Saving to: ‘index.html’                                                                                                                                         index.html                 100%[=====================================>]      12                                                                                 2024-01-15 05:10:43 (1.55 MB/s) - ‘index.html’ saved [12/12]                                                                                                    admin@i-0d60756cd4edc8643:~$ ls                                                 agent  index.html  webserver.py                                                 admin@i-0d60756cd4edc8643:~$ cat index.html                                     Unauthorizedadmin@i-0d60756cd4edc8643:~$ telnet localhost 5000                  Trying 127.0.0.1...                                                             Connected to localhost.                                                         Escape character is '^]'.                                                       GET /                                                                                                                                                           

root@i-02092f036fead2d0b:~# mkfs-.ext4 /dev/sad_servers/sad_servers             bash: mkfs-.ext4: command not found                                             root@i-02092f036fead2d0b:~# mkfs.ext4 /dev/sad_servers/sad_servers              mke2fs 1.46.2 (28-Feb-2021)                                                     Creating filesystem with 393216 4k blocks and 98304 inodes                      Filesystem UUID: d3e1d407-1b26-4059-8d11-8a5e5ce2ca4e                           Superblock backups stored on blocks:                                                    32768, 98304, 163840, 229376, 294912                                                                                                                    Allocating group tables: done                                                   Writing inode tables: done                                                      Creating journal (8192 blocks): done                                            Writing superblocks and filesystem accounting information: done                                                                                                 root@i-02092f036fead2d0b:~#                                                     

tmpfs            228M   24K  228M   1% /dev/shm                                 tmpfs            5.0M     0  5.0M   0% /run/lock                                /dev/nvme0n1p15  124M  5.9M  118M   5% /boot/efi                                root@i-0c46d1eed562eeeb0:/home/admin# Filesystem       Size  Used Avail Use% Mouudev             217M     0  217M   0% /dev                                     tmpfs             46M  368K   46M   1% /run                                     /dev/nvme0n1p1   7.7G  6.1G  1.2G  84% /                                        tmpfs            228M   24K  228M   1% /dev/shm                                 tmpfs            5.0M     0  5.0M   0% /run/lock                                /dev/nvme0n1p15  124M  5.9M  118M   5% /boot/efi                                root@i-0c46d1eed562eeeb0:/home/admin# eexxiitt                                  exit                                                                                                                                                            exit                                                                            admin@i-0c46d1eed562eeeb0:~$                                                    

~                                                                               ~                                                                               ~                                                                               ~                                                                               ~                                                                               ~                                                                               ~                                                                               ~                                                                               ~                                                                               ~                                                                               ~                                                                               ~                                                                               ~                                                                                                                                                               :                                                                               

admin@i-094407eb5173ca7f2:~$ telnet loaclhost 5000                              telnet: could not resolve loaclhost/5000: Name or service not known             admin@i-094407eb5173ca7f2:~$ telnet localhost 5000                              Trying 127.0.0.1...                                                             Connected to localhost.                                                         Escape character is '^]'.                                                       GET /                                                                                                                                                           Welcome! Password is FDZPmh5AX3oiJtConnection closed by foreign host.           admin@i-094407eb5173ca7f2:~$ curl --insecure --anyauth -u admin:passowrd -X GET Unauthorizedadmin@i-094407eb5173ca7f2:~$ curl --insecure --anyauth -u admin:pass                                                                                admin@i-094407eb5173ca7f2:~$                                                    admin@i-094407eb5173ca7f2:~$                                                    admin@i-094407eb5173ca7f2:~$ curl --insecure --anyauth -u admin:FDZPmh5AX3oiJt -

unix  3      [ ]         STREAM     CONNECTED     11366                         unix  3      [ ]         STREAM     CONNECTED     11352                         unix  3      [ ]         STREAM     CONNECTED     11353    /run/systemd/journal/unix  3      [ ]         STREAM     CONNECTED     11367    /run/dbus/system_bus_admin@i-04e9b3dc5974733a8:~$ netstat -nptl                                      (Not all processes could be identified, non-owned process info                   will not be shown, you would have to be root to see it all.)                   Active Internet connections (only servers)                                      Proto Recv-Q Send-Q Local Address           Foreign Address         State       tcp        0      0 127.0.0.1:5000          0.0.0.0:*               LISTEN      tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      tcp6       0      0 :::6767                 :::*                    LISTEN      tcp6       0      0 :::8080                 :::*                    LISTEN      tcp6       0      0 :::22                   :::*                    LISTEN      admin@i-04e9b3dc5974733a8:~$ telnet                                             

drwxr-xr-x 3 root  root  4096 Sep 17 16:44 ..                                   drwx------ 3 admin admin 4096 Sep 20 15:52 .ansible                             -rw------- 1 admin admin   57 Sep 20 15:58 .bash_history                        -rw-r--r-- 1 admin admin  220 Aug  4  2021 .bash_logout                         -rw-r--r-- 1 admin admin 3526 Aug  4  2021 .bashrc                              drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config                              -rw-r--r-- 1 admin admin  807 Aug  4  2021 .profile                             drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh                                 drwxr-xr-x 2 admin root  4096 Sep 24 23:20 agent                                -rwxrwx--- 1 root  root   360 Sep 24 23:20 webserver.py                         admin@i-057a22a824cc9eb82:~$ pwd                                                /home/admin                                                                     admin@i-057a22a824cc9eb82:~$ curl localhost:5000                                Unauthorizedadmin@i-057a22a824cc9eb82:~$                                        admin@i-057a22a824cc9eb82:~$ netstat                                            

