-rw-r--r-- 1 admin admin  14K Oct  3 21:46 cheatsheet.md                        -rw-r--r-- 1 admin admin 185K Oct  3 21:46 cheatsheet.pdf                       -rw-r--r-- 1 admin admin  146 Oct  3 21:46 hint1                                -rw-r--r-- 1 admin admin   88 Oct  3 21:46 hint2                                -rw-r--r-- 1 admin admin  187 Oct  3 21:46 hint3                                -rw-r--r-- 1 admin admin  183 Oct  3 21:46 hint4                                -rw-r--r-- 1 admin admin  280 Oct  3 21:46 hint5                                -rw-r--r-- 1 admin admin  272 Oct  3 21:46 hint6                                -rw-r--r-- 1 admin admin  329 Oct  3 21:46 hint7                                -rw-r--r-- 1 admin admin  473 Oct  3 21:46 hint8                                -rw-r--r-- 1 admin admin 2.5K Oct  3 21:46 instructions                         drwxr-xr-x 5 admin admin 4.0K Oct  3 21:46 mystery                              admin@i-0586e94feb7363e2a:~/clmystery$ cat Re                                   cat: Re: No such file or directory                                              admin@i-0586e94feb7363e2a:~/clmystery$ cat Re                                   

admin@i-0cd98a1149e3e4ac2:~$ telnet 127.0.0.1                                   

admin@i-0582ed503eea13dca:~$ telnet 127.0.0.1 5000                              Trying 127.0.0.1...                                                             Connected to 127.0.0.1.                                                         Escape character is '^]'.                                                       GET webserver.py                                                                ^]                                                                              telnet> q                                                                       Connection closed.                                                              admin@i-0582ed503eea13dca:~$ telnet 127.0.0.1 5000                              Trying 127.0.0.1...                                                             Connected to 127.0.0.1.                                                         Escape character is '^]'.                                                       GET /                                                                           ^]                                                                              telnet> q                                                                       

--                                                                              License Plate L3375A9                                                           Make: Honda                                                                     Color: Blue                                                                     Owner: Jeremy Bowers                                                            Height: 6'1"                                                                    Weight: 204 lbs                                                                 --                                                                              License Plate L337WR9                                                           Make: Honda                                                                     Color: Blue                                                                     Owner: Jacqui Maher                                                             Height: 6'2"                                                                    Weight: 130 lbs                                                                 admin@i-05976b7e43f5e9293:~/clmystery/mystery$                                  

admin@i-06053d0a2ec05eb29:~/clmystery/mystery$ less                             crimescene   interviews/  memberships/ people       streets/     suspects     veadmin@i-06053d0a2ec05eb29:~/clmystery/mystery$ less vehicles                    admin@i-06053d0a2ec05eb29:~/clmystery/mystery$ grep "Height: 6" vehicles | less admin@i-06053d0a2ec05eb29:~/clmystery/mystery$ grep "Height: 6" vehicles -B 1 | admin@i-06053d0a2ec05eb29:~/clmystery/mystery$ grep "Height: 6" vehicles -B 1 | admin@i-06053d0a2ec05eb29:~/clmystery/mystery$ grep "Height: 6" vehicles -B 1 | admin@i-06053d0a2ec05eb29:~/clmystery/mystery$ names=$(grep "Height: 6" vehiclesadmin@i-06053d0a2ec05eb29:~/clmystery/mystery$ echo $names | awk '{for (i=1; i<=admin@i-06053d0a2ec05eb29:~/clmystery/mystery$ wc -l suspects                   5029 suspects                                                                   admin@i-06053d0a2ec05eb29:~/clmystery/mystery$ wc -l suspects_2                 1459 suspects_2                                                                 admin@i-06053d0a2ec05eb29:~/clmystery/mystery$ cat memberships/Rotary_Club | awkadmin@i-06053d0a2ec05eb29:~/clmystery/mystery$ cat memberships/Rotary_Club | awk

Andriy Hrachov  M       16      Bantry Way, line 299                            Ziwei Braas     F       70      Lyne Road, line 168                             Hector Moutoussamy      M       66      Muller Avenue, line 110                 Xiaodong Dulko  F       69      Homewood Road, line 242                         Ivan Radu       M       29      Clinton Place, line 181                         Christopher Sadauskas   M       86      Lancaster Street, line 47               Lizeth Coertzen F       58      Greenock Street, line 402                       Alexander Heffernan     M       43      Oleander Street, line 147               admin@i-04eca7336f9a33398:~/clmystery/mystery$ ls                               crimescene  interviews  memberships  people  streets  vehicles                  admin@i-04eca7336f9a33398:~/clmystery/mystery$ cd memberships/                  admin@i-04eca7336f9a33398:~/clmystery/mystery/memberships$ ls                   AAA  AAdvantage  Costco  Delta_SkyMiles  Fitness_Galaxy  Museum_of_Bash_History lumni_Association  Terminal_City_Library  United_MileagePlus                    admin@i-04eca7336f9a33398:~/clmystery/mystery/memberships$ cd .                 

