From 9d86748afec604a1c3dc81139e843ce1ca4a3d37 Mon Sep 17 00:00:00 2001 From: carlospolop Date: Sun, 19 Dec 2021 17:59:26 -0500 Subject: [PATCH] regexes --- build_lists/regexes.yaml | 206 +++++++ build_lists/sensitive_files.yaml | 1 + linPEAS/linpeas.sh | 963 ++++++++++++++++++++++++------- 3 files changed, 970 insertions(+), 200 deletions(-) create mode 100644 build_lists/regexes.yaml diff --git a/build_lists/regexes.yaml b/build_lists/regexes.yaml new file mode 100644 index 0000000..a2dbdea --- /dev/null +++ b/build_lists/regexes.yaml @@ -0,0 +1,206 @@ +paths: + - $HOMESEARCH + - /etc + - /opt + - /tmp + - /private + - /Applications + - /var/www + - /var/log + - /private/var/log + - /usr/local/www/ + - $backup_folders_row + + +regular_expresions: + # Hashes passwords + - name: Hashed Passwords + regexes: + - name: Apr1 MD5 + regex: '\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}' + + - name: Apache SHA + regex: '\{SHA\}[0-9a-zA-Z/_=]{10,}' + + - name: Blowfish + regex: '\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*' + + - name: Drupal + regex: '\$S\$[a-zA-Z0-9_/\.]{52}' + + - name: Joomlavbulletin + regex: '[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}' + + - name: Linux MD5 + regex: '\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}' + + - name: phpbb3 + regex: '\$H\$[a-zA-Z0-9_/\.]{31}' + + - name: sha512crypt + regex: '\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}' + + - name: Wordpress + regex: '\$P\$[a-zA-Z0-9_/\.]{31}' + + + # Raw Hashes + - name: Raw Hashes + regexes: + #- name: md5 #Too many false positives + # regex: '(^|[^a-zA-Z0-9])[a-fA-F0-9]{32}([^a-zA-Z0-9]|$)' + + #- name: sha1 #Too many false positives + # regex: '(^|[^a-zA-Z0-9])[a-fA-F0-9]{40}([^a-zA-Z0-9]|$)' + + #- name: sha256 #Too many false positives + # regex: '(^|[^a-zA-Z0-9])[a-fA-F0-9]{64}([^a-zA-Z0-9]|$)' + + - name: sha512 + regex: '(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)' + + # APIs + # https://github.com/l4yton/RegHex/blob/master/README.md + - name: APIs + regexes: + - name: Artifactory API Token + regex: 'AKC[a-zA-Z0-9]{10,}' + extra_grep: '-i "arti"' + + - name: Artifactory Password + regex: 'AP[\dABCDEF][a-zA-Z0-9]{8,}' + extra_grep: '-i "arti"' + + #- name: Authorization Basic # Too many false positives + # regex: 'basic [a-zA-Z0-9_:\.=\-]+' + + #- name: Authorization Bearer # Too many false positives + # regex: 'bearer [a-zA-Z0-9_\.=\-]+' + + - name: AWS Client ID + regex: '(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}' + extra_grep: '-Ev ":#|:<\!\-\-"' + + - name: AWS MWS Key + regex: 'amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}' + + - name: AWS Secret Key + regex: aws(.{0,20})?['"][0-9a-zA-Z\/+]{40}['"] + + #- name: Base32 #Too many false positives + # regex: '(?:[A-Z2-7]{8})*(?:[A-Z2-7]{2}={6}|[A-Z2-7]{4}={4}|[A-Z2-7]{5}={3}|[A-Z2-7]{7}=)?' + + #- name: Base64 #Too many false positives + # regex: '(eyJ|YTo|Tzo|PD[89]|aHR0cHM6L|aHR0cDo|rO0)[a-zA-Z0-9+/]+={0,2}' + + - name: Basic Auth Credentials + regex: '://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+' + + - name: Cloudinary Basic Auth + regex: 'cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+' + + - name: Facebook Access Token + regex: 'EAACEdEose0cBA[0-9A-Za-z]+' + + - name: Facebook Client ID + regex: (facebook|fb)(.{0,20})?['"][0-9]{13,17} + + - name: Facebook Oauth + regex: > + [f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|"][0-9a-f]{32}['|"] + + - name: Facebook Secret Key + regex: > + (facebook|fb)(.{0,20})?['"][0-9a-f]{32} + + - name: Github + regex: > + github(.{0,20})?['"][0-9a-zA-Z]{35,40} + + - name: Google API Key + regex: 'AIza[0-9A-Za-z_\-]{35}' + + - name: Google Cloud Platform API Key + regex: > + (google|gcp|youtube|drive|yt)(.