745875, "o", "enied)\r\nblkcg_pun 51 root rtd unknown /proc/51/root (readlink: Permission denied)\r\nblkcg_pun 51 root txt unknown /proc/51/exe (readlink: Permission denied)\r\nblkcg_pun 51 root NOFD /proc/51/fd (opendir: Permission denied)\r\nkworker/0 54 root cwd unknown /proc/54/cwd (readlink: Permission denied)\r\nkworker/0 54 root rtd unknown /proc/54/root (readlink: Permission denied)\r\nkworker/0 54 root txt unknown /proc/54/exe (readlink: Permission denied)\r\nkworker/0 54 root NOFD /proc/54/fd (opendir: Permission denied)\r\nkswapd0 55 root cwd unknown "] [683.745916, "o", " /proc/55/cwd (readlink: Permission denied)\r\nkswapd0 55 root rtd unknown /proc/55/root (readlink: Permission denied)\r\nkswapd0 55 root txt unknown /proc/55/exe (readlink: Permission denied)\r\nkswapd0 55 root NOFD /proc/55/fd (opendir: Permission denied)\r\nkthrotld 56 root cwd unknown /proc/56/cwd (readlink: Permission denied)\r\nkthrotld 56 root rtd unknown /proc/56/root (readlink: Permission denied)\r\nkthrotld 56 root txt unknown /proc/56/exe (readlink: Permission denied)\r\nkthrotld 56 root NOFD /proc/56/fd (opendir: Permission denied)\r\nacpi_ther 57 "] [683.745944, "o", " root cwd unknown /proc/57/cwd (readlink: Permission denied)\r\nacpi_ther 57 root rtd unknown /proc/57/root (readlink: Permission denied)\r\nacpi_ther 57 root txt unknown /proc/57/exe (readlink: Permission denied)\r\nacpi_ther 57 root NOFD /proc/57/fd (opendir: Permission denied)\r\nnvme-wq 58 root cwd unknown /proc/58/cwd (readlink: Permission denied)\r\nnvme-wq 58 root rtd unknown /proc/58/root (readlink: Permission denied)\r\nnvme-wq 58 root txt unknown /proc/58/exe (readlink: Permission denied)\r\nnvme-wq 58 root NOFD /proc/58/fd (opendir: Permissi"] [683.74597, "o", "on denied)\r\nnvme-rese 59 root cwd unknown /proc/59/cwd (readlink: Permission denied)\r\nnvme-rese 59 root rtd unknown /proc/59/root (readlink: Permission denied)\r\nnvme-rese 59 root txt unknown /proc/59/exe (readlink: Permission denied)\r\nnvme-rese 59 root NOFD /proc/59/fd (opendir: Permission denied)\r\nnvme-dele 60 root cwd unknown /proc/60/cwd (readlink: Permission denied)\r\nnvme-dele 60 root rtd unknown /proc/60/root (readlink: Permission denied)\r\nnvme-dele 60 root txt unknown /proc/60/exe (readlink: Permission denied)\r\nnvme-dele 60 root NOFD "] [683.746033, "o", " /proc/60/fd (opendir: Permission denied)\r\nkworker/u 62 root cwd unknown /proc/62/cwd (readlink: Permission denied)\r\nkworker/u 62 root rtd unknown /proc/62/root (readlink: Permission denied)\r\nkworker/u 62 root txt unknown /proc/62/exe (readlink: Permission denied)\r\nkworker/u 62 root NOFD /proc/62/fd (opendir: Permission denied)\r\nkworker/1 63 root cwd unknown /proc/63/cwd (readlink: Permission denied)\r\nkworker/1 63 root rtd unknown /proc/63/root (readlink: Permission denied)\r\nkworker/1 63 root txt unknown /proc/63/exe (readlink: Permission denied)\r\nkworker/1 63 "] [683.746061, "o", " root NOFD /proc/63/fd (opendir: Permission denied)\r\nipv6_addr 64 root cwd unknown /proc/64/cwd (readlink: Permission denied)\r\nipv6_addr 64 root rtd unknown /proc/64/root (readlink: Permission denied)\r\nipv6_addr 64 root txt unknown /proc/64/exe (readlink: Permission denied)\r\nipv6_addr 64 root NOFD /proc/64/fd (opendir: Permission denied)\r\nkworker/0 65 root cwd unknown /proc/65/cwd (readlink: Permission denied)\r\nkworker/0 65 root rtd unknown /proc/65/root (readlink: Permission denied)\r\nkworker/0 65 root txt unknown /proc/65/exe (readlink: P"] [683.746083, "o", "ermission denied)\r\nkworker/0 65 root NOFD /proc/65/fd (opendir: Permission denied)\r\nkstrp 74 root cwd unknown /proc/74/cwd (readlink: Permission denied)\r\nkstrp 74 root rtd unknown /proc/74/root (readlink: Permission denied)\r\nkstrp 74 root txt unknown /proc/74/exe (readlink: Permission denied)\r\nkstrp 74 root NOFD /proc/74/fd (opendir: Permission denied)\r\nkworker/u 79 root cwd unknown /proc/79/cwd (readlink: Permission denied)\r\nkworker/u 79 root rtd unknown /proc/79/root (readlink: Permission denied)\r\nkworker/u 79 root txt unknown "] [683.746105, "o", " /proc/79/exe (readlink: Permission denied)\r\nkworker/u 79 root NOFD /proc/79/fd (opendir: Permission denied)\r\nena 115 root cwd unknown /proc/115/cwd (readlink: Permission denied)\r\nena 115 root rtd unknown /proc/115/root (readlink: Permission denied)\r\nena 115 root txt unknown /proc/115/exe (readlink: Permission denied)\r\nena 115 root NOFD /proc/115/fd (opendir: Permission denied)\r\njbd2/nvme 134 root cwd unknown /proc/134/cwd (readlink: Permission denied)\r\njbd2/nvme 134 root rtd unknown /proc/134/root (readlink: Permission denied)\r\njbd2/nvme 134 "] [683.746606, "o", " root txt unknown /proc/134/exe (readlink: Permission denied)\r\njbd2/nvme 134 root NOFD /proc/134/fd (opendir: Permission denied)\r\next4-rsv- 135 root cwd unknown /proc/135/cwd (readlink: Permission denied)\r\next4-rsv- 135 root rtd unknown /proc/135/root (readlink: Permission denied)\r\next4-rsv- 135 root txt unknown /proc/135/exe (readlink: Permission denied)\r\next4-rsv- 135 root NOFD /proc/135/fd (opendir: Permission denied)\r\nsystemd-j 196 root cwd unknown /proc/196/cwd (readlink: Permission denied)\r\nsystemd-j 196 root rtd unknown /proc/19"] [683.746701, "o", "6/root (readlink: Permission denied)\r\nsystemd-j 196 root txt unknown /proc/196/exe (readlink: Permission denied)\r\nsystemd-j 196 root NOFD /proc/196/fd (opendir: Permission denied)\r\nsystemd-u 213 root cwd unknown /proc/213/cwd (readlink: Permission denied)\r\nsystemd-u 213 root rtd unknown /proc/213/root (readlink: Permission denied)\r\nsystemd-u 213 root txt unknown /proc/213/exe (readlink: Permission denied)\r\nsystemd-u 213 root NOFD /proc/213/fd (opendir: Permission denied)\r\nkworker/1 229 root cwd unknown /proc/229/cwd (readlink: Permission denied)\r\nkworker/1 229 root rtd"] [683.746728, "o", " unknown /proc/229/root (readlink: Permission denied)\r\nkworker/1 229 root txt unknown /proc/229/exe (readlink: Permission denied)\r\nkworker/1 229 root NOFD /proc/229/fd (opendir: Permission denied)\r\ncryptd 239 root cwd unknown /proc/239/cwd (readlink: Permission denied)\r\ncryptd 239 root rtd unknown /proc/239/root (readlink: Permission denied)\r\ncryptd 239 root txt unknown /proc/239/exe (readlink: Permission denied)\r\ncryptd 239 root NOFD /proc/239/fd (opendir: Permission denied)\r\ndhclient 390 root cwd unknown /proc/390/cwd (readlink: Permission"] [683.746751, "o", " denied)\r\ndhclient 