SadServers Joined on September 10, 2023

drwxr-xr-x 6 admin admin 4096 Nov  4 03:11 .                                    drwxr-xr-x 3 root  root  4096 Sep 17  2023 ..                                   drwx------ 3 admin admin 4096 Sep 20  2023 .ansible                             -rw------- 1 admin admin  448 Nov  4 03:13 .bash_history                        -rw-r--r-- 1 admin admin  220 Aug  4  2021 .bash_logout                         -rw-r--r-- 1 admin admin 3526 Aug  4  2021 .bashrc                              drwxr-xr-x 3 admin admin 4096 Sep 20  2023 .config                              -rw-r--r-- 1 admin admin  807 Aug  4  2021 .profile                             drwx------ 2 admin admin 4096 Sep 17  2023 .ssh                                 -rw------- 1 admin admin 1232 Nov  4 03:11 .viminfo                             drwxr-xr-x 2 admin root  4096 Sep 24  2023 agent                                -rwxrwx--- 1 root  root   360 Sep 24  2023 webserver.py                         admin@i-0ae37c2b2950f7142:~$ visudo                                             visudo: /etc/sudoers: Permission denied                                         admin@i-0ae37c2b2950f7142:~$                                                    

admin@i-085653597bb6a4090:~$ curl localhost:5000                                Unauthorizedadmin@i-085653597bb6a4090:~$ curl localhost:5000                    

root@i-0df2d9e82ec0588c0:~# vgcreate backup /dev/nvme1n1p1 /dev/nvme2n1p1         Volume group "backup" successfully created                                    root@i-0df2d9e82ec0588c0:~# vgs                                                   VG     #PV #LV #SN Attr   VSize VFree                                           backup   2   0   0 wz--n- 1.99g 1.99g                                         root@i-0df2d9e82ec0588c0:~# df -hT                                              Filesystem      Type      Size  Used Avail Use% Mounted on                      udev            devtmpfs  217M     0  217M   0% /dev                            tmpfs           tmpfs      46M  392K   46M   1% /run                            /dev/nvme0n1p1  ext4      7.7G  6.1G  1.2G  84% /                               tmpfs           tmpfs     228M   24K  228M   1% /dev/shm                        tmpfs           tmpfs     5.0M     0  5.0M   0% /run/lock                       /dev/nvme0n1p15 vfat      124M  5.9M  118M   5% /boot/efi                       tmpfs           tmpfs      46M     0   46M   0% /run/user/0                     root@i-0df2d9e82ec0588c0:~# mkfs.ext                                            

lsof      1008                   1000  mem       REG              259,1   149520inux-gnu/libpthread-2.31.so                                                     lsof      1008                   1000  mem       REG              259,1    18688inux-gnu/libdl-2.31.so                                                          lsof      1008                   1000  mem       REG              259,1   617128inux-gnu/libpcre2-8.so.0.10.1                                                   lsof      1008                   1000  mem       REG              259,1  1901536inux-gnu/libc-2.31.so                                                           lsof      1008                   1000  mem       REG              259,1   166120inux-gnu/libselinux.so.1                                                        lsof      1008                   1000  mem       REG              259,1   177928inux-gnu/ld-2.31.so                                                             lsof      1008                   1000    4r     FIFO               0,11      0t0lsof      1008                   1000    7w     FIFO               0,11      0t0admin@i-096a29f104e7847fe:~$ lsof -i                                            

admin@i-0a0425e08d1f07658:~$ strace -ff -y                                      

  Free PE               0                                                         Allocated PE          0                                                         PV UUID               z0uOTP-FI8t-j3rA-HUHk-2sFf-x3hO-BiYzAc                                                                                                  admin@i-026cdc6f98b7dc57b:~$ sudo lg lg-data /dev/sdb /dev/sdc                  sudo: lg: command not found                                                     admin@i-026cdc6f98b7dc57b:~$ sudo lgcreate lg-data /dev/sdb /dev/sdc            sudo: lgcreate: command not found                                               admin@i-026cdc6f98b7dc57b:~$ sudo lgcreate lg-data /dev/sdb^Cdev/sdc            admin@i-026cdc6f98b7dc57b:~$ sudo lgs                                           sudo: lgs: command not found                                                    admin@i-026cdc6f98b7dc57b:~$ sudo vgs                                           admin@i-026cdc6f98b7dc57b:~$ sudo vgcreate vg-data /dev/sdb^Cdev/sdc              No device found for /dev/sdb^Cdev/sdc.                                        admin@i-026cdc6f98b7dc57b:~$ sudo vgcreate vg-data /dev/sdb                     

