LISTEN       0         4096                              *:6767                  users:(("sadagent",pid=565,fd=7))                                              LISTEN       0         4096                              *:8080                  users:(("gotty",pid=564,fd=6))                                                 ESTAB        0         0             [::ffff:172.31.33.75]:8080          [::ffff users:(("gotty",pid=564,fd=7))                                                 admin@i-0fefafcf5226688e9:/proc/576$ watch 'ss -antp'                           admin@i-0fefafcf5226688e9:/proc/576$ cd ~                                       admin@i-0fefafcf5226688e9:~$ ls -l                                              total 8                                                                         drwxr-xr-x 2 admin root 4096 Sep 24  2023 agent                                 -rwxrwx--- 1 root  root  360 Sep 24  2023 webserver.py                          admin@i-0fefafcf5226688e9:~$ find / -perm ^C                                    admin@i-0fefafcf5226688e9:~$                                                    

admin        771     697  0 16:53 pts/1    00:00:00 more                        admin@i-09f185fddd1e81888:~$ history                                                1  2023-09-20T15:57:57 > /home/admin/.bash_history                              2  2023-09-20T15:58:02 exit                                                     3  2025-03-07T16:52:03 sudo su -                                                4  2025-03-07T16:52:06 ls -l                                                    5  2025-03-07T16:52:14 lsof -i :5000                                            6  2025-03-07T16:52:18 sudo lsof -i :5000                                       7  2025-03-07T16:52:22 ps -ef                                                   8  2025-03-07T16:52:38 nstat -tlnp                                              9  2025-03-07T16:52:44 netstat -tlnp                                           10  2025-03-07T16:52:56 systemctl status                                        11  2025-03-07T16:53:15 ps -ef  | more                                          12  2025-03-07T16:54:05 history                                              admin@i-09f185fddd1e81888:~$ ls -l /home/admin/webserver.py                     

/dev/nvme0n1p15  124M  5.9M  118M   5% /boot/efi                                admin@i-0d33944e5b01a1837:~$ df ./ -h                                           Filesystem      Size  Used Avail Use% Mounted on                                /dev/nvme0n1p1  7.7G  6.1G  1.2G  84% /                                         admin@i-0d33944e5b01a1837:~$ du ./ -h                                           11M     ./agent                                                                 4.0K    ./.ansible/tmp                                                          8.0K    ./.ansible                                                              4.0K    ./data                                                                  4.0K    ./.config/procps                                                        8.0K    ./.config/asciinema                                                     16K     ./.config                                                               8.0K    ./.ssh                                                                  5.1G    ./                                                                      admin@i-0d33944e5b01a1837:~$ du ./ -h                                           

admin@i-0de7a2efeec7e6379:~$ curl localhost:5000                                Unauthorizedadmin@i-0de7a2efeec7e6379:~$ curl localhost:5000                    

     20 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 kworker/1     22 root      20   0       0      0      0 I   0.0   0.0   0:00.01 kworker/u     23 root      20   0       0      0      0 S   0.0   0.0   0:00.00 kdevtmpfs     24 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 netns         25 root      20   0       0      0      0 S   0.0   0.0   0:00.10 kauditd       26 root      20   0       0      0      0 S   0.0   0.0   0:00.00 khungtask     27 root      20   0       0      0      0 S   0.0   0.0   0:00.00 oom_reape     28 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 writeback     29 root      20   0       0      0      0 S   0.0   0.0   0:00.00 kcompactd     30 root      25   5       0      0      0 S   0.0   0.0   0:00.00 ksmd          49 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 kintegrit     50 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 kblockd       51 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 blkcg_pun     52 root      20   0       0      0      0 I   0.0   0.0   0:00.02 kworker/1     53 root       0 -20       0      0      0 I   0.0   0.0   0:00.00 kworker/0

admin@i-06b8d56eeffe5186e:~$ curl http://localhost:5000                         Unauthorizedadmin@i-06b8d56eeffe5186e:~$ curl --user-agent "test"               

 latest revision: https://github.com/lsof-org/lsof                               latest FAQ: https://github.com/lsof-org/lsof/blob/master/00FAQ                  latest (non-formatted) man page: https://github.com/lsof-org/lsof/blob/master/L usage: [-?abhKlnNoOPRtUvVX] [+|-c c] [+|-d s] [+D D] [+|-E] [+|-e s] [+|-f[gG]] [-F [f]] [-g [s]] [-i [i]] [+|-L [l]] [+m [m]] [+|-M] [-o [o]] [-p s]           [+|-r [t]] [-s [p:s]] [-S [t]] [-T [t]] [-u s] [+|-w] [-x [fl]] [--] [names]   Use the ``-h'' option to get more help information.                             admin@i-0d46f6faaf9ff441c:~$ lsof -n -i :5000                                   admin@i-0d46f6faaf9ff441c:~$ netstat -tulpn | grep 5000                         (Not all processes could be identified, non-owned process info                   will not be shown, you would have to be root to see it all.)                   tcp        0      0 127.0.0.1:5000          0.0.0.0:*               LISTEN      admin@i-0d46f6faaf9ff441c:~$ nc localhost 5000                                  ^C                                                                              admin@i-0d46f6faaf9ff441c:~$ tel                                                