390 root rtd unknown /proc/390/root (readlink: Permission denied)\r\ndhclient 390 root txt unknown /proc/390/exe (readlink: Permission denied)\r\ndhclient 390 root NOFD /proc/390/fd (opendir: Permission denied)\r\ndhclient 390 394 isc-worke root cwd unknown /proc/390/task/394/cwd (readlink: Permission denied)\r\ndhclient 390 394 isc-worke root rtd unknown /proc/390/task/394/root (readlink: Permission denied)\r\ndhclient 390 394 isc-worke root txt unknown /proc/390/task/394/exe (readlink: Permission denied)\r\ndhclient 390 394 isc-worke root NOFD /proc/390/task/394/fd (opendir: Permission denied)\r\ndhclient 390 395 isc-socke "] [683.746773, "o", "root cwd unknown /proc/390/task/395/cwd (readlink: Permission denied)\r\ndhclient 390 395 isc-socke root rtd unknown /proc/390/task/395/root (readlink: Permission denied)\r\ndhclient 390 395 isc-socke root txt unknown /proc/390/task/395/exe (readlink: Permission denied)\r\ndhclient 390 395 isc-socke root NOFD /proc/390/task/395/fd (opendir: Permission denied)\r\ndhclient 390 396 isc-timer root cwd unknown /proc/390/task/396/cwd (readlink: Permission denied)\r\ndhclient 390 396 isc-timer root rtd unknown /proc/390/task/396/root (readlink: Permission denied)\r\ndhclient 390 396 isc-timer root txt unknown /proc/390/task/396/exe (readlink: Permission denied)\r\ndhclient 390 396 isc-timer root NOFD "] [683.746795, "o", " /proc/390/task/396/fd (opendir: Permission denied)\r\ndhclient 465 root cwd unknown /proc/465/cwd (readlink: Permission denied)\r\ndhclient 465 root rtd unknown /proc/465/root (readlink: Permission denied)\r\ndhclient 465 root txt unknown /proc/465/exe (readlink: Permission denied)\r\ndhclient 465 root NOFD /proc/465/fd (opendir: Permission denied)\r\ndhclient 465 466 isc-worke root cwd unknown /proc/465/task/466/cwd (readlink: Permission denied)"] [683.748294, "o", "\r\ndhclient 465 466 isc-worke root rtd unknown /proc/465/task/466/root (readlink: Permission denied)\r\ndhclient 465 466 isc-worke root txt unknown /proc/465/task/466/exe (readlink: Permission denied)\r\ndhclient 465 466 isc-worke root NOFD /proc/465/task/466/fd (opendir: Permission denied)\r\ndhclient 465 467 isc-socke root cwd unknown /proc/465/task/467/cwd (readlink: Permission denied)\r\ndhclient 465 467 isc-socke root rtd unknown /proc/465/task/467/root (readlink: Permission denied)\r\ndhclient 465 467 isc-socke root txt unknown /proc/465/task/467/exe (readlink: Permission denied)\r\ndhclient 465 467 isc-socke root NOFD /proc/465/task/467/fd (opendir: Permission denied)\r\ndhclient 465 4"] [683.748365, "o", "68 isc-timer root cwd unknown /proc/465/task/468/cwd (readlink: Permission denied)\r\ndhclient 465 468 isc-timer root rtd unknown /proc/465/task/468/root (readlink: Permission denied)\r\ndhclient 465 468 isc-timer root txt unknown /proc/465/task/468/exe (readlink: Permission denied)\r\ndhclient 465 468 isc-timer root NOFD /proc/465/task/468/fd (opendir: Permission denied)\r\ngotty 560 admin cwd DIR 259,1 4096 272476 /home/admin\r\ngotty 560 admin rtd DIR 259,1 4096 2 /\r\ngotty 560 admin txt REG 259,1 13118554 262543 /usr/local/gotty\r\ngotty 560 admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\ngotty 560 "] [683.748393, "o", " admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\ngotty 560 admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\ngotty 560 admin 0r CHR 1,3 0t0 4 /dev/null\r\ngotty 560 admin 1u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 admin 2u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 admin 3u a_inode 0,12 0 9350 [eventpoll]\r\ngotty 560 admin 4r FIFO 0,11 0t0 10540 pipe\r\ngotty 560 admin 5w FIFO 0,11 0t0 10540 pipe\r\ngotty 560 admin 6u IPv6 10544 0t0 TCP *:http-alt (LISTEN)\r\n"] [683.750801, "o", "gotty 560 admin 7u IPv6 11853 0t0 TCP ip-172-31-45-67.us-east-2.compute.internal:http-alt->ip-172-31-16-109.us-east-2.compute.internal:59956 (ESTABLISHED)\r\n"] [683.751095, "o", "gotty 560 admin 8u CHR 5,2 0t0 83 /dev/ptmx\r\ngotty 560 568 gotty admin cwd DIR 259,1 4096 272476 /home/admin\r\ngotty 560 568 gotty admin rtd DIR 259,1 4096 2 /\r\ngotty 560 568 gotty admin txt REG 259,1 13118554 262543 /usr/local/gotty\r\ngotty 560 568 gotty admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\ngotty 560 568 gotty admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\ngotty 560 568 gotty admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\ngotty 560 568 gotty admin 0r CHR 1,3 0t0 4 /dev/null\r\ngotty 560 568 gotty admin 1u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 568 go"] [683.751133, "o", "tty admin 2u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 568 gotty admin 3u a_inode 0,12 0 9350 [eventpoll]\r\ngotty 560 568 gotty admin 4r FIFO 0,11 0t0 10540 pipe\r\ngotty 560 568 gotty admin 5w FIFO 0,11 0t0 10540 pipe\r\ngotty 560 568 gotty admin 6u IPv6 10544 0t0 TCP *:http-alt (LISTEN)\r\ngotty 560 568 gotty admin 7u IPv6 11853 0t0 TCP ip-172-31-45-67.us-east-2.compute.internal:http-alt->ip-172-31-16-109.us-east-2.compute.internal:59956 (ESTABLISHED)\r\ngotty 560 568 gotty admin 8u CHR 5,2 0t0 83 /dev/ptmx\r\ngotty 560 569 gotty admin cwd DIR 259,1 4096 272476 /home/admin\r\ngotty 560 569 gotty admin rtd DIR 259,1 4096 2 /\r\ngotty 560 569 gotty "] [683.751153, "o", " admin txt REG 259,1 13118554 262543 /usr/local/gotty\r\ngotty 560 569 gotty admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\ngotty 560 569 gotty admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\ngotty 560 569 gotty admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\ngotty 560 569 gotty admin 0r CHR 1,3 0t0 4 /dev/null\r\ngotty 560 569 gotty admin 1u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 569 gotty admin 2u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 569 gotty admin 3u a_inode 0,12 0 9350 [eventpoll]\r\ngotty 560 569 gotty admin 4r FIFO 0,11 0t0 10540 pipe\r\ngotty 560 569 gotty admin 5w "] [683.751171, "o", " FIFO 0,11 0t0 10540 pipe\r\ngotty 560 569 gotty admin 6u IPv6 10544 0t0 TCP *:http-alt (LISTEN)\r\ngotty 560 569 gotty admin 7u IPv6 11853 0t0 TCP ip-172-31-45-67.us-east-2.compute.internal:http-alt->ip-172-31-16-109.us-east-2.compute.internal:59956 (ESTABLISHED)\r\n"] [683.751345, "o", "gotty 560 569 gotty admin 8u CHR 5,2 0t0 83 /dev/ptmx\r\ngotty 560 570 gotty admin cwd DIR 259,1 4096 272476 /home/admin\r\ngotty 560 570 gotty admin rtd DIR 259,1 4096 2 /\r\ngotty 560 570 gotty admin txt REG 259,1 13118554 