admin@i-033c3631d8f422e97:~$ ./k                                                

crw-------  1 root root     10, 241 Oct 30 21:24 vhost-vsock                    lrwxrwxrwx  1 root root           7 Oct 30 21:24 xvda -> nvme0n1                lrwxrwxrwx  1 root root           9 Oct 30 21:25 xvda1 -> nvme0n1p1             lrwxrwxrwx  1 root root          10 Oct 30 21:24 xvda14 -> nvme0n1p14           lrwxrwxrwx  1 root root          10 Oct 30 21:24 xvda15 -> nvme0n1p15           crw-rw-rw-  1 root root      1,   5 Oct 30 21:24 zero                           admin@i-03eef21126bfed599:~$ lsblk                                              NAME         MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT                                nvme1n1      259:0    0    1G  0 disk                                           nvme0n1      259:1    0    8G  0 disk                                           ├─nvme0n1p1  259:3    0  7.9G  0 part /                                         ├─nvme0n1p14 259:4    0    3M  0 part                                           └─nvme0n1p15 259:5    0  124M  0 part /boot/efi                                 nvme2n1      259:2    0    1G  0 disk                                           admin@i-03eef21126bfed599:~$ pvcreate                                           

drwxr-xr-x 7 admin admin       4096 Oct 30 17:27 .                              drwxr-xr-x 3 root  root        4096 Sep 17  2023 ..                             drwx------ 3 admin admin       4096 Sep 17  2023 .ansible                       -rw-r--r-- 1 admin admin        220 Aug  4  2021 .bash_logout                   -rw-r--r-- 1 admin admin       3526 Aug  4  2021 .bashrc                        drwxr-xr-x 3 admin admin       4096 Oct 30 17:27 .config                        -rw-r--r-- 1 admin admin        807 Aug  4  2021 .profile                       drwx------ 2 admin admin       4096 Sep 17  2023 .ssh                           drwxr-xr-x 2 admin root        4096 Sep 17  2023 agent                          drwxr-xr-x 2 admin root        4096 Sep 17  2023 data                           -rw-r--r-- 1 root  root  5368709120 Sep 17  2023 datafile                       -rwxr-xr-x 1 admin root     2207109 Sep 17  2023 kihei                          root@i-0b90c906ab81ab69c:~# exit                                                exit                                                                            admin@i-0b90c906ab81ab69c:~$  /home/admin/kihei                                 

admin@i-087fd4cfd674aa46f:~$ history                                                1  2023-09-20T15:57:57 > /home/admin/.bash_history                              2  2023-09-20T15:58:02 exit                                                     3  2024-10-30T14:46:50 history                                              admin@i-087fd4cfd674aa46f:~$ cd /home/admin                                     

admin@i-087fd4cfd674aa46f:~$ history                                                1  2023-09-20T15:57:57 > /home/admin/.bash_history                              2  2023-09-20T15:58:02 exit                                                     3  2024-10-30T14:46:50 history                                              admin@i-087fd4cfd674aa46f:~$ cd /ho                                             

admin@i-0d5aa000864525c9c:/home$ sudo qwe                                                                                                                       We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                                                                                                      ^Csudo: 1 incorrect password attempt                                            admin@i-0d5aa000864525c9c:/home$ ^C                                             admin@i-0d5aa000864525c9c:/home$ ^C                                             admin@i-0d5aa000864525c9c:/home$                                                

>                                                                               * Mark bundle as not supporting multiuse                                        < HTTP/1.1 200 OK                                                               < Server: Werkzeug/2.3.7 Python/3.9.2                                           < Date: Wed, 30 Oct 2024 08:57:01 GMT                                           < Content-Type: text/html; charset=utf-8                                        < Content-Length: 12                                                            < Connection: close                                                             <                                                                               * Closing connection 0                                                          Unauthorizedadmin@i-00401ddd551a6cb3e:~$                                        admin@i-00401ddd551a6cb3e:~$                                                    admin@i-00401ddd551a6cb3e:~$                                                    admin@i-00401ddd551a6cb3e:~$                                                    admin@i-00401ddd551a6cb3e:~$ echo                                               

SF:HTTPStatus\.BAD_REQUEST\x20-\x20Bad\x20request\x20syntax\x20or\x20unsup      SF:ported\x20method\.</p>\n\x20\x20\x20\x20</body>\n</html>\n");                                                                                                Service detection performed. Please report any incorrect results at https://nmapNmap done: 1 IP address (1 host up) scanned in 92.67 seconds                    admin@i-0be8092b5097881f7:~$ shoutdown --help                                   bash: shoutdown: command not found                                              admin@i-0be8092b5097881f7:~$ sudo -l                                            Matching Defaults entries for admin on i-0be8092b5097881f7:                         env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/s                                                                                User admin may run the following commands on i-0be8092b5097881f7:                   (ALL : ALL) ALL                                                                 (ALL) NOPASSWD: /sbin/shutdown                                              admin@i-0be8092b5097881f7:~$ /s