admin@i-0a0425e08d1f07658:~$ strace -ff -y                                      

  Free PE               0                                                         Allocated PE          0                                                         PV UUID               z0uOTP-FI8t-j3rA-HUHk-2sFf-x3hO-BiYzAc                                                                                                  admin@i-026cdc6f98b7dc57b:~$ sudo lg lg-data /dev/sdb /dev/sdc                  sudo: lg: command not found                                                     admin@i-026cdc6f98b7dc57b:~$ sudo lgcreate lg-data /dev/sdb /dev/sdc            sudo: lgcreate: command not found                                               admin@i-026cdc6f98b7dc57b:~$ sudo lgcreate lg-data /dev/sdb^Cdev/sdc            admin@i-026cdc6f98b7dc57b:~$ sudo lgs                                           sudo: lgs: command not found                                                    admin@i-026cdc6f98b7dc57b:~$ sudo vgs                                           admin@i-026cdc6f98b7dc57b:~$ sudo vgcreate vg-data /dev/sdb^Cdev/sdc              No device found for /dev/sdb^Cdev/sdc.                                        admin@i-026cdc6f98b7dc57b:~$ sudo vgcreate vg-data /dev/sdb                     

admin@i-033c3631d8f422e97:~$ ./k                                                

crw-------  1 root root     10, 241 Oct 30 21:24 vhost-vsock                    lrwxrwxrwx  1 root root           7 Oct 30 21:24 xvda -> nvme0n1                lrwxrwxrwx  1 root root           9 Oct 30 21:25 xvda1 -> nvme0n1p1             lrwxrwxrwx  1 root root          10 Oct 30 21:24 xvda14 -> nvme0n1p14           lrwxrwxrwx  1 root root          10 Oct 30 21:24 xvda15 -> nvme0n1p15           crw-rw-rw-  1 root root      1,   5 Oct 30 21:24 zero                           admin@i-03eef21126bfed599:~$ lsblk                                              NAME         MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT                                nvme1n1      259:0    0    1G  0 disk                                           nvme0n1      259:1    0    8G  0 disk                                           ├─nvme0n1p1  259:3    0  7.9G  0 part /                                         ├─nvme0n1p14 259:4    0    3M  0 part                                           └─nvme0n1p15 259:5    0  124M  0 part /boot/efi                                 nvme2n1      259:2    0    1G  0 disk                                           admin@i-03eef21126bfed599:~$ pvcreate                                           

drwxr-xr-x 7 admin admin       4096 Oct 30 17:27 .                              drwxr-xr-x 3 root  root        4096 Sep 17  2023 ..                             drwx------ 3 admin admin       4096 Sep 17  2023 .ansible                       -rw-r--r-- 1 admin admin        220 Aug  4  2021 .bash_logout                   -rw-r--r-- 1 admin admin       3526 Aug  4  2021 .bashrc                        drwxr-xr-x 3 admin admin       4096 Oct 30 17:27 .config                        -rw-r--r-- 1 admin admin        807 Aug  4  2021 .profile                       drwx------ 2 admin admin       4096 Sep 17  2023 .ssh                           drwxr-xr-x 2 admin root        4096 Sep 17  2023 agent                          drwxr-xr-x 2 admin root        4096 Sep 17  2023 data                           -rw-r--r-- 1 root  root  5368709120 Sep 17  2023 datafile                       -rwxr-xr-x 1 admin root     2207109 Sep 17  2023 kihei                          root@i-0b90c906ab81ab69c:~# exit                                                exit                                                                            admin@i-0b90c906ab81ab69c:~$  /home/admin/kihei                                 

admin@i-087fd4cfd674aa46f:~$ history                                                1  2023-09-20T15:57:57 > /home/admin/.bash_history                              2  2023-09-20T15:58:02 exit                                                     3  2024-10-30T14:46:50 history                                              admin@i-087fd4cfd674aa46f:~$ cd /home/admin                                     

admin@i-087fd4cfd674aa46f:~$ history                                                1  2023-09-20T15:57:57 > /home/admin/.bash_history                              2  2023-09-20T15:58:02 exit                                                     3  2024-10-30T14:46:50 history                                              admin@i-087fd4cfd674aa46f:~$ cd /ho                                             

admin@i-0d5aa000864525c9c:/home$ sudo qwe                                                                                                                       We trust you have received the usual lecture from the local System              Administrator. It usually boils down to these three things:                                                                                                         #1) Respect the privacy of others.                                              #2) Think before you type.                                                      #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                                                                                                      ^Csudo: 1 incorrect password attempt                                            admin@i-0d5aa000864525c9c:/home$ ^C                                             admin@i-0d5aa000864525c9c:/home$ ^C                                             admin@i-0d5aa000864525c9c:/home$                                                