262543 /usr/local/gotty\r\ngotty 560 570 gotty admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\ngotty 560 570 gotty admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\ngotty 560 570 gotty admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\n"] [683.751391, "o", "gotty 560 570 gotty admin 0r CHR 1,3 0t0 4 /dev/null"] [683.751441, "o", "\r\n"] [683.752181, "o", "gotty 560 570 gotty admin 1u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 570 gotty admin 2u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 570 gotty admin 3u a_inode 0,12 0 9350 [eventpoll]\r\ngotty 560 570 gotty admin 4r FIFO 0,11 0t0 10540 pipe\r\ngotty 560 570 gotty admin 5w FIFO 0,11 0t0 10540 pipe\r\ngotty 560 570 gotty admin 6u IPv6 10544 0t0 TCP *:http-alt (LISTEN)\r\ngotty 560 570 gotty admin 7u IPv6 11853 0t0 TCP ip-172-31-45-67.us-east-2.compute.internal:http-alt->ip-172-31-16-109.us-east-2.compute.internal:59956 (ESTABLISHED)\r\ngotty 560 570 gotty admin 8u CHR 5,2 0t0 83 /dev/ptmx\r\ngotty 560 572 gotty admin cwd DIR 259,1 4096 272476 /home/admin\r\n"] [683.752216, "o", "gotty 560 572 gotty admin rtd DIR 259,1 4096 2 /\r\ngotty 560 572 gotty admin txt REG 259,1 13118554 262543 /usr/local/gotty\r\ngotty 560 572 gotty admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\ngotty 560 572 gotty admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\ngotty 560 572 gotty admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\ngotty 560 572 gotty admin 0r CHR 1,3 0t0 4 /dev/null\r\ngotty 560 572 gotty admin 1u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 572 gotty admin 2u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 572 gotty admin 3u a_inode 0,12 0 9350 [eventpoll]\r\ngotty 560 572 "] [683.75226, "o", "gotty admin 4r FIFO 0,11 0t0 10540 pipe\r\ngotty 560 572 gotty admin 5w FIFO 0,11 0t0 10540 pipe\r\ngotty 560 572 gotty admin 6u IPv6 10544 0t0 TCP *:http-alt (LISTEN)\r\ngotty 560 572 gotty admin 7u IPv6 11853 0t0 TCP ip-172-31-45-67.us-east-2.compute.internal:http-alt->ip-172-31-16-109.us-east-2.compute.internal:59956 (ESTABLISHED)\r\ngotty 560 572 gotty admin 8u CHR 5,2 0t0 83 /dev/ptmx\r\ngotty 560 582 gotty admin cwd DIR 259,1 4096 272476 /home/admin\r\ngotty 560 582 gotty admin rtd DIR 259,1 4096 2 /\r\ngotty 560 582 gotty admin txt REG 259,1 13118554 262543 /usr/local/gotty\r\ngotty 560 582 gotty admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.s"] [683.752282, "o", "o\r\ngotty 560 582 gotty admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\ngotty 560 582 gotty admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\ngotty 560 582 gotty admin 0r CHR 1,3 0t0 4 /dev/null\r\ngotty 560 582 gotty admin 1u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 582 gotty admin 2u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 582 gotty admin 3u a_inode 0,12 0 9350 [eventpoll]\r\ngotty 560 582 gotty admin 4r FIFO 0,11 0t0 10540 pipe\r\ngotty 560 582 gotty admin 5w FIFO 0,11 0t0 10540 pipe\r\ngotty 560 582 gotty admin 6u IPv6 10544 0t0 TCP *:http-alt (LISTEN)\r\ngotty 560 582 gotty admin "] [683.752911, "o", "7u IPv6 11853 0t0 TCP ip-172-31-45-67.us-east-2.compute.internal:http-alt->ip-172-31-16-109.us-east-2.compute.internal:59956 (ESTABLISHED)\r\ngotty 560 582 gotty admin 8u CHR 5,2 0t0 83 /dev/ptmx\r\ngotty 560 708 gotty admin cwd DIR 259,1 4096 272476 /home/admin\r\ngotty 560 708 gotty admin rtd DIR 259,1 4096 2 /\r\ngotty 560 708 gotty admin txt REG 259,1 13118554 262543 /usr/local/gotty\r\ngotty 560 708 gotty admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\ngotty 560 708 gotty admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\ngotty 560 708 gotty admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\ngotty 560 708 gotty admin 0r CHR "] [683.752984, "o", " 1,3 0t0 4 /dev/null\r\ngotty 560 708 gotty admin 1u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 708 gotty admin 2u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 708 gotty admin 3u a_inode 0,12 0 9350 [eventpoll]\r\ngotty 560 708 gotty admin 4r FIFO 0,11 0t0 10540 pipe\r\ngotty 560 708 gotty admin 5w FIFO 0,11 0t0 10540 pipe\r\ngotty 560 708 gotty admin 6u IPv6 10544 0t0 TCP *:http-alt (LISTEN)\r\ngotty 560 708 gotty admin 7u IPv6 11853 0t0 TCP ip-172-31-45-67.us-east-2.compute.internal:http-alt->ip-172-31-16-109.us-east-2.compute.internal:59956 (ESTABLISHED)\r\ngotty 560 708 gotty admin 8u CHR 5,2 0t0 83 /dev/ptmx\r\ngotty 560 709 gotty admin cwd DIR "] [683.753033, "o", " 259,1 4096 272476 /home/admin\r\ngotty 560 709 gotty admin rtd DIR 259,1 4096 2 /\r\ngotty 560 709 gotty admin txt REG 259,1 13118554 262543 /usr/local/gotty\r\ngotty 560 709 gotty admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\ngotty 560 709 gotty admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\ngotty 560 709 gotty admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\ngotty 560 709 gotty admin 0r CHR 1,3 0t0 4 /dev/null\r\ngotty 560 709 gotty admin 1u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 709 gotty admin 2u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 709 gotty admin 3u a_inode 0,12 "] [683.753072, "o", "0 9350 [eventpoll]\r\ngotty 560 709 gotty admin 4r FIFO 0,11 0t0 10540 pipe\r\ngotty 560 709 gotty admin 5w FIFO 0,11 0t0 10540 pipe\r\ngotty 560 709 gotty admin 6u IPv6 10544 0t0 TCP *:http-alt (LISTEN)\r\ngotty 560 709 gotty admin 7u IPv6 11853 0t0 TCP ip-172-31-45-67.us-east-2.compute.internal:http-alt->ip-172-31-16-109.us-east-2.compute.internal:59956 (ESTABLISHED)\r\ngotty 560 709 gotty admin 8u CHR 5,2 0t0 83 /dev/ptmx\r\ngotty 560 711 gotty admin cwd DIR 259,1 4096 272476 /home/admin\r\ngotty 560 711 gotty admin rtd DIR 259,1 4096 2 /\r\ngotty 560 711 gotty admin txt REG 259,1 13118554 262543 /usr/local/gotty\r\ngotty 560 711 gotty admin mem REG 259,1 1901536 15"] [683.75311, "o", "077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\ngotty 560 711 gotty admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\ngotty 560 711 gotty admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\ngotty 560 711 gotty admin 0r CHR 1,3 0t0 4 /dev/null\r\ngotty 560 711 gotty admin 1u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 711 gotty admin 2u unix 0x00000000003967db 0t0 10487 type=STREAM\r\ngotty 560 711 gotty admin 3u a_inode 0,12 0 9350 [eventpoll]\r\ngotty 560 711 gotty admin 4r FIFO 0,11 0t0 10540 pipe\r\ngotty 560 711 gotty admin 5w FIFO 0,11 0t0 10540 pipe\r\ngotty 560 711 gotty