SadServers Joined on September 10, 2023

-rw-r--r-- 1 admin admin  13844 Oct  3 21:46 cheatsheet.md                      -rw-r--r-- 1 admin admin 189042 Oct  3 21:46 cheatsheet.pdf                     -rw-r--r-- 1 admin admin    146 Oct  3 21:46 hint1                              -rw-r--r-- 1 admin admin     88 Oct  3 21:46 hint2                              -rw-r--r-- 1 admin admin    187 Oct  3 21:46 hint3                              -rw-r--r-- 1 admin admin    183 Oct  3 21:46 hint4                              -rw-r--r-- 1 admin admin    280 Oct  3 21:46 hint5                              -rw-r--r-- 1 admin admin    272 Oct  3 21:46 hint6                              -rw-r--r-- 1 admin admin    329 Oct  3 21:46 hint7                              -rw-r--r-- 1 admin admin    473 Oct  3 21:46 hint8                              -rw-r--r-- 1 admin admin   2559 Oct  3 21:46 instructions                       drwxr-xr-x 5 admin admin   4096 Oct  3 21:46 mystery                            admin@i-09c11182c00dfa750:~/clmystery$                                          admin@i-09c11182c00dfa750:~/clmystery$                                          admin@i-09c11182c00dfa750:~/clmystery$ ca                                       

Selkirk Road                                                                    Avila Road                                                                      Whitcomb Avenue                                                                 Farmington Road                                                                 Webber Street                                                                   Maple Avenue                                                                    Yeoman Street                                                                   President Road                                                                  Blanche Street                                                                  Corbet Street                                                                   Gorham Street                                                                   Stoughton Street                                                                Scottfield Road                                                                 admin@i-03219d2552e98cd10:~/clmystery/mystery$ cat sus | awk -F'\t' '{print $4}'o $LINE | cut -d"," -f1;done                                                    

So she was considering in her own mind (as well as she could, for the           hot day made her feel very sleepy and stupid), whether the pleasure             admin@i-00dcf9e3a472897f3:~/clmystery/mystery$ ls                               crimescene  interviews  memberships  people  streets  sus  vehicles             admin@i-00dcf9e3a472897f3:~/clmystery/mystery$ cat crimescene | grep CLUE       CLUE: Footage from an ATM security camera is blurry but shows that the perpetratst 6'.                                                                          CLUE: Found a wallet believed to belong to the killer: no ID, just loose change, Rotary_Club, Delta SkyMiles, the local library, and the Museum of Bash History.traceable and have no name, for some reason.                                    CLUE: Questioned the barista at the local coffee shop. He said a woman left righhots. The name on her latte was Annabel, she had blond spiky hair and a New Zealadmin@i-00dcf9e3a472897f3:~/clmystery/mystery$ ls                               crimescene  interviews  memberships  people  streets  sus  vehicles             admin@i-00dcf9e3a472897f3:~/clmystery/mystery$ head people                      

Weight: 204 lbs                                                                                                                                                 --                                                                              License Plate L337WR9                                                           Make: Honda                                                                     Color: Blue                                                                     Owner: Jacqui Maher                                                             Height: 6'2"                                                                    Weight: 130 lbs                                                                                                                                                 admin@i-0758f78a432ddae98:~/clmystery/mystery$ cat people | grep Germ           Joe Germuska    M       65      Plainfield Street, line 275                     Germain Detti   M       24      Hampshire Street, line 246                      Laetitia Manuel F       68      Germania Street, line 425                       admin@i-0758f78a432ddae98:~/clmystery/mystery$ cat streets/Plai                 