drwxr-xr-x 2 admin root  4096 Sep 24 23:20 agent                                -rwxrwx--- 1 root  root   360 Sep 24 23:20 webserver.py                         admin@i-0607715dd43c3c574:~$ sudo vi webserver.py                                                                                                               We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                      sudo: a password is required                                                    admin@i-0607715dd43c3c574:~$ curl localhost:5000                                Unauthorizedadmin@i-0607715dd43c3c574:~$ curl localhost:5000                    

cat: /etc/sudoers: Permission denied                                            admin@i-092d4cf55fa0651c2:~$ sudo python3 webserver.py                                                                                                          We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                      sudo: a password is required                                                    admin@i-092d4cf55fa0651c2:~$ ls                                                 agent  webserver.py                                                             admin@i-092d4cf55fa0651c2:~$ ps aux |grep webserver                             

admin@i-04cb2fba7b744d25a:~$ ls                                                 agent  webserver.py                                                             admin@i-04cb2fba7b744d25a:~$ cd ..                                              admin@i-04cb2fba7b744d25a:/home$ ls                                             admin                                                                           admin@i-04cb2fba7b744d25a:/home$ cd admin                                       admin@i-04cb2fba7b744d25a:~$ ls                                                 agent  webserver.py                                                             admin@i-04cb2fba7b744d25a:~$ su -u admin                                        Try 'su --help' for more information.                                           admin@i-04cb2fba7b744d25a:~$ su -i admin                                        su: invalid option -- 'i'                                                       Try 'su --help' for more information.                                           admin@i-04cb2fba7b744d25a:~$ su - admin                                                                                                                         

42108d7968f7038 (ED25519)                                                       Jan 12 17:27:40 i-0842108d7968f7038 ec2: 3072 SHA256:hj5IRhHgQNWK1wNwOHkxby3pdb0842108d7968f7038 (RSA)                                                          Jan 12 17:27:40 i-0842108d7968f7038 ec2: -----END SSH HOST KEY FINGERPRINTS-----Jan 12 17:27:40 i-0842108d7968f7038 ec2: #######################################admin@i-0842108d7968f7038:~$ curl localhost                                     curl: (7) Failed to connect to localhost port 80: Connection refused            admin@i-0842108d7968f7038:~$ curl localhost:3000                                curl: (7) Failed to connect to localhost port 3000: Connection refused          admin@i-0842108d7968f7038:~$ curl localhost:5000                                Unauthorizedadmin@i-0842108d7968f7038:~$ lsof -i -P -n | grep LISTEN            gotty    558 admin    6u  IPv6  10589      0t0  TCP *:8080 (LISTEN)             sadagent 559 admin    7u  IPv6  11492      0t0  TCP *:6767 (LISTEN)             admin@i-0842108d7968f7038:~$ less /etc/services                                 admin@i-0842108d7968f7038:~$ lsof -i:                                           

root         594  0.0  3.7  26612 17396 ?        Ss   17:08   0:00 /usr/bin/pyth_chrony      596  0.0  0.7  10852  3604 ?        S    17:08   0:00 /usr/sbin/chr_chrony      598  0.0  0.1  10724   548 ?        S    17:08   0:00 /usr/sbin/chrroot         680  0.0  0.0      0     0 ?        I    17:08   0:00 [kworker/1:4-admin        683  0.0  0.9   6740  4460 pts/0    S<s+ 17:09   0:00 bash -l      admin        687  0.1  4.1  98188 19320 pts/0    R<l+ 17:09   0:00 /usr/bin/pythadmin        690  0.0  3.0  24456 14420 pts/0    R<+  17:09   0:00 /usr/bin/pythadmin        691  0.0  0.1   2480   500 pts/1    S<s  17:09   0:00 sh -c /bin/baadmin        692  0.0  1.0   6952  4756 pts/1    S<   17:09   0:00 /bin/bash    admin        793  0.0  0.6   8648  3244 pts/1    R<+  17:11   0:00 ps aux       admin@i-01ae2ccb494fc3a25:~$ nc -zv 5000                                        nc: missing port number                                                         admin@i-01ae2ccb494fc3a25:~$ nc -zv localhost 5000                              Connection to localhost (127.0.0.1) 5000 port [tcp/*] succeeded!                admin@i-01ae2ccb494fc3a25:~$ ps aux                                             

admin@i-04b3b9eccf6b1a336:~$ pwd                                                /home/admin                                                                     admin@i-04b3b9eccf6b1a336:~$                                                    

admin@i-05115302e0a8d85df:~$ ls                                                 agent  data  datafile  kihei                                                    admin@i-05115302e0a8d85df:~$ ls -l                                              total 5245048                                                                   drwxr-xr-x 2 admin root       4096 Sep 17 17:28 agent                           drwxr-xr-x 2 admin root       4096 Sep 17 17:28 data                            -rw-r--r-- 1 root  root 5368709120 Sep 17 17:28 datafile                        -rwxr-xr-x 1 admin root    2207109 Sep 17 17:28 kihei                           admin@i-05115302e0a8d85df:~$