{0,20})?['"][AIza[0-9a-z_\-]{35}]['"] + + - name: Google Drive Oauth + regex: '[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com' + + - name: Google Oauth Access Token + regex: 'ya29\.[0-9A-Za-z_\-]+' + + - name: Heroku API Key + regex: '[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}' + + - name: LinkedIn Client ID + regex: > + linkedin(.{0,20})?['"][0-9a-z]{12}['"] + + - name: LinkedIn Secret Key + regex: > + linkedin(.{0,20})?['"][0-9a-z]{16}['"] + + - name: Mailchamp API Key + regex: '[0-9a-f]{32}-us[0-9]{1,2}' + + - name: Mailgun API Key + regex: 'key-[0-9a-zA-Z]{32}' + + - name: Picatic API Key + regex: 'sk_live_[0-9a-z]{32}' + + - name: Slack Token + regex: 'xox[baprs]-([0-9a-zA-Z]{10,48})?' + + - name: Slack Webhook + regex: 'https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}' + + - name: Stripe API Key + regex: 'k_live_[0-9a-zA-Z]{24}' + + - name: Square Access Token + regex: 'sqOatp-[0-9A-Za-z_\-]{22}' + + - name: Square Oauth Secret + regex: 'sq0csp-[ 0-9A-Za-z_\-]{43}' + + - name: Twilio API Key + regex: 'SK[0-9a-fA-F]{32}' + + - name: Twitter Client ID + regex: twitter(.{0,20})?['"][0-9a-z]{18,25} + + - name: Twitter Oauth + regex: > + [t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['"\\s][0-9a-zA-Z]{35,44}['"\\s] + + - name: Twitter Secret Key + regex: > + twitter(.{0,20})?['"][0-9a-z]{35,44} + + - name: Vault Token + regex: '[sb]\.[a-zA-Z0-9]{24}' + extra_grep: '-i "vault"' + + + # Misc + - name: Misc + regexes: + - name: Basic Auth + regex: '//(.+):(.+)@' + + - name: Passwords1 + regex: (pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab) + + #- name: Passwords2 + # regex: 'passwd|creden|pwd' + + - name: Usernames + regex: 'username.*[=:].+' + + #- name: IPs + # regex: '(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)' + + #- name: Emails # Too many false positives + # regex: '[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,6}' diff --git a/build_lists/sensitive_files.yaml b/build_lists/sensitive_files.yaml index 6fa6ea3..f3d234e 100644 --- a/build_lists/sensitive_files.yaml +++ b/build_lists/sensitive_files.yaml @@ -66,6 +66,7 @@ common_directory_folders: - /var peas_checks: "peass{CHECKS}" +peas_regexes_markup: "peass{REGEXES}" peas_extrasections_markup: "peass{EXTRA_SECTIONS}" diff --git a/linPEAS/linpeas.sh b/linPEAS/linpeas.sh index a9f61ea..770479c 100755 --- a/linPEAS/linpeas.sh +++ b/linPEAS/linpeas.sh @@ -213,7 +213,7 @@ print_banner(){ } -print_support (){ +print_support () { printf """ ${GREEN}/---------------------------------------------------------------------------\\ | ${BLUE}Do you like PEASS?${GREEN} | @@ -610,7 +610,7 @@ print_title(){ printf ${BLUE} for i in $(seq 1 $rest_len); do printf " "; done printf "╔" - for i in $(seq 1 $title_len); do printf "═"; done; printf "══"; + for i in $(seq 1 $title_len); do printf "═"; done; printf "═"; printf "╗" echo "" @@ -624,7 +624,7 @@ print_title(){ printf ${BLUE} for i in $(seq 1 $rest_len); do printf " "; done printf "╚" - for i in $(seq 1 $title_len); do printf "═"; done; printf "══"; + for i in $(seq 1 $title_len); do printf "═"; done; printf "═"; printf "╝" printf $NC @@ -985,150 +985,150 @@ if echo $CHECKS | grep -q procs_crons_timers_srvcs_sockets || echo $CHECKS | gre CONT_THREADS=0 # FIND ALL KNOWN INTERESTING SOFTWARE FILES - FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"bind\" -o -name \"system.d\" -o -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \"pam.d\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \"system-connections\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"bind\" -o -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"bind\" -o -name \".password-store\" -o -name \"zabbix\" -o -name \"environments\" -o -name \"cacti\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"sentry\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"postfix\" -o -name \"neo4j\" -o -name \"roundcube\" -o -name \".cloudflared\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"mysql\" -o -name \".irssi\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_BIN=`eval_bckgrd "find /bin -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_CACHE=`eval_bckgrd "find /.cache -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_CDROM=`eval_bckgrd "find /cdrom -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_ETC=`eval_bckgrd "find /etc -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"*knockd*\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"exports\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"ssh*config\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB=`eval_bckgrd "find /lib -name \"*.timer\" -o -name \"*.socket\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.timer\" -o -name \"*.socket\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.timer\" -o -name \"*.socket\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_MEDIA=`eval_bckgrd "find /media -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_MNT=`eval_bckgrd "find /mnt -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \"sess_*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_OPT=`eval_bckgrd "find /opt -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_PRIVATE=`eval_bckgrd "find /private -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \"sess_*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"agent*\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_RUN=`eval_bckgrd "find /run -name \"*.timer\" -o -name \"*.socket\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SBIN=`eval_bckgrd "find /sbin -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SNAP=`eval_bckgrd "find /snap -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SRV=`eval_bckgrd "find /srv -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYS=`eval_bckgrd "find /sys -name \"*.timer\" -o -name \"*.socket\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.timer\" -o -name \"*.socket\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.timer\" -o -name \"*.socket\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_TMP=`eval_bckgrd "find /tmp -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \"sess_*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"agent*\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_USR=`eval_bckgrd "find /usr -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"ssh*config\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_VAR=`eval_bckgrd "find /var -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"azureProfile.json\" -o -name \"backups\" -o -name \"autologin.conf\" -o -name \"psk.txt\" -o -name \"id_rsa*\" -o -name \"RDCMan.settings\" -o -name \"protecteduserkey.bin\" -o -name \"wcx_ftp.ini\" -o -name \"*.pgp\" -o -name \"authorized_hosts\" -o -name \"sitemanager.xml\" -o -name \"mongod*.conf\" -o -name \"*_history*\" -o -name \"*.gpg\" -o -name \"db.php\" -o -name \".google_authenticator\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"php.ini\" -o -name \"groups.xml\" -o -name \"credentials.db\" -o -name \"bash.exe\" -o -name \"printers.xml\" -o -name \"sssd.conf\" -o -name \"hostapd.conf\" -o -name \"jetty-realm.properties\" -o -name \"racoon.conf\" -o -name \"*.ftpconfig\" -o -name \"kcpassword\" -o -name \"ftp.config\" -o -name \"gitlab.rm\" -o -name \"gitlab.yml\" -o -name \"*.ovpn\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"passbolt.php\" -o -name \"SYSTEM\" -o -name \"unattended.xml\" -o -name \"*.psk\" -o -name \"sites.ini\" -o -name \"*.socket\" -o -name \"*.viminfo\" -o -name \"KeePass.enforced*\" -o -name \"error.log\" -o -name \"creds*\" -o -name \"accessTokens.json\" -o -name \".ldaprc\" -o -name \"SAM\" -o -name \"*.jks\" -o -name \"influxdb.conf\" -o -name \"secrets.yml\" -o -name \"drives.xml\" -o -name \".plan\" -o -name \"*.sqlite\" -o -name \".rhosts\" -o -name \"autologin\" -o -name \"my.ini\" -o -name \"iis6.log\" -o -name \"FreeSSHDservice.ini\" -o -name \".htpasswd\" -o -name \"ipsec.conf\" -o -name \".vault-token\" -o -name \"wsl.exe\" -o -name \"settings.php\" -o -name \"default.sav\" -o -name \"server.xml\" -o -name \"debian.cnf\" -o -name \"system.sav\" -o -name \".sudo_as_admin_successful\" -o -name \"security.sav\" -o -name \".profile\" -o -name \"credentials\" -o -name \"ws_ftp.ini\" -o -name \"secrets.ldb\" -o -name \"*password*\" -o -name \"*.csr\" -o -name \"legacy_credentials.db\" -o -name \"KeePass.config*\" -o -name \"access_tokens.json\" -o -name \"ntuser.dat\" -o -name \"docker-compose.yml\" -o -name \"ddclient.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"Ntds.dit\" -o -name \"rsyncd.secrets\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.txt\" -o -name \"sysprep.xml\" -o -name \"*.kdbx\" -o -name \".git\" -o -name \"backup\" -o -name \"httpd.conf\" -o -name \"appcmd.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"id_dsa*\" -o -name \"*.timer\" -o -name \"supervisord.conf\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"Dockerfile\" -o -name \"datasources.xml\" -o -name \"pagefile.sys\" -o -name \"sentry.conf.py\" -o -name \"*.pfx\" -o -name \".wgetrc\" -o -name \".secrets.mkey\" -o -name \"hosts.equiv\" -o -name \".gitconfig\" -o -name \"docker.socket\" -o -name \".pypirc\" -o -name \"scclient.exe\" -o -name \"https.conf\" -o -name \"my.cnf\" -o -name \"software\" -o -name \"*.swp\" -o -name \"snmpd.conf\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"software.sav\" -o -name \".msmtprc\" -o -name \"config.php\" -o -name \"redis.conf\" -o -name \"ftp.ini\" -o -name \"access_tokens.db\" -o -name \".lesshst\" -o -name \"000-default.conf\" -o -name \".recently-used.xbel\" -o -name \"unattend.inf\" -o -name \"*vnc*.xml\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \"*.crt\" -o -name \".erlang.cookie\" -o -name \"database.php\" -o -name \"tomcat-users.xml\" -o -name \"mosquitto.conf\" -o -name \"setupinfo.bak\" -o -name \"web*.config\" -o -name \"pg_hba.conf\" -o -name \"NetSetup.log\" -o -name \"unattend.xml\" -o -name \"*credential*\" -o -name \"sess_*\" -o -name \".env\" -o -name \"storage.php\" -o -name \"*.sqlite3\" -o -name \".github\" -o -name \"*.db\" -o -name \"*.service\" -o -name \"*.cer\" -o -name \"TokenCache.dat\" -o -name \"postgresql.conf\" -o -name \"https-xampp.conf\" -o -name \"krb5.conf\" -o -name \"cloud.cfg\" -o -name \"access.log\" -o -name \"AppEvent.Evt\" -o -name \"cesi.conf\" -o -name \"filezilla.xml\" -o -name \"mariadb.cnf\" -o -name \"*.pem\" -o -name \"*.keystore\" -o -name \"passwd\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.der\" -o -name \"pgadmin*.db\" -o -name \"gvm-tools.conf\" -o -name \"KeePass.ini\" -o -name \"*.rdg\" -o -name \".bashrc\" -o -name \"*vnc*.ini\" -o -name \"*config*.php\" -o -name \"krb5.keytab\" -o -name \"kadm5.acl\" -o -name \"fastcgi_params\" -o -name \"setupinfo\" -o -name \"*vnc*.txt\" -o -name \"pgsql.conf\" -o -name \"zabbix_server.conf\" -o -name \"authorized_keys\" -o -name \"vault-ssh-helper.hcl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"system.d\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"pam.d\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \"system-connections\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"sites-enabled\" -o -name \"cacti\" -o -name \"mysql\" -o -name \".svn\" -o -name \"neo4j\" -o -name \"zabbix\" -o -name \".password-store\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"roundcube\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"ldap\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"environments\" -o -name \"sentry\" -o -name \".irssi\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_BIN=`eval_bckgrd "find /bin -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_CACHE=`eval_bckgrd "find /.cache -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_CDROM=`eval_bckgrd "find /cdrom -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_ETC=`eval_bckgrd "find /etc -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \"*knockd*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"exports\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"ssh*config\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB=`eval_bckgrd "find /lib -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_MEDIA=`eval_bckgrd "find /media -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_MNT=`eval_bckgrd "find /mnt -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \"sess_*\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_OPT=`eval_bckgrd "find /opt -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_PRIVATE=`eval_bckgrd "find /private -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"agent*\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \"sess_*\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_RUN=`eval_bckgrd "find /run -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SBIN=`eval_bckgrd "find /sbin -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SNAP=`eval_bckgrd "find /snap -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SRV=`eval_bckgrd "find /srv -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYS=`eval_bckgrd "find /sys -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_TMP=`eval_bckgrd "find /tmp -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"agent*\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \"sess_*\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_USR=`eval_bckgrd "find /usr -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"ssh*config\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_VAR=`eval_bckgrd "find /var -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"appcmd.exe\" -o -name \"database.php\" -o -name \".htpasswd\" -o -name \"psk.txt\" -o -name \".git-credentials\" -o -name \"backup\" -o -name \"FreeSSHDservice.ini\" -o -name \".plan\" -o -name \"*.pgp\" -o -name \"mosquitto.conf\" -o -name \"influxdb.conf\" -o -name \"gvm-tools.conf\" -o -name \"drives.xml\" -o -name \"pgadmin*.db\" -o -name \"httpd.conf\" -o -name \"*_history*\" -o -name \"passbolt.php\" -o -name \"*.ovpn\" -o -name \"redis.conf\" -o -name \"access_tokens.db\" -o -name \"credentials.db\" -o -name \"sysprep.inf\" -o -name \"kibana.y*ml\" -o -name \"ddclient.conf\" -o -name \".lesshst\" -o -name \"iis6.log\" -o -name \"error.log\" -o -name \"*.der\" -o -name \"id_dsa*\" -o -name \"cloud.cfg\" -o -name \"*password*\" -o -name \".profile\" -o -name \"ws_ftp.ini\" -o -name \"*.sqlite\" -o -name \".recently-used.xbel\" -o -name \"web*.config\" -o -name \"setupinfo\" -o -name \"*.ftpconfig\" -o -name \"SecEvent.Evt\" -o -name \"anaconda-ks.cfg\" -o -name \"*vnc*.xml\" -o -name \"setupinfo.bak\" -o -name \"sitemanager.xml\" -o -name \"hostapd.conf\" -o -name \"pgsql.conf\" -o -name \"Dockerfile\" -o -name \"creds*\" -o -name \"secrets.ldb\" -o -name \"ipsec.conf\" -o -name \"recentservers.xml\" -o -name \"sentry.conf.py\" -o -name \"docker-compose.yml\" -o -name \"software.sav\" -o -name \"supervisord.conf\" -o -name \"unattend.txt\" -o -name \"debian.cnf\" -o -name \"sssd.conf\" -o -name \".rhosts\" -o -name \"server.xml\" -o -name \".ldaprc\" -o -name \"datasources.xml\" -o -name \"*.p12\" -o -name \"ipsec.secrets\" -o -name \"*.pfx\" -o -name \"*.crt\" -o -name \"*.keyring\" -o -name \"access.log\" -o -name \"KeePass.config*\" -o -name \"security.sav\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"KeePass.enforced*\" -o -name \"sysprep.xml\" -o -name \"*vnc*.txt\" -o -name \"authorized_keys\" -o -name \"snmpd.conf\" -o -name \"kcpassword\" -o -name \"https-xampp.conf\" -o -name \".wgetrc\" -o -name \"credentials\" -o -name \"wsl.exe\" -o -name \"RDCMan.settings\" -o -name \"config.php\" -o -name \"settings.php\" -o -name \"known_hosts\" -o -name \"SAM\" -o -name \".pypirc\" -o -name \"unattend.xml\" -o -name \"gitlab.rm\" -o -name \".git\" -o -name \"index.dat\" -o -name \"*.db\" -o -name \"ntuser.dat\" -o -name \"000-default.conf\" -o -name \".github\" -o -name \"system.sav\" -o -name \"pagefile.sys\" -o -name \"*vnc*.c*nf*\" -o -name \"rsyncd.secrets\" -o -name \"elasticsearch.y*ml\" -o -name \"*.kdbx\" -o -name \"protecteduserkey.bin\" -o -name \"scclient.exe\" -o -name \"tomcat-users.xml\" -o -name \"groups.xml\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"ftp.ini\" -o -name \"authorized_hosts\" -o -name \"*.swp\" -o -name \"azureProfile.json\" -o -name \"ConsoleHost_history.txt\" -o -name \".sudo_as_admin_successful\" -o -name \"pg_hba.conf\" -o -name \"gitlab.yml\" -o -name \"KeePass.ini\" -o -name \"cesi.conf\" -o -name \".secrets.mkey\" -o -name \"*.viminfo\" -o -name \"jetty-realm.properties\" -o -name \"default.sav\" -o -name \"Ntds.dit\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"AzureRMContext.json\" -o -name \"backups\" -o -name \"docker.sock\" -o -name \"unattended.xml\" -o -name \"racoon.conf\" -o -name \"my.cnf\" -o -name \"secrets.yml\" -o -name \"postgresql.conf\" -o -name \"*.rdg\" -o -name \"AppEvent.Evt\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"software\" -o -name \"*.socket\" -o -name \"ftp.config\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"fastcgi_params\" -o -name \"mongod*.conf\" -o -name \".env\" -o -name \"mariadb.cnf\" -o -name \".erlang.cookie\" -o -name \"filezilla.xml\" -o -name \"wcx_ftp.ini\" -o -name \"bash.exe\" -o -name \"access_tokens.json\" -o -name \"unattend.inf\" -o -name \"*.service\" -o -name \"NetSetup.log\" -o -name \"*.csr\" -o -name \"scheduledtasks.xml\" -o -name \"*.pem\" -o -name \"*.gnupg\" -o -name \"my.ini\" -o -name \"*.keystore\" -o -name \"*.cer\" -o -name \"kadm5.acl\" -o -name \"storage.php\" -o -name \"*.psk\" -o -name \"sess_*\" -o -name \".k5login\" -o -name \"id_rsa*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"printers.xml\" -o -name \"autologin\" -o -name \"krb5.keytab\" -o -name \"*.timer\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \".gitconfig\" -o -name \"winscp.ini\" -o -name \".google_authenticator\" -o -name \"php.ini\" -o -name \"SYSTEM\" -o -name \"*credential*\" -o -name \"TokenCache.dat\" -o -name \"krb5.conf\" -o -name \"zabbix_agentd.conf\" -o -name \"*vnc*.ini\" -o -name \"autologin.conf\" -o -name \"db.php\" -o -name \"passwd\" -o -name \"zabbix_server.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` wait # Always wait at the end CONT_THREADS=0 #Reset the threads counter #GENERATE THE STORAGES OF THE FOUND FILES - PSTORