SadServers Joined on September 10, 2023

udev             217M     0  217M   0% /dev                                     tmpfs             46M  368K   46M   1% /run                                     /dev/nvme0n1p1   7.7G  6.1G  1.2G  84% /                                        tmpfs            228M   12K  228M   1% /dev/shm                                 tmpfs            5.0M     0  5.0M   0% /run/lock                                /dev/nvme0n1p15  124M  5.9M  118M   5% /boot/efi                                admin@i-0c435ed64c4447867:~$ lsblk -l                                           NAME       MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT                                  nvme0n1    259:0    0    8G  0 disk                                             nvme2n1    259:1    0    1G  0 disk                                             nvme1n1    259:2    0    1G  0 disk                                             nvme0n1p1  259:3    0  7.9G  0 part /                                           nvme0n1p14 259:4    0    3M  0 part                                             nvme0n1p15 259:5    0  124M  0 part /boot/efi                                   admin@i-0c435ed64c4447867:~$ sudo pvcreate /de                                  

 -i, --include       Include protocol response headers in the output             -o, --output <file> Write to file instead of stdout                             -O, --remote-name   Write output to a file named as the remote file             -s, --silent        Silent mode                                                 -T, --upload-file <file> Transfer local FILE to destination                     -u, --user <user:password> Server user and password                             -A, --user-agent <name> Send User-Agent <name> to server                        -v, --verbose       Make the operation more talkative                           -V, --version       Show version number and quit                                                                                                               This is not the full help, this menu is stripped into categories.               Use "--help category" to get an overview of all categories.                     For all options use the manual or "--help all".                                 admin@i-0ebadfe95bbd0eb1b:~$ curl -A 'whatever' localhost:5000                  Welcome! Password is FDZPmh5AX3oiJtadmin@i-0ebadfe95bbd0eb1b:~$                 

admin@i-006f0e9a73bb6b96a:~/.ansible$ cd tmp/                                   admin@i-006f0e9a73bb6b96a:~/.ansible/tmp$ ls                                    admin@i-006f0e9a73bb6b96a:~/.ansible/tmp$ ls -lah                               total 8.0K                                                                      drwx------ 2 admin admin 4.0K Sep 24  2023 .                                    drwx------ 3 admin admin 4.0K Sep 20  2023 ..                                   admin@i-006f0e9a73bb6b96a:~/.ansible/tmp$ chage -l admin                        Last password change                                    : Sep 17, 2023          Password expires                                        : never                 Password inactive                                       : never                 Account expires                                         : never                 Minimum number of days between password change          : 0                     Maximum number of days between password change          : 99999                 Number of days of warning before password expires       : 7                     admin@i-006f0e9a73bb6b96a:~/.ansible/tmp$ cd /etc                               

check.sh      sadagent      sadagent.txt                                        admin@i-095ed92c0df54793b:~$ cat agent/                                         check.sh      sadagent      sadagent.txt                                        admin@i-095ed92c0df54793b:~$ cat agent/sadagent.txt | tr -cd "[:print:]"        admin@i-095ed92c0df54793b:~$                                                    admin@i-095ed92c0df54793b:~$                                                    admin@i-095ed92c0df54793b:~$                                                    admin@i-095ed92c0df54793b:~$ apt install strings                                E: Could not open lock file /var/lib/dpkg/lock-frontend - open (13: Permission dE: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), are yadmin@i-095ed92c0df54793b:~$ telnet localhost 5000                              Trying 127.0.0.1...                                                             Connected to localhost.                                                         Escape character is '^]'.                                                                                                                                       

ls: cannot access '/pid/579': No such file or directory                         admin@i-02fded2ca795f43ce:~$ ls /proc/579                                       ls: cannot read symbolic link '/proc/579/cwd': Permission denied                ls: cannot read symbolic link '/proc/579/root': Permission denied               ls: cannot read symbolic link '/proc/579/exe': Permission denied                arch_status  cgroup      coredump_filter     environ  gid_map   map_files  mountattr         clear_refs  cpu_resctrl_groups  exe      io        maps       mountautogroup    cmdline     cpuset              fd       limits    mem        net  auxv         comm        cwd                 fdinfo   loginuid  mountinfo  ns   admin@i-02fded2ca795f43ce:~$ ls /proc/579^C                                     admin@i-02fded2ca795f43ce:~$ ^C                                                 admin@i-02fded2ca795f43ce:~$ ^C                                                 admin@i-02fded2ca795f43ce:~$ /proc/579/root curl localhost:5000                 bash: /proc/579/root: Permission denied                                         admin@i-02fded2ca795f43ce:~$                                                    

tmpfs            228M   12K  228M   1% /dev/shm                                 tmpfs            5.0M     0  5.0M   0% /run/lock                                /dev/nvme0n1p15  124M  5.9M  118M   5% /boot/efi                                admin@i-0189e4926341da6e5:~$ ls -lrt /home/admin/kihei                          -rwxr-xr-x 1 admin root 2207109 Sep 17  2023 /home/admin/kihei                  admin@i-0189e4926341da6e5:~$ /home/admin/kihei                                  panic: exit status 1                                                                                                                                            goroutine 1 [running]:                                                          main.main()                                                                             ./main.go:64 +0x47d                                                     admin@i-0189e4926341da6e5:~$ cd /home/admin                                     admin@i-0189e4926341da6e5:~$ ls                                                 agent  data  datafile  kihei                                                    admin@i-0189e4926341da6e5:~$ strace                                             

