export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
uname -s -v -n -m 2 > /dev/null
/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m
busybox uname -s -v -n -m 2 > /dev/null
( [ -f /proc/version ]
[ -f /proc/version ]
head -1 /proc/version | cut -d -f1
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; echo; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; echo; cat /proc/device-tree/model 2>/dev/null; echo; lscpu 2>/dev/null | grep "Model name" | cut -d: -f2-; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
echo $HOME
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E "model name|Hardware" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep "Model name"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E "model name|Hardware" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep "Model name"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
uname -m 2 > /dev/null
cat /proc/uptime 2 > /dev/null | cut -d. -f1
cut -d. -f1

Fingerprints

HASSH

2ec37a7cc8daf20b10e1ad6221061ca5

SSH Client

SSH-2.0-Go

Evidence Timeline

Interactive Operator 5e1fd150037e w4m_seattle_01 · 2026-07-15 20:39

13 1 90%

Loading events...

Interactive Operator a8b07f1a7f21 w4m_seattle_01 · 2026-07-15 20:36

13 1 90%

Loading events...

Scanner b0622b798dd4 w4m_seattle_01 · 2026-07-15 20:33

15%

Loading events...

Scanner 4b4d204c6997 w4m_singapore_01 · 2026-07-15 14:32

15%

Loading events...

Scanner 48c3b5ff8b56 w4m_singapore_01 · 2026-07-15 14:28

15%

Loading events...

Interactive Operator 7b99b5ce8ce1 w4m_seattle_01 · 2026-07-15 09:29

13 1 90%

Loading events...

Interactive Operator 46fd4b0b84be w4m_seattle_01 · 2026-07-15 09:27

13 1 90%

Loading events...

Scanner 3b479ee404d5 w4m_seattle_01 · 2026-07-15 09:24

15%

Loading events...

Interactive Operator b6da56f8765b w4m_seattle_01 · 2026-07-15 09:22

13 1 90%

Loading events...

Interactive Operator 97300a039fde w4m_seattle_01 · 2026-07-15 09:19

13 1 90%

Loading events...

Credential Probe e745963f80eb w4m_seattle_01 · 2026-07-15 09:17

1 20%

Loading events...

Interactive Operator b767299e86ba w4m_seattle_01 · 2026-07-15 09:14

13 1 90%

Loading events...

Interactive Operator 852a9838bcc8 w4m_seattle_01 · 2026-07-15 09:11

13 1 90%

Loading events...

Interactive Operator 99968113e0c9 w4m_seattle_01 · 2026-07-15 09:08

13 1 90%

Loading events...

Scanner bbe1728732ad w4m_seattle_01 · 2026-07-15 09:04

15%

Loading events...

Interactive Operator 6f81d6d81d99 w4m_singapore_01 · 2026-07-13 20:58

13 1 90%

Loading events...

Interactive Operator 1e0b4d87e0c9 w4m_singapore_01 · 2026-07-13 20:56

13 1 90%

Loading events...

Interactive Operator e88a1d8d7d8c w4m_singapore_01 · 2026-07-13 20:54

13 1 90%

Loading events...

Credential Probe 0f385e5cf3cc w4m_singapore_01 · 2026-07-13 20:52

1 20%

Loading events...

Interactive Operator c864bed55c9d w4m_singapore_01 · 2026-07-13 20:49

13 1 90%

Loading events...

Interactive Operator e23a8e7b9ccb w4m_singapore_01 · 2026-07-13 20:47

13 1 90%

Loading events...

Interactive Operator c43c5c85b508 w4m_singapore_01 · 2026-07-13 20:45

13 1 90%

Loading events...

Interactive Operator 54f541baf8b8 w4m_singapore_01 · 2026-07-13 20:42

13 1 90%

Loading events...

Interactive Operator 3da217803b51 w4m_singapore_01 · 2026-07-13 20:40

13 1 90%

Loading events...

Interactive Operator fd266d154720 w4m_singapore_01 · 2026-07-13 20:38

13 1 90%

Loading events...

Scanner 86d787411f62 w4m_singapore_01 · 2026-07-13 20:35

15%

Loading events...

Interactive Operator 42eb1a888bc5 w4m_seattle_01 · 2026-07-03 08:58

13 1 90%

Loading events...

Credential Probe e97b86441be2 w4m_singapore_01 · 2026-07-02 20:31

1 20%

Loading events...

Scanner ca711a5196fa w4m_singapore_01 · 2026-07-02 20:27

15%

Loading events...

Credential Probe 6218161f639f w4m_seattle_01 · 2026-07-02 11:44

1 20%

Loading events...

Credential Probe 1e564a0cd83f w4m_seattle_01 · 2026-07-02 11:37

1 20%

Loading events...

Credential Probe 5146845df8dd w4m_seattle_01 · 2026-07-02 11:23

1 20%

Loading events...

Credential Probe 7a84d477853d w4m_seattle_01 · 2026-07-02 11:20

1 20%

Loading events...

Credential Probe df909459a0b6 w4m_seattle_01 · 2026-07-02 11:14

1 20%

Loading events...

Credential Probe ced61c278cb5 w4m_seattle_01 · 2026-07-02 11:11

1 20%

Loading events...

Credential Probe 699377b5f4b4 w4m_seattle_01 · 2026-07-02 11:05

1 20%

Loading events...

Credential Probe 8710ecd6656b w4m_seattle_01 · 2026-07-02 10:59

1 20%

Loading events...

Credential Probe 712938a2ff00 w4m_seattle_01 · 2026-07-02 10:48

1 20%

Loading events...

Credential Probe 6ccad632777c w4m_seattle_01 · 2026-07-02 10:43

1 20%

Loading events...

Credential Probe 8f53df414edb w4m_seattle_01 · 2026-07-02 10:40

1 20%

Loading events...

Credential Probe e33583c92bdf w4m_seattle_01 · 2026-07-02 10:32

1 20%

Loading events...

Credential Probe a1ccca9fc750 w4m_seattle_01 · 2026-07-02 10:30

1 20%

Loading events...

Credential Probe fe347d82ac5e w4m_seattle_01 · 2026-07-02 10:27

1 20%

Loading events...

Credential Probe d3e053abd732 w4m_seattle_01 · 2026-07-02 10:19

1 20%

Loading events...

Credential Probe c69ce86eafb4 w4m_seattle_01 · 2026-07-02 10:12

1 20%

Loading events...

Reconnaissance 163d6dc3dbdb w4m_seattle_01 · 2026-07-02 10:08

1 1 60%

Loading events...

Reconnaissance 56e89ee2b1f3 w4m_seattle_01 · 2026-07-02 09:52

1 1 60%

Loading events...

Reconnaissance c42fd04d3d74 w4m_seattle_01 · 2026-07-02 09:48

1 1 60%

Loading events...

Reconnaissance 78fbd83b21bc w4m_seattle_01 · 2026-07-02 09:44

1 1 60%

Loading events...

Reconnaissance 3ccf87b3c889 w4m_seattle_01 · 2026-07-02 09:34

1 1 60%

Loading events...