- (20) Utilizando httpie, hagan una solicitud de HTTP al servidor PS C:\Windows\system32> http https://nrywhite.lat HTTP/1.1 200 OK CF-RAY: 9110e143ab33c82c-TPA Connection: keep-alive Content-Encoding: gzip Content-Type: text/html Date: Thu, 13 Feb 2025 01:00:10 GMT Last-Modified: Thu, 13 Feb 2025 01:00:09 GMT NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tFfX59hCd%2FFgixb%2BAMZHC2JRCeteboxuyJhnlePtnc7wXlVsu7OUqk%2FXAXG6KN0PAqlpNQhMc05YWylkizzDuXCQ%2FdigzUu8cxQcNr7HurRaNEfYXNNkqagQk9na%2Bd4%3D"}],"group":"cf-nel","max_age":604800} Server: cloudflare Transfer-Encoding: chunked alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC server-timing: cfL4;desc="?proto=TCP&rtt=39960&min_rtt=35966&rtt_var=16340&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3056&recv_bytes=752&delivery_rate=121781&cwnd=252&unsent_bytes=0&cid=9e33f549d36baced&ts=93&x=0" vary: accept-encoding Sistemas y Tecnologías Web | 10

NryWhite

Visca Barca y we hate Taylor

- (10) Utilizando curl, hagan una solicitud de HTTP al servidor C:\Users\HP>curl https://nrywhite.lat Te Imaginas?
- (5) Que pasa si tratan de hacer una solicitud de HTTP desde el servidor hacia su computadora? 2025-02-11 21:50 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in ~ ○ → http https://190.56.194.12 http: errror: Request timed out (0s) - (10) Utilizando tail dentro del servidor, obtengan las últimas 15 líneas del archivo /var/log/nginx/access.log 2025-02-11 21:58 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in ~ ○ → cd /var/log/nginx 2025-02-11 21:59 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in .../log/nginx ○ → tail -n 15 access.log 172.70.83.40 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/maximize.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 108.162.212.110 - - [11/Feb/2025:21:56:24 +0000] "GET /script.js HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.70.255.62 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/instagram.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.70.255.23 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/windows-xp-logo.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.70.83.166 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/folder.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.70.254.218 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/close.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.70.54.198 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/discord.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.70.83.18 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/itch.png HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.70.255.148 - - [11/Feb/2025:21:56:24 +0000] "GET /styles.css?v=3 HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.70.255.205 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/kevin-pfp.jpg HTTP/1.1" 304 0 "https://23584.nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.70.82.125 - - [11/Feb/2025:21:56:24 +0000] "GET /assets/wallpaper.jpg HTTP/1.1" 304 0 "https://23584.nrywhite.lat/styles.css?v=3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 3.142.248.184 - - [11/Feb/2025:22:00:21 +0000] "GET / HTTP/1.1" 200 12 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 162.158.11.152 - - [11/Feb/2025:22:00:34 +0000] "GET / HTTP/1.1" 200 12 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 162.158.11.150 - - [11/Feb/2025:22:00:35 +0000] "GET /favicon.ico HTTP/1.1" 404 196 "https://23009.nrywhite.lat/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 3.142.248.184 - - [11/Feb/2025:22:01:44 +0000] "" 400 0 "-" "-" - (10) Utilizando ps y grep identifiquen qué procesos está corriendo amazon dentro del servidor 2025-02-11 22:06 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in .../log/nginx ○ → ps aux | grep amazon ○ → ps aux | grep amazon root 126554 0.0 1.2 1759116 11976 ? Ssl Feb10 0:06 /snap/amazon-ssm-agent/9881/amazon-ssm-agent root 126579 0.0 2.0 1850868 20344 ? Sl Feb10 0:21 /snap/amazon-ssm-agent/9881/ssm-agent-worker ubuntu 212575 0.0 0.2 7076 2048 pts/10 S+ 22:09 0:00 grep --color=auto --exclude-dir=.bzr --exclude-dir=CVS --exclude-dir=.git --exclude-dir=.hg --exclude-dir=.svn amazon - (10) Utilizando dig dentro del servidor, obtengan la ip que resuelve al hacer un dns lookup uvg.edu.gt 2025-02-11 22:18 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in / ○ → dig uvg.edu.gt ;; ANSWER SECTION: uvg.edu.gt. 300 IN A 45.223.155.41 uvg.edu.gt. 300 IN A 45.223.56.41 - (5) Cuanta memoria RAM, total usada y libre, tiene el servidor? (su respuesta debe estar en MB) 2025-02-11 22:21 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in / ○ → free -m Total used free 957MB 568MB 91MB - (5) Cuanta espacio de disco, total usado y disponible, tiene el servidor? (su respuesta debe estar en MB) 2025-02-11 22:31 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in / ○ → df -m Total used free 1003.49MB 602.9312MB 66.06MB - (5) Utilizando el comando ip obtengan la ip del servidor 2025-02-11 22:44 