                                                                                root@i-0347f0aa3131a44e8:/home/admin# mount /dev/vg/lv /home/admin/data         root@i-0347f0aa3131a44e8:/home/admin# mount /dev/vg/lv /home/admin/data         mount: /home/admin/data: /dev/mapper/vg-lv already mounted on /home/admin/data. root@i-0347f0aa3131a44e8:/home/admin# ~/kihei                                   bash: /root/kihei: No such file or directory                                    root@i-0347f0aa3131a44e8:/home/admin# exit                                      exit                                                                            admin@i-0347f0aa3131a44e8:~$ ~/kihei                                            panic: remove /home/admin/data/newdatafile: no such file or directory                                                                                           goroutine 1 [running]:                                                          main.main()                                                                             ./main.go:62 +0x465                                                     admin@i-0347f0aa3131a44e8:~$                                                    

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                ^G Help        ^O Write Out   ^W Where Is    ^K Cut         ^T Execute     ^C Lo^X Exit        ^R Read File   ^\ Replace     ^U Paste       ^J Justify     ^_ Go

2024-10-17 22:21:02.809421 token: 1097540917                                    2024-10-17 22:21:03.109941 token: 304977580                                     2024-10-17 22:21:03.410451 token: 41358422                                      2024-10-17 22:21:03.710949 token: 374178011                                     2024-10-17 22:21:04.011467 token: 1898843884                                    2024-10-17 22:21:04.311956 token: 258222149                                     2024-10-17 22:21:04.612482 token: 335274110                                     2024-10-17 22:21:04.912984 token: 1316794133                                    2024-10-17 22:21:05.213381 token: 289474147                                     2024-10-17 22:21:05.513879 token: 825212008                                     2024-10-17 22:21:05.814342 token: 1224319754                                    2024-10-17 22:21:06.114820 token: 48114471                                      2024-10-17 22:21:06.415375 token: 1717364180                                    2024-10-17 22:21:06.715891 token: 361435512                                                                                                                     

chmod: changing permissions of './webserver.py': Operation not permitted        admin@i-0fe5db61e982e9777:~$ chmod -R 755 .                                     chmod: changing permissions of './webserver.py': Operation not permitted        admin@i-0fe5db61e982e9777:~$ grep -ri 'password' | /etc/apache2/*               bash: /etc/apache2/conf-available: Is a directory                               grep: agent/sadagent: binary file matches                                       grep: webserver.py: Permission denied                                           admin@i-0fe5db61e982e9777:~$ grep -ri 'password' | /etc/apache2/conf-available  bash: /etc/apache2/conf-available: Is a directory                               grep: agent/sadagent: binary file matches                                       grep: webserver.py: Permission denied                                           grep: write error: Broken pipe                                                  admin@i-0fe5db61e982e9777:~$                                                    admin@i-0fe5db61e982e9777:~$ grep -ri 'password' /etc/apache2/conf-available    admin@i-0fe5db61e982e9777:~$                                                    

#1709941953                                                                     ls -0l                                                                          #1709941954                                                                     ls -l                                                                           #1709941956                                                                     cd ..                                                                           #1709941957                                                                     pwd                                                                             #1709941959                                                                     cd                                                                              #1709941960                                                                     pwd                                                                             #1709941961                                                                     ls -al                                                                          (END)                                                                           

ls -la                                                                          #1709925997                                                                     cat webserver.py                                                                admin@i-042eff4e631813f8b:~$ ls                                                 agent  webserver.py                                                             admin@i-042eff4e631813f8b:~$ ls                                                 agent  webserver.py                                                             admin@i-042eff4e631813f8b:~$ cd ~                                               admin@i-042eff4e631813f8b:~$ l                                                  bash: l: command not found                                                      admin@i-042eff4e631813f8b:~$ sls                                                bash: sls: command not found                                                    admin@i-042eff4e631813f8b:~$ ls                                                 agent  webserver.py                                                             admin@i-042eff4e631813f8b:~$                                                    

admin@i-0cf337aec03e60149:~$ ./kihei -                                          

nittaskpath.ErrBadPatterngo.itab.*flag.boolValue,flag.Valuego.itab.*os.File,io.WmError,errorgo.itab.*reflect.rtype,reflect.Typego.itab.*flag.durationValue,flag.64Value,flag.Valuego.itab.*flag.intValue,flag.Valuego.itab.*flag.int64Value,flagngValue,flag.Valuego.itab.*flag.uintValue,flag.Valuego.itab.*flag.uint64Value,fl.Builder,io.Writergo.itab.*errors.errorString,errorgo.itab.*fmt.wrapError,errorggo.itab.*os.File,io.Readergo.itab.syscall.Signal,os.Signalgo.itab.*io/fs.PathErrallError,errorgo.itab.syscall.Errno,errorgo.itab.os.onlyWriter,io.Writergo.itab.nfogo.itab.*io.LimitedReader,io.Readergo.itab.*os.File,io.Closergo.itab.*os/exec*os/exec.Error,errorgo.itab.*bufio.Reader,io.Readergo.itab.os/user.UnknownUserIdrnal/reflectlite.rtype,internal/reflectlite.Typego.itab.time.fileSizeError,errort.SortedMap,sort.Interfacego.itab.runtime.errorString,error_cgo_init_cgo_thread__init_done_cgo_callers_cgo_yield_cgo_mmap_cgo_munmap_cgo_sigactionruntime.mainPCeadlineExceededError,errorgo.itab.internal/poll.errNetClosing,errorruntime.defaudVersion.strruntime.modinfo.strtype.*runtime.textsectionmapadmin@i-0ecfba1c645ee/dev/nu /home/admin/kihei