* Closing connection 0                                                          Unauthorizedadmin@i-0250e23e35d81792d:~$                                        admin@i-0250e23e35d81792d:~$                                                    admin@i-0250e23e35d81792d:~$ sudo su                                                                                                                            We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                      ^Csudo: 1 incorrect password attempt                                            admin@i-0250e23e35d81792d:~$ vi exploi                                          

feelings derringers regeneration septuagenarians                                arboreta finisher meld abstainers robuster                                      retires agglomerated frigates heartwarming                                      runt airfoil looniest wallpapered embossing                                     muttering reapers spokesman demolished spotter                                  unjustly unmarked aggrandized sappy                                             impairs gurgles intrusts shamefully                                             pasting beekeeping possibility beaning toaster tomb gores                       sensually standings glinted beastlier                                           admin@i-06d9a3b708cd2b206:~/clmystery$ head -40 ./mystery/streets/Hart_Place |taSEE INTERVIEW #47246024                                                         admin@i-06d9a3b708cd2b206:~/clmystery$ head -179 ./mystery/streets/Buckingham_PlSEE INTERVIEW #699607                                                           admin@i-06d9a3b708cd2b206:~/clmystery$ less ./mystery/interviews/interview-69960admin@i-06d9a3b708cd2b206:~/clmystery$ less ./mystery/interviews/interview-6    

Delta_SkyMiles:Iain Hartig                                                      Terminal_City_Library:Iain Hartig                                               Delta_SkyMiles:Aldo Nicolas                                                     Terminal_City_Library:Aldo Nicolas                                              Terminal_City_Library:Yang Conti                                                Terminal_City_Library:Prince Zyl                                                Delta_SkyMiles:Doris Wilke                                                      Delta_SkyMiles:Andrew Ruciak                                                    Terminal_City_Library:Yauheni Sokolowska                                        Delta_SkyMiles:Pedro Kim                                                        Delta_SkyMiles:Dorian Sauer                                                     Terminal_City_Library:Irene Morath                                              Delta_SkyMiles:Ferenc Aydarski                                                  Terminal_City_Library:Ferenc Aydarski                                                                                                                           

iew-7541406   interview-891720                                                  interview-1395414   interview-2601508   interview-353467    interview-4961376   iew-75434722  interview-896668                                                  admin@i-0f18f9a9419e98e74:~$ cat /home/admin/clmystery/mystery/memberships/     AAA                      Costco                   Fitness_Galaxy           REI  lumni_Association  United_MileagePlus                                           AAdvantage               Delta_SkyMiles           Museum_of_Bash_History   Rotaral_City_Library                                                                 admin@i-0f18f9a9419e98e74:~$ cat /home/admin/clmystery/mystery/memberships/Delta1288                                                                            admin@i-0f18f9a9419e98e74:~$ cat /home/admin/clmystery/mystery/memberships/Museu1291                                                                            admin@i-0f18f9a9419e98e74:~$ cat /home/admin/clmystery/mystery/memberships/Rotar1276                                                                            admin@i-0f18f9a9419e98e74:~$ cat /home/admin/clmystery/mystery/memberships/Rotar

-rw-r--r-- 1 admin admin   1073 Oct  3 21:46 LICENSE.md                         -rw-r--r-- 1 admin admin   2668 Oct  3 21:46 README.md                          -rw-r--r-- 1 admin admin  13844 Oct  3 21:46 cheatsheet.md                      -rw-r--r-- 1 admin admin 189042 Oct  3 21:46 cheatsheet.pdf                     -rw-r--r-- 1 admin admin    146 Oct  3 21:46 hint1                              -rw-r--r-- 1 admin admin     88 Oct  3 21:46 hint2                              -rw-r--r-- 1 admin admin    187 Oct  3 21:46 hint3                              -rw-r--r-- 1 admin admin    183 Oct  3 21:46 hint4                              -rw-r--r-- 1 admin admin    280 Oct  3 21:46 hint5                              -rw-r--r-- 1 admin admin    272 Oct  3 21:46 hint6                              -rw-r--r-- 1 admin admin    329 Oct  3 21:46 hint7                              -rw-r--r-- 1 admin admin    473 Oct  3 21:46 hint8                              -rw-r--r-- 1 admin admin   2559 Oct  3 21:46 instructions                       drwxr-xr-x 5 admin admin   4096 Oct  3 21:46 mystery                            admin@i-026bb40eccdffdb9e:~/clmystery$ c                                        

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                ^G Help        ^O Write Out   ^W Where Is    ^K Cut         ^T Execute     ^C Lo^X Exit        ^R Read File   ^\ Replace     ^U Paste       ^J Justify     ^_ Go

lsattr: Permission denied While reading flags on webserver.py                   admin@i-0c826a6b275be070d:~$ sudo ls                                                                                                                            We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                      Sorry, try again.                                                               [sudo] password for admin:                                                      sudo: 1 incorrect password attempt                                              admin@i-0c826a6b275be070d:~$                                                    

Height: 5'6"                                                                    Weight: 246 lbs                                                                 admin@i-0f40f806e731f47c2:~/clmystery$ cat hint4                                To find all the Annabels' addresses, use the 'people' file:                                                                                                             grep "Annabel" people                                                                                                                                   Notice that not all of the results are worth investigating.  Remember what we knadmin@i-0f40f806e731f47c2:~/clmystery$ grep Annabel mystery/people              Annabel Sun     F       26      Hart Place, line 40                             Oluwasegun Annabel      M       37      Mattapan Street, line 173               Annabel Church  F       38      Buckingham Place, line 179                      Annabel Fuglsang        M       40      Haley Street, line 176                  admin@i-0f40f806e731f47c2:~/clmystery$ ^C                                       admin@i-0f40f806e731f47c2:~/clmystery$