admin 6u IPv6 10544 0t0 TCP *:http-alt (LISTEN)\r\ngot"] [683.753159, "o", "ty 560 711 gotty admin 7u IPv6 11853 0t0 TCP ip-172-31-45-67.us-east-2.compute.internal:http-alt->ip-172-31-16-109.us-east-2.compute.internal:59956 (ESTABLISHED)\r\ngotty 560 711 gotty admin 8u CHR 5,2 0t0 83 /dev/ptmx\r\nsadagent 561 admin cwd DIR 259,1 4096 264662 /home/admin/agent\r\nsadagent 561 admin rtd DIR 259,1 4096 2 /\r\nsadagent 561 admin txt REG 259,1 11397096 262708 /home/admin/agent/sadagent\r\nsadagent 561 admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nsadagent 561 admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\nsadagent 561 admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\nsada"] [683.753187, "o", "gent 561 admin 0r CHR 1,3 0t0 4 /dev/null\r\nsadagent 561 admin 1u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 admin 2u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 admin 3w REG 259,1 0 264663 /home/admin/agent/sadagent.txt\r\nsadagent 561 admin 4u a_inode 0,12 0 9350 [eventpoll]\r\nsadagent 561 admin 5r FIFO 0,11 0t0 11476 pipe\r\nsadagent 561 admin 6w FIFO 0,11 0t0 11476 pipe\r\nsadagent 561 admin 7u IPv6 11482 0t0 TCP *:6767 (LISTEN)\r\nsadagent 561 571 sadagent admin cwd DIR 259,1 4096 264662 /home/admin/agent\r\nsadagent 561 571 sadagent admin rtd DIR 259,1 4096 "] [683.753224, "o", "2 /\r\nsadagent 561 571 sadagent admin txt REG 259,1 11397096 262708 /home/admin/agent/sadagent\r\nsadagent 561 571 sadagent admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nsadagent 561 571 sadagent admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\nsadagent 561 571 sadagent admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\nsadagent 561 571 sadagent admin 0r CHR 1,3 0t0 4 /dev/null\r\nsadagent 561 571 sadagent admin 1u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 571 sadagent admin 2u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 571 sadagent admin 3w REG 259,1 0 264663 /home/admin/agent/sadagent.txt\r\nsadagent 561 571 sadagent admin 4u a_inode 0,12 "] [683.753268, "o", " 0 9350 [eventpoll]\r\nsadagent 561 571 sadagent admin 5r FIFO 0,11 0t0 11476 pipe\r\nsadagent 561 571 sadagent admin 6w FIFO 0,11 0t0 11476 pipe\r\nsadagent 561 571 sadagent admin 7u IPv6 11482 0t0 TCP *:6767 (LISTEN)\r\nsadagent 561 573 sadagent admin cwd DIR 259,1 4096 264662 /home/admin/agent\r\nsadagent 561 573 sadagent admin rtd DIR 259,1 4096 2 /\r\nsadagent 561 573 sadagent admin txt REG 259,1 11397096 262708 /home/admin/agent/sadagent\r\nsadagent 561 573 sadagent admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nsadagent 561 573 sadagent admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\nsadagent 561 573 sadagent admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gn"] [683.753297, "o", "u/ld-2.31.so\r\nsadagent 561 573 sadagent admin 0r CHR 1,3 0t0 4 /dev/null\r\nsadagent 561 573 sadagent admin 1u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 573 sadagent admin 2u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 573 sadagent admin 3w REG 259,1 0 264663 /home/admin/agent/sadagent.txt\r\nsadagent 561 573 sadagent admin 4u a_inode 0,12 0 9350 [eventpoll]\r\nsadagent 561 573 sadagent admin 5r FIFO 0,11 0t0 11476 pipe\r\nsadagent 561 573 sadagent admin 6w FIFO 0,11 0t0 11476 pipe\r\nsadagent 561 573 sadagent admin 7u IPv6 11482 0t0 TCP *:6767 (LISTEN)\r\nsadagent 561 574 sadagent admin cwd DIR 259,1 4096 264662 /home/admin/agent\r\nsadagent 561 574 sadagent admin rtd DIR 25"] [683.753333, "o", "9,1 4096 2 /\r\nsadagent 561 574 sadagent admin txt REG 259,1 11397096 262708 /home/admin/agent/sadagent\r\nsadagent 561 574 sadagent admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nsadagent 561 574 sadagent admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\nsadagent 561 574 sadagent admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\nsadagent 561 574 sadagent admin 0r CHR 1,3 0t0 4 /dev/null\r\nsadagent 561 574 sadagent admin 1u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 574 sadagent admin 2u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 574 sadagent admin 3w REG 259,1 0 264663 /home/admin/agent/sadagent.txt\r\nsadagent 561 574 sadagent admin 4u a_inode "] [683.753368, "o", " 0,12 0 9350 [eventpoll]\r\nsadagent 561 574 sadagent admin 5r FIFO 0,11 0t0 11476 pipe\r\nsadagent 561 574 sadagent admin 6w FIFO 0,11 0t0 11476 pipe\r\nsadagent 561 574 sadagent admin 7u IPv6 11482 0t0 TCP *:6767 (LISTEN)\r\nsadagent 561 575 sadagent admin cwd DIR 259,1 4096 264662 /home/admin/agent\r\nsadagent 561 575 sadagent admin rtd DIR 259,1 4096 2 /\r\nsadagent 561 575 sadagent admin txt REG 259,1 11397096 262708 /home/admin/agent/sadagent\r\nsadagent 561 575 sadagent admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nsadagent 561 575 sadagent admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\nsadagent 561 575 sadagent admin mem REG 259,1 177928 13 /usr/l"] [683.753413, "o", "ib/x86_64-linux-gnu/ld-2.31.so\r\nsadagent 561 575 sadagent admin 0r CHR 1,3 0t0 4 /dev/null\r\nsadagent 561 575 sadagent admin 1u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 575 sadagent admin 2u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 575 sadagent admin 3w REG 259,1 0 264663 /home/admin/agent/sadagent.txt\r\nsadagent 561 575 sadagent admin 4u a_inode 0,12 0 9350 [eventpoll]\r\nsadagent 561 575 sadagent admin 5r FIFO 0,11 0t0 11476 pipe\r\nsadagent 561 575 sadagent admin 6w FIFO 0,11 0t0 11476 pipe\r\nsadagent 561 575 sadagent admin 7u IPv6 11482 0t0 TCP *:6767 (LISTEN)\r\nsadagent 561 576 sadagent admin cwd DIR 259,1 4096 264662 /home/admin/agent\r\nsadagent 561 576 sadagent admin rtd D"] [683.753437, "o", "IR 259,1 4096 2 /\r\nsadagent 561 576 sadagent admin txt REG 259,1 11397096 262708 /home/admin/agent/sadagent\r\nsadagent 561 576 sadagent admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nsadagent 561 576 sadagent admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\nsadagent 561 576 sadagent admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\nsadagent 561 576 sadagent admin 0r CHR 1,3 0t0 4 /dev/null\r\nsadagent 561 576 sadagent admin 1u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 576 sadagent admin 2u unix 0x000000004a741e2d 0t0 10495 type=STREAM\r\nsadagent 561 576 sadagent admin 3w REG 259,1 0 264663 /home/admin/agent/sadagent.txt\r\nsadagent 561 576 sadagent admin "] [683.75347, "o", " 4u a_inode 0,12 0 9350 [eventpoll]\r\nsadagent 