NAME       MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT                                  nvme0n1    259:0    0    8G  0 disk                                             nvme2n1    259:1    0    1G  0 disk                                             nvme0n1p1  259:2    0  7.9G  0 part /                                           nvme0n1p14 259:3    0    3M  0 part                                             nvme0n1p15 259:4    0  124M  0 part /boot/efi                                   nvme1n1    259:5    0    1G  0 disk                                             admin@i-0b16adf98831f3727:~$ pvcreate /dev/nvme1n1 /dev/nvme2n1                   WARNING: Running as a non-root user. Functionality may be unavailable.          /run/lock/lvm/P_global:aux: open failed: Permission denied                    admin@i-0b16adf98831f3727:~$ sudo su                                            root@i-0b16adf98831f3727:/home/admin# pvcreate /dev/nvme1n1 /dev/nvme2n1          Physical volume "/dev/nvme1n1" successfully created.                            Physical volume "/dev/nvme2n1" successfully created.                          root@i-0b16adf98831f3727:/home/admin#                                           

admin@i-0b0d75b138a2fb845:~$ sudo su                                            root@i-0b0d75b138a2fb845:/home/admin# cat                                       

        [ -v|--verbose ]                                                                [ -y|--yes ]                                                                    [ -t|--test ]                                                                   [    --commandprofile String ]                                                  [    --config String ]                                                          [    --driverloaded y|n ]                                                       [    --nolocking ]                                                              [    --lockopt String ]                                                         [    --longhelp ]                                                               [    --profile String ]                                                         [    --version ]                                                                                                                                          Use --longhelp to show all options and advanced commands.                     root@i-01dd8e02d8dccb16e:/home/admin# vgcreate /dev^C                           root@i-01dd8e02d8dccb16e:/home/admin# pg                                        

admin@i-088251944bb933d5a:~$ /home/admin/kihei                                  panic: exit status 1                                                                                                                                            goroutine 1 [running]:                                                          main.main()                                                                             ./main.go:64 +0x47d                                                     admin@i-088251944bb933d5a:~$                                                    

          }                                                                             }                                                                             }                                                                             },                                                                              {                                                                                 "manager": "kube-controller-manager",                                           "operation": "Update",                                                          "apiVersion": "apps/v1",                                                        "time": "2025-03-05T11:00:44Z",                                                 "fieldsType": "FieldsV1"                                                  }^C }                                                                           admin@i-0a3506b35004c40b1:~$                                                    admin@i-0a3506b35004c40b1:~$                                                    admin@i-0a3506b35004c40b1:~$                                                    admin@i-0a3506b35004c40b1:~$ sudo pvcre                                         

nvme0n1p14 259:3    0    3M  0 part                                             nvme0n1p15 259:4    0  124M  0 part /boot/efi                                   nvme2n1    259:5    0    1G  0 disk                                             admin@i-01cfb94f70f88cbc0:~$ man pvcreate                                       Display all 1836 possibilities? (y or n)                                        admin@i-01cfb94f70f88cbc0:~$ man pvcreate                                       admin@i-01cfb94f70f88cbc0:~$ pvcreate nvme0n1                                     WARNING: Running as a non-root user. Functionality may be unavailable.          /run/lock/lvm/P_global:aux: open failed: Permission denied                    admin@i-01cfb94f70f88cbc0:~$ sudo !!                                            sudo pvcreate nvme0n1                                                             No device found for nvme0n1.                                                  admin@i-01cfb94f70f88cbc0:~$ sudo pvcreate nvme1n1                                No device found for nvme1n1.                                                  admin@i-01cfb94f70f88cbc0:~$ sudo pvcreate nvme1n1                              

admin@i-085903f344801b637:~$ pvcreate /dev/nvme1n1 /dev/nvme2n1                   WARNING: Running as a non-root user. Functionality may be unavailable.          /run/lock/lvm/P_global:aux: open failed: Permission denied                    admin@i-085903f344801b637:~$ sudo pvcreate /dev/nvme1n1 /dev/nvme2n1