From e335954838021b72da8fdabfe2280aa90b002bd3 Mon Sep 17 00:00:00 2001 From: "Carlos.Martin" Date: Fri, 27 Aug 2021 01:16:45 +0100 Subject: [PATCH 1/5] linpeas --- build_lists/sensitive_files.yaml | 6 ++- linPEAS/builder/linpeas_base.sh | 81 +++++++++++++++++++++++++++----- 2 files changed, 73 insertions(+), 14 deletions(-) diff --git a/build_lists/sensitive_files.yaml b/build_lists/sensitive_files.yaml index b6b0ceb..59af6f8 100644 --- a/build_lists/sensitive_files.yaml +++ b/build_lists/sensitive_files.yaml @@ -381,7 +381,7 @@ search: bad_regex: "AuthType|AuthName|AuthUserFile|ServerName|ServerAlias" only_bad_lines: True remove_empty_lines: True - remove_regex: '^#' + remove_regex: '#' search_in: - common @@ -2104,7 +2104,9 @@ search: remove_regex: '^#' type: d search_in: - - common + - etc #False possitives in home + - var + - usr - name: SeedDMS value: diff --git a/linPEAS/builder/linpeas_base.sh b/linPEAS/builder/linpeas_base.sh index 648d24d..d8db9ec 100755 --- a/linPEAS/builder/linpeas_base.sh +++ b/linPEAS/builder/linpeas_base.sh @@ -420,7 +420,7 @@ else sh_usrs=$(cat /etc/passwd 2>/dev/null | grep -v "^root:" | grep -i "sh$" | cut -d ":" -f 1 | tr '\n' '|' | sed 's/|bin|/|bin[\\\s:]|^bin$|/' | sed 's/|sys|/|sys[\\\s:]|^sys$|/' | sed 's/|daemon|/|daemon[\\\s:]|^daemon$|/')"ImPoSSssSiBlEee" #Modified bin, sys and daemon so they are not colored everywhere nosh_usrs=$(cat /etc/passwd 2>/dev/null | grep -i -v "sh$" | sort | cut -d ":" -f 1 | tr '\n' '|' | sed 's/|bin|/|bin[\\\s:]|^bin$|/')"ImPoSSssSiBlEee" fi -knw_usrs='daemon\W|^daemon$|message\+|syslog|www|www-data|mail|noboby|Debian\-\+|rtkit|systemd\+' +knw_usrs='_amavisd|_analyticsd|_appinstalld|_appleevents|_applepay|_appowner|_appserver|_appstore|_ard|_assetcache|_astris|_atsserver|_avbdeviced|_calendar|_captiveagent|_ces|_clamav|_cmiodalassistants|_coreaudiod|_coremediaiod|_coreml|_ctkd|_cvmsroot|_cvs|_cyrus|_datadetectors|_demod|_devdocs|_devicemgr|_diskimagesiod|_displaypolicyd|_distnote|_dovecot|_dovenull|_dpaudio|_driverkit|_eppc|_findmydevice|_fpsd|_ftp|_fud|_gamecontrollerd|_geod|_hidd|_iconservices|_installassistant|_installcoordinationd|_installer|_jabber|_kadmin_admin|_kadmin_changepw|_knowledgegraphd|_krb_anonymous|_krb_changepw|_krb_kadmin|_krb_kerberos|_krb_krbtgt|_krbfast|_krbtgt|_launchservicesd|_lda|_locationd|_logd|_lp|_mailman|_mbsetupuser|_mcxalr|_mdnsresponder|_mobileasset|_mysql|_nearbyd|_netbios|_netstatistics|_networkd|_nsurlsessiond|_nsurlstoraged|_oahd|_ondemand|_postfix|_postgres|_qtss|_reportmemoryexception|_rmd|_sandbox|_screensaver|_scsd|_securityagent|_softwareupdate|_spotlight|_sshd|_svn|_taskgated|_teamsserver|_timed|_timezone|_tokend|_trustd|_trustevaluationagent|_unknown|_update_sharing|_usbmuxd|_uucp|_warmd|_webauthserver|_windowserver|_www|_wwwproxy|_xserverdocs|daemon\W|^daemon$|message\+|syslog|www|www-data|mail|noboby|Debian\-\+|rtkit|systemd\+' USER=$(whoami 2>/dev/null || echo "UserUnknown") if [ ! "$HOME" ]; then if [ -d "/Users/$USER" ]; then HOME="/Users/$USER"; #Mac home @@ -1404,7 +1404,7 @@ if echo $CHECKS | grep -q AvaSof; then #-- 1AS) Useful software print_2title "Useful software" - command -v "$CONTAINER_CMDS" nmap aws nc ncat netcat nc.traditional wget curl ping gcc g++ make gdb base64 socat python python2 python3 python2.7 python2.6 python3.6 python3.7 perl php ruby xterm doas sudo fetch ctr 2>/dev/null + command -v "$CONTAINER_CMDS" nmap aws nc ncat netcat nc.traditional wget curl ping gcc g++ make gdb base64 socat python python2 python3 python2.7 python2.6 python3.6 python3.7 perl php ruby xterm doas sudo fetch ctr authbind 2>/dev/null echo "" #-- 2AS) Search for compilers @@ -1537,23 +1537,41 @@ if echo $CHECKS | grep -q ProCronSrvcsTmrsSocks; then if [ "$MACPEAS" ]; then print_2title "Third party LaunchAgents & LaunchDemons" - print_info "TODO" - ls -l /Library/LaunchAgents/ /Library/LaunchDaemons/ ~/Library/LaunchAgents/ 2>/dev/null + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#launchd" + ls -l /Library/LaunchAgents/ /Library/LaunchDaemons/ ~/Library/LaunchAgents/ ~/Library/LaunchDaemons/ 2>/dev/null echo "" - print_2title "Startup Folders" - print_info "TODO" + print_2title "Writable System LaunchAgents & LaunchDemons" + find /System/Library/LaunchAgents/ /System/Library/LaunchDaemons/ /Library/LaunchAgents/ /Library/LaunchDaemons/ | grep ".plist" | while read f; do + program="" + program=$(defaults read "$f" Program 2>/dev/null) + if ! [ "$program" ]; then + program=$(defaults read /Library/LaunchDaemons/MonitorHelper.plist ProgramArguments | grep -Ev "^\(|^\)" | cut -d '"' -f 2) + fi + if [ -w "$program" ]; then + echo "$program" is writable | sed -${E} "s,.*,${SED_RED_YELLOW},"; + fi + done + echo "" + + print_2title "StartupItems" + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#startup-items" ls -l /Library/StartupItems/ /System/Library/StartupItems/ 2>/dev/null echo "" print_2title "Login Items" - print_info "TODO" + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#login-items" osascript -e 'tell application "System Events" to get the name of every login item' 2>/dev/null echo "" print_2title "SPStartupItemDataType" system_profiler SPStartupItemDataType echo "" + + print_2title "Emond scripts" + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#emond" + ls -l /private/var/db/emondClients + echo "" fi #-- PCS) Services @@ -1787,6 +1805,10 @@ if echo $CHECKS | grep -q Net; then networksetup -getinfo Wi-Fi echo "" + print_2title "Check Enabled Proxies" + scutil --proxy + echo "" + print_2title "Wifi Proxy URL" networksetup -getautoproxyurl Wi-Fi echo "" @@ -1822,6 +1844,15 @@ if echo $CHECKS | grep -q Net; then fi if [ "$MACOS" ]; then + print_2title "Any MacOS Sharing Service Enabled?" + rmMgmt=$(netstat -na | grep LISTEN | grep tcp46 | grep "*.3283" | wc -l); + scrShrng=$(netstat -na | grep LISTEN | egrep 'tcp4|tcp6' | grep "*.5900" | wc -l); + flShrng=$(netstat -na | grep LISTEN | egrep 'tcp4|tcp6' | egrep "\*.88|\*.445|\*.548" | wc -l); + rLgn=$(netstat -na | grep LISTEN | egrep 'tcp4|tcp6' | grep "*.22" | wc -l); + rAE=$(netstat -na | grep LISTEN | egrep 'tcp4|tcp6' | grep "*.3031" | wc -l); + bmM=$(netstat -na | grep LISTEN | egrep 'tcp4|tcp6' | grep "*.4488" | wc -l); + printf "\nThe following services are OFF if '0', or ON otherwise:\nScreen Sharing: %s\nFile Sharing: %s\nRemote Login: %s\nRemote Mgmt: %s\nRemote Apple Events: %s\nBack to My Mac: %s\n\n" "$scrShrng" "$flShrng" "$rLgn" "$rmMgmt" "$rAE" "$bmM"; + echo "" print_2title "VPN Creds" system_profiler SPNetworkLocationDataType | grep -A 5 -B 7 ": Password" | sed -${E} "s,Password|Authorization Name.*,${SED_RED}," echo "" @@ -1864,13 +1895,25 @@ if echo $CHECKS | grep -q UsrI; then if [ "$MACPEAS" ];then print_2title "Current user Login and Logout hooks" defaults read $HOME/Library/Preferences/com.apple.loginwindow.plist 2>/dev/null | grep -e "Hook" + echo "" print_2title "All Login and Logout hooks" defaults read /Users/*/Library/Preferences/com.apple.loginwindow.plist 2>/dev/null | grep -e "Hook" defaults read /private/var/root/Library/Preferences/com.apple.loginwindow.plist + echo "" print_2title "Keychains" + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#chainbreaker" security list-keychains + echo "" + + print_2title "SystemKey" + ls -l /var/db/SystemKey + if [ -r "/var/db/SystemKey" ]; then + echo "You can read /var/db/SystemKey" | sed -${E} "s,.*,${SED_RED_YELLOW},"; + hexdump -s 8 -n 24 -e '1/1 "%.2x"' /var/db/SystemKey | sed -${E} "s,.*,${SED_RED_YELLOW},"; + fi + echo "" fi #-- UI) PGP keys? @@ -2031,9 +2074,16 @@ if echo $CHECKS | grep -q UsrI; then grep "^PASS_MAX_DAYS\|^PASS_MIN_DAYS\|^PASS_WARN_AGE\|^ENCRYPT_METHOD" /etc/login.defs 2>/dev/null || echo_not_found "/etc/login.defs" echo "" - if [ "$MACPEASS" ]; then + if [ "$MACPEAS" ]; then print_2title "Relevant last user info and user configs" defaults read /Library/Preferences/com.apple.loginwindow.plist 2>/dev/null + echo "" + + print_2title "Guest user status" + sysadminctl -afpGuestAccess status | sed -${E} "s,enabled,${SED_RED}," | sed -${E} "s,disabled,${SED_GREEN}," + sysadminctl -guestAccount status | sed -${E} "s,enabled,${SED_RED}," | sed -${E} "s,disabled,${SED_GREEN}," + sysadminctl -smbGuestAccess status | sed -${E} "s,enabled,${SED_RED}," | sed -${E} "s,disabled,${SED_GREEN}," + echo "" fi #-- UI) Brute su @@ -2458,7 +2508,7 @@ if echo $CHECKS | grep -q SofI; then echo "" print_2title "Analyzing kcpassword files" - print_info "TODO" + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#kcpassword" printf "%s\n" "$PSTORAGE_KCPASSWORD\n" | while read f; do echo "$f" | sed -${E} "s,.*,${SED_RED}," base64 "$f" 2>/dev/null | sed -${E} "s,.*,${SED_RED}," @@ -2621,7 +2671,7 @@ if echo $CHECKS | grep -q IntFiles; then #If starts like "total 332K" then no SUID bin was found and xargs just executed "ls" in the current folder if echo "$s" | grep -qE "^total"; then break; fi - sname="$(echo \"$s\" | awk '{print $9}')" + sname="$(echo $s | awk '{print $9}')" if [ "$sname" = "." ] || [ "$sname" = ".." ]; then true #Don't do nothing elif ! [ "$IAMROOT" ] && [ -O "$sname" ]; then @@ -2683,7 +2733,7 @@ if echo $CHECKS | grep -q IntFiles; then #If starts like "total 332K" then no SUID bin was found and xargs just executed "ls" in the current folder if echo "$s" | grep -qE "^total";then break; fi - sname="$(echo \"$s\" | awk '{print $9}')" + sname="$(echo $s | awk '{print $9}')" if [ "$sname" = "." ] || [ "$sname" = ".." ]; then true #Don't do nothing elif ! [ "$IAMROOT" ] && [ -O "$sname" ]; then @@ -3010,6 +3060,13 @@ if echo $CHECKS | grep -q IntFiles; then echo "" ##-- IF) DB files + if [ "$MACPEAS" ]; then + print_2title "Reading messages database" + sqlite3 $HOME/Library/Messages/chat.db 'select * from message' 2>/dev/null + sqlite3 $HOME/Library/Messages/chat.db 'select * from attachment' 2>/dev/null + sqlite3 $HOME/Library/Messages/chat.db 'select * from deleted_messages' 2>/dev/null + + fi print_2title "Searching tables inside readable .db/.sql/.sqlite files (limit 100)" FILECMD="$(command -v file 2>/dev/null)" if [ "$PSTORAGE_DATABASE" ]; then @@ -3061,7 +3118,7 @@ if echo $CHECKS | grep -q IntFiles; then if [ "$MACPEAS" ]; then print_2title "Downloaded Files" - sqlite3 "$HOME/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2" "select * from LSQuarantineEvent;" 2>/dev/null | grep "http" + sqlite3 ~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2 'select LSQuarantineAgentName, LSQuarantineDataURLString, LSQuarantineOriginURLString, date(LSQuarantineTimeStamp + 978307200, "unixepoch") as downloadedDate from LSQuarantineEvent order by LSQuarantineTimeStamp' | sort | grep -Ev "\|\|\|" fi ##-- IF) Web files From 52ea66412aa4cd5742cefec0064d42b9d26954a6 Mon Sep 17 00:00:00 2001 From: "Carlos.Martin" Date: Fri, 27 Aug 2021 14:33:54 +0100 Subject: [PATCH 2/5] linpeas --- build_lists/sensitive_files.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/build_lists/sensitive_files.yaml b/build_lists/sensitive_files.yaml index 59af6f8..d448e71 100644 --- a/build_lists/sensitive_files.yaml +++ b/build_lists/sensitive_files.yaml @@ -2104,9 +2104,9 @@ search: remove_regex: '^#' type: d search_in: - - etc #False possitives in home - - var - - usr + - /etc #False possitives in home + - /var + - /usr - name: SeedDMS value: From a90bb417048defc0960dfb15117f6569b4e7e411 Mon Sep 17 00:00:00 2001 From: "Carlos.Martin" Date: Fri, 27 Aug 2021 14:34:04 +0100 Subject: [PATCH 3/5] linpeas --- linPEAS/builder/src/fileRecord.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/linPEAS/builder/src/fileRecord.py b/linPEAS/builder/src/fileRecord.py index 740c978..3388faf 100644 --- a/linPEAS/builder/src/fileRecord.py +++ b/linPEAS/builder/src/fileRecord.py @@ -46,6 +46,7 @@ class FileRecord: search_in = list(set(search_in + COMMON_FILE_FOLDERS)) #Check that folders to search in are specified in ROOT_FOLDER - assert all(r in ROOT_FOLDER for r in search_in) + for r in search_in: + assert r in ROOT_FOLDER, f"{r} not in {ROOT_FOLDER}" return search_in From 649f7a062270e1568a07b1b150aafaabbc11268a Mon Sep 17 00:00:00 2001 From: CI-linpeas-ubuntu <> Date: Fri, 27 Aug 2021 13:54:55 +0000 Subject: [PATCH 4/5] linpeas.sh auto update --- linPEAS/linpeas.sh | 335 ++++++++++++++++++++++++++------------------- 1 file changed, 196 insertions(+), 139 deletions(-) diff --git a/linPEAS/linpeas.sh b/linPEAS/linpeas.sh index 5a4701c..4f787b9 100755 --- a/linPEAS/linpeas.sh +++ b/linPEAS/linpeas.sh @@ -360,11 +360,11 @@ sidB="/apache2$%Read_root_passwd__apache2_-f_/etc/shadow\(CVE-2019-0211\)\ /xterm$%Solaris_5.5.1_X11R6.3\(05-1997\)/Debian_xterm_version_222-1etch2\(01-2009\)" #To update sidVB: curl https://github.com/GTFOBins/GTFOBins.github.io/tree/master/_gtfobins 2>/dev/null | grep 'href="/GTFOBins/' | grep '.md">' | awk -F 'title="' '{print $2}' | cut -d '"' -f1 | cut -d "." -f1 | sed -e 's,^,/,' | sed -e 's,$,\$,' | tr '\n' '|' sidVB='/ar$|/aria2c$|/arj$|/arp$|/ash$|/atobm$|/awk$|/base32$|/base64$|/basenc$|/bash$|/bridge$|/busybox$|/byebug$|/capsh$|/cat$|/chmod$|/chown$|/chroot$|/cmp$|/column$|/comm$|/composer$|/cp$|/cpio$|/cpulimit$|/csh$|/csplit$|/csvtool$|/cupsfilter$|/curl$|/cut$|/dash$|/date$|/dd$|/dialog$|/diff$|/dig$|/dmsetup$|/docker$|/dvips$|/ed$|/emacs$|/env$|/eqn$|/expand$|/expect$|/file$|/find$|/flock$|/fmt$|/fold$|/gawk$|/gdb$|/gimp$|/git$|/grep$|/gtester$|/gzip$|/hd$|/head$|/hexdump$|/highlight$|/hping3$|/iconv$|/iftop$|/install$|/ionice$|/ip$|/jjs$|/join$|/jq$|/jrunscript$|/ksh$|/ksshell$|/latex$|/ldconfig$|/less$|/logsave$|/look$|/lua$|/lualatex$|/luatex$|/make$|/mawk$|/more$|/msgattrib$|/msgcat$|/msgconv$|/msgfilter$|/msgmerge$|/msguniq$' -sidVB2='/mv$|/mysql$|/nano$|/nawk$|/nc$|/nice$|/nl$|/nmap$|/node$|/nohup$|/octave$|/od$|/openssl$|/openvpn$|/paste$|/pdflatex$|/pdftex$|/perl$|/pg$|/php$|/pic$|/pico$|/pr$|/pry$|/python$|/rake$|/readelf$|/restic$|/rev$|/rlwrap$|/rpm$|/rpmquery$|/rsync$|/run-parts$|/rview$|/rvim$|/scp$|/sed$|/setarch$|/shuf$|/slsh$|/socat$|/soelim$|/sort$|/sqlite3$|/ss$|/ssh-keygen$|/ssh-keyscan$|/start-stop-daemon$|/stdbuf$|/strace$|/strings$|/sysctl$|/systemctl$|/tac$|/tail$|/tar$|/taskset$|/tbl$|/tclsh$|/tee$|/telnet$|/tex$|/tftp$|/time$|/timeout$|/troff$|/ul$|/unexpand$|/uniq$|/unshare$|/update-alternatives$|/uudecode$|/uuencode$|/view$|/vigr$|/vim$|/vimdiff$|/vipw$|/watch$|/wc$|/wget$|/xargs$|/xelatex$|/xetex$|/xmodmap$|/xmore$|/xxd$|/xz$|/zip$|/zsh$|/zsoelim$' +sidVB2='/mv$|/mysql$|/nano$|/nawk$|/nc$|/nice$|/nl$|/nmap$|/node$|/nohup$|/octave$|/od$|/openssl$|/openvpn$|/paste$|/pdflatex$|/pdftex$|/perl$|/pg$|/php$|/pic$|/pico$|/pr$|/pry$|/python$|/rake$|/readelf$|/restic$|/rev$|/rlwrap$|/rpm$|/rpmquery$|/rsync$|/run-parts$|/rview$|/rvim$|/scp$|/sed$|/setarch$|/shuf$|/slsh$|/socat$|/soelim$|/sort$|/sqlite3$|/ss$|/ssh-keygen$|/ssh-keyscan$|/start-stop-daemon$|/stdbuf$|/strace$|/strings$|/sysctl$|/systemctl$|/tac$|/tail$|/tar$|/taskset$|/tbl$|/tclsh$|/tee$|/telnet$|/tex$|/tftp$|/tic$|/time$|/timeout$|/troff$|/ul$|/unexpand$|/uniq$|/unshare$|/update-alternatives$|/uudecode$|/uuencode$|/view$|/vigr$|/vim$|/vimdiff$|/vipw$|/watch$|/wc$|/wget$|/xargs$|/xelatex$|/xetex$|/xmodmap$|/xmore$|/xxd$|/xz$|/zip$|/zsh$|/zsoelim$' cfuncs='file|free|main|more|read|split|write' -sudoVB1=" \*|env_keep\+=LD_PRELOAD|ansible-playbook$|apt-get$|apt$|ar$|aria2c$|arj$|arp$|ash$|at$|atobm$|awk$|base32$|base64$|basenc$|bash$|bpftrace$|bridge$|bundler$|busctl$|busybox$|byebug$|c89$|c99$|capsh$|cat$|certbot$|check_by_ssh$|check_cups$|check_log$|check_memory$|check_raid$|check_ssl_cert$|check_statusfile$|chmod$|chown$|chroot$|cmp$|cobc$|column$|comm$|composer$|cowsay$|cowthink$|cp$|cpan$|cpio$|cpulimit$|crash$|crontab$|csh$|csplit$|csvtool$|cupsfilter$|curl$|cut$|dash$|date$|dd$|dialog$|diff$|dig$|dmesg$|dmidecode$|dmsetup$|dnf$|docker$|dpkg$|dvips$|easy_install$|eb$|ed$|emacs$|env$|eqn$|ex$|exiftool$|expand$|expect$|facter$|file$|find$|flock$|fmt$|fold$|ftp$|gawk$|gcc$|gdb$|gem$|genisoimage$|ghc$|ghci$|gimp$|git$|grep$|gtester$|gzip$|hd$|head$|hexdump$|highlight$|hping3$|iconv$|iftop$|install$|ionice$|ip$|irb$|jjs$|join$|journalctl$|jq$|jrunscript$|knife$|ksh$|ksshell$|latex$|ldconfig$|less$|ln$|loginctl$|logsave$|look$|ltrace$|lua$|lualatex$|luatex$|lwp-download$|lwp-request$|mail$|make$|man$|mawk$|more$" -sudoVB2="mount$|msgattrib$|msgcat$|msgconv$|msgfilter$|msgmerge$|msguniq$|mtr$|mv$|mysql$|nano$|nawk$|nc$|nice$|nl$|nmap$|node$|nohup$|npm$|nroff$|nsenter$|octave$|od$|openssl$|openvpn$|openvt$|paste$|pdb$|pdflatex$|pdftex$|perl$|pg$|php$|pic$|pico$|pip$|pkexec$|pkg$|pr$|pry$|psql$|puppet$|python$|rake$|readelf$|red$|redcarpet$|restic$|rev$|rlwrap$|rpm$|rpmquery$|rsync$|ruby$|run-mailcap$|run-parts$|rview$|rvim$|scp$|screen$|script$|sed$|service$|setarch$|sftp$|sg$|shuf$|slsh$|smbclient$|snap$|socat$|soelim$|sort$|split$|sqlite3$|ss$|ssh-keygen$|ssh-keyscan$|ssh$|start-stop-daemon$|stdbuf$|strace$|strings$|su$|sysctl$|systemctl$|tac$|tail$|tar$|taskset$|tbl$|tclsh$|tcpdump$|tee$|telnet$|tex$|tftp$|time$|timedatectl$|timeout$|tmux$|top$|troff$|ul$|unexpand$|uniq$|unshare$|update-alternatives$|uudecode$|uuencode$|valgrind$|vi$|view$|vigr$|vim$|vimdiff$|vipw$|virsh$|watch$|wc$|wget$|wish$|xargs$|xelatex$|xetex$|xmodmap$|xmore$|xxd$|xz$|yarn$|yum$|zip$|zsh$|zsoelim$|zypper$" +sudoVB1=" \*|env_keep\+=LD_PRELOAD|ansible-playbook$|apt-get$|apt$|ar$|aria2c$|arj$|arp$|ash$|at$|atobm$|awk$|base32$|base64$|basenc$|bash$|bpftrace$|bridge$|bundler$|busctl$|busybox$|byebug$|c89$|c99$|capsh$|cat$|certbot$|check_by_ssh$|check_cups$|check_log$|check_memory$|check_raid$|check_ssl_cert$|check_statusfile$|chmod$|chown$|chroot$|cmp$|cobc$|column$|comm$|composer$|cowsay$|cowthink$|cp$|cpan$|cpio$|cpulimit$|crash$|crontab$|csh$|csplit$|csvtool$|cupsfilter$|curl$|cut$|dash$|date$|dd$|dialog$|diff$|dig$|dmesg$|dmidecode$|dmsetup$|dnf$|docker$|dpkg$|dvips$|easy_install$|eb$|ed$|emacs$|env$|eqn$|ex$|exiftool$|expand$|expect$|facter$|file$|find$|flock$|fmt$|fold$|ftp$|gawk$|gcc$|gdb$|gem$|genisoimage$|ghc$|ghci$|gimp$|git$|grep$|gtester$|gzip$|hd$|head$|hexdump$|highlight$|hping3$|iconv$|iftop$|install$|ionice$|ip$|irb$|jjs$|join$|journalctl$|jq$|jrunscript$|knife$|ksh$|ksshell$|latex$|ldconfig$|less$|ln$|loginctl$|logsave$|look$|ltrace$|lua$|lualatex$|luatex$|lwp-download$|lwp-request$|mail$|make$|man$|mawk$|more$|mount$" +sudoVB2="msgattrib$|msgcat$|msgconv$|msgfilter$|msgmerge$|msguniq$|mtr$|mv$|mysql$|nano$|nawk$|nc$|nice$|nl$|nmap$|node$|nohup$|npm$|nroff$|nsenter$|octave$|od$|openssl$|openvpn$|openvt$|paste$|pdb$|pdflatex$|pdftex$|perl$|pg$|php$|pic$|pico$|pip$|pkexec$|pkg$|pr$|pry$|psql$|puppet$|python$|rake$|readelf$|red$|redcarpet$|restic$|rev$|rlwrap$|rpm$|rpmquery$|rsync$|ruby$|run-mailcap$|run-parts$|rview$|rvim$|scp$|screen$|script$|sed$|service$|setarch$|sftp$|sg$|shuf$|slsh$|smbclient$|snap$|socat$|soelim$|sort$|split$|sqlite3$|ss$|ssh-keygen$|ssh-keyscan$|ssh$|start-stop-daemon$|stdbuf$|strace$|strings$|su$|sysctl$|systemctl$|systemd-resolve$|tac$|tail$|tar$|taskset$|tbl$|tclsh$|tcpdump$|tee$|telnet$|tex$|tftp$|tic$|time$|timedatectl$|timeout$|tmux$|top$|troff$|ul$|unexpand$|uniq$|unshare$|update-alternatives$|uudecode$|uuencode$|valgrind$|vi$|view$|vigr$|vim$|vimdiff$|vipw$|virsh$|watch$|wc$|wget$|wish$|xargs$|xelatex$|xetex$|xmodmap$|xmore$|xxd$|xz$|yarn$|yum$|zip$|zsh$|zsoelim$|zypper$" sudoB="$(whoami)|ALL:ALL|ALL : ALL|ALL|NOPASSWD|SETENV|/apache2|/cryptsetup|/mount" sudoG="NOEXEC" @@ -420,7 +420,7 @@ else sh_usrs=$(cat /etc/passwd 2>/dev/null | grep -v "^root:" | grep -i "sh$" | cut -d ":" -f 1 | tr '\n' '|' | sed 's/|bin|/|bin[\\\s:]|^bin$|/' | sed 's/|sys|/|sys[\\\s:]|^sys$|/' | sed 's/|daemon|/|daemon[\\\s:]|^daemon$|/')"ImPoSSssSiBlEee" #Modified bin, sys and daemon so they are not colored everywhere nosh_usrs=$(cat /etc/passwd 2>/dev/null | grep -i -v "sh$" | sort | cut -d ":" -f 1 | tr '\n' '|' | sed 's/|bin|/|bin[\\\s:]|^bin$|/')"ImPoSSssSiBlEee" fi -knw_usrs='daemon\W|^daemon$|message\+|syslog|www|www-data|mail|noboby|Debian\-\+|rtkit|systemd\+' +knw_usrs='_amavisd|_analyticsd|_appinstalld|_appleevents|_applepay|_appowner|_appserver|_appstore|_ard|_assetcache|_astris|_atsserver|_avbdeviced|_calendar|_captiveagent|_ces|_clamav|_cmiodalassistants|_coreaudiod|_coremediaiod|_coreml|_ctkd|_cvmsroot|_cvs|_cyrus|_datadetectors|_demod|_devdocs|_devicemgr|_diskimagesiod|_displaypolicyd|_distnote|_dovecot|_dovenull|_dpaudio|_driverkit|_eppc|_findmydevice|_fpsd|_ftp|_fud|_gamecontrollerd|_geod|_hidd|_iconservices|_installassistant|_installcoordinationd|_installer|_jabber|_kadmin_admin|_kadmin_changepw|_knowledgegraphd|_krb_anonymous|_krb_changepw|_krb_kadmin|_krb_kerberos|_krb_krbtgt|_krbfast|_krbtgt|_launchservicesd|_lda|_locationd|_logd|_lp|_mailman|_mbsetupuser|_mcxalr|_mdnsresponder|_mobileasset|_mysql|_nearbyd|_netbios|_netstatistics|_networkd|_nsurlsessiond|_nsurlstoraged|_oahd|_ondemand|_postfix|_postgres|_qtss|_reportmemoryexception|_rmd|_sandbox|_screensaver|_scsd|_securityagent|_softwareupdate|_spotlight|_sshd|_svn|_taskgated|_teamsserver|_timed|_timezone|_tokend|_trustd|_trustevaluationagent|_unknown|_update_sharing|_usbmuxd|_uucp|_warmd|_webauthserver|_windowserver|_www|_wwwproxy|_xserverdocs|daemon\W|^daemon$|message\+|syslog|www|www-data|mail|noboby|Debian\-\+|rtkit|systemd\+' USER=$(whoami 2>/dev/null || echo "UserUnknown") if [ ! "$HOME" ]; then if [ -d "/Users/$USER" ]; then HOME="/Users/$USER"; #Mac home @@ -1080,135 +1080,135 @@ if echo $CHECKS | grep -q ProCronSrvcsTmrsSocks || echo $CHECKS | grep -q IntFil CONT_THREADS=0 # FIND ALL KNOWN INTERESTING SOFTWARE FILES - FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"system.d\" -o -name \"logstash\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"neo4j\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"cacti\" -o -name \"couchdb\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_BIN=`eval_bckgrd "find /bin -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_CACHE=`eval_bckgrd "find /.cache -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_CDROM=`eval_bckgrd "find /cdrom -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_ETC=`eval_bckgrd "find /etc -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*knockd*\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"ssh*config\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB=`eval_bckgrd "find /lib -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_MEDIA=`eval_bckgrd "find /media -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_MNT=`eval_bckgrd "find /mnt -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"sess_*\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_OPT=`eval_bckgrd "find /opt -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_PRIVATE=`eval_bckgrd "find /private -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"agent*\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"sess_*\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_RUN=`eval_bckgrd "find /run -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SBIN=`eval_bckgrd "find /sbin -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SNAP=`eval_bckgrd "find /snap -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SRV=`eval_bckgrd "find /srv -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYS=`eval_bckgrd "find /sys -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_TMP=`eval_bckgrd "find /tmp -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"agent*\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"sess_*\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_USR=`eval_bckgrd "find /usr -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"ssh*config\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_VAR=`eval_bckgrd "find /var -name \"KeePass.ini\" -o -name \"psk.txt\" -o -name \"debian.cnf\" -o -name \"*.csr\" -o -name \"*.pem\" -o -name \"SecEvent.Evt\" -o -name \"credentials.db\" -o -name \".erlang.cookie\" -o -name \"*.der\" -o -name \"access_tokens.json\" -o -name \"krb5.conf\" -o -name \"printers.xml\" -o -name \"unattend.txt\" -o -name \".ldaprc\" -o -name \"appcmd.exe\" -o -name \"kadm5.acl\" -o -name \"ConsoleHost_history.txt\" -o -name \"redis.conf\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"ipsec.conf\" -o -name \"*.keystore\" -o -name \"system.sav\" -o -name \".msmtprc\" -o -name \"autologin\" -o -name \"postgresql.conf\" -o -name \"known_hosts\" -o -name \"protecteduserkey.bin\" -o -name \"*vnc*.xml\" -o -name \".*_history.*\" -o -name \".htpasswd\" -o -name \"iis6.log\" -o -name \"ws_ftp.ini\" -o -name \"Ntds.dit\" -o -name \".profile\" -o -name \"*vnc*.txt\" -o -name \"kibana.y*ml\" -o -name \"*.pgp\" -o -name \".vault-token\" -o -name \".bashrc\" -o -name \"bash.exe\" -o -name \"*.rdg\" -o -name \"ftp.ini\" -o -name \"setupinfo.bak\" -o -name \"ddclient.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"default.sav\" -o -name \"autologin.conf\" -o -name \"*.p12\" -o -name \"KeePass.enforced*\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"access.log\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"*.gnupg\" -o -name \"pgadmin*.db\" -o -name \".pypirc\" -o -name \"*.jks\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.secrets\" -o -name \"sitemanager.xml\" -o -name \"*password*\" -o -name \"ipsec.secrets\" -o -name \"database.php\" -o -name \"backup\" -o -name \".recently-used.xbel\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"unattend.inf\" -o -name \"index.dat\" -o -name \"anaconda-ks.cfg\" -o -name \"AppEvent.Evt\" -o -name \"setupinfo\" -o -name \"gvm-tools.conf\" -o -name \"kcpassword\" -o -name \"*config*.php\" -o -name \"credentials\" -o -name \"gitlab.rm\" -o -name \"KeePass.config*\" -o -name \"SAM\" -o -name \".google_authenticator\" -o -name \"mosquitto.conf\" -o -name \"*.sqlite3\" -o -name \"sysprep.xml\" -o -name \"supervisord.conf\" -o -name \"gitlab.yml\" -o -name \"hosts.equiv\" -o -name \"*.timer\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*vnc*.c*nf*\" -o -name \"security.sav\" -o -name \".git-credentials\" -o -name \"krb5.keytab\" -o -name \"*.socket\" -o -name \"mongod*.conf\" -o -name \"docker.socket\" -o -name \".sudo_as_admin_successful\" -o -name \"pgsql.conf\" -o -name \"docker.sock\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"my.ini\" -o -name \"ntuser.dat\" -o -name \"*.ftpconfig\" -o -name \"access_tokens.db\" -o -name \"my.cnf\" -o -name \"authorized_keys\" -o -name \"FreeSSHDservice.ini\" -o -name \"000-default.conf\" -o -name \"unattended.xml\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"rsyncd.conf\" -o -name \"ftp.config\" -o -name \"cloud.cfg\" -o -name \"https.conf\" -o -name \"*.kdbx\" -o -name \"wcx_ftp.ini\" -o -name \"tomcat-users.xml\" -o -name \".github\" -o -name \"php.ini\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"*.pfx\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \".plan\" -o -name \"AzureRMContext.json\" -o -name \"software\" -o -name \"TokenCache.dat\" -o -name \".rhosts\" -o -name \"*.sqlite\" -o -name \"NetSetup.log\" -o -name \"docker-compose.yml\" -o -name \"hostapd.conf\" -o -name \"server.xml\" -o -name \"software.sav\" -o -name \"*.crt\" -o -name \"recentservers.xml\" -o -name \"drives.xml\" -o -name \"ffftp.ini\" -o -name \"*vnc*.ini\" -o -name \"creds*\" -o -name \"azureProfile.json\" -o -name \"id_dsa*\" -o -name \"pg_hba.conf\" -o -name \"Dockerfile\" -o -name \"*.gpg\" -o -name \"*.ovpn\" -o -name \"snmpd.conf\" -o -name \"groups.xml\" -o -name \".k5login\" -o -name \"sysprep.inf\" -o -name \"*.viminfo\" -o -name \"filezilla.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \".env\" -o -name \"passwd\" -o -name \".lesshst\" -o -name \"*.db\" -o -name \"pagefile.sys\" -o -name \"wp-config.php\" -o -name \"config.php\" -o -name \"winscp.ini\" -o -name \"*.key\" -o -name \"sess_*\" -o -name \"settings.php\" -o -name \"sites.ini\" -o -name \"*credential*\" -o -name \"*.keyring\" -o -name \"SYSTEM\" -o -name \"httpd.conf\" -o -name \"racoon.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"bind\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"system.d\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"bind\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"seeddms*\" -o -name \"filezilla\" -o -name \"cacti\" -o -name \"mysql\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"bind\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"sites-enabled\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".vnc\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_BIN=`eval_bckgrd "find /bin -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_CACHE=`eval_bckgrd "find /.cache -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_CDROM=`eval_bckgrd "find /cdrom -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_ETC=`eval_bckgrd "find /etc -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"*knockd*\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \"ssh*config\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB=`eval_bckgrd "find /lib -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_MEDIA=`eval_bckgrd "find /media -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_MNT=`eval_bckgrd "find /mnt -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"sess_*\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_OPT=`eval_bckgrd "find /opt -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_PRIVATE=`eval_bckgrd "find /private -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"agent*\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"sess_*\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_RUN=`eval_bckgrd "find /run -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SBIN=`eval_bckgrd "find /sbin -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SNAP=`eval_bckgrd "find /snap -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SRV=`eval_bckgrd "find /srv -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYS=`eval_bckgrd "find /sys -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_TMP=`eval_bckgrd "find /tmp -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"agent*\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"sess_*\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_USR=`eval_bckgrd "find /usr -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \"ssh*config\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_VAR=`eval_bckgrd "find /var -name \"*config*.php\" -o -name \"my.ini\" -o -name \"recentservers.xml\" -o -name \"psk.txt\" -o -name \"access_tokens.db\" -o -name \"elasticsearch.y*ml\" -o -name \"kcpassword\" -o -name \"error.log\" -o -name \"ws_ftp.ini\" -o -name \"default.sav\" -o -name \"*.pem\" -o -name \"kibana.y*ml\" -o -name \"protecteduserkey.bin\" -o -name \"iis6.log\" -o -name \"*.kdbx\" -o -name \".k5login\" -o -name \"ipsec.secrets\" -o -name \"*.keystore\" -o -name \"sites.ini\" -o -name \"access.log\" -o -name \"accessTokens.json\" -o -name \".git-credentials\" -o -name \"printers.xml\" -o -name \"rsyncd.conf\" -o -name \"id_rsa*\" -o -name \"secrets.yml\" -o -name \"creds*\" -o -name \"security.sav\" -o -name \"*.cer\" -o -name \"sess_*\" -o -name \"credentials.db\" -o -name \"docker.socket\" -o -name \"KeePass.enforced*\" -o -name \"scclient.exe\" -o -name \".env\" -o -name \"KeePass.ini\" -o -name \".sudo_as_admin_successful\" -o -name \"hosts.equiv\" -o -name \"id_dsa*\" -o -name \"php.ini\" -o -name \"sysprep.inf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"*.gnupg\" -o -name \"settings.php\" -o -name \"*.csr\" -o -name \"system.sav\" -o -name \".erlang.cookie\" -o -name \"autologin.conf\" -o -name \"AppEvent.Evt\" -o -name \"*.jks\" -o -name \".lesshst\" -o -name \"unattend.inf\" -o -name \"snmpd.conf\" -o -name \".gitconfig\" -o -name \"RDCMan.settings\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"ntuser.dat\" -o -name \"gvm-tools.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"NetSetup.log\" -o -name \"bash.exe\" -o -name \"web*.config\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \"passwd\" -o -name \"cesi.conf\" -o -name \"httpd.conf\" -o -name \".rhosts\" -o -name \"docker.sock\" -o -name \"000-default.conf\" -o -name \".plan\" -o -name \"scheduledtasks.xml\" -o -name \"*.keyring\" -o -name \"ipsec.conf\" -o -name \"docker-compose.yml\" -o -name \"*.p12\" -o -name \"*.key\" -o -name \".msmtprc\" -o -name \"unattended.xml\" -o -name \"authorized_keys\" -o -name \"*.timer\" -o -name \"filezilla.xml\" -o -name \"drives.xml\" -o -name \"software\" -o -name \".pypirc\" -o -name \"supervisord.conf\" -o -name \".recently-used.xbel\" -o -name \"*vnc*.txt\" -o -name \"gitlab.rm\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \".github\" -o -name \"*.ftpconfig\" -o -name \"setupinfo\" -o -name \"authorized_hosts\" -o -name \"*credential*\" -o -name \"*vnc*.ini\" -o -name \"*.viminfo\" -o -name \"*.sqlite3\" -o -name \"AzureRMContext.json\" -o -name \"db.php\" -o -name \"pgsql.conf\" -o -name \"*.pfx\" -o -name \".*_history.*\" -o -name \"KeePass.config*\" -o -name \"datasources.xml\" -o -name \"unattend.txt\" -o -name \"access_tokens.json\" -o -name \"unattend.xml\" -o -name \"SYSTEM\" -o -name \"*vnc*.c*nf*\" -o -name \"tomcat-users.xml\" -o -name \"setupinfo.bak\" -o -name \"SAM\" -o -name \".profile\" -o -name \"debian.cnf\" -o -name \"*.swp\" -o -name \"groups.xml\" -o -name \".bashrc\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \".git\" -o -name \"anaconda-ks.cfg\" -o -name \"gitlab.yml\" -o -name \"ffftp.ini\" -o -name \"ftp.config\" -o -name \"rsyncd.secrets\" -o -name \"sysprep.xml\" -o -name \"mosquitto.conf\" -o -name \"*.pgp\" -o -name \"appcmd.exe\" -o -name \"server.xml\" -o -name \"pgadmin*.db\" -o -name \"racoon.conf\" -o -name \"postgresql.conf\" -o -name \"credentials\" -o -name \"backup\" -o -name \"ConsoleHost_history.txt\" -o -name \"krb5.keytab\" -o -name \"*.crt\" -o -name \".htpasswd\" -o -name \"*vnc*.xml\" -o -name \"azureProfile.json\" -o -name \"mongod*.conf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"TokenCache.dat\" -o -name \"*password*\" -o -name \"*.socket\" -o -name \".ldaprc\" -o -name \"redis.conf\" -o -name \"Dockerfile\" -o -name \".vault-token\" -o -name \"index.dat\" -o -name \"pagefile.sys\" -o -name \"wcx_ftp.ini\" -o -name \"wsl.exe\" -o -name \"storage.php\" -o -name \"*.gpg\" -o -name \"hostapd.conf\" -o -name \"fastcgi_params\" -o -name \"Ntds.dit\" -o -name \"*.service\" -o -name \"my.cnf\" -o -name \"autologin\" -o -name \"config.php\" -o -name \"*.db\" -o -name \"sitemanager.xml\" -o -name \"software.sav\" -o -name \"*.der\" -o -name \"ftp.ini\" -o -name \"ddclient.conf\" -o -name \"wp-config.php\" -o -name \"*.sqlite\" -o -name \"SecEvent.Evt\" -o -name \".google_authenticator\" -o -name \"winscp.ini\" -o -name \"database.php\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` wait # Always wait at the end CONT_THREADS=0 #Reset the threads counter #GENERATE THE STORAGES OF THE FOUND FILES - PSTORAGE_SYSTEMD=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/cdrom|^/usr|^/system|^/lib32|^/opt|^/sbin|^/.cache|^$GREPHOMESEARCH|^/snap|^/etc|^/tmp|^/run|^/var|^/bin|^/private|^/mnt|^/applications|^/lib|^/srv|^/media|^/sys|^/systemd|^/lib64" | grep -E ".*\.service$" | sort | uniq | head -n 70) - PSTORAGE_TIMER=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/cdrom|^/usr|^/system|^/lib32|^/opt|^/sbin|^/.cache|^$GREPHOMESEARCH|^/snap|^/etc|^/tmp|^/run|^/var|^/bin|^/private|^/mnt|^/applications|^/lib|^/srv|^/media|^/sys|^/systemd|^/lib64" | grep -E ".*\.timer$" | sort | uniq | head -n 70) - PSTORAGE_SOCKET=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/cdrom|^/usr|^/system|^/lib32|^/opt|^/sbin|^/.cache|^$GREPHOMESEARCH|^/snap|^/etc|^/tmp|^/run|^/var|^/bin|^/private|^/mnt|^/applications|^/lib|^/srv|^/media|^/sys|^/systemd|^/lib64" | grep -E ".*\.socket$" | sort | uniq | head -n 70) - PSTORAGE_DBUS=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70) - PSTORAGE_MYSQL=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD\n$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "mysql$|debian\.cnf$" | sort | uniq | head -n 70) - PSTORAGE_POSTGRESQL=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70) - PSTORAGE_APACHE=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD\n$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "sites-enabled$|000-default\.conf$" | sort | uniq | head -n 70) - PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/var|^/mnt|^/tmp|^/private" | grep -E "sess_.*$" | sort | uniq | head -n 70) - PSTORAGE_PHP_FILES=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70) - PSTORAGE_WORDPRESS=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "wp-config\.php$" | sort | uniq | head -n 70) - PSTORAGE_DRUPAL=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E '/default/settings.php' | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "settings\.php$" | sort | uniq | head -n 70) - PSTORAGE_MOODLE=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E 'moodle/config.php' | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "config\.php$" | sort | uniq | head -n 70) - PSTORAGE_TOMCAT=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70) - PSTORAGE_MONGO=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70) - PSTORAGE_SUPERVISORD=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70) - PSTORAGE_CESI=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "cesi\.conf$" | sort | uniq | head -n 70) - PSTORAGE_RSYNC=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70) - PSTORAGE_HOSTAPD=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70) - PSTORAGE_RACOON=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "racoon\.conf$|psk\.txt$" | sort | uniq | head -n 70) - PSTORAGE_VNC=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD\n$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70) - PSTORAGE_LDAP=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "ldap$" | sort | uniq | head -n 70) - PSTORAGE_OPENVPN=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70) - PSTORAGE_SSH=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70) - PSTORAGE_CERTSB4=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70) - PSTORAGE_CERTSBIN=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70) - PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70) - PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/tmp|^/private" | grep -E "agent.*$" | sort | uniq | head -n 70) - PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^$GREPHOMESEARCH|^/usr" | grep -E "ssh.*config$" | sort | uniq | head -n 70) - PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD\n$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70) - PSTORAGE_KERBEROS=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70) - PSTORAGE_KIBANA=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70) - PSTORAGE_KNOCKD=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70) - PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "logstash$" | sort | uniq | head -n 70) - PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70) - PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70) - PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.vault-token$" | sort | uniq | head -n 70) - PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "couchdb$" | sort | uniq | head -n 70) - PSTORAGE_REDIS=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "redis\.conf$" | sort | uniq | head -n 70) - PSTORAGE_MOSQUITTO=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70) - PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "neo4j$" | sort | uniq | head -n 70) - PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70) - PSTORAGE_ERLANG=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70) - PSTORAGE_GMV_AUTH=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70) - PSTORAGE_IPSEC=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70) - PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.irssi$" | sort | uniq | head -n 70) - PSTORAGE_KEYRING=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD\n$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70) - PSTORAGE_FILEZILLA=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD\n$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70) - PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70) - PSTORAGE_SPLUNK=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "passwd$" | sort | uniq | head -n 70) - PSTORAGE_GITLAB=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -v -E '/lib' | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70) - PSTORAGE_PGP_GPG=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -v -E 'README.gnupg' | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70) - PSTORAGE_CACHE_VI=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70) - PSTORAGE_DOCKER=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70) - PSTORAGE_FIREFOX=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^" | grep -E "\.mozilla$|Firefox$" | sort | uniq | head -n 70) - PSTORAGE_CHROME=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^" | grep -E "google-chrome$|Chrome$" | sort | uniq | head -n 70) - PSTORAGE_OPERA=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^" | grep -E "com\.operasoftware\.Opera$" | sort | uniq | head -n 70) - PSTORAGE_SAFARI=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^" | grep -E "Safari$" | sort | uniq | head -n 70) - PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70) - PSTORAGE_FASTCGI=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "fastcgi_params$" | sort | uniq | head -n 70) - PSTORAGE_SNMP=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_PYPIRC=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.pypirc$" | sort | uniq | head -n 70) - PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.cloudflared$" | sort | uniq | head -n 70) - PSTORAGE_HISTORY=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\..*_history\..*$" | sort | uniq | head -n 70) - PSTORAGE_HTTP_CONF=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "httpd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_HTPASSWD=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.htpasswd$" | sort | uniq | head -n 70) - PSTORAGE_LDAPRC=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.ldaprc$" | sort | uniq | head -n 70) - PSTORAGE_ENV=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.env$" | sort | uniq | head -n 70) - PSTORAGE_MSMTPRC=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.msmtprc$" | sort | uniq | head -n 70) - PSTORAGE_GITHUB=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70) - PSTORAGE_SVN=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.svn$" | sort | uniq | head -n 70) - PSTORAGE_KEEPASS=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70) - PSTORAGE_FTP=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70) - PSTORAGE_BIND=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "bind$" | sort | uniq | head -n 70) - PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "seeddms.