1. (20 puntos) Utilizando httpie, hagan una solicitud de HTTP al servidor eagi@CompuErick:/mnt/c/Users/eagi5$ http https://nrywhite.lat/ HTTP/1.1 200 OK CF-RAY: 9110e6eabf3e9ae3-MIA Connection: keep-alive Content-Encoding: gzip Content-Type: text/html Date: Thu, 13 Feb 2025 01:04:01 GMT Last-Modified: Thu, 13 Feb 2025 01:04:00 GMT NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S%2BUS07D0%2FhZmkKl%2Fg1jDCu2NjuZWaAznC0TXw5F%2FtDkt1KuZwEIoOTgqV1EtkquvLATITJ0Cu1qDSpCZ9PI4YB9UxPXykF2twwyV3CoJnHJR%2Fw3OV9Q83ULoXzFA%2FWo%3D"}],"group":"cf-nel","max_age":604800} Server: cloudflare Transfer-Encoding: chunked alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC server-timing: cfL4;desc="?proto=TCP&rtt=41978&min_rtt=41703&rtt_var=16189&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3056&recv_bytes=752&delivery_rate=98943&cwnd=236&unsent_bytes=0&cid=d085c5557e4785eb&ts=169&x=0" vary: accept-encoding 2. Utilizando curl, hagan una solicitud de HTTP al servidor eagi@CompuErick:/mnt/c/Users/eagi5$ curl https://nrywhite.lat/ Sistemas y Tecnologías Web | 10