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in ~ ○ → ip addr show 2. enX0: inet 172.31.31.175ip - (10) lsof lista los archivos abiertos. Identifiquen los archivos abiertos por el protocolo TCP en el puerto 80 2025-02-11 22:54 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in ~ ○ → sudo lsof -i:80 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME nginx 215741 root 5u IPv4 777922 0t0 TCP *:http (LISTEN) nginx 215741 root 7u IPv6 777924 0t0 TCP *:http (LISTEN) nginx 215742 www-data 5u IPv4 777922 0t0 TCP *:http (LISTEN) nginx 215742 www-data 7u IPv6 777924 0t0 TCP *:http (LISTEN) - (20) Utilizando netstat, listen los puertos por los que está escuchando el servidor. Deben filtrar usando las siguientes opciones de netstat (esto es un solo comando con estas opciones): - tcp - udp - numeric (muestra los puertos por número) - program (muestra qué programa es el que está escuchando) 2025-02-12 16:58 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in ~ ○ → sudo netstat -tulnp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.54:53 0.0.0.0:* LISTEN 309/systemd-resolve tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 309/systemd-resolve tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 10095/nginx: master tcp 0 0 0.0.0.0:90 0.0.0.0:* LISTEN 1136/docker-proxy tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 10095/nginx: master tcp6 0 0 :::10 :::* LISTEN 1/init tcp6 0 0 :::90 :::* LISTEN 1143/docker-proxy tcp6 0 0 :::80 :::* LISTEN 10095/nginx: master udp 0 0 127.0.0.1:323 0.0.0.0:* 613/chronyd udp 0 0 127.0.0.54:53 0.0.0.0:* 309/systemd-resolve udp 0 0 127.0.0.53:53 0.0.0.0:* 309/systemd-resolve udp 0 0 172.31.31.175:68 0.0.0.0:* 480/systemd-network udp6 0 0 ::1:323 :::* 613/chronyd - (30) Utilizando ss, listen los puertos por los que está escuchando el servidor. Deben filtrar usando las siguientes opciones de ss (esto es un solo comando con estas opciones): summary tcp conexiones establecidas resuelvan los puertos numericos uso de memoria información interna de tcp proceso que usa el socket 2025-02-12 17:09 ⌚ njs v18.19.1|py |go 23% ip-172-31-31-175 (172.31.31.175) in ~ ○ → sudo ss -s -t -e -n -m -p Total: 253 TCP: 20 (estab 11, closed 1, orphaned 0, timewait 0) Transport Total IP IPv6 RAW 1 0 1 UDP 5 4 1 TCP 19 6 13 INET 25 10 15 FRAG 0 0 0 State Recv-Q Send-Q Local Address:Port Peer Address:Port Process ESTAB 0 0 172.31.31.175:59484 209.54.181.109:443 users:(("ssm-agent-worke",pid=914,fd=14)) timer:(keepalive,6.514ms,0) ino:23149 sk:8d cgroup:/system.slice/snap.amazon-ssm-agent.amazon-ssm-agent.service <-> skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d0) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.104.32]:52879 users:(("sshd",pid=17240,fd=4),("sshd",pid=17178,fd=4)) timer:(keepalive,97min,0) ino:57141 sk:ba cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb1218560,f0,w0,o0,bl0,d0) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.113.164]:32983 users:(("sshd",pid=4258,fd=4),("sshd",pid=4146,fd=4)) timer:(keepalive,10min,0) ino:23150 sk:8e cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb1366528,f0,w0,o0,bl0,d0) ESTAB 0 1032 [::ffff:172.31.31.175]:10 [::ffff:181.209.233.31]:52038 users:(("sshd",pid=20497,fd=4),("sshd",pid=20441,fd=4)) timer:(on,127ms,0) ino:64862 sk:bb cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb87040,f1528,w18952,o0,bl0,d0) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.233.31]:31944 users:(("sshd",pid=19154,fd=4),("sshd",pid=19085,fd=4)) timer:(keepalive,109min,0) ino:61531 sk:bc cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d1) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.104.255]:51286 users:(("sshd",pid=14074,fd=4),("sshd",pid=14013,fd=4)) timer:(keepalive,79min,0) ino:49161 sk:bd cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb1253376,f0,w0,o0,bl0,d0) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.150.252]:64736 users:(("sshd",pid=1817,fd=4),("sshd",pid=1691,fd=4)) timer:(keepalive,55min,0) ino:13371 sk:3 cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb1149194,t0,tb696320,f0,w0,o0,bl0,d6) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.106.196]:35141 users:(("sshd",pid=16998,fd=4),("sshd",pid=16928,fd=4)) timer:(keepalive,96min,0) ino:56638 sk:be cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d1) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.152.170]:12666 users:(("sshd",pid=18191,fd=4),("sshd",pid=18131,fd=4)) timer:(keepalive,104min,0) ino:59299 sk:bf cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb2146159,t0,tb87040,f0,w0,o0,bl0,d58) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.113.164]:51741 users:(("sshd",pid=4540,fd=4),("sshd",pid=4470,fd=4)) timer:(keepalive,37min,0) ino:24466 sk:91 cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb1253376,f0,w0,o0,bl0,d0) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.104.32]:18662 users:(("sshd",pid=5186,fd=4),("sshd",pid=5111,fd=4)) timer:(keepalive,40min,0) ino:25858 sk:92 cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb1662464,f0,w0,o0,bl0,d0)