*$" | sort | uniq | head -n 70) - PSTORAGE_DDCLIENT=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70) - PSTORAGE_KCPASSWORD=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "kcpassword$" | sort | uniq | head -n 70) - PSTORAGE_CACTI=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CACHE\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_ETC\n$FIND_DIR_MEDIA\n$FIND_DIR_MNT\n$FIND_DIR_OPT\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SNAP\n$FIND_DIR_BIN" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "cacti$" | sort | uniq | head -n 70) - PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70) - PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70) - PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70) - PSTORAGE_DATABASE=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70) - PSTORAGE_BACKUPS=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E "backup$|backups$" | sort | uniq | head -n 70) - PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_SYS\n$FIND_SNAP\n$FIND_RUN\n$FIND_TMP\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_MNT\n$FIND_SRV\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB\n$FIND_LIB64\n$FIND_LIB32\n$FIND_CACHE\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_BIN\n$FIND_USR\n$FIND_VAR\n$FIND_SYSTEMD" | grep -E "^/sbin|^/.cache|^/applications|^$GREPHOMESEARCH|^/cdrom|^/snap|^/usr|^/var|^/srv|^/etc|^/tmp|^/bin|^/media|^/opt|^/private|^/mnt" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70) + PSTORAGE_SYSTEMD=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/lib|^/var|^/snap|^$GREPHOMESEARCH|^/tmp|^/mnt|^/.cache|^/run|^/system|^/srv|^/usr|^/private|^/bin|^/lib32|^/lib64|^/applications|^/media|^/sys|^/sbin|^/etc|^/systemd|^/opt" | grep -E ".*\.service$" | sort | uniq | head -n 70) + PSTORAGE_TIMER=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/lib|^/var|^/snap|^$GREPHOMESEARCH|^/tmp|^/mnt|^/.cache|^/run|^/system|^/srv|^/usr|^/private|^/bin|^/lib32|^/lib64|^/applications|^/media|^/sys|^/sbin|^/etc|^/systemd|^/opt" | grep -E ".*\.timer$" | sort | uniq | head -n 70) + PSTORAGE_SOCKET=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/lib|^/var|^/snap|^$GREPHOMESEARCH|^/tmp|^/mnt|^/.cache|^/run|^/system|^/srv|^/usr|^/private|^/bin|^/lib32|^/lib64|^/applications|^/media|^/sys|^/sbin|^/etc|^/systemd|^/opt" | grep -E ".*\.socket$" | sort | uniq | head -n 70) + PSTORAGE_DBUS=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70) + PSTORAGE_MYSQL=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC\n$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "mysql$|debian\.cnf$" | sort | uniq | head -n 70) + PSTORAGE_POSTGRESQL=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70) + PSTORAGE_APACHE=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC\n$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "sites-enabled$|000-default\.conf$" | sort | uniq | head -n 70) + PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/var|^/tmp|^/mnt|^/private" | grep -E "sess_.*$" | sort | uniq | head -n 70) + PSTORAGE_PHP_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70) + PSTORAGE_WORDPRESS=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "wp-config\.php$" | sort | uniq | head -n 70) + PSTORAGE_DRUPAL=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E '/default/settings.php' | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "settings\.php$" | sort | uniq | head -n 70) + PSTORAGE_MOODLE=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E 'moodle/config.php' | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "config\.php$" | sort | uniq | head -n 70) + PSTORAGE_TOMCAT=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70) + PSTORAGE_MONGO=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70) + PSTORAGE_SUPERVISORD=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70) + PSTORAGE_CESI=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "cesi\.conf$" | sort | uniq | head -n 70) + PSTORAGE_RSYNC=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70) + PSTORAGE_HOSTAPD=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70) + PSTORAGE_RACOON=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "racoon\.conf$|psk\.txt$" | sort | uniq | head -n 70) + PSTORAGE_VNC=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC\n$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70) + PSTORAGE_LDAP=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "ldap$" | sort | uniq | head -n 70) + PSTORAGE_OPENVPN=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70) + PSTORAGE_SSH=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70) + PSTORAGE_CERTSB4=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70) + PSTORAGE_CERTSBIN=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70) + PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70) + PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/tmp|^/private" | grep -E "agent.*$" | sort | uniq | head -n 70) + PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^$GREPHOMESEARCH|^/usr" | grep -E "ssh.*config$" | sort | uniq | head -n 70) + PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC\n$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70) + PSTORAGE_KERBEROS=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70) + PSTORAGE_KIBANA=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70) + PSTORAGE_KNOCKD=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70) + PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "logstash$" | sort | uniq | head -n 70) + PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70) + PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70) + PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.vault-token$" | sort | uniq | head -n 70) + PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "couchdb$" | sort | uniq | head -n 70) + PSTORAGE_REDIS=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "redis\.conf$" | sort | uniq | head -n 70) + PSTORAGE_MOSQUITTO=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70) + PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "neo4j$" | sort | uniq | head -n 70) + PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70) + PSTORAGE_ERLANG=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70) + PSTORAGE_GMV_AUTH=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70) + PSTORAGE_IPSEC=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70) + PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.irssi$" | sort | uniq | head -n 70) + PSTORAGE_KEYRING=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC\n$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70) + PSTORAGE_FILEZILLA=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC\n$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70) + PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70) + PSTORAGE_SPLUNK=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "passwd$" | sort | uniq | head -n 70) + PSTORAGE_GITLAB=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -v -E '/lib' | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70) + PSTORAGE_PGP_GPG=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -v -E 'README.gnupg' | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70) + PSTORAGE_CACHE_VI=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70) + PSTORAGE_DOCKER=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70) + PSTORAGE_FIREFOX=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^" | grep -E "\.mozilla$|Firefox$" | sort | uniq | head -n 70) + PSTORAGE_CHROME=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^" | grep -E "google-chrome$|Chrome$" | sort | uniq | head -n 70) + PSTORAGE_OPERA=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^" | grep -E "com\.operasoftware\.Opera$" | sort | uniq | head -n 70) + PSTORAGE_SAFARI=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^" | grep -E "Safari$" | sort | uniq | head -n 70) + PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70) + PSTORAGE_FASTCGI=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "fastcgi_params$" | sort | uniq | head -n 70) + PSTORAGE_SNMP=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_PYPIRC=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.pypirc$" | sort | uniq | head -n 70) + PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.cloudflared$" | sort | uniq | head -n 70) + PSTORAGE_HISTORY=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\..*_history\..*$" | sort | uniq | head -n 70) + PSTORAGE_HTTP_CONF=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "httpd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_HTPASSWD=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.htpasswd$" | sort | uniq | head -n 70) + PSTORAGE_LDAPRC=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.ldaprc$" | sort | uniq | head -n 70) + PSTORAGE_ENV=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.env$" | sort | uniq | head -n 70) + PSTORAGE_MSMTPRC=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.msmtprc$" | sort | uniq | head -n 70) + PSTORAGE_GITHUB=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70) + PSTORAGE_SVN=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.svn$" | sort | uniq | head -n 70) + PSTORAGE_KEEPASS=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70) + PSTORAGE_FTP=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70) + PSTORAGE_BIND=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/var|^/usr|^/etc" | grep -E "bind$" | sort | uniq | head -n 70) + PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "seeddms.