561 576 sadagent admin 5r FIFO 0,11 0t0 11476 pipe\r\n"] [683.753488, "o", "sadagent 561 576 sadagent admin 6w FIFO 0,11 0t0 11476 pipe\r\n"] [683.755427, "o", "sadagent 561 576 sadagent admin 7u IPv6 11482 0t0 TCP *:6767 (LISTEN)\r\ncron 564 root cwd unknown /proc/564/cwd (readlink: Permission denied)\r\ncron 564 root rtd unknown /proc/564/root (readlink: Permission denied)\r\ncron 564 root txt unknown /proc/564/exe (readlink: Permission denied)\r\ncron 564 root NOFD /proc/564/fd (opendir: Permission denied)\r\ndbus-daem 565 messagebus cwd unknown /proc/565/cwd (readlink: Permission denied)\r\ndbus-daem 565 messagebus rtd unknown /proc/565/root (readlink: Permission denied)\r\ndbus-daem 565 messagebus txt unknown /proc/565/exe (re"] [683.755478, "o", "adlink: Permission denied)\r\ndbus-daem 565 messagebus NOFD /proc/565/fd (opendir: Permission denied)\r\npython3 567 root cwd unknown /proc/567/cwd (readlink: Permission denied)\r\npython3 567 root rtd unknown /proc/567/root (readlink: Permission denied)\r\npython3 567 root txt unknown /proc/567/exe (readlink: Permission denied)\r\npython3 567 root NOFD /proc/567/fd (opendir: Permission denied)\r\nrsyslogd 577 root cwd unknown /proc/577/cwd (readlink: Permission denied)\r\nrsyslogd 577 root rtd unknown /proc/577/root (readlink: Permission denied)\r\nrsyslogd 577 root txt unknow"] [683.755645, "o", "n /proc/577/exe (readlink: Permission denied)\r\nrsyslogd 577 root NOFD /proc/577/fd (opendir: Permission denied)\r\nrsyslogd 577 583 in:imuxso root cwd unknown /proc/577/task/583/cwd (readlink: Permission denied)\r\nrsyslogd 577 583 in:imuxso root rtd unknown /proc/577/task/583/root (readlink: Permission denied)\r\nrsyslogd 577 583 in:imuxso root txt unknown /proc/577/task/583/exe (readlink: Permission denied)\r\nrsyslogd 577 583 in:imuxso root NOFD /proc/577/task/583/fd (opendir: Permission denied)\r\nrsyslogd 577 584 in:imklog root cwd unknown /proc/577/task/584/cwd (readlink: Permission denied)\r\nrsyslogd 577 584 in:imklog root rtd unknown "] [683.755705, "o", "/proc/577/task/584/root (readlink: Permission denied)\r\nrsyslogd 577 584 in:imklog root txt unknown /proc/577/task/584/exe (readlink: Permission denied)\r\nrsyslogd 577 584 in:imklog root NOFD /proc/577/task/584/fd (opendir: Permission denied)\r\nrsyslogd 577 587 rs:main root cwd unknown /proc/577/task/587/cwd (readlink: Permission denied)\r\nrsyslogd 577 587 rs:main root rtd unknown /proc/577/task/587/root (readlink: Permission denied)\r\nrsyslogd 577 587 rs:main root txt unknown /proc/577/task/587/exe (readlink: Permission denied)\r\nrsyslogd 577 587 rs:main root NOFD /proc/577/task/587/fd (opendir: Permission denied)\r\nsystemd-l 580 root cwd unknown /proc/580/cwd (rea"] [683.755736, "o", "dlink: Permission denied)\r\nsystemd-l 580 root rtd unknown /proc/580/root (readlink: Permission denied)\r\nsystemd-l 580 root txt unknown /proc/580/exe (readlink: Permission denied)\r\nsystemd-l 580 root NOFD /proc/580/fd (opendir: Permission denied)\r\nagetty 585 root cwd unknown /proc/585/cwd (readlink: Permission denied)\r\nagetty 585 root rtd unknown /proc/585/root (readlink: Permission denied)\r\nagetty 585 root txt unknown /proc/585/exe (readlink: Permission denied)\r\nagetty 585 root NOFD /proc/585/fd (opendir: Permission denied)\r\nagetty 586 root cwd unknown"] [683.755759, "o", " /proc/586/cwd (readlink: Permission denied)\r\nagetty 586 root rtd unknown /proc/586/root (readlink: Permission denied)\r\nagetty 586 root txt unknown /proc/586/exe (readlink: Permission denied)\r\nagetty 586 root NOFD /proc/586/fd (opendir: Permission denied)\r\nsshd 588 root cwd unknown /proc/588/cwd (readlink: Permission denied)\r\nsshd 588 root rtd unknown /proc/588/root (readlink: Permission denied)\r\nsshd 588 root txt unknown /proc/588/exe (readlink: Permission denied)\r\nsshd 588 root NOFD /proc/588/fd (opendir: Permission denied)\r\n"] [683.755779, "o", "chronyd 590 _chrony cwd unknown /proc/590/cwd (readlink: Permission denied)\r\nchronyd 590 _chrony rtd unknown /proc/590/root (readlink: Permission denied)\r\nchronyd 590 _chrony txt unknown /proc/590/exe (readlink: Permission denied)\r\nchronyd 590 _chrony NOFD /proc/590/fd (opendir: Permission denied)\r\nchronyd 591 _chrony cwd unknown /proc/591/cwd (readlink: Permission denied)\r\nchronyd 591 _chrony rtd unknown /proc/591/root (readlink: Permission denied)\r\nchronyd 591 _chrony txt unknown /proc/591/exe (readlink: Permission denied)\r\nchronyd 591 _chrony NOFD "] [683.756405, "o", " /proc/591/fd (opendir: Permission denied)\r\nunattende 598 root cwd unknown /proc/598/cwd (readlink: Permission denied)\r\nunattende 598 root rtd unknown /proc/598/root (readlink: Permission denied)\r\nunattende 598 root txt unknown /proc/598/exe (readlink: Permission denied)\r\nunattende 598 root NOFD /proc/598/fd (opendir: Permission denied)\r\nbash 710 admin cwd DIR 259,1 4096 272476 /home/admin\r\nbash 710 admin rtd DIR 259,1 4096 2 /\r\nbash 710 admin txt REG 259,1 1234376 1419 /usr/bin/bash\r\nbash 710 admin mem REG 259,1 51696 15085 /usr/lib/x86_64-linux-gnu/libnss_files-"] [683.756455, "o", "2.31.so\r\nbash 710 admin mem REG 259,1 346132 2398 /usr/lib/locale/C.UTF-8/LC_CTYPE\r\nbash 710 admin mem REG 259,1 50 2408 /usr/lib/locale/C.UTF-8/LC_NUMERIC\r\nbash 710 admin mem REG 259,1 3360 4612 /usr/lib/locale/C.UTF-8/LC_TIME\r\nbash 710 admin mem REG 259,1 1519554 2396 /usr/lib/locale/C.UTF-8/LC_COLLATE\r\nbash 710 admin mem REG 259,1 270 2404 /usr/lib/locale/C.UTF-8/LC_MONETARY\r\nbash 710 admin mem REG 259,1 48 2402 /usr/lib/locale/C.UTF-8/LC_MESSAGES/SYS_LC_MESSAGES\r\nbash 710 admin mem REG 259,1 27002 15342 /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache\r\nbash 710 admin mem REG 259,1 1901536 15077 /usr/lib/x86_"] [683.75648, "o", "64-linux-gnu/libc-2.31.so\r\nbash 710 admin mem REG 259,1 18688 15078 /usr/lib/x86_64-linux-gnu/libdl-2.31.so\r\nbash 710 admin mem REG 259,1 187792 4762 /usr/lib/x86_64-linux-gnu/libtinfo.so.6.2\r\nbash 710 admin mem REG 259,1 34 2493 /usr/lib/locale/C.UTF-8/LC_PAPER\r\nbash 710 admin mem REG 259,1 62 2406 /usr/lib/locale/C.UTF-8/LC_NAME\r\nbash 710 admin mem REG 259,1 131 2395 /usr/lib/locale/C.UTF-8/LC_ADDRESS\r\nbash 710 admin mem REG 259,1 47 4610 /usr/lib/locale/C.UTF-8/LC_TELEPHONE\r\nbash 710 admin mem REG 259,1 23 2400 /usr/lib/locale/C.UTF-8/LC_MEASUREMENT\r\nbash 710 admin mem REG 259,1 177928 13 /usr/lib/x86"] [683.756512, "o", "_64-linux-gnu/ld-2.31.so\r\nbash 710 admin mem REG 259,1 252 2399 /usr/lib/locale/C.UTF-8/LC_IDENTIFICATION\r\nbash 710 admin 0u CHR 136,0 0t0 3 /dev/pts/0\r\nbash 710 admin 1u CHR 136,0 0t0 3 /dev/pts/0\r\nbash 710 admin 2u CHR 136,0 0t0 3 /dev/pts/0\r\nbash 710 admin 255u CHR 136,0 0t0 3 /dev/pts/0\r\nasciinema 715 admin cwd DIR 259,1 4096 272476 /home/admin\r\nasciinema 715 admin rtd DIR 259,1 4096 2 /\r\nasciinema 715 admin txt REG 259,1 5479736 5453 /usr/bin/python3.9\r\nasciinema 715 admin mem REG 259,1 30776 9754 /usr/lib/x86_64-linux-gnu/libuuid.so.1.3.0\r\nasciinema 715 "] [683.756981, "o", " admin mem REG 259,1 31080 132285 /usr/lib/python3.9/lib-dynload/termios.