>                                                                               * Mark bundle as not supporting multiuse                                        < HTTP/1.1 200 OK                                                               < Server: Werkzeug/2.3.7 Python/3.9.2                                           < Date: Wed, 30 Oct 2024 08:57:01 GMT                                           < Content-Type: text/html; charset=utf-8                                        < Content-Length: 12                                                            < Connection: close                                                             <                                                                               * Closing connection 0                                                          Unauthorizedadmin@i-00401ddd551a6cb3e:~$                                        admin@i-00401ddd551a6cb3e:~$                                                    admin@i-00401ddd551a6cb3e:~$                                                    admin@i-00401ddd551a6cb3e:~$                                                    admin@i-00401ddd551a6cb3e:~$ echo                                               

SF:HTTPStatus\.BAD_REQUEST\x20-\x20Bad\x20request\x20syntax\x20or\x20unsup      SF:ported\x20method\.</p>\n\x20\x20\x20\x20</body>\n</html>\n");                                                                                                Service detection performed. Please report any incorrect results at https://nmapNmap done: 1 IP address (1 host up) scanned in 92.67 seconds                    admin@i-0be8092b5097881f7:~$ shoutdown --help                                   bash: shoutdown: command not found                                              admin@i-0be8092b5097881f7:~$ sudo -l                                            Matching Defaults entries for admin on i-0be8092b5097881f7:                         env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/s                                                                                User admin may run the following commands on i-0be8092b5097881f7:                   (ALL : ALL) ALL                                                                 (ALL) NOPASSWD: /sbin/shutdown                                              admin@i-0be8092b5097881f7:~$ /s                                                 

-rw-r--r-- 1 admin admin 3526 Aug  4  2021 .bashrc                              drwxr-xr-x 3 admin admin 4096 Sep 20  2023 .config                              -rw-r--r-- 1 admin admin  807 Aug  4  2021 .profile                             drwx------ 2 admin admin 4096 Sep 17  2023 .ssh                                 drwxr-xr-x 2 admin root  4096 Sep 24  2023 agent                                -rwxrwx--- 1 root  root   360 Sep 24  2023 webserver.py                         admin@i-0c7688c6e49a68923:~$ cd /var/log                                        admin@i-0c7688c6e49a68923:/var/log$ ls                                          alternatives.log    auth.log       btmp    chrony                 daemon.log      journal     kern.log.2.gz  messages.1     private  syslog.1             user.lalternatives.log.1  auth.log.1     btmp.1  cloud-init-output.log  daemon.log.1    kern.log    lastlog        messages.2.gz  runit    syslog.2.gz          user.lapt                 auth.log.2.gz  cast    cloud-init.log         daemon.log.2.g  kern.log.1  messages       minio.log      syslog   unattended-upgrades  user.ladmin@i-0c7688c6e49a68923:/var/log$ less                                        

/asn1.oidEncoder,encoding/asn1.encodergo.itab.encoding/asn1.stringEncoder,encodiitab.encoding/asn1.int64Encoder,encoding/asn1.encodergo.itab.encoding/asn1.setEnencodergo.itab.golang.org/x/text/internal/language.sortVariants,sort.Interfacego/text/internal/language.variantsSort,sort.Interfacego.itab.golang.org/x/text/intuage.Tag,golang.org/x/text/internal/language/compact.fullTaggo.itab.*encoding/gogobTypego.itab.*encoding/gob.arrayType,encoding/gob.gobTypego.itab.*encoding/gob.gobTypego.itab.*encoding/gob.CommonType,encoding/gob.gobType__errno_locationgaihabortpthread_cond_broadcastsigactionsetenvpthread_cond_waitmmapnanosleepfputcpttex_unlockmallocmunmapvfprintfunsetenvpthread_attr_destroysigismemberfwritestrerime.buildVersion.strruntime.modinfo.strtype.*runtime.textsectionmap^C           admin@i-059172a6cbeaf621a:~/agent$ tail -300f sadagent.txt                      ^C                                                                              admin@i-059172a6cbeaf621a:~/agent$ ls                                           check.sh  sadagent  sadagent.txt                                                admin@i-059172a6cbeaf621a:~/agent$                                              

admin@i-0014ea79decd6a02f:~$ sudo su -                                          root@i-0014ea79decd6a02f:~#                                                     root@i-0014ea79decd6a02f:~#                                                     root@i-0014ea79decd6a02f:~#                                                     root@i-0014ea79decd6a02f:~#                                                     

    #3) With great power comes great responsibility.                                                                                                            [sudo] password for admin:                                                                                                                                                                                                                                                                                                      Sorry, try again.                                                               [sudo] password for admin:                                                      qSorry, try again.                                                              [sudo] password for admin:                                                      sudo: 2 incorrect password attempts                                             admin@i-0e54dfe20a762b8f6:~$ telnet localhost                                   Trying 127.0.0.1...                                                             telnet: Unable to connect to remote host: Connection refused                    admin@i-0e54dfe20a762b8f6:~$