*$" | sort | uniq | head -n 70) + PSTORAGE_DDCLIENT=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70) + PSTORAGE_KCPASSWORD=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "kcpassword$" | sort | uniq | head -n 70) + PSTORAGE_CACTI=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_USR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_BIN\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_PRIVATE\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_SBIN\n$FIND_DIR_MEDIA\n$FIND_DIR_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "cacti$" | sort | uniq | head -n 70) + PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70) + PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70) + PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70) + PSTORAGE_DATABASE=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70) + PSTORAGE_BACKUPS=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E "backup$|backups$" | sort | uniq | head -n 70) + PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_TMP\n$FIND_CACHE\n$FIND_OPT\n$FIND_VAR\n$FIND_MEDIA\n$FIND_LIB\n$FIND_MNT\n$FIND_SNAP\n$FIND_USR\n$FIND_HOMESEARCH\n$FIND_BIN\n$FIND_SYS\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_PRIVATE\n$FIND_CDROM\n$FIND_APPLICATIONS\n$FIND_SRV\n$FIND_SBIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_ETC" | grep -E "^/cdrom|^/mnt|^/media|^/sbin|^/bin|^/.cache|^$GREPHOMESEARCH|^/etc|^/srv|^/var|^/usr|^/applications|^/opt|^/snap|^/tmp|^/private" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70) ##### POST SERACH VARIABLES ##### @@ -1528,7 +1528,7 @@ if echo $CHECKS | grep -q AvaSof; then #-- 1AS) Useful software print_2title "Useful software" - command -v "$CONTAINER_CMDS" nmap aws nc ncat netcat nc.traditional wget curl ping gcc g++ make gdb base64 socat python python2 python3 python2.7 python2.6 python3.6 python3.7 perl php ruby xterm doas sudo fetch ctr 2>/dev/null + command -v "$CONTAINER_CMDS" nmap aws nc ncat netcat nc.traditional wget curl ping gcc g++ make gdb base64 socat python python2 python3 python2.7 python2.6 python3.6 python3.7 perl php ruby xterm doas sudo fetch ctr authbind 2>/dev/null echo "" #-- 2AS) Search for compilers @@ -1661,23 +1661,41 @@ if echo $CHECKS | grep -q ProCronSrvcsTmrsSocks; then if [ "$MACPEAS" ]; then print_2title "Third party LaunchAgents & LaunchDemons" - print_info "TODO" - ls -l /Library/LaunchAgents/ /Library/LaunchDaemons/ ~/Library/LaunchAgents/ 2>/dev/null + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#launchd" + ls -l /Library/LaunchAgents/ /Library/LaunchDaemons/ ~/Library/LaunchAgents/ ~/Library/LaunchDaemons/ 2>/dev/null echo "" - print_2title "Startup Folders" - print_info "TODO" + print_2title "Writable System LaunchAgents & LaunchDemons" + find /System/Library/LaunchAgents/ /System/Library/LaunchDaemons/ /Library/LaunchAgents/ /Library/LaunchDaemons/ | grep ".plist" | while read f; do + program="" + program=$(defaults read "$f" Program 2>/dev/null) + if ! [ "$program" ]; then + program=$(defaults read /Library/LaunchDaemons/MonitorHelper.plist ProgramArguments | grep -Ev "^\(|^\)" | cut -d '"' -f 2) + fi + if [ -w "$program" ]; then + echo "$program" is writable | sed -${E} "s,.*,${SED_RED_YELLOW},"; + fi + done + echo "" + + print_2title "StartupItems" + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#startup-items" ls -l /Library/StartupItems/ /System/Library/StartupItems/ 2>/dev/null echo "" print_2title "Login Items" - print_info "TODO" + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#login-items" osascript -e 'tell application "System Events" to get the name of every login item' 2>/dev/null echo "" print_2title "SPStartupItemDataType" system_profiler SPStartupItemDataType echo "" + + print_2title "Emond scripts" + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#emond" + ls -l /private/var/db/emondClients + echo "" fi #-- PCS) Services @@ -1911,6 +1929,10 @@ if echo $CHECKS | grep -q Net; then networksetup -getinfo Wi-Fi echo "" + print_2title "Check Enabled Proxies" + scutil --proxy + echo "" + print_2title "Wifi Proxy URL" networksetup -getautoproxyurl Wi-Fi echo "" @@ -1946,6 +1968,15 @@ if echo $CHECKS | grep -q Net; then fi if [ "$MACOS" ]; then + print_2title "Any MacOS Sharing Service Enabled?" + rmMgmt=$(netstat -na | grep LISTEN | grep tcp46 | grep "*.3283" | wc -l); + scrShrng=$(netstat -na | grep LISTEN | egrep 'tcp4|tcp6' | grep "*.5900" | wc -l); + flShrng=$(netstat -na | grep LISTEN | egrep 'tcp4|tcp6' | egrep "\*.88|\*.445|\*.548" | wc -l); + rLgn=$(netstat -na | grep LISTEN | egrep 'tcp4|tcp6' | grep "*.22" | wc -l); + rAE=$(netstat -na | grep LISTEN | egrep 'tcp4|tcp6' | grep "*.3031" | wc -l); + bmM=$(netstat -na | grep LISTEN | egrep 'tcp4|tcp6' | grep "*.4488" | wc -l); + printf "\nThe following services are OFF if '0', or ON otherwise:\nScreen Sharing: %s\nFile Sharing: %s\nRemote Login: %s\nRemote Mgmt: %s\nRemote Apple Events: %s\nBack to My Mac: %s\n\n" "$scrShrng" "$flShrng" "$rLgn" "$rmMgmt" "$rAE" "$bmM"; + echo "" print_2title "VPN Creds" system_profiler SPNetworkLocationDataType | grep -A 5 -B 7 ": Password" | sed -${E} "s,Password|Authorization Name.*,${SED_RED}," echo "" @@ -1988,13 +2019,25 @@ if echo $CHECKS | grep -q UsrI; then if [ "$MACPEAS" ];then print_2title "Current user Login and Logout hooks" defaults read $HOME/Library/Preferences/com.apple.loginwindow.plist 2>/dev/null | grep -e "Hook" + echo "" print_2title "All Login and Logout hooks" defaults read /Users/*/Library/Preferences/com.apple.loginwindow.plist 2>/dev/null | grep -e "Hook" defaults read /private/var/root/Library/Preferences/com.apple.loginwindow.plist + echo "" print_2title "Keychains" + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#chainbreaker" security list-keychains + echo "" + + print_2title "SystemKey" + ls -l /var/db/SystemKey + if [ -r "/var/db/SystemKey" ]; then + echo "You can read /var/db/SystemKey" | sed -${E} "s,.*,${SED_RED_YELLOW},"; + hexdump -s 8 -n 24 -e '1/1 "%.2x"' /var/db/SystemKey | sed -${E} "s,.*,${SED_RED_YELLOW},"; + fi + echo "" fi #-- UI) PGP keys? @@ -2155,9 +2198,16 @@ if echo $CHECKS | grep -q UsrI; then grep "^PASS_MAX_DAYS\|^PASS_MIN_DAYS\|^PASS_WARN_AGE\|^ENCRYPT_METHOD" /etc/login.defs 2>/dev/null || echo_not_found "/etc/login.defs" echo "" - if [ "$MACPEASS" ]; then + if [ "$MACPEAS" ]; then print_2title "Relevant last user info and user configs" defaults read /Library/Preferences/com.apple.loginwindow.plist 2>/dev/null + echo "" + + print_2title "Guest user status" + sysadminctl -afpGuestAccess status | sed -${E} "s,enabled,${SED_RED}," | sed -${E} "s,disabled,${SED_GREEN}," + sysadminctl -guestAccount status | sed -${E} "s,enabled,${SED_RED}," | sed -${E} "s,disabled,${SED_GREEN}," + sysadminctl -smbGuestAccess status | sed -${E} "s,enabled,${SED_RED}," | sed -${E} "s,disabled,${SED_GREEN}," + echo "" fi #-- UI) Brute su @@ -2302,7 +2352,7 @@ if echo $CHECKS | grep -q SofI; then echo "Version: $(warn_exec apache2 -v 2>/dev/null; warn_exec httpd -v 2>/dev/null)" print_3title 'PHP exec extensions' grep -R -B1 "httpd-php" /etc/apache2 2>/dev/null - if ! [ "`echo \"$PSTORAGE_APACHE\" | grep -E \"sites-enabled$\"`" ]; then echo_not_found "sites-enabled"; fi; printf "%s" "$PSTORAGE_APACHE" | grep -E "sites-enabled$" | while read f; do ls -ld "$f" | sed -${E} "s,sites-enabled$,${SED_RED},"; for ff in $(find "$f" -name "*"); do ls -ld "$ff" | sed -${E} "s,.*,${SED_RED},"; cat "$ff" 2>/dev/null | grep -IEv "^$" | grep -E "AuthType|AuthName|AuthUserFile|ServerName|ServerAlias" | grep -Ev "^#" | sed -${E} "s,AuthType|AuthName|AuthUserFile|ServerName|ServerAlias,${SED_RED},g"; done; echo "";done; echo ""; + if ! [ "`echo \"$PSTORAGE_APACHE\" | grep -E \"sites-enabled$\"`" ]; then echo_not_found "sites-enabled"; fi; printf "%s" "$PSTORAGE_APACHE" | grep -E "sites-enabled$" | while read f; do ls -ld "$f" | sed -${E} "s,sites-enabled$,${SED_RED},"; for ff in $(find "$f" -name "*"); do ls -ld "$ff" | sed -${E} "s,.*,${SED_RED},"; cat "$ff" 2>/dev/null | grep -IEv "^$" | grep -E "AuthType|AuthName|AuthUserFile|ServerName|ServerAlias" | grep -Ev "#" | sed -${E} "s,AuthType|AuthName|AuthUserFile|ServerName|ServerAlias,${SED_RED},g"; done; echo "";done; echo ""; if ! [ "`echo \"$PSTORAGE_APACHE\" | grep -E \"000-default\.conf$\"`" ]; then echo_not_found "000-default.conf"; fi; printf "%s" "$PSTORAGE_APACHE" | grep -E "000-default\.conf$" | while read f; do ls -ld "$f" | sed -${E} "s,000-default\.conf$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$" | sed -${E} "s,AuthType|AuthName|AuthUserFile|ServerName|ServerAlias,${SED_RED},g"; done; echo ""; @@ -2693,7 +2743,7 @@ if echo $CHECKS | grep -q SofI; then echo "" print_2title "Analyzing kcpassword files" - print_info "TODO" + print_info "https://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation#kcpassword" printf "%s\n" "$PSTORAGE_KCPASSWORD\n" | while read f; do echo "$f" | sed -${E} "s,.*,${SED_RED}," base64 "$f" 2>/dev/null | sed -${E} "s,.*,${SED_RED}," @@ -2999,7 +3049,7 @@ if echo $CHECKS | grep -q IntFiles; then #If starts like "total 332K" then no SUID bin was found and xargs just executed "ls" in the current folder if echo "$s" | grep -qE "^total"; then break; fi - sname="$(echo \"$s\" | awk '{print $9}')" + sname="$(echo $s | awk '{print $9}')" if [ "$sname" = "." ] || [ "$sname" = ".." ]; then true #Don't do nothing elif ! [ "$IAMROOT" ] && [ -O "$sname" ]; then @@ -3061,7 +3111,7 @@ if echo $CHECKS | grep -q IntFiles; then #If starts like "total 332K" then no SUID bin was found and xargs just executed "ls" in the current folder if echo "$s" | grep -qE "^total";then break; fi - sname="$(echo \"$s\" | awk '{print $9}')" + sname="$(echo $s | awk '{print $9}')" if [ "$sname" = "." ] || [ "$sname" = ".." ]; then true #Don't do nothing elif ! [ "$IAMROOT" ] && [ -O "$sname" ]; then @@ -3388,6 +3438,13 @@ if echo $CHECKS | grep -q IntFiles; then echo "" ##-- IF) DB files + if [ "$MACPEAS" ]; then + print_2title "Reading messages database" + sqlite3 $HOME/Library/Messages/chat.db 'select * from message' 2>/dev/null + sqlite3 $HOME/Library/Messages/chat.db 'select * from attachment' 2>/dev/null + sqlite3 $HOME/Library/Messages/chat.db 'select * from deleted_messages' 2>/dev/null + + fi print_2title "Searching tables inside readable .db/.sql/.sqlite files (limit 100)" FILECMD="$(command -v file 2>/dev/null)" if [ "$PSTORAGE_DATABASE" ]; then @@ -3439,7 +3496,7 @@ if echo $CHECKS | grep -q IntFiles; then if [ "$MACPEAS" ]; then print_2title "Downloaded Files" - sqlite3 "$HOME/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2" "select * from LSQuarantineEvent;" 2>/dev/null | grep "http" + sqlite3 ~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2 'select LSQuarantineAgentName, LSQuarantineDataURLString, LSQuarantineOriginURLString, date(LSQuarantineTimeStamp + 978307200, "unixepoch") as downloadedDate from LSQuarantineEvent order by LSQuarantineTimeStamp' | sort | grep -Ev "\|\|\|" fi ##-- IF) Web files From 946e440255b8b27f1c8434c0a7e91c6bc1c13a9f Mon Sep 17 00:00:00 2001 From: CI-winpeas Date: Fri, 27 Aug 2021 14:31:06 +0000 Subject: [PATCH 5/5] winpeas binaries auto update --- .../Dotfuscated/any/winPEASany.exe | Bin 1787904 -> 1787904 bytes .../Dotfuscated/x64/winPEASx64.exe | Bin 1787392 -> 1787392 bytes .../Dotfuscated/x86/winPEASx86.exe | Bin 1787904 -> 1787904 bytes .../Obfuscated Releases/winPEASany.exe | Bin 1787904 -> 1787904 bytes .../Obfuscated Releases/winPEASx64.exe | Bin 1787392 -> 1787392 bytes .../Obfuscated Releases/winPEASx86.exe | Bin 1787904 -> 1787904 bytes .../binaries/Release/winPEASany.exe | Bin 1920512 -> 1921024 bytes .../binaries/x64/Release/winPEASx64.exe | Bin 1920000 -> 1920000 bytes .../binaries/x86/Release/winPEASx86.exe | Bin 1920512 -> 1921024 bytes 9 files changed, 0 insertions(+), 0 deletions(-) diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/any/winPEASany.