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 admin mem REG 259,1 48808 132261 /usr/lib/python3.9/lib-dynload/_json.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 admin mem REG 259,1 597792 2762 /usr/lib/x86_64-linux-gnu/libssl.so.1.1\r\nasciinema 715 admin mem REG 259,1 181408 131735 /usr/lib/python3.9/lib-dynload/_ssl.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 admin mem REG 259,1 3076960 2759 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1\r\nasciinema 715 admin mem REG 259,1 67632 131731 /usr/lib/python3.9/lib-dynload/_hashlib.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 admin mem REG 259,1 158400 1424 /usr/lib/x86_64-linux-gnu/liblzma.so.5.2.5\r\na"] [683.757038, "o", "sciinema 715 admin mem REG 259,1 41568 132263 /usr/lib/python3.9/lib-dynload/_lzma.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 admin mem REG 259,1 19512 132267 /usr/lib/python3.9/lib-dynload/_queue.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 admin DEL REG 0,23 4 /dev/shm/tF6Ajg\r\nasciinema 715 admin DEL REG 0,23 3 /dev/shm/5HQLwf\r\nasciinema 715 admin mem REG 259,1 19944 132265 /usr/lib/python3.9/lib-dynload/_multiprocessing.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 admin mem REG 259,1 74688 481 /usr/lib/x86_64-linux-gnu/libbz2.so.1.0.4\r\nasciinema 715 admin mem REG 259,1 28352 132246 /usr/lib/python3.9/lib-dynload/_bz2.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 "] [683.757063, "o", " admin mem REG 259,1 27002 15342 /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache\r\nasciinema 715 admin mem REG 259,1 346132 2398 /usr/lib/locale/C.UTF-8/LC_CTYPE\r\nasciinema 715 admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nasciinema 715 admin mem REG 259,1 113088 2346 /usr/lib/x86_64-linux-gnu/libz.so.1.2.11\r\nasciinema 715 admin mem REG 259,1 186496 1068 /usr/lib/x86_64-linux-gnu/libexpat.so.1.6.12\r\nasciinema 715 admin mem REG 259,1 1321344 15079 /usr/lib/x86_64-linux-gnu/libm-2.31.so\r\nasciinema 715 admin mem REG 259,1 14720 15092 /usr/lib/x86_64-linux-gnu/libutil-2.31.so\r\nasciinema 715 admin mem REG 259,1 18688 15078 /usr/lib/x86_64-linux-gnu/libdl-2.31."] [683.757101, "o", "so\r\nasciinema 715 admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\nasciinema 715 admin mem REG 259,1 14536 132274 /usr/lib/python3.9/lib-dynload/_uuid.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\nasciinema 715 admin DEL REG 0,23 2 /dev/shm/nAqR5h\r\nasciinema 715 admin 0u CHR 136,0 0t0 3 /dev/pts/0\r\nasciinema 715 admin 1u CHR 136,0 0t0 3 /dev/pts/0\r\nasciinema 715 admin 2u CHR 136,0 0t0 3 /dev/pts/0\r\nasciinema 715 admin 3r FIFO 0,11 0t0 10905 pipe\r\nasciinema 715 admin 4w FIFO 0,11 0t0 109"] [683.757297, "o", "05 pipe\r\nasciinema 715 admin 5r FIFO 0,11 0t0 10906 pipe\r\nasciinema 715 admin 6u CHR 5,2 0t0 83 /dev/ptmx\r\nasciinema 715 admin 7r FIFO 0,11 0t0 10908 pipe\r\nasciinema 715 admin 8w FIFO 0,11 0t0 10907 pipe\r\nasciinema 715 admin 9w FIFO 0,11 0t0 10908 pipe\r\nasciinema 715 722 asciinema admin cwd DIR 259,1 4096 272476 /home/admin\r\nasciinema 715 722 asciinema admin rtd DIR 259,1 4096 2 /\r\nasciinema 715 722 asciinema admin txt REG 259,1 5479736 5453 /usr/bin/python3.9\r\nasciinema 715 722 asciinema admin mem REG 259,1 30776 9754 /usr/lib/x86_64-linux-gnu/libuuid.so.1.3.0\r\nasciinema 715 722 asciinema admin mem REG 259,1 31080 132285 "] [683.757327, "o", "/usr/lib/python3.9/lib-dynload/termios.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 48808 132261 /usr/lib/python3.9/lib-dynload/_json.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 597792 2762 /usr/lib/x86_64-linux-gnu/libssl.so.1.1\r\nasciinema 715 722 asciinema admin mem REG 259,1 181408 131735 /usr/lib/python3.9/lib-dynload/_ssl.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 3076960 2759 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1\r\nasciinema 715 722 asciinema admin mem REG 259,1 67632 131731 /usr/lib/python3.9/lib-dynload/_hashlib.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 158400 1424 /usr/lib/x86_64-linux-gnu/liblzma.so.5.2.5\r\nasciinema 715 722 asciinema admin mem REG 259,1 "] [683.757358, "o", " 41568 132263 /usr/lib/python3.9/lib-dynload/_lzma.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 19512 132267 /usr/lib/python3.9/lib-dynload/_queue.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 722 asciinema admin DEL REG 0,23 4 /dev/shm/tF6Ajg\r\nasciinema 715 722 asciinema admin DEL REG 0,23 3 /dev/shm/5HQLwf\r\nasciinema 715 722 asciinema admin mem REG 259,1 19944 132265 /usr/lib/python3.9/lib-dynload/_multiprocessing.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 74688 481 /usr/lib/x86_64-linux-gnu/libbz2.so.1.0.4\r\nasciinema 715 722 asciinema admin mem REG 259,1 28352 132246 /usr/lib/python3.9/lib-dynload/_bz2.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 27002 15342 /usr/lib/x86_64"] [683.75738, "o", "-linux-gnu/gconv/gconv-modules.cache\r\nasciinema 715 722 asciinema admin mem REG 259,1 346132 2398 /usr/lib/locale/C.UTF-8/LC_CTYPE\r\nasciinema 715 722 asciinema admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 113088 2346 /usr/lib/x86_64-linux-gnu/libz.so.1.2.11\r\nasciinema 715 722 asciinema admin mem REG 259,1 186496 1068 /usr/lib/x86_64-linux-gnu/libexpat.so.1.6.12\r\nasciinema 715 722 asciinema admin mem REG 259,1 1321344 15079 /usr/lib/x86_64-linux-gnu/libm-2.31.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 14720 15092 /usr/lib/x86_64-linux-gnu/libutil-2.31.