sudo: 3 incorrect password attempts                                             admin@i-0151a73fc156ac6e0:~$ ls -lsa                                            total 44                                                                        4 drwxr-xr-x 6 admin admin 4096 Sep 24 23:20 .                                  4 drwxr-xr-x 3 root  root  4096 Sep 17 16:44 ..                                 4 drwx------ 3 admin admin 4096 Sep 20 15:52 .ansible                           4 -rw------- 1 admin admin  231 Oct  9 13:45 .bash_history                      4 -rw-r--r-- 1 admin admin  220 Aug  4  2021 .bash_logout                       4 -rw-r--r-- 1 admin admin 3526 Aug  4  2021 .bashrc                            4 drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config                            4 -rw-r--r-- 1 admin admin  807 Aug  4  2021 .profile                           4 drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh                               4 drwxr-xr-x 2 admin root  4096 Sep 24 23:20 agent                              4 -rwxrwx--- 1 root  root   360 Sep 24 23:20 webserver.py                       admin@i-0151a73fc156ac6e0:~$ cat .basg                                          

check.sh  sadagent  sadagent.txt                                                admin@i-0ab194c05dd4494ba:~/agent$ cd sadagent                                  bash: cd: sadagent: Not a directory                                             admin@i-0ab194c05dd4494ba:~/agent$ less sadagent                                "sadagent" may be a binary file.  See it anyway?                                admin@i-0ab194c05dd4494ba:~/agent$ ls                                           check.sh  sadagent  sadagent.txt                                                admin@i-0ab194c05dd4494ba:~/agent$ cd ..                                        admin@i-0ab194c05dd4494ba:~$ ls                                                 agent  clmystery  mysolution                                                    admin@i-0ab194c05dd4494ba:~$ cd clmystery                                       admin@i-0ab194c05dd4494ba:~/clmystery$ ls                                       LICENSE.md  README.md  cheatsheet.md  cheatsheet.pdf  hint1  hint2  hint3  hint4admin@i-0ab194c05dd4494ba:~/clmystery$ less cheatsheet.pdf                      admin@i-0ab194c05dd4494ba:~/clmystery$ less                                     

admin@i-0011e02dc414118e1:~$ cd home                                            bash: cd: home: No such file or directory                                       admin@i-0011e02dc414118e1:~$ ls                                                 agent  clmystery  mysolution                                                    admin@i-0011e02dc414118e1:~$ cat instructions                                   cat: instructions: No such file or directory                                    admin@i-0011e02dc414118e1:~$ ls                                                 agent  clmystery  mysolution                                                    admin@i-0011e02dc414118e1:~$ cd mysolution                                      bash: cd: mysolution: Not a directory                                           admin@i-0011e02dc414118e1:~$ m                                                  

admin@i-000c40fb3f665fed1:/etc/apache2/conf-available$ ls                       javascript-common.conf                                                          admin@i-000c40fb3f665fed1:/etc/apache2/conf-available$ cd                       admin@i-000c40fb3f665fed1:~$ curl -IL localhost:5000                            HTTP/1.1 200 OK                                                                 Server: Werkzeug/2.3.7 Python/3.9.2                                             Date: Mon, 09 Oct 2023 12:33:30 GMT                                             Content-Type: text/html; charset=utf-8                                          Content-Length: 12                                                              Connection: close                                                                                                                                               admin@i-000c40fb3f665fed1:~$ ls                                                 agent  webserver.py                                                             admin@i-000c40fb3f665fed1:~$ vi webserver.py                                    admin@i-000c40fb3f665fed1:~$ ls                                                 

                                                                                'How am I to get in?' asked Alice again, in a louder tone.                                                                                                      'ARE you to get in at all?' said the Footman. 'That's the first                 question, you know.'                                                                                                                                            It was, no doubt: only Alice did not like to be told so. 'It's really           dreadful,' she muttered to herself, 'the way all the creatures argue.           It's enough to drive one crazy!'                                                                                                                                                                                                                                                                                                *******                                                                         Crime Scene Report #927145534897                                                :                                                                               

Initiating NSE at 08:45                                                         Completed NSE at 08:45, 0.00s elapsed                                           Initiating NSE at 08:45                                                         Completed NSE at 08:45, 0.00s elapsed                                           Initiating NSE at 08:45                                                         Completed NSE at 08:45, 0.00s elapsed                                           Read data files from: /usr/bin/../share/nmap                                    Service detection performed. Please report any incorrect results at https://nmapNmap done: 1 IP address (1 host up) scanned in 93.30 seconds                    admin@i-0ba1c51e7ab08bced:~$ ssh 127.0.0.1                                      The authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.          ECDSA key fingerprint is SHA256:6XrpAR1ar1mTiXH63KOPbtmz/mM8JZwIV0calpHjM5I.    Are you sure you want to continue connecting (yes/no/[fingerprint])?            Host key verification failed.                                                   admin@i-0ba1c51e7ab08bced:~$ ssh 127.0.0.1                                      

-rw-r--r-- 1 admin admin 223490 Oct  3 21:46 people                             drwxr-xr-x 2 admin admin  12288 Oct  3 21:46 streets                            -rw-r--r-- 1 admin admin 497535 Oct  3 21:46 vehicles                           admin@i-06cc630c03368611a:~/clmystery/mystery$ cd peop                          bash: cd: peop: No such file or directory                                       admin@i-06cc630c03368611a:~/clmystery/mystery$ less people                      admin@i-06cc630c03368611a:~/clmystery/mystery$ cat clue.txt                     9213:CLUE: Footage from an ATM security camera is blurry but shows that the perpat least 6'.                                                                    9370:CLUE: Found a wallet believed to belong to the killer: no ID, just loose chds for Rotary_Club, Delta SkyMiles, the local library, and the Museum of Bash Hially untraceable and have no name, for some reason.                             11002:CLUE: Questioned the barista at the local coffee shop. He said a woman lefd the shots. The name on her latte was Annabel, she had blond spiky hair and a Nadmin@i-06cc630c03368611a:~/clmystery/mystery$                                  

Interviewed Ms. Church at 2:04 pm.  Witness stated that she did not see anyone s shooter, that she ran away as soon as the shots were fired.                                                                                                    However, she reports seeing the car that fled the scene.  Describes it as a bluelate that starts with "L337" and ends with "9"                                  admin@i-0b8dcb6b435a296c6:~/clmystery/mystery$                                  admin@i-0b8dcb6b435a296c6:~/clmystery/mystery$                                  admin@i-0b8dcb6b435a296c6:~/clmystery/mystery$                                  admin@i-0b8dcb6b435a296c6:~/clmystery/mystery$                                  admin@i-0b8dcb6b435a296c6:~/clmystery/mystery$ ls                               crimescene  interviews  memberships  people  streets  vehicles                  admin@i-0b8dcb6b435a296c6:~/clmystery/mystery$                                  admin@i-0b8dcb6b435a296c6:~/clmystery/mystery$                                  admin@i-0b8dcb6b435a296c6:~/clmystery/mystery$                                  admin@i-0b8dcb6b435a296c6:~/clmystery/mystery$ grep -A 5 "                      

admin@i-0f83e8d429758402b:~/clmystery/mystery$ grep -r "CLUE"                   crimescene:CLUE: Footage from an ATM security camera is blurry but shows that thale, at least 6'.                                                               crimescene:CLUE: Found a wallet believed to belong to the killer: no ID, just lop cards for Rotary_Club, Delta SkyMiles, the local library, and the Museum of Ba totally untraceable and have no name, for some reason.                         crimescene:CLUE: Questioned the barista at the local coffee shop. He said a womaheard the shots. The name on her latte was Annabel, she had blond spiky hair andadmin@i-0f83e8d429758402b:~/clmystery/mystery$ echo "Annabel" > ~/mysolution    admin@i-0f83e8d429758402b:~/clmystery/mystery$ md5sum ~/mysolution              652f81add07816f09c20540551c5e0a9  /home/admin/mysolution                        admin@i-0f83e8d429758402b:~/clmystery/mystery$ cat ~/mysolution                 Annabel                                                                         admin@i-0f83e8d429758402b:~/clmystery/mystery$ echo -n ~/mysolution             /home/admin/mysolutionadmin@i-0f83e8d429758402b:~/clmystery/mystery$            

Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     Make: Honda                                                                     admin@i-0d5300b13455c9a8f:~/clmystery/mystery$ grep Blue