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/any/winPEASany.exe index 6b1739a61c6764eedefdf09b110c7ad3a911f3e4..22d762f0566a53876af5bef02b5e0e624cac7a8c 100644 GIT binary patch delta 1687 zcmXZdd2mf<7{~GFCV74d_q>s~BI42{Vyz;n77=k1R6?jNme!JxgrpG?H?ixDr6V&n zB!k}0FgjCXEY)cVF0EEkr8KrsYikKYtF};EX@6$=&U`=5ALpNQW}bOZX?a0uc|m!Z zf6U{y6(2XZEv?u%GB|0hQ__Sd(}Nj>*w@4+-YcKmoB2{#*>839 z+A^(1-psxBNN;(B73@tqY7g;lK4iE1mL9gR-qgHPPH|RLOyBX7-8oT(Q{C>o;=JiO z?x?&eQMpqKyrE7j%xhKIoBNlzr}<(_tm2*luU>ZX+DeNV7R(y35EjZB`qoxD5|4Wx zp0MOA4LWJ@i#O0MYE@gZRjo6YRBAW6O_S($O`$vVAoXd=c}sTcFuF@K=r@{i)sk=3 zLwBpE#**)JKmA_AuUWE3Q|J#`N%yMbx+VLx6Wy-~9*!S1g&xp@^e3&R2etZ!C5O~e zYst@Ad(V=?TKmwFBbxQdl3z6Ig(X$GmLAngdQ9u+ado`3wT_xfAL`S1BahV9-N@e>O&@C8cS z+rpM>q#X=>9TBuW2GTcBKs&%QkE0_F&`!8TWATW_!Io#_O&Ho4$@DE$(YH}mWTXqu z(XO~iyWu8{#}nEe0n>~mAe;8UDVm7Ov?p#;7oN~01i6hQBbD~TObcn z@(xmIU+keNI6_l#hW0}Z?T?t5M$%A22cTw_k%1UA+sL~Zw7|$9Or?V{hYmp<9g634 z7?v+Il8$OR9BGS;jKDBD5*drQ|D%wx#K?Q_(D$*Pjz%RNgUS^~#$pd0hhsDY7icDG z>3FnRX=DN>(JZ)WHY#ZjI)7qhB3yJ5(r7OB&^*-95760bBp)t18LrQ`{{?WZH!=mw z=u{k|g{Y=QXurY8G<2nIB++6N(h}^Z(~+>z$P9SsOe~|b;MinjHX`X9WYD>Y{KCjQ zWY7~TSYsB>n)oi2MU;#SSvjX*<+`nF z25w1Q9Twj=e#zqO+6Z5EZPVP5ae*xoT#3mpSE{Rj@_>H5Qv0Oz9x`{}@cHQe7aPWX*?$TrOl^2-adjkCq%EwDL#+ax-k{*hSbAu6GHz8-#_nH_De z8BwM~R=h`cyoZfFT~AhzDFds|8nA|}kvrbQer9#O^Z=W<%GcXlxMM%H-{|6+KFMn0 z8o%G(+Esnf-paN0u-)$d@Th&wW>;o=%ip~u&6?aR``!+V8Ro^jnGf@2jotTl`1LsM z{JhMPuXPvQrlU?+QmA|AcHMKzk{x=T7HKv8Mr-I!O+RgkTWii*vP(VBS+ZNb>9^{A z*^=)xjPB8}3QP9tEV@q*(eJf}{-8-$EZMKc^nhNX#d_1pIjA+XMANTY@}p+aLz-1- z$zd&~N7Pkq$x(IPv*eii-M8c?^?Pi|&pM3$qDiz=^XYLdre#_|PiXKHOHOJ&{Z+Tn z-*ie-Bd2s0J*`f9M%_)FM$T$ofRS@*4>WRKiS?KmHHLErn~5MeME0)gAgNsst>)XA@r7p)7u&uVx01qMur-x z(#UWl)fyRLF5Ukm9!T1IQMoIcQ?Zbtsq4Ej*_(^|E4H}Xgg zeXLFB6CFY8)OVN>K}%{wBK1HDb$X(NQx7G>jVRWQGy<$kFj601(gxT~8={0ZLK(H= z0=00P8nhc@#0!(CH?pV?im5M-(Z(oEG~$OU>W^C51dg#rn!+)`NHcs)1Dt4_WF!!+ zXmhNk4ph<>sGMk|B|Ih>X$3FZ8iQ#YjHW?YO55Th4MsT)LHT4O?GQA@NP8@%&tL-$ zMIr5gz4Tcep&jve|4bu2u!#0V4()|CG#Z;|Z|tHk;{kmIq0U)G`XG6>kr>>f zui^pii_~-@{VUQQ|WBnr0EDNFfs?xbS{eNdnl#z;Jw+%`zWOu z@ZMr%J{;5u$5tbma1*X_tIx)$gzy4E~7A;PC)Ol;o)v9Uv9hYc7pG;YYC_<^Grj~u%+@uS3L ziJdxk2@8*qfd5~Dr>{X5*Pv*J!`8-?67AUF%8WAcZm-^shw9P0r`xx$qso>WUjILB C*UA$B diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x64/winPEASx64.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x64/winPEASx64.exe index a3bf1b3a422dc95b08e05c5643ae712aa917da4e..0cc01137f2ea504b25a087bb3bfa6f8d08db1789 100644 GIT binary patch delta 1622 zcmWmCc~I1K7{~Evk>}&Fzpvtf>q;iN9+-LH5qYAara^gdnR%ou0x7ProQACmjn2q4 zjaKW7%{bF!;wIGw^=XxSM{;%fz`+CpKtPq zAFu~I!(HQMFYu;>FYDlSIDcV73vQ;Veix=$D0)xlw)O&4CaBd zqI8GF3~R|+u@KgpwF#8&XglJR?_q@{+tfO3$v3)%mT5?(CEGQm%90&AobJ>ybeG1` z-Fln`H1?b&-)b`5qi*`0y02QYSBvOAEvm6(zaFOFYgnx%KWHpHpaJ@$I<8rAPzTa- zjrMVV(pdVl9;b)2iXPUg>y{i*N1Y`{_10ZWj_IxYmK@jAdP{!M)J98AXes?w1N5Xe z&{OJoW=Vxc(bJkoE46|CrqAi`y0^WNKlCuI(n@+p?GB%jvl{O-a!zN_^SYj1(Dhx6 zT-5emjZ|w7dP&F8%X)}j(bM#*R?`~2No(~1y`~RbMy_j6HzRdw(LZ$(y`j_TO`S_` zX+FKJ#q^GrbTdBrOG_e*{H-PZjoj6eNF)E~T6$0K(|@&*-q*$gBA(hB-mLx&l8qKWjW&Zdo;PM_&U`dm}ujR-QS4P`V4`>C%9oC!vP;Y>85s88Zg zqdwV4Q`n{&X$C`^!%179JGCQ{S{O|Y3Z@%ri9NIxs%QutGmNxGXW9m?nMT?ohPJ~* z8VV0>56>JU4qT@le3<7p;zSnhh zx{(2BO$TBu9fS%x7!{dDUcp5gh0F9++@?eDlnzC+EF;5^Mu+1J9f4Xp5_f4dp3+gU zyhcVNj=qLMA14O;a*d3^s5~QM5l6?NoW72ebUe<}38jnB}U#x5uJw3^c@7~ zbOb&zG6UswCMxMHT%zyd7M+dWpBkBi`P7X(Iu`+&f~e1o%tH)K#YCEha+;0?`W~YE zM&=`iE_RPUL z1Zq|~b7qEYaBZrNInfxq!yEU}gwSc;6=`+OKw4eLv}9M*l=+^FOphnuvpBP`AS*vR i&%12Pk`K#@cNK3hj!#HTN}lSsMTZ>^v>X+7PyYisLd!4! delta 1597 zcmWmC`+LrH9LMqZy?MWe`}<+cP8PERCUaPmn44i_Ma?NoSUHYZVQh}wo4LB}a!ANs zO8OdQGha5L6l*2|ctXDrgAFqGlm9-=-Yf0MjMczYwgLW)dn^(1C z<;xf%&kytRAcHN%XRp ze_AIq$R_TXJbQ@ytMztx2Ibky+q*B#u>9Ru&f7!XS>r5Uch*IF19#hAmfiF55&N3W z?kgW!mV0?CtFCA1Olv|9*P~q)Gpqq?$b4BN*4XoCm!IQ=bK^-%wrer{T1TF;WQXpj zJ9YmVOLpmPx?8Jhq1MnnI`^z49<4cNNs;=Tx8xi3qu;9EHB0ttEG^d9>z3@(O!}Q3 zrQd4}-LI+TmK@L$`h#AlKk6MP=O?Y92X$_RC5O~SOVoA4lEYd;OEvGVB}X)`+LEIh z_`s5%HSnn=$26J#qN((_7SIz~LQiTXJ*BOmSyHA2^jFXymRsVvO9=M0#J>(<Iyv)`PT0wVRPA+K4{YVERml(^~Z(Vnh%|Z5U0x zkVc)}DCN{a=};qz4a4|aY)CfZgB`Rk_R)GMrS)-|+HsXyxJM1zj5N{!lW0S@s4q%r zBOIrVQ8vnmAF5~*)KY(hrWgr8=olk`SWSbR2pDT57~!-j*3l5$q|f2zI3vw~@kW}X zF%89F+5#yw49jRZuF(io&`4BFFwzn&Q;oDjE^UoXGzx{Z4Gz%fag4TwZK9EAgwb|z z#&FtWHtm2fXh&?KF({-j-~f%q1KJ7MlZ?EG>}f_iV<~+J%V`&^pRpkom7iIK5rO~)aXjz=Y( zfGV1bS~?NwtBp)T0eu&hbTX>w6jXi5|EHlU-^hDNC@}Iqa_CgJ=rmlW({YQYqnge@ zA0U)E5xUh#7D9I$$wuxT zUV8yPk>>*&{~dqRBg9s@EH2hK~%N}8Y4JhVkvc!YaUe8@g`R#%haY0xv| GzWxX9;J-Tn diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x86/winPEASx86.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x86/winPEASx86.exe index f9874630e48a012604f649a58b014556e41fd142..34b0a499f1b02886ec5e4dc266a88c69b90a6255 100644 GIT binary patch delta 1687 zcmXZddr(wm7{~Evf#)Z>=S6Wv#gzcH)Jz2_?+RK80g8%>p3Gcc1W z4%RkfQ!_c{C7UeN)v`#J2=;UM zAL?TBM)onC7Y+9-9qwmi&!;~NV9LN6u|U?CHSrDiv!D1RU}tNac+Y=fZ|h4~X}{9V zYfHCUc++>-!@cF9R**ODfW4V_!(O}Hw{)NV)AeE9vkEgJ+7FpD&7BodkneWq6z0sz za!2G$kI2r?^9DPu5U*8j5A!c_&-6tVS%m`wp1*AAs!EF)7Q~veW-ORB_pPdQ3^?Su zd)Sh1H1LSUFJ4Q(RjbC5@63DY)_A%__fVh4pR#1DrqXTdqTj2l){-C8 zL$|A^&XON>7yU_FU9hA|@Nq4B@q9r@EJKd%IJRHAhJl(B(=&xEs_h`)}OZKXx z-jd(6{+1>CwEnIo`!(a9CBJLN6HBUf6+NJp^q@A-L+W^H$zhG5N7PMgw1FPg$Ml%` zS{nI7chTc|ke<*+tvp6fYD%b)Q#y{G)|K>(u8cJDr#5eAAC>tH-`L(4iDxv6DQ zMs8_Yw2|Aog5J?vv_T)zyZW$?k$YN)d}>8 zX3?j*nm*G>sYV2O)P}FAAGT4CKSD+s2|&nbBZ}K&i~zUOj5NX%8i>YYjWk9GZGuQ@ zM^|cL05vEYZzKqtX;akDW^ha}5)3D8j_`>_9EhbYkVHd}OIsp$vXNG(rL8@foM9vs z(`g&rpicD6G}0D5vy6mcBz*xBX*fQk5m-+naf-G>w<$*2Bbs(V^i(4+Vg`K)$7n~~ zqn%*OHqse}zKl@X1w-j8$fI51na|M;yJ>e^p;5R;qhZT2(gTLZU=V#3)$}z~&oI&x zCuuL7p}ldL_Q3<%7XdSk^g|}?kE3(|&e4ImPGj+a#v#ycWDpYQU=({eUdPs1M&3aG z*+$+(0v&=X8jt-n0mtcEsH2H!Uu+}^bu<}ubBqi{%3LGEkh0K73i9c2%%daFKu6*+ zO-02bBco75Mcv({*Q%giIKPAq3>V~9fwLf9+fMMOh6T#h=bIH(=;9R zbP_s#WMnd?(hRt1CMszbVm>x91+jE0l4v%nXbu|ayNK}`$we%khS<-!|9OaAV`Ms( z(R>`F1*oAj&}FTWndn8`h@*ulphehDXQAIZBeUV5#aKq?z_H%QT!hnkaMAY={*{sW zaMAaXOFhWlV59`On~W^Lu`OKfg}BJE2=`0RmbG9ZtR-v3TKmqHg%(Y0_Uvly#%o8b zlD}*^?@UZhhlVqD=W1V2ob!?Tl@IU*4{_eKEstvSA74q*pa1{> delta 1643 zcmXZddvwor9LMqZ?>Fz4%kTTy#V*FrWivF1P1ntBZb^wImti*Yv)KxBX-3j-{5Wf< zLyMnIazb*g$nqOeG0UxTE7#BrqtQmw3h!e@%rQY@B5rj?xG2~izY03*Do_L zeDQ*2wr-2pC;3;6bV@(rH`*zib#Y{HL8NVzt#`p}n>#2X#rf!u^ksHYi7p7T2m9r= zvw0`So3@@rdtRd5#vZL7tHYFm)n)Zqeb&I2Xm^}iRwpOiCf?Fjj;6l8A3Lsf@J>v# zLcODRJ6d?F_Bxt-H|=*geD57}EZ^YGZDWP_^0TeBp z#QoV(OTN+~x><)Evt*0zq+jdK6P9e%tF%z7=r>wJw`tBvOMF^$+L9vmJ7dXq4WK(T z;G!kpY7E_}F=dwQ(y8=2-ABLI8v28}E?Kf$i|HP{K#R4)&DpCpv_x|*Tk@lN=sxva zv1Gp%(*x?QvgDw8t1UUC!M82>NrN9)^0N-2zo?5I*46Zg7Sp3zMvrOKLrae9YWk~g zq`&F7Fe4{)Dm|%gdP;p^ZX>6)Hr&V=bu>0|R{PQ4wO^!>bGnC~*JJd8-lBi#l$J(H z^&NUq=hHG>N-yaudRbRR8M&fg(sC`LSM@%`I1bQuctD>(vkW8c;cn0AfNUCrk7z8`(2m$bpTsWu6mHU|F)P!^Gnh5m z$g{|&&tV~r!!jC=b+i)-X=j8?G13KdX;&)s_BH9CYXir4DryA*njA=%C z<2rpFcW57E@3G#!<69PZH!WGyw4iPiLVl+ia(Nynpd1@C_XDnB6Sl8y0n8Y*ZGV%8g(js!Xb#q=#4rZW++!N}V< zOlKirqmg&uq;5Dj8OepS(8z4e+s4zLgC!gf*5<|Jhp?@Ra1_vB~Kv8EL6wN4rK%Se7~YlSwNl zt(cV1y+_Ypy(Rqrm*CNB(81e3!RfR`crz26YrMJfCei2L-Fa8--MjjN`Zz0Xi(~8l E2Q&xEg8%>k diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASany.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASany.exe index 6b1739a61c6764eedefdf09b110c7ad3a911f3e4..22d762f0566a53876af5bef02b5e0e624cac7a8c 100755 GIT binary patch delta 1687 zcmXZdd2mf<7{~GFCV74d_q>s~BI42{Vyz;n77=k1R6?jNme!JxgrpG?H?ixDr6V&n zB!k}0FgjCXEY)cVF0EEkr8KrsYikKYtF};EX@6$=&U`=5ALpNQW}bOZX?a0uc|m!Z zf6U{y6(2XZEv?u%GB|0hQ__Sd(}Nj>*w@4+-YcKmoB2{#*>839 z+A^(1-psxBNN;(B73@tqY7g;lK4iE1mL9gR-qgHPPH|RLOyBX7-8oT(Q{C>o;=JiO z?x?&eQMpqKyrE7j%xhKIoBNlzr}<(_tm2*luU>ZX+DeNV7R(y35EjZB`qoxD5|4Wx zp0MOA4LWJ@i#O0MYE@gZRjo6YRBAW6O_S($O`$vVAoXd=c}sTcFuF@K=r@{i)sk=3 zLwBpE#**)JKmA_AuUWE3Q|J#`N%yMbx+VLx6Wy-~9*!S1g&xp@^e3&R2etZ!C5O~e zYst@Ad(V=?TKmwFBbxQdl3z6Ig(X$GmLAngdQ9u+ado`3wT_xfAL`S1BahV9-N@e>O&@C8cS z+rpM>q#X=>9TBuW2GTcBKs&%QkE0_F&`!8TWATW_!Io#_O&Ho4$@DE$(YH}mWTXqu z(XO~iyWu8{#}nEe0n>~mAe;8UDVm7Ov?p#;7oN~01i6hQBbD~TObcn z@(xmIU+keNI6_l#hW0}Z?T?t5M$%A22cTw_k%1UA+sL~Zw7|$9Or?V{hYmp<9g634 z7?v+Il8$OR9BGS;jKDBD5*drQ|D%wx#K?Q_(D$*Pjz%RNgUS^~#$pd0hhsDY7icDG z>3FnRX=DN>(JZ)WHY#ZjI)7qhB3yJ5(r7OB&^*-95760bBp)t18LrQ`{{?WZH!=mw z=u{k|g{Y=QXurY8G<2nIB++6N(h}^Z(~+>z$P9SsOe~|b;MinjHX`X9WYD>Y{KCjQ zWY7~TSYsB>n)oi2MU;#SSvjX*<+`nF z25w1Q9Twj=e#zqO+6Z5EZPVP5ae*xoT#3mpSE{Rj@_>H5Qv0Oz9x`{}@cHQe7aPWX*?$TrOl^2-adjkCq%EwDL#+ax-k{*hSbAu6GHz8-#_nH_De z8BwM~R=h`cyoZfFT~AhzDFds|8nA|}kvrbQer9#O^Z=W<%GcXlxMM%H-{|6+KFMn0 z8o%G(+Esnf-paN0u-)$d@Th&wW>;o=%ip~u&6?aR``!+V8Ro^jnGf@2jotTl`1LsM z{JhMPuXPvQrlU?+QmA|AcHMKzk{x=T7HKv8Mr-I!O+RgkTWii*vP(VBS+ZNb>9^{A z*^=)xjPB8}3QP9tEV@q*(eJf}{-8-$EZMKc^nhNX#d_1pIjA+XMANTY@}p+aLz-1- z$zd&~N7Pkq$x(IPv*eii-M8c?^?Pi|&pM3$qDiz=^XYLdre#_|PiXKHOHOJ&{Z+Tn z-*ie-Bd2s0J*`f9M%_)FM$T$ofRS@*4>WRKiS?KmHHLErn~5MeME0)gAgNsst>)XA@r7p)7u&uVx01qMur-x z(#UWl)fyRLF5Ukm9!T1IQMoIcQ?Zbtsq4Ej*_(^|E4H}Xgg zeXLFB6CFY8)OVN>K}%{wBK1HDb$X(NQx7G>jVRWQGy<$kFj601(gxT~8={0ZLK(H= z0=00P8nhc@#0!(CH?pV?im5M-(Z(oEG~$OU>W^C51dg#rn!+)`NHcs)1Dt4_WF!!+ zXmhNk4ph<>sGMk|B|Ih>X$3FZ8iQ#YjHW?YO55Th4MsT)LHT4O?GQA@NP8@%&tL-$ zMIr5gz4Tcep&jve|4bu2u!#0V4()|CG#Z;|Z|tHk;{kmIq0U)G`XG6>kr>>f zui^pii_~-@{VUQQ|WBnr0EDNFfs?xbS{eNdnl#z;Jw+%`zWOu z@ZMr%J{;5u$5tbma1*X_tIx)$gzy4E~7A;PC)Ol;o)v9Uv9hYc7pG;YYC_<^Grj~u%+@uS3L ziJdxk2@8*qfd5~Dr>{X5*Pv*J!`8-?67AUF%8WAcZm-^shw9P0r`xx$qso>WUjILB C*UA$B diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx64.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx64.exe index a3bf1b3a422dc95b08e05c5643ae712aa917da4e..0cc01137f2ea504b25a087bb3bfa6f8d08db1789 100755 GIT binary patch delta 1622 zcmWmCc~I1K7{~Evk>}&Fzpvtf>q;iN9+-LH5qYAara^gdnR%ou0x7ProQACmjn2q4 zjaKW7%{bF!;wIGw^=XxSM{;%fz`+CpKtPq zAFu~I!(HQMFYu;>FYDlSIDcV73vQ;Veix=$D0)xlw)O&4CaBd zqI8GF3~R|+u@KgpwF#8&XglJR?_q@{+tfO3$v3)%mT5?(CEGQm%90&AobJ>ybeG1` z-Fln`H1?b&-)b`5qi*`0y02QYSBvOAEvm6(zaFOFYgnx%KWHpHpaJ@$I<8rAPzTa- zjrMVV(pdVl9;b)2iXPUg>y{i*N1Y`{_10ZWj_IxYmK@jAdP{!M)J98AXes?w1N5Xe z&{OJoW=Vxc(bJkoE46|CrqAi`y0^WNKlCuI(n@+p?GB%jvl{O-a!zN_^SYj1(Dhx6 zT-5emjZ|w7dP&F8%X)}j(bM#*R?`~2No(~1y`~RbMy_j6HzRdw(LZ$(y`j_TO`S_` zX+FKJ#q^GrbTdBrOG_e*{H-PZjoj6eNF)E~T6$0K(|@&*-q*$gBA(hB-mLx&l8qKWjW&Zdo;PM_&U`dm}ujR-QS4P`V4`>C%9oC!vP;Y>85s88Zg zqdwV4Q`n{&X$C`^!%179JGCQ{S{O|Y3Z@%ri9NIxs%QutGmNxGXW9m?nMT?ohPJ~* z8VV0>56>JU4qT@le3<7p;zSnhh zx{(2BO$TBu9fS%x7!{dDUcp5gh0F9++@?eDlnzC+EF;5^Mu+1J9f4Xp5_f4dp3+gU zyhcVNj=qLMA14O;a*d3^s5~QM5l6?NoW72ebUe<}38jnB}U#x5uJw3^c@7~ zbOb&zG6UswCMxMHT%zyd7M+dWpBkBi`P7X(Iu`+&f~e1o%tH)K#YCEha+;0?`W~YE zM&=`iE_RPUL z1Zq|~b7qEYaBZrNInfxq!yEU}gwSc;6=`+OKw4eLv}9M*l=+^FOphnuvpBP`AS*vR i&%12Pk`K#@cNK3hj!#HTN}lSsMTZ>^v>X+7PyYisLd!4! delta 1597 zcmWmC`+LrH9LMqZy?MWe`}<+cP8PERCUaPmn44i_Ma?NoSUHYZVQh}wo4LB}a!ANs zO8OdQGha5L6l*2|ctXDrgAFqGlm9-=-Yf0MjMczYwgLW)dn^(1C z<;xf%&kytRAcHN%XRp ze_AIq$R_TXJbQ@ytMztx2Ibky+q*B#u>9Ru&f7!XS>r5Uch*IF19#hAmfiF55&N3W z?kgW!mV0?CtFCA1Olv|9*P~q)Gpqq?$b4BN*4XoCm!IQ=bK^-%wrer{T1TF;WQXpj zJ9YmVOLpmPx?8Jhq1MnnI`^z49<4cNNs;=Tx8xi3qu;9EHB0ttEG^d9>z3@(O!}Q3 zrQd4}-LI+TmK@L$`h#AlKk6MP=O?Y92X$_RC5O~SOVoA4lEYd;OEvGVB}X)`+LEIh z_`s5%HSnn=$26J#qN((_7SIz~LQiTXJ*BOmSyHA2^jFXymRsVvO9=M0#J>(<Iyv)`PT0wVRPA+K4{YVERml(^~Z(Vnh%|Z5U0x zkVc)}DCN{a=};qz4a4|aY)CfZgB`Rk_R)GMrS)-|+HsXyxJM1zj5N{!lW0S@s4q%r zBOIrVQ8vnmAF5~*)KY(hrWgr8=olk`SWSbR2pDT57~!-j*3l5$q|f2zI3vw~@kW}X zF%89F+5#yw49jRZuF(io&`4BFFwzn&Q;oDjE^UoXGzx{Z4Gz%fag4TwZK9EAgwb|z z#&FtWHtm2fXh&?KF({-j-~f%q1KJ7MlZ?EG>}f_iV<~+J%V`&^pRpkom7iIK5rO~)aXjz=Y( zfGV1bS~?NwtBp)T0eu&hbTX>w6jXi5|EHlU-^hDNC@}Iqa_CgJ=rmlW({YQYqnge@ zA0U)E5xUh#7D9I$$wuxT zUV8yPk>>*&{~dqRBg9s@EH2hK~%N}8Y4JhVkvc!YaUe8@g`R#%haY0xv| GzWxX9;J-Tn diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx86.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx86.exe index f9874630e48a012604f649a58b014556e41fd142..34b0a499f1b02886ec5e4dc266a88c69b90a6255 100755 GIT binary patch delta 1687 zcmXZddr(wm7{~Evf#)Z>=S6Wv#gzcH)Jz2_?+RK80g8%>p3Gcc1W z4%RkfQ!_c{C7UeN)v`#J2=;UM zAL?TBM)onC7Y+9-9qwmi&!;~NV9LN6u|U?CHSrDiv!D1RU}tNac+Y=fZ|h4~X}{9V zYfHCUc++>-!@cF9R**ODfW4V_!(O}Hw{)NV)AeE9vkEgJ+7FpD&7BodkneWq6z0sz za!2G$kI2r?^9DPu5U*8j5A!c_&-6tVS%m`wp1*AAs!EF)7Q~veW-ORB_pPdQ3^?Su zd)Sh1H1LSUFJ4Q(RjbC5@63DY)_A%__fVh4pR#1DrqXTdqTj2l){-C8 zL$|A^&XON>7yU_FU9hA|@Nq4B@q9r@EJKd%IJRHAhJl(B(=&xEs_h`)}OZKXx z-jd(6{+1>CwEnIo`!(a9CBJLN6HBUf6+NJp^q@A-L+W^H$zhG5N7PMgw1FPg$Ml%` zS{nI7chTc|ke<*+tvp6fYD%b)Q#y{G)|K>(u8cJDr#5eAAC>tH-`L(4iDxv6DQ zMs8_Yw2|Aog5J?vv_T)zyZW$?k$YN)d}>8 zX3?j*nm*G>sYV2O)P}FAAGT4CKSD+s2|&nbBZ}K&i~zUOj5NX%8i>YYjWk9GZGuQ@ zM^|cL05vEYZzKqtX;akDW^ha}5)3D8j_`>_9EhbYkVHd}OIsp$vXNG(rL8@foM9vs z(`g&rpicD6G}0D5vy6mcBz*xBX*fQk5m-+naf-G>w<$*2Bbs(V^i(4+Vg`K)$7n~~ zqn%*OHqse}zKl@X1w-j8$fI51na|M;yJ>e^p;5R;qhZT2(gTLZU=V#3)$}z~&oI&x zCuuL7p}ldL_Q3<%7XdSk^g|}?kE3(|&e4ImPGj+a#v#ycWDpYQU=({eUdPs1M&3aG z*+$+(0v&=X8jt-n0mtcEsH2H!Uu+}^bu<}ubBqi{%3LGEkh0K73i9c2%%daFKu6*+ zO-02bBco75Mcv({*Q%giIKPAq3>V~9fwLf9+fMMOh6T#h=bIH(=;9R zbP_s#WMnd?(hRt1CMszbVm>x91+jE0l4v%nXbu|ayNK}`$we%khS<-!|9OaAV`Ms( z(R>`F1*oAj&}FTWndn8`h@*ulphehDXQAIZBeUV5#aKq?z_H%QT!hnkaMAY={*{sW zaMAaXOFhWlV59`On~W^Lu`OKfg}BJE2=`0RmbG9ZtR-v3TKmqHg%(Y0_Uvly#%o8b zlD}*^?@UZhhlVqD=W1V2ob!?Tl@IU*4{_eKEstvSA74q*pa1{> delta 1643 zcmXZddvwor9LMqZ?>Fz4%kTTy#V*FrWivF1P1ntBZb^wImti*Yv)KxBX-3j-{5Wf< zLyMnIazb*g$nqOeG0UxTE7#BrqtQmw3h!e@%rQY@B5rj?xG2~izY03*Do_L zeDQ*2wr-2pC;3;6bV@(rH`*zib#Y{HL8NVzt#`p}n>#2X#rf!u^ksHYi7p7T2m9r= zvw0`So3@@rdtRd5#vZL7tHYFm)n)Zqeb&I2Xm^}iRwpOiCf?Fjj;6l8A3Lsf@J>v# zLcODRJ6d?F_Bxt-H|=*geD57}EZ^YGZDWP_^0TeBp z#QoV(OTN+~x><)Evt*0zq+jdK6P9e%tF%z7=r>wJw`tBvOMF^$+L9vmJ7dXq4WK(T z;G!kpY7E_}F=dwQ(y8=2-ABLI8v28}E?Kf$i|HP{K#R4)&DpCpv_x|*Tk@lN=sxva zv1Gp%(*x?QvgDw8t1UUC!M82>NrN9)^0N-2zo?5I*46Zg7Sp3zMvrOKLrae9YWk~g zq`&F7Fe4{)Dm|%gdP;p^ZX>6)Hr&V=bu>0|R{PQ4wO^!>bGnC~*JJd8-lBi#l$J(H z^&NUq=hHG>N-yaudRbRR8M&fg(sC`LSM@%`I1bQuctD>(vkW8c;cn0AfNUCrk7z8`(2m$bpTsWu6mHU|F)P!^Gnh5m z$g{|&&tV~r!!jC=b+i)-X=j8?G13KdX;&)s_BH9CYXir4DryA*njA=%C z<2rpFcW57E@3G#!<69PZH!WGyw4iPiLVl+ia(Nynpd1@C_XDnB6Sl8y0n8Y*ZGV%8g(js!Xb#q=#4rZW++!N}V< zOlKirqmg&uq;5Dj8OepS(8z4e+s4zLgC!gf*5<|Jhp?@Ra1_vB~Kv8EL6wN4rK%Se7~YlSwNl zt(cV1y+_Ypy(Rqrm*CNB(81e3!RfR`crz26YrMJfCei2L-Fa8--MjjN`Zz0Xi(~8l E2Q&xEg8%>k diff --git a/winPEAS/winPEASexe/binaries/Release/winPEASany.exe b/winPEAS/winPEASexe/binaries/Release/winPEASany.exe index 30ab8178cdcf4f1d663b688e94ae710b10b62fd2..35ee74a71cb77d511c7a634de9e82b77eab50d5b 100755 GIT binary patch delta 1702 zcmXxldu&r>9LDkA866BLdw$yv*S@cmQMt&3DHTys0V^?~F*8okWRehufn;)90g*uw ziYN|cbW&7Q&>;f#UM=dpVZBlWb>3hg=(wm=yv+L)AELg=_w$^*Ie(ph&a#d3mu;HA z_O{aSh8GUWf9J52N_VGRWP%kb`1i8&l7{V*oTuZCGdRCbosrRrBW&ky}thm!mGq zS%G>QgSWxRN*H=8%sL~hP(^P;aHEmi5!_^CHB$5rq#iX=k9N8So^3|%M2OynYPuFN z+JFpQhtPH-afE3jyt|Ct4MW$Xj3!XMD{5o|k{KiSpqbu_4tgItvPL!{vd75%h|veo zL?1-pJtLbCq?-|<522DijB471>b*v`AVMEOjBZ7iK8jYl4Q+HgI_M5~_ZdmT-Djfm z7~B>kkHc*>@&w$2MxI1~K7|;48jbWBG#)jQ!bbWmn(1@M(lorsjO;`WeI6r;NM;LtjM|eGN4&S|g43c?P-axXGl{e8$-$ItYjaK>& za`atv(B1HQtYi@?u(Ag+`W~9-UbNAD$kF%F-qp$naJyOg5CPhP5d8?DLMtDmnSK(* z7+CofVfq=ebU$3RasY0Tl~x4lL4@cb#OUW}q=%8AM_`Jre1QP{5`hvcZK$S4k)_9w zqsP%fPr&P1`3i=9jY|3rA~c6+jPotB^gFcElkoJk@;zMo0|N9%RMDT1qwUC9D?g)y z{sPY#R(^#`e?x%&jv)O5jr31=`djIMOaDTE{*53#g%A~uQAblzPM)@xTIr;91Fd+p zp6073V5PIVw2KC4fd*+;jnHlyJkv^d4Gyy6)h60Qn}%B{)C`5TP}T4VD@9sKi#10} zw5;5Ut4*}0CTTBiE{|I2t<9sY^wCz@S3MV4>8CFBsXNY!(Ezm?q-SV|_SZ`4*G4)( zTWG1a(SaHmZzZ5j^h{0BL7Jh1bKi)f7ETGjy0{CfcZ!Y36DxXRBLjWw=(- z5n4sdHATp2=1&(hMD=o@=dK ztS-Go-RrDes_s-PV>LF7Uv!){a>i?N)#PL`D`76{$$GKgtWSD!vai!$haT8GWWnk~ z6IUD_l0R(JjW4a5vAb`2#_oP67CF1pS6%Ka7?CKN;~SY+yTn(xewI(uJ0iZV+wF+y zk!k*c6Q3$w6vpv$+W`tp`<%kCl)f*;Qm9CUq7^|$WvRr(#$ZIyq`|ErL>omdA~HBE zgGDS$X=PL@pbiQ+E=XZSM>a=6xhzUu84$57$|#D6iX-?C^-cc2b8~Y(-4E}bv10O! zrpb%u7Upfd>#+QH4oRVObV^0atw`3tFE<71*Nk=UZE&38HhZTT84@0J#FRAL?i6=u z9m%y`Tq|#w=k#|*HEeK-or;EoPNB1`!O7^IIk&%aVY}b#(HXU)GaPndW-9rc z$%xQLP&CKL6qM0NQBJ3#e7=##P(`PqYJrgeqI5bu3ynOEG8#mL&VXl;k(nr>vrrb~ zn2mB8LW0gg3w;7D^+sypTWn-5QcI0IiPUl<^H9CQ$Wy3ZWuy*KIv;Vm0BO1qX0?$; z@Y8w(=whU413YVtG$OIp$kS+{OVCQgFx!Ggo0!`*M>4Y)}oZz4(8!hgWXTd1JxP;taaGse*MsG%DWqA?`s+bB9}WFxBSJBZSE z5vOq^=zH)SGqMSZb4E6!g>HfGypgRaqQPwlalDU^SV^EN!^#J!%Czz!YUp-^=ngc} zj}W0BqnYkRg1Shzv$6~REGxTFN%x?M?nQ)tf@pgypTed4kfbe0)6bC3w(>b@a;$t2 z#A%K%;enN}5TakhrTgKkl_XO10Mhgz{JB=XK?Oa80R0v%^e~e2J0v?|3H%di4;AHik?>fLY$`I(!Y_U=a8c3k*1>l0xOPI2RSk{T4*Ix%X(Y! zXgO`8aoSd0+D?-+OH;JHmK0g(pefo>Q+=#>wX(03Y^@w%B}W4kT1Qnq1Fht$mv+(! z?X0cTrznT(Ne9ZgET-d(>i*&#%Y;)Z?$rT*3rS*La)?TIz+3-S{bSVdX>iM)fyOQ#jkOC zjk@$&b#JqBow|2g8K(Yw_(g|n1;+@jsvQ^Y#5yw{>%zLSZmfH3Tr|%q(7oHYPdHb+ zW7zD$Lq|>U+%cne;?BI-#GO5kPj#lmZoWQ0YhZYf*K`R_nx9_~p0p&tXZXaa{Eo5p zHTg|z!o7m|zS!CVbKkYydCA*#ea>9?C1kL>Sr#wgtni@mW@h$cKK_5A;mzYszOyX0 bf4rG?ES7VFJ=-Q@i$9iolRfFwm$v%{#+A$? diff --git a/winPEAS/winPEASexe/binaries/x64/Release/winPEASx64.exe b/winPEAS/winPEASexe/binaries/x64/Release/winPEASx64.exe index 83a3ee47daac9f86ee4e9adda7dc7dbfd26897ce..a407e153002f2681ab65229d3891170a22b7e9c6 100755 GIT binary patch delta 1604 zcmWmEX>gNO7{&1?Ee&PMc_?jJa&KEGL=i0DQc(~AwRXm_I3q^C*r~&ifl&j}1yE=T zNI`+nT5M3T;6enfQBmKBOBIBuECofQtcpSam#V0B!{YIs`Tx$xJ9FQeTer5lZf$kL z@@}iQZ)&1GrKFq_wl=Y35re$Sr3dML*5D7X9frUn9qn$p8_C-eKpo><*z1T<< zJhU2NS_98gBXf~Q=b?zsN6{)H521`cjIywi1!$%V(LrmGx7tVuVOoa{x(J>IBa4w2 z;w(WCeFQPO6m7H~ZH-2jp^Gj@a-ES!k=$V9G59wcSpolMBP-ENS0PHnNYT}BZ!yvU zA8kZ{K8_S^LI+)g*bXC4pp7=8okrl^88WgKWxI?#iE{cBTIf2o>@%_+x%-Vg4Igbm z3EhAM-H0T81}XY1I_Yz8w;OpL?gK_PA(uwsqc0#xH=~wrK|S4y7WyJ$v=z<)6OxzU z95NDvbJWPoaE=*y1qu2pe8-J!Los~~#ixzDjtTS)lv4*m8b^%22~Wz%cKGRAXr^x? zO5Z_@zKagphFF)8_s~Y)M;F}z&qe-}od|M1Kv1mgLRp%X-6%`9l0Z5A5JCD8YU#%a z(>-XRdl94ikm_z_KYW>1+EGFepq?H?n0|uh9#%euLk}TAKSPRsj#M8jNtAo6d=bJ4 z&X?$*hY^I8BXHlJq!I^aOl;t$c-I`ZWUdB--dVNYHPQ$g*+@?tWHIBS=#S z(=%wHXAz_4&_=&QC;c9|*;al)$jA8+LE3?4`V*q`XE^j1BQ;w#*96VfB<-QOL#_1GB<-ciVODx;iO)(OEh)0%(Ex?kP}L6FS37BzhDTZH zr|mRbOGaDC(K4E=<)cGZ`fK@ED+9Ea4%8?eqz?6}Gtr9C1htx^d77g6+DQwvc#@UD zT0@6uJuTD(9jYahtqfB?^=W`!q9^F3ntP*_;p(TCX@HK{;5{RXnQq>nsJ>~u(Mej&nXF~YrnF|Uek_~iuw2%k4Tw)^9q7u}b5m=xZrU^M zmWBxz3U%<*Q_Cv$4vbgq9dvenx19rA5^>$;HSrlYd(Ra`2KO}Ck-Gc5`4Qdj^+YP> zc{Q?cj<;7lR^?s4)sC88HLakqY3o&54Yh r>$U0Cm2={^=bQNxa)upQb6EJLu>dROi(MK&d5<}LChjS*=QI8TK1;?w delta 1549 zcmWmAS#Z;37{%c?T|(J%-fm&Z_od1bMWoK(wM@L@fneqJrXr29FoN=iHx$)w3E_&uU&$bmJWr zr(2e_74Mj9WMXn(ubI?3$2G*&*xKS+TDWAat96QN%%Zx2rn&+b`+o~r5i4eH){m92 z{%imn$Of^&%)`Kxm1gP+%1YM9BlCmJorT~+ zBT;lMHZmJM^a1qIIp|wvl#7App!NuOIzUI zXk;Z)v=wRkC?Z>pJccM;g+`i0=hnE9)o^b!@;JQo354hxgmxKu65aGEWN8X{x)!nB zM%E!gpGJy4gLe8XI_Y!h>^8C<-879XeI9{5MmC^^ZbU8Jgb;lJ5!wc4kBQ5RaP}K% zhjY-#OK=Vu*^C%{8Cm)Ya`aW?dX2n>Q}lIsj~MAdfMyV(Z=j2Afv3;No2aL6Axz&! zgua6`?L;JR+Rt&H<$9 z7YM-0mvHDoIBMk(67(yiXck%eHFESY{H0dDL6m-r82t{hGAq64q(=}ax6+3oJ&F)L zh6p{5DE%Jo^apg)9}&-TenOzaN)Gk(XN2i5aOkgy(G%#PClRc)@*9HI%I^r#QwY;P z;Ltx2qkkbm|3;3UM%ZuVA2{@1#AqG~dIl*fnx!uF#H*|nX#EH)h1x@lw2u~Rc%&7# zI<%k0Xo)6hf9<9NG%?D`KuwIcGD!1uu;#~E@u0Ze@siCt4Y*HFTJU>2P(ZPo2qDjK-+d1odl*R%tsuOLO#Wt)60Kgx1oL z8l$5$Pe-d~s+EBH={dTJo~zw-jC!uNa-RC>SoL3L<8r?GZ?ZB@9a^pJbi8)Z3F^7o z$_47D7iu-VNW=7EZKs!L^(|IvG)gbkMmkYFAuE@upI)wEdWHILwK7S=^h$MTtva_^ zxk{bsRwirqc0M{qbDXK_ZkpCs#>!a*t7Kj_gbmG1Ya8aO(rZp`FOk~K*KaxIDIA%0 z9cY@qb695j&f&-A6wMy$lBDYfpUK>Lt?zhsG67SWY?$GzN;cf(8D#g?xo)qo jBD1l|%&1M4hD~{~%rhdHF=2D$X!3BcsmpkR_C)c2Q1GWf diff --git a/winPEAS/winPEASexe/binaries/x86/Release/winPEASx86.exe b/winPEAS/winPEASexe/binaries/x86/Release/winPEASx86.exe index 101f9c7dc534d1d0c58427991b87529b14cc550d..c74940e6f00c61a0c5ee4997d39e53e578820314 100755 GIT binary patch delta 1690 zcmXxlX>3$g7{>AUwp13q4htLN0N znNy!AD?4`JxcqlIB+u#T1VtuT5%=GZg$o)sOma3iI?jj!Z@!UG^5{NuM&lG`L}Bo9 zuKBq(p>e4*(g`@$$GKgtcZarD^5l7O5C+^U0`G;0(2HKv=YIEMs7iHk&)S`pjC*`YE;rW$kAI- zxx~m^)Y2N%(|M?0X5==s(A&|n+{k=%(FKUCFtQM}G>#mtMWo)y9jK&>P#fo1jCy(} zw86*{_~~8nuQXDJ3YtJ@wUN6KT4Q7>()1prn~mIyF1ifvdLzpbrYjJm^+?bLWavtS zHyCL|gx&{jGjc!tbQOX$iCA0QNE2GN8hHS%^g+nmMjnFfFtQpo^kF3EBWR|NBCylQ z8ieR$2-C+ArB5J6pG0hzk+rCyPa#3qAxoRlLD!>`Zh&NsJPoBA;bl!+o`JX9$g}Xi zF!CI{FO9SyK%Yl~ZbB1%0ZsdjyofdQCA8Ab$kG(_fRQvR>B~sdSI|XYg?rG*Yf$<+ zBJ>UD2_swJr>&@3v$-VuaLo3euGPo!J}OW z(BBcFf1ru}3AfbBad`AE1nA!g(Gv($(FAog9p}i?t}-k6T07KAH?5}y>JGDVih8uW z2B@nc+Cyt-p@xQA>8YVpt@P4n+FP4PSt-&Cg|<`GNV%0_jnWd$(LNdsTIs9Jw4b)n z{@NOhTN$9OAuFDC(1GfnZ)K2r)TiDhR*VLy)es%5VOpwD>enVZMB8bZcG965xYWup zZKlIDO;6Pf9iihdvl7r6dYY!`>6)P$!MU2A2OMrpZL(4eO2S(>3| zYdbwh-RrEJt5G^y+vynfPqK2J25Css^nA_G3)G!#a4jmb%FsOIRP)m-S=)*#PFHCT|?*l`*!Dr4^PINS)mQl3@?>$P@0?`)0$r zRaMQXo^k8+D*ud`{@ARWlf{dCeUko|uUm4=T%Rw0PSxyGwA9QSm)t$oXhDQOiAeI$ yRI{XHFR%Zfu9J6v!;t>Y;Z*W^GxuQ1KhdV0RM73R0JImbwFV%ZUdr@vR%cc$Tlv(ASxqnhzh<$J<0F+PHxU$H@W9VTc$@> zPH%`+wC*_2EdQ;nc$`AVFEZYWc>jI4eNN;0iO$p}$Ej@Z&NfmVA9>UaZMw~=?3^3N zV?G`m-?YdX;#}9X#i?{|XgcgvIIEi+Pyd405a+__!3%<(`k=>Q7iIx#$J(E=P{W;oBZD(u~j!BTu4^K804g0(D~iqm{mh4BY^CuZhS@aQ7K` z8SViiufRQMB#A8Dh`=Eun-HY0B6!ruYnV(oqmFJtjHZyGt*AO?M%^+{oL=oHOzc+GrZ3=Z$Pb6^(31jN@Iz#L5nYJXYRAsKCnmsG}bsMl)!pA0k0N zLMz>g4BZ9sTG@>N-Gf@X7cJC9f_{u-Co7-8rTdVjpF%oY`3%y{%IBz~Uqo<*qYYkI z*^e0g5-vReSFIdGo*se}SviaVJ%S+3B1*qP8~qwt`VF$hR=$O=yOpDe(PK!^<7lNh zWatUB(eI!=tek|Oeve3i;|Ij(k4Vx}NYgxA`V+GBG)haX{EP(s1qo~ASG3aKkfy)G zrDu?(e;`lKBG}i;pGecc;L^X5rRR{R=ON|%&^16E4M#XUnyj!=pw<1Yw9^{eUemOL zy0oKasaNx~llli(>8yELsQH0bx@henD_ymAxRq`irO*bd>K$RFNR<|Af_B#&?V+`P zDQHs;!i2GwrQu+DBblrf$HB(JZx^r+rn%SSeSfJ`K`-+CVF`h4$Ah z9iX*itqjyK9i&lOsb^@F`o~!rtYLbQM(GfZUT-5ZRHHXr8Ky2Bu6m1=5n4+98m1#P zN-x$1dWoj#rK-1Dxl9}A<=RHC&>XGS@I)(DYLs53X?nFrCs`S#X?l&ibhNsYtz4^a zt(AZV?&KRCqd|_b8mgbPp_p}NJy;3r$$GKU)T9l)opPPfv$D^o871Sk?%O}?_H%0v z)`xcXPK9>%$<1