NryWhite

Visca Barca y we hate Taylor

21749

Estudiante

3. (5 puntos) Que pasa si tratan de hacer una solicitud de HTTP desde el servidor hacia su computadora? ○ → curl -i 190.56.194.12 curl: (28) Failed to connect to 190.56.194.12 port 80 after 134829 ms: Couldn't connect to server 4. (10 puntos) Utilizando tail dentro del servidor, obtengan las últimas 15 líneas del archivo /var/log/nginx/access.log ○ → tail -n 15 /var/log/nginx/access.log 162.158.11.159 - - [13/Feb/2025:01:34:31 +0000] "GET /banners/astolfo.gif HTTP/1.1" 304 0 "https://nrywhite.lat/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36" 162.158.11.146 - - [13/Feb/2025:01:34:31 +0000] "GET /banners/sunny.gif HTTP/1.1" 304 0 "https://nrywhite.lat/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36" 162.158.11.159 - - [13/Feb/2025:01:34:31 +0000] "GET /banners/depollos.gif HTTP/1.1" 304 0 "https://nrywhite.lat/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36" 162.158.11.146 - - [13/Feb/2025:01:34:31 +0000] "GET /banners/mc-halo3.gif HTTP/1.1" 304 0 "https://nrywhite.lat/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36" 162.158.11.148 - - [13/Feb/2025:01:34:31 +0000] "GET /banners/itachiGif.gif HTTP/1.1" 304 0 "https://nrywhite.lat/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36" 162.158.11.156 - - [13/Feb/2025:01:34:36 +0000] "GET /23108/ HTTP/1.1" 200 231 "https://nrywhite.lat/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36" 162.158.11.156 - - [13/Feb/2025:01:34:41 +0000] "GET /23108/lab2/ HTTP/1.1" 200 176 "https://nrywhite.lat/23108/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36" 162.158.11.156 - - [13/Feb/2025:01:34:44 +0000] "GET /23108/lab2/lab2.txt HTTP/1.1" 200 41654 "https://nrywhite.lat/23108/lab2/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36" 172.71.158.224 - - [13/Feb/2025:01:41:26 +0000] "GET /21749/20250128.txt HTTP/1.1" 200 10 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.63.187.168 - - [13/Feb/2025:01:42:12 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 66.63.187.168 - - [13/Feb/2025:01:42:12 +0000] "POST / HTTP/1.1" 405 568 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 66.63.187.168 - - [13/Feb/2025:01:42:12 +0000] "GET /api/index.php/v1/config/application?public=true&page%5Boffset%5D=0&page%5Blimit%5D=60 HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.234.115.163 - - [13/Feb/2025:01:43:30 +0000] "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 166 "-" "-" 104.234.115.163 - - [13/Feb/2025:01:43:48 +0000] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xB4:\xA2\xD9\xD1\x8D\xB1\xD2\x9B\xCF\xBD\xC8\x88'\x05\x05\xF2\xB1Z\xAE\xE5\xDD\xDA\x82\x14}\xBBP\xD6J\xEB\x0B\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-" 104.234.115.163 - - [13/Feb/2025:01:44:06 +0000] "GET / HTTP/1.1" 200 2701 "-" "'Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)'" 5. (10 puntos) Utilizando ps y grep identifiquen qué procesos está corriendo amazon dentro del servidor ○ → ps aux | grep -i amazon root 542 0.0 1.2 1759116 12400 ? Ssl Feb12 0:02 /snap/amazon-ssm-agent/9881/amazon-ssm-agent root 914 0.0 2.1 1850868 20924 ? Sl Feb12 0:09 /snap/amazon-ssm-agent/9881/ssm-agent-worker ubuntu 77406 0.0 0.2 6944 2176 pts/1 S+ 01:50 0:00 grep --color=auto --exclude-dir=.bzr --exclude-dir=CVS --exclude-dir=.git --exclude-dir=.hg --exclude-dir=.svn -i amazon 6. (10 puntos) Utilizando dig dentro del servidor, obtengan la ip que resuelve al hacer un dns lookup uvg.edu.gt ○ → dig uvg.edu.gt +short 45.223.155.41 45.223.56.41 7. (5 puntos) Cuanta memoria RAM, total usada y libre, tiene el servidor? (su respuesta debe estar en MB) ○ → free -m total used free shared buff/cache available Mem: 957 566 204 71 427 390 Swap: 0 0 0 8. (5 puntos) Cuanta espacio de disco, total usado y disponible, tiene el servidor? (su respuesta debe estar en MB) ○ → df -m Filesystem 1M-blocks Used Available Use% Mounted on /dev/root 28691 8650 20025 31% / tmpfs 479 71 409 15% /dev/shm tmpfs 192 2 191 1% /run tmpfs 5 0 5 0% /run/lock /dev/xvda16 881 76 744 10% /boot /dev/xvda15 105 7 99 6% /boot/efi tmpfs 96 1 96 1% /run/user/1000 9. (5 puntos) Utilizando el comando ip obtengan la ip del servidor ○ → ip -4 addr show | grep inet inet 127.0.0.1/8 scope host lo inet 172.31.31.175/20 metric 100 brd 172.31.31.255 scope global dynamic enX0 inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0 10. (10 puntos) lsof lista los archivos abiertos. Identifiquen los archivos abiertos por el protocolo TCP en el puerto 80 ○ → sudo lsof -iTCP:80 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME nginx 66702 root 5u IPv4 190481 0t0 TCP *:http (LISTEN) nginx 66702 root 7u IPv6 190483 0t0 TCP *:http (LISTEN) nginx 66704 www-data 5u IPv4 190481 0t0 TCP *:http (LISTEN) nginx 66704 www-data 7u IPv6 190483 0t0 TCP *:http (LISTEN) 11. (20 puntos) Utilizando netstat, listen los puertos por los que está escuchando el servidor. Deben filtrar usando las siguientes opciones de netstat (esto es un solo comando con estas opciones): ○ → sudo netstat -tunp Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 172.31.31.175:443 172.70.46.146:37396 TIME_WAIT - tcp 0 0 172.31.31.175:59150 67.220.251.145:443 ESTABLISHED 914/ssm-agent-worke tcp 0 0 172.31.31.175:443 172.71.183.77:25126 ESTABLISHED 66704/nginx: worker tcp 0 0 172.31.31.175:80 172.68.10.30:55274 ESTABLISHED 66704/nginx: worker tcp 0 0 172.31.31.175:80 172.70.47.75:32460 TIME_WAIT - tcp 0 0 172.31.31.175:443 172.68.10.202:22474 ESTABLISHED 66704/nginx: worker tcp6 0 0 172.31.31.175:10 190.14.11.2:53465 ESTABLISHED 52704/sshd: ubuntu tcp6 0 0 172.31.31.175:10 190.14.11.2:53836 ESTABLISHED 65613/sshd: ubuntu tcp6 0 0 172.31.31.175:10 200.119.170.148:59753 ESTABLISHED 70917/sshd: ubuntu tcp6 0 0 172.31.31.175:10 190.56.194.12:49226 ESTABLISHED 54988/sshd: ubuntu tcp6 0 0 172.31.31.175:10 190.56.194.12:57568 ESTABLISHED 72836/sshd: ubuntu tcp6 0 0 172.31.31.175:10 190.56.194.12:52844 ESTABLISHED 62009/sshd: ubuntu tcp6 0 0 172.31.31.175:10 190.56.51.34:39007 ESTABLISHED 62469/sshd: ubuntu tcp6 0 0 172.31.31.175:10 190.56.194.12:60054 ESTABLISHED 77096/sshd: ubuntu tcp6 0 52 172.31.31.175:10 190.56.194.12:57620 ESTABLISHED 76566/sshd: ubuntu 12. (30 puntos) Utilizando ss, listen los puertos por los que está escuchando el servidor. Deben filtrar usando las siguientes opciones de ss (esto es un solo comando con estas opciones): ○ → sudo ss -stnmep Total: 251 TCP: 19 (estab 10, closed 1, orphaned 0, timewait 0) Transport Total IP IPv6 RAW 1 0 1 UDP 5 4 1 TCP 18 6 12 INET 24 10 14 FRAG 0 0 0 State Recv-Q Send-Q Local Address:Port Peer Address:Port Process ESTAB 0 0 172.31.31.175:59150 67.220.251.145:443 users:(("ssm-agent-worke",pid=914,fd=14)) timer:(keepalive,2.996ms,0) ino:99488 sk:fa cgroup:/system.slice/snap.amazon-ssm-agent.amazon-ssm-agent.service <-> skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d0) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.14.11.2]:53836 users:(("sshd",pid=65783,fd=4),("sshd",pid=65613,fd=4)) timer:(keepalive,7min10sec,0) ino:187704 sk:109 cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d37) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:200.119.170.148]:59753 users:(("sshd",pid=70964,fd=4),("sshd",pid=70917,fd=4)) timer:(keepalive,31min,0) ino:200925 sk:10a cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb184320,f0,w0,o0,bl0,d0) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.194.12]:49226 users:(("sshd",pid=55146,fd=4),("sshd",pid=54988,fd=4)) timer:(keepalive,58sec,6) ino:162669 sk:102 cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d0) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.194.12]:57568 users:(("sshd",pid=72892,fd=4),("sshd",pid=72836,fd=4)) timer:(keepalive,46min,0) ino:205881 sk:10b cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d0) ESTAB 0 108 [::ffff:172.31.31.175]:10 [::ffff:190.56.194.12]:52918 users:(("sshd",pid=78404,fd=4),("sshd",pid=78348,fd=4)) timer:(on,135ms,0) ino:220959 sk:114 cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb87040,f1300,w2796,o0,bl0,d0) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.194.12]:52844 users:(("sshd",pid=62056,fd=4),("sshd",pid=62009,fd=4)) timer:(keepalive,,0) ino:179498 sk:10d cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb243712,f0,w0,o0,bl0,d0) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.51.34]:39007 users:(("sshd",pid=62539,fd=4),("sshd",pid=62469,fd=4)) timer:(keepalive,,0) ino:180594 sk:10e cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb46080,f0,w0,o0,bl0,d0) ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.194.12]:60054 users:(("sshd",pid=77143,fd=4),("sshd",pid=77096,fd=4)) timer:(keepalive,84min,0) ino:217072 sk:112 cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb365568,f0,w0,o0,bl0,d0) ESTAB 0 456 [::ffff:172.31.31.175]:10 [::ffff:190.56.194.12]:57620 users:(("sshd",pid=76622,fd=4),("sshd",pid=76566,fd=4)) timer:(on,121ms,0) ino:215897 sk:113 cgroup:/system.slice/ssh.socket <-> skmem:(r0,rb131072,t0,tb87040,f56,w4040,o0,bl0,d0)