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 18688 15078 /usr/lib/x86_64-linux-gnu/libdl-2.31.so\r\nasciinema 715 722 asciinema admin mem REG 2"] [683.757949, "o", "59,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 14536 132274 /usr/lib/python3.9/lib-dynload/_uuid.cpython-39-x86_64-linux-gnu.so\r\nasciinema 715 722 asciinema admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\nasciinema 715 722 asciinema admin DEL REG 0,23 2 /dev/shm/nAqR5h\r\nasciinema 715 722 asciinema admin 0u CHR 136,0 0t0 3 /dev/pts/0\r\nasciinema 715 722 asciinema admin 1u CHR 136,0 0t0 3 /dev/pts/0\r\nasciinema 715 722 asciinema admin 2u CHR 136,0 0t0 3 /dev/pts/0\r\nasciinema 715 722 asciinema admin 3r FIFO 0,11 0t0 10905 pipe\r\nasciinema 715 722 asciinema admin 4w FIFO 0,11 0t0 10905 pipe\r\nasciinema 715 722 asciinema admin 5r FIFO "] [683.758023, "o", " 0,11 0t0 10906 pipe\r\nasciinema 715 722 asciinema admin 6u CHR 5,2 0t0 83 /dev/ptmx\r\nasciinema 715 722 asciinema admin 7r FIFO 0,11 0t0 10908 pipe\r\nasciinema 715 722 asciinema admin 8w FIFO 0,11 0t0 10907 pipe\r\nasciinema 715 722 asciinema admin 9w FIFO 0,11 0t0 10908 pipe\r\nasciinema 718 admin cwd DIR 259,1 4096 272476 /home/admin\r\nasciinema 718 admin rtd DIR 259,1 4096 2 /\r\nasciinema 718 admin txt REG 259,1 5479736 5453 /usr/bin/python3.9\r\nasciinema 718 admin mem REG 259,1 30776 9754 /usr/lib/x86_64-linux-gnu/libuuid.so.1.3.0\r\nasciinema 718 admin mem REG 259,1 31080 132285 /usr/lib/python3.9/lib-dynload/termios.cpython-39-x86_64-linux-gnu.so\r\nasc"] [683.758048, "o", "iinema 718 admin mem REG 259,1 48808 132261 /usr/lib/python3.9/lib-dynload/_json.cpython-39-x86_64-linux-gnu.so\r\nasciinema 718 admin mem REG 259,1 597792 2762 /usr/lib/x86_64-linux-gnu/libssl.so.1.1\r\nasciinema 718 admin mem REG 259,1 181408 131735 /usr/lib/python3.9/lib-dynload/_ssl.cpython-39-x86_64-linux-gnu.so\r\nasciinema 718 admin mem REG 259,1 3076960 2759 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1\r\nasciinema 718 admin mem REG 259,1 67632 131731 /usr/lib/python3.9/lib-dynload/_hashlib.cpython-39-x86_64-linux-gnu.so\r\nasciinema 718 admin mem REG 259,1 158400 1424 /usr/lib/x86_64-linux-gnu/liblzma.so.5.2.5\r\nasciinema 718 admin mem REG 259,1 41568 132263 /usr/lib/python3.9/lib-dynload/_lzma.cpython-39-x86_64-linu"] [683.758162, "o", "x-gnu.so\r\nasciinema 718 admin mem REG 259,1 19512 132267 /usr/lib/python3.9/lib-dynload/_queue.cpython-39-x86_64-linux-gnu.so\r\nasciinema 718 admin DEL REG 0,23 4 /dev/shm/tF6Ajg\r\nasciinema 718 admin DEL REG 0,23 3 /dev/shm/5HQLwf\r\nasciinema 718 admin mem REG 259,1 19944 132265 /usr/lib/python3.9/lib-dynload/_multiprocessing.cpython-39-x86_64-linux-gnu.so\r\nasciinema 718 admin mem REG 259,1 74688 481 /usr/lib/x86_64-linux-gnu/libbz2.so.1.0.4\r\nasciinema 718 admin mem REG 259,1 28352 132246 /usr/lib/python3.9/lib-dynload/_bz2.cpython-39-x86_64-linux-gnu.so\r\nasciinema 718 admin mem REG 259,1 27002 15342 /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache\r\nasciinema 718 ad"] [683.758198, "o", "min mem REG 259,1 346132 2398 /usr/lib/locale/C.UTF-8/LC_CTYPE\r\nasciinema 718 admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nasciinema 718 admin mem REG 259,1 113088 2346 /usr/lib/x86_64-linux-gnu/libz.so.1.2.11\r\nasciinema 718 admin mem REG 259,1 186496 1068 /usr/lib/x86_64-linux-gnu/libexpat.so.1.6.12\r\nasciinema 718 admin mem REG 259,1 1321344 15079 /usr/lib/x86_64-linux-gnu/libm-2.31.so\r\nasciinema 718 admin mem REG 259,1 14720 15092 /usr/lib/x86_64-linux-gnu/libutil-2.31.so\r\nasciinema 718 admin mem REG 259,1 18688 15078 /usr/lib/x86_64-linux-gnu/libdl-2.31.so\r\nasciinema 718 admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\nasciinem"] [683.758222, "o", "a 718 admin mem REG 259,1 14536 132274 /usr/lib/python3.9/lib-dynload/_uuid.cpython-39-x86_64-linux-gnu.so\r\nasciinema 718 admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\nasciinema 718 admin DEL REG 0,23 2 /dev/shm/nAqR5h\r\nasciinema 718 admin 0u CHR 136,0 0t0 3 /dev/pts/0\r\nasciinema 718 admin 1u CHR 136,0 0t0 3 /dev/pts/0\r\nasciinema 718 admin 2u CHR 136,0 0t0 3 /dev/pts/0\r\nasciinema 718 admin 3r FIFO 0,11 0t0 10905 pipe\r\nasciinema 718 admin 4w FIFO 0,11 0t0 10905 pipe\r\nasciinema 718 admin 5r CHR 1,3 0t0 4 /dev/null\r\nasciinema 718 admin"] [683.758246, "o", " 6w FIFO 0,11 0t0 10906 pipe\r\nasciinema 718 admin 7r FIFO 0,11 0t0 10907 pipe\r\nasciinema 718 admin 8w REG 259,1 98782 267466 /var/log/cast/i-00c8d7508d4dbeee3\r\nsh 719 admin cwd DIR 259,1 4096 272476 /home/admin\r\nsh 719 admin rtd DIR 259,1 4096 2 /\r\nsh 719 admin txt REG 259,1 125560 731 /usr/bin/dash\r\nsh 719 admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nsh 719 admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\nsh 719 admin 0u CHR 136,1 0t0 4 /dev/pts/1\r\nsh 719 admin 1u CHR 136,1 0t0 "] [683.758275, "o", " 4 /dev/pts/1\r\nsh 719 admin 2u CHR 136,1 0t0 4 /dev/pts/1\r\nbash 720 admin cwd DIR 259,1 4096 272476 /home/admin\r\nbash 720 admin rtd DIR 259,1 4096 2 /\r\nbash 720 admin txt REG 259,1 1234376 1419 /usr/bin/bash\r\nbash 720 admin mem REG 259,1 51696 15085 /usr/lib/x86_64-linux-gnu/libnss_files-2.31.so\r\nbash 720 admin mem REG 259,1 346132 2398 /usr/lib/locale/C.UTF-8/LC_CTYPE\r\nbash 720 admin mem REG 259,1 50 2408 /usr/lib/locale/C.UTF-8/LC_NUMERIC\r\nbash 720 admin mem REG 259,1 3360 4612 /usr/lib/locale/C.UTF-8/LC_TIME\r\nbash 720 admin mem REG 259,1 1519554 2396 /u"] [683.758471, "o", "sr/lib/locale/C.UTF-8/LC_COLLATE\r\nbash 720 admin mem REG 259,1 270 2404 /usr/lib/locale/C.UTF-8/LC_MONETARY\r\nbash 720 admin mem REG 259,1 48 2402 /usr/lib/locale/C.UTF-8/LC_MESSAGES/SYS_LC_MESSAGES\r\nbash 720 admin mem REG 259,1 27002 15342 /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache\r\nbash 720 admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nbash 720 admin mem REG 259,1 18688 15078 /usr/lib/x86_64-linux-gnu/libdl-2.31.so\r\nbash 720 admin mem REG 259,1 187792 4762 /usr/lib/x86_64-linux-gnu/libtinfo.so.6.2\r\nbash 720 admin mem REG 259,1 34 2493 /usr/lib/locale/C.UTF-8/LC_PAPER\r\nbash 720 admin mem REG "] [683.758509, "o", " 259,1 62 2406 /usr/lib/locale/C.UTF-8/LC_NAME\r\nbash 720 admin mem REG 259,1 131 2395 /usr/lib/locale/C.UTF-8/LC_ADDRESS\r\nbash 720 admin mem REG 259,1 47 4610 /usr/lib/locale/C.UTF-8/LC_TELEPHONE\r\nbash 720 admin mem REG 259,1 23 2400 /usr/lib/locale/C.UTF-8/LC_MEASUREMENT\r\nbash 720 admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\nbash 720 admin mem REG 259,1 252 2399 /usr/lib/locale/C.UTF-8/LC_IDENTIFICATION\r\nbash 720 admin 0u CHR 136,1 0t0 4 /dev/pts/1\r\nbash 720 admin 1u CHR 136,1 0t0 4 /dev/pts/1\r\nbash 720 admin 2u CHR 136,1 0t0 4 /dev/pts/1\r\nbash "] [683.758534, "o", " 720 admin 255u CHR 136,1 0t0 4 /dev/pts/1\r\nkworker/u 842 root cwd unknown /proc/842/cwd (readlink: Permission denied)\r\nkworker/u 842 root rtd unknown /proc/842/root (readlink: Permission denied)\r\nkworker/u 842 root txt unknown /proc/842/exe (readlink: Permission denied)\r\nkworker/u 842 root NOFD /proc/842/fd (opendir: Permission denied)\r\nkworker/1 949 root cwd unknown /proc/949/cwd (readlink: Permission denied)\r\nkworker/1 949 root rtd unknown /proc/949/root (readlink: Permission denied)\r\nkworker/1 949 root txt unknown /proc/949/exe (readlink: Permis"] [683.758557, "o", "sion denied)\r\nkworker/1 949 root NOFD /proc/949/fd (opendir: Permission denied)\r\nkworker/0 979 root cwd unknown /proc/979/cwd (readlink: Permission denied)\r\nkworker/0 979 root rtd unknown /proc/979/root (readlink: Permission denied)\r\nkworker/0 979 root txt unknown /proc/979/exe (readlink: Permission denied)\r\nkworker/0 979 root NOFD /proc/979/fd (opendir: Permission denied)\r\nkworker/0 1193 root cwd unknown /proc/1193/cwd (readlink: Permission denied)\r\nkworker/0 1193 root rtd unknown /proc/1193/root (readlink: Permission denied)\r\nkworker/0 1193 root txt unknown "] [683.758687, "o", " /proc/1193/exe (readlink: Permission denied)\r\nkworker/0 1193 root NOFD /proc/1193/fd (opendir: Permission denied)\r\nkworker/u 1197 root cwd unknown /proc/1197/cwd (readlink: Permission denied)\r\nkworker/u 1197 root rtd unknown /proc/1197/root (readlink: Permission denied)\r\nkworker/u 1197 root txt unknown /proc/1197/exe (readlink: Permission denied)\r\nkworker/u 1197 root NOFD /proc/1197/fd (opendir: Permission denied)\r\nlsof 1241 admin cwd DIR 259,1 4096 272476 /home/admin\r\nlsof 1241 admin rtd DIR 259,1 4096 2 /\r\nlsof 1241 admin txt REG 259,1 171"] [683.758718, "o", "488 1580 /usr/bin/lsof\r\nlsof 1241 admin mem REG 259,1 27002 15342 /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache\r\nlsof 1241 admin mem REG 259,1 346132 2398 /usr/lib/locale/C.UTF-8/LC_CTYPE\r\nlsof 1241 admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\nlsof 1241 admin mem REG 259,1 18688 15078 /usr/lib/x86_64-linux-gnu/libdl-2.31.so"] [683.759432, "o", "\r\n"] [683.759624, "o", "lsof 1241 admin mem REG 259,1 617128 2728 /usr/lib/x86_64-linux-gnu/libpcre2-8.so.0.10.1\r\nlsof 1241 admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nlsof 1241 admin mem REG 259,1 166120 2215 /usr/lib/x86_64-linux-gnu/libselinux.so.1\r\nlsof 1241 admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\nlsof 1241 admin 0u CHR 136,1 0t0 4 /dev/pts/1\r\nlsof 1241 admin 1u CHR 136,1 0t0 4 /dev/pts/1\r\nlsof 1241 admin 2u CHR 136,1 0t0 4 /dev/pts/1\r\nlsof 1241 admin 3r DIR 0,20 0 1 /proc\r\nlsof 1241 admin 4r DIR 0,20 0 12557 /p"] [683.759729, "o", "roc/1241/fd\r\nlsof 1241 admin 5w FIFO 0,11 0t0 12562 pipe\r\nlsof 1241 admin 6r FIFO 0,11 0t0 12563 pipe\r\nlsof 1242 admin cwd DIR 259,1 4096 272476 /home/admin\r\nlsof 1242 admin rtd DIR 259,1 4096 2 /\r\nlsof 1242 admin txt REG 259,1 171488 1580 /usr/bin/lsof\r\nlsof 1242 admin mem REG 259,1 27002 15342 /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache\r\nlsof 1242 admin mem REG 259,1 346132 2398 /usr/lib/locale/C.UTF-8/LC_CTYPE\r\nlsof 1242 admin mem REG 259,1 149520 15088 /usr/lib/x86_64-linux-gnu/libpthread-2.31.so\r\nlsof 1242 admin mem REG 259,1 18688 15078 /usr/lib/x86_64-linux-gnu"] [683.759824, "o", "/libdl-2.31.so\r\nlsof 1242 admin mem REG 259,1 617128 2728 /usr/lib/x86_64-linux-gnu/libpcre2-8.so.0.10.1\r\nlsof 1242 admin mem REG 259,1 1901536 15077 /usr/lib/x86_64-linux-gnu/libc-2.31.so\r\nlsof 1242 admin mem REG 259,1 166120 2215 /usr/lib/x86_64-linux-gnu/libselinux.so.1\r\nlsof 1242 admin mem REG 259,1 177928 13 /usr/lib/x86_64-linux-gnu/ld-2.31.so\r\nlsof 1242 admin 4r FIFO 0,11 0t0 12562 pipe"] [683.759854, "o", "\r\n"] [683.760227, "o", "lsof 1242 admin 7w FIFO 0,11 0t0 12563 pipe\r\n"] [683.761246, "o", "\u001b[?2004h"] [683.761385, "o", "\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [685.552116, "o", "\u0007"] [685.791392, "o", "lsof "] [685.946785, "o", "\b\b\b\b\bjournalctl -e"] [686.406973, "o", "\u001b[H\u001b[2J\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ journalctl -e"] [686.829586, "o", "^C\u001b[?2004l\r"] [686.829762, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [686.829979, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [714.027459, "o", "lsof "] [714.478145, "o", "\b\b\b\b\bjournalctl -e"] [714.9836, "o", "u"] [715.986953, "o", "\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [716.535415, "o", "^C\u001b[?2004l\r"] [716.535643, "o", "\u001b[?2004h\u001b[?2004l\r\r\n"] [716.535808, "o", "\u001b[?2004h\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ "] [716.844788, "o", "\r(reverse-i-search)`': \u001b[K"] [717.229638, "o", "\b\b\bu': jo\u001b[7mu\u001b[27mrnalctl -e\b\b\b\b\b\b\b\b\b\b\b"] [717.31968, "o", "\b\b\b\b\b\u001b[1@r': jo\u001b[7mur\u001b[27m\b\b"] [717.509135, "o", "\b\b\b\b\bl': c\u001b[7murl\u001b[27m localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [718.325452, "o", "\r\u001b]0;admin@i-00c8d7508d4dbeee3: ~\u0007\u001b[01;32madmin@i-00c8d7508d4dbeee3\u001b[00m:\u001b[01;34m~\u001b[00m$ curl localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [718.568725, "o", "\u001b[C"] [718.804064, "o", "\u001b[C"] [718.970746, "o", "\u001b[C"] [719.1534, "o", "\u001b[C"] [719.390008, "o", "\u001b[C localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [719.517297, "o", "- localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [719.752331, "o", "h localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [722.335136, "o", "\u001b[C localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [722.493614, "o", "a localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [722.608302, "o", "g localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [722.698074, "o", "e localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [722.834517, "o", "n localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [722.987807, "o", "t localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [723.271038, "o", ": localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [725.635706, "o", "w localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [725.822675, "o", "e localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [725.909264, "o", "b localhost:5000\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b"] [726.075593, "o", "\r\n\u001b[?2004l\r"] [726.084417, "o", "Usage: curl [options...]