- (20) Utilizando httpie, hagan una solicitud de HTTP al servidor
PS C:\Windows\system32> http https://nrywhite.lat
HTTP/1.1 200 OK
CF-RAY: 9110e143ab33c82c-TPA
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html
Date: Thu, 13 Feb 2025 01:00:10 GMT
Last-Modified: Thu, 13 Feb 2025 01:00:09 GMT
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tFfX59hCd%2FFgixb%2BAMZHC2JRCeteboxuyJhnlePtnc7wXlVsu7OUqk%2FXAXG6KN0PAqlpNQhMc05YWylkizzDuXCQ%2FdigzUu8cxQcNr7HurRaNEfYXNNkqagQk9na%2Bd4%3D"}],"group":"cf-nel","max_age":604800}
Server: cloudflare
Transfer-Encoding: chunked
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
server-timing: cfL4;desc="?proto=TCP&rtt=39960&min_rtt=35966&rtt_var=16340&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3056&recv_bytes=752&delivery_rate=121781&cwnd=252&unsent_bytes=0&cid=9e33f549d36baced&ts=93&x=0"
vary: accept-encoding
Sistemas y Tecnologías Web | 10
- (10) Utilizando curl, hagan una solicitud de HTTP al servidor
C:\Users\HP>curl https://nrywhite.lat
Te Imaginas?
- (5) Que pasa si tratan de hacer una solicitud de HTTP desde el servidor hacia su computadora?
2025-02-11 21:50 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in ~
○ → http https://190.56.194.12
http: errror: Request timed out (0s)
- (10) Utilizando tail dentro del servidor, obtengan las últimas 15 líneas del archivo /var/log/nginx/access.log
2025-02-11 21:58 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in ~
○ → cd /var/log/nginx
2025-02-11 21:59 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in .../log/nginx
○ → tail -n 15 access.log
172.70.83.40 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/maximize.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0"
108.162.212.110 - - [11/Feb/2025:21:56:24 +0000] "GET /script.js HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0"
172.70.255.62 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/instagram.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0"
172.70.255.23 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/windows-xp-logo.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0"
172.70.83.166 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/folder.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0"
172.70.254.218 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/close.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0"
172.70.54.198 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/discord.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0"
172.70.83.18 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/itch.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0"
172.70.255.148 - - [11/Feb/2025:21:56:24 +0000] "GET /styles.css?v=3 HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0"
172.70.255.205 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/kevin-pfp.jpg HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0"
172.70.82.125 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/wallpaper.jpg HTTP/1.1" 304 0 "https://23584.nrywhite.lat/styles.css?v=3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0"
3.142.248.184 - - [11/Feb/2025:22:00:21 +0000] "GET / HTTP/1.1" 200 12 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
162.158.11.152 - - [11/Feb/2025:22:00:34 +0000] "GET / HTTP/1.1" 200 12 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
162.158.11.150 - - [11/Feb/2025:22:00:35 +0000] "GET /favicon.ico HTTP/1.1" 404 196 "https://23009.nrywhite.lat/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
3.142.248.184 - - [11/Feb/2025:22:01:44 +0000] "" 400 0 "-" "-"
- (10) Utilizando ps y grep identifiquen qué procesos está corriendo amazon dentro del servidor
2025-02-11 22:06 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in .../log/nginx
○ → ps aux | grep amazon
○ → ps aux | grep amazon
root 126554 0.0 1.2 1759116 11976 ? Ssl Feb10 0:06 /snap/amazon-ssm-agent/9881/amazon-ssm-agent
root 126579 0.0 2.0 1850868 20344 ? Sl Feb10 0:21 /snap/amazon-ssm-agent/9881/ssm-agent-worker
ubuntu 212575 0.0 0.2 7076 2048 pts/10 S+ 22:09 0:00 grep --color=auto --exclude-dir=.bzr --exclude-dir=CVS --exclude-dir=.git --exclude-dir=.hg --exclude-dir=.svn amazon
- (10) Utilizando dig dentro del servidor, obtengan la ip que resuelve al hacer un dns lookup uvg.edu.gt
2025-02-11 22:18 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in /
○ → dig uvg.edu.gt
;; ANSWER SECTION:
uvg.edu.gt. 300 IN A 45.223.155.41
uvg.edu.gt. 300 IN A 45.223.56.41
- (5) Cuanta memoria RAM, total usada y libre, tiene el servidor? (su respuesta debe estar en MB)
2025-02-11 22:21 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in /
○ → free -m
Total used free
957MB 568MB 91MB
- (5) Cuanta espacio de disco, total usado y disponible, tiene el servidor? (su respuesta debe estar en MB)
2025-02-11 22:31 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in /
○ → df -m
Total used free
1003.49MB 602.9312MB 66.06MB
- (5) Utilizando el comando ip obtengan la ip del servidor
2025-02-11 22:44 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in ~
○ → ip addr show
2. enX0: inet 172.31.31.175ip
- (10) lsof lista los archivos abiertos. Identifiquen los archivos abiertos por el protocolo TCP en el puerto 80
2025-02-11 22:54 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in ~
○ → sudo lsof -i:80
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
nginx 215741 root 5u IPv4 777922 0t0 TCP *:http (LISTEN)
nginx 215741 root 7u IPv6 777924 0t0 TCP *:http (LISTEN)
nginx 215742 www-data 5u IPv4 777922 0t0 TCP *:http (LISTEN)
nginx 215742 www-data 7u IPv6 777924 0t0 TCP *:http (LISTEN)
- (20) Utilizando netstat, listen los puertos por los que está escuchando el servidor. Deben filtrar usando las siguientes opciones de netstat (esto es un solo comando con estas opciones):
- tcp
- udp
- numeric (muestra los puertos por número)
- program (muestra qué programa es el que está escuchando)
2025-02-12 16:58 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in ~
○ → sudo netstat -tulnp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.54:53 0.0.0.0:* LISTEN 309/systemd-resolve
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 309/systemd-resolve
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 10095/nginx: master
tcp 0 0 0.0.0.0:90 0.0.0.0:* LISTEN 1136/docker-proxy
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 10095/nginx: master
tcp6 0 0 :::10 :::* LISTEN 1/init
tcp6 0 0 :::90 :::* LISTEN 1143/docker-proxy
tcp6 0 0 :::80 :::* LISTEN 10095/nginx: master
udp 0 0 127.0.0.1:323 0.0.0.0:* 613/chronyd
udp 0 0 127.0.0.54:53 0.0.0.0:* 309/systemd-resolve
udp 0 0 127.0.0.53:53 0.0.0.0:* 309/systemd-resolve
udp 0 0 172.31.31.175:68 0.0.0.0:* 480/systemd-network
udp6 0 0 ::1:323 :::* 613/chronyd
- (30) Utilizando ss, listen los puertos por los que está escuchando el servidor. Deben filtrar usando las siguientes opciones de ss (esto es un solo comando con estas opciones):
summary
tcp
conexiones establecidas
resuelvan los puertos numericos
uso de memoria
información interna de tcp
proceso que usa el socket
2025-02-12 17:09 ⌚ njs v18.19.1|py |go 23% ip-172-31-31-175 (172.31.31.175) in ~
○ → sudo ss -s -t -e -n -m -p
Total: 253
TCP: 20 (estab 11, closed 1, orphaned 0, timewait 0)
Transport Total IP IPv6
RAW 1 0 1
UDP 5 4 1
TCP 19 6 13
INET 25 10 15
FRAG 0 0 0
State Recv-Q Send-Q Local Address:Port Peer Address:Port Process
ESTAB 0 0 172.31.31.175:59484 209.54.181.109:443 users:(("ssm-agent-worke",pid=914,fd=14)) timer:(keepalive,6.514ms,0) ino:23149 sk:8d cgroup:/system.slice/snap.amazon-ssm-agent.amazon-ssm-agent.service <->
skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d0)
ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.104.32]:52879 users:(("sshd",pid=17240,fd=4),("sshd",pid=17178,fd=4)) timer:(keepalive,97min,0) ino:57141 sk:ba cgroup:/system.slice/ssh.socket <->
skmem:(r0,rb131072,t0,tb1218560,f0,w0,o0,bl0,d0)
ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.113.164]:32983 users:(("sshd",pid=4258,fd=4),("sshd",pid=4146,fd=4)) timer:(keepalive,10min,0) ino:23150 sk:8e cgroup:/system.slice/ssh.socket <->
skmem:(r0,rb131072,t0,tb1366528,f0,w0,o0,bl0,d0)
ESTAB 0 1032 [::ffff:172.31.31.175]:10 [::ffff:181.209.233.31]:52038 users:(("sshd",pid=20497,fd=4),("sshd",pid=20441,fd=4)) timer:(on,127ms,0) ino:64862 sk:bb cgroup:/system.slice/ssh.socket <->
skmem:(r0,rb131072,t0,tb87040,f1528,w18952,o0,bl0,d0)
ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.233.31]:31944 users:(("sshd",pid=19154,fd=4),("sshd",pid=19085,fd=4)) timer:(keepalive,109min,0) ino:61531 sk:bc cgroup:/system.slice/ssh.socket <->
skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d1)
ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.104.255]:51286 users:(("sshd",pid=14074,fd=4),("sshd",pid=14013,fd=4)) timer:(keepalive,79min,0) ino:49161 sk:bd cgroup:/system.slice/ssh.socket <->
skmem:(r0,rb131072,t0,tb1253376,f0,w0,o0,bl0,d0)
ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.150.252]:64736 users:(("sshd",pid=1817,fd=4),("sshd",pid=1691,fd=4)) timer:(keepalive,55min,0) ino:13371 sk:3 cgroup:/system.slice/ssh.socket <->
skmem:(r0,rb1149194,t0,tb696320,f0,w0,o0,bl0,d6)
ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.106.196]:35141 users:(("sshd",pid=16998,fd=4),("sshd",pid=16928,fd=4)) timer:(keepalive,96min,0) ino:56638 sk:be cgroup:/system.slice/ssh.socket <->
skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d1)
ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.152.170]:12666 users:(("sshd",pid=18191,fd=4),("sshd",pid=18131,fd=4)) timer:(keepalive,104min,0) ino:59299 sk:bf cgroup:/system.slice/ssh.socket <->
skmem:(r0,rb2146159,t0,tb87040,f0,w0,o0,bl0,d58)
ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.113.164]:51741 users:(("sshd",pid=4540,fd=4),("sshd",pid=4470,fd=4)) timer:(keepalive,37min,0) ino:24466 sk:91 cgroup:/system.slice/ssh.socket <->
skmem:(r0,rb131072,t0,tb1253376,f0,w0,o0,bl0,d0)
ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.104.32]:18662 users:(("sshd",pid=5186,fd=4),("sshd",pid=5111,fd=4)) timer:(keepalive,40min,0) ino:25858 sk:92 cgroup:/system.slice/ssh.socket <->
skmem:(r0,rb131072,t0,tb1662464,f0,w0,o0,bl0,d0)