\Downloads\logs\_artifacts\mail_recon3.sh:9:python3 rsh.py 'curl -sk -m 15 -H "Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj" https://mail-management.afd.de/api/v1/domains -o /dev/null -w "%{http_code}\n"' \Downloads\logs\_artifacts\rcepost\raw_console.jsonl:66:{"ts": 1789230116.5736315, "cmd": "echo '### /v1/users?limit=5 [Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj]'; curl -sk -m 15 -D /tmp/h.txt -o /tmp/b.txt -w 'HTTP %{http_code} size %{size_download}\\n' -H 'Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj' -H 'Accept: application/json' https://mail-management.afd.de/api/v1/users?limit=5; head -c 1200 /tmp/b.txt; echo; echo '--headers--'; head -20 /tmp/h.txt", "out": "### /v1/users?limit=5 [Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj]\nHTTP 401 size 29\n{"error":"JWT: InvalidToken"}\n--headers--\nHTTP/2 401 \r\nserver: nginx\r\ndate: Sat, 12 Sep 2026 16:21:58 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\n\r"} \Downloads\logs\_artifacts\rcepost\raw_console.jsonl:67:{"ts": 1789230120.8248856, "cmd": "echo '### /v1/domains [Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj]'; curl -sk -m 15 -D /tmp/h.txt -o /tmp/b.txt -w 'HTTP %{http_code} size %{size_download}\\n' -H 'Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj' -H 'Accept: application/json' https://mail-management.afd.de/api/v1/domains; head -c 1200 /tmp/b.txt; echo; echo '--headers--'; head -20 /tmp/h.txt", "out": "### /v1/domains [Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj]\nHTTP 401 size 29\n{"error":"JWT: InvalidToken"}\n--headers--\nHTTP/2 401 \r\nserver: nginx\r\ndate: Sat, 12 Sep 2026 16:22:03 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\n\r"} \Downloads\logs\_artifacts\rcemail\recon5.jsonl:4:{"i": 3, "cmd": "echo '### /v1/users?limit=5 [Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj]'; curl -sk -m 15 -D /tmp/h.txt -o /tmp/b.txt -w 'HTTP %{http_code} size %{size_download}\\n' -H 'Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj' -H 'Accept: application/json' https://mail-management.afd.de/api/v1/users?limit=5; head -c 1200 /tmp/b.txt; echo; echo '--headers--'; head -20 /tmp/h.txt", "out": "### /v1/users?limit=5 [Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj]\nHTTP 401 size 29\n{"error":"JWT: InvalidToken"}\n--headers--\nHTTP/2 401 \r\nserver: nginx\r\ndate: Sat, 12 Sep 2026 16:21:58 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\n\r", "secs": 7.3} \Downloads\logs\_artifacts\rcemail\recon5.jsonl:5:{"i": 4, "cmd": "echo '### /v1/domains [Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj]'; curl -sk -m 15 -D /tmp/h.txt -o /tmp/b.txt -w 'HTTP %{http_code} size %{size_download}\\n' -H 'Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj' -H 'Accept: application/json' https://mail-management.afd.de/api/v1/domains; head -c 1200 /tmp/b.txt; echo; echo '--headers--'; head -20 /tmp/h.txt", "out": "### /v1/domains [Authorization: Bearer ZEA4R2sEkegRafwLsLPyqnpVAz2EwNnOUb9HscWqZV6TaXejfScxXPOG5ubxzRIhfBfMTBhMWcE7HD95frJt7OXO1b4s8G59z8MqeuCxMP5CiJJpTkdCtsnrZmzsBsxj]\nHTTP 401 size 29\n{"error":"JWT: InvalidToken"}\n--headers--\nHTTP/2 401 \r\nserver: nginx\r\ndate: Sat, 12 Sep 2026 16:22:03 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\n\r", "secs": 4.3} \Downloads\ @/]+ \Downloads\ ("x-access-token", re.compile(rb"x-access-token:[^ @/\r\n]+")), DONE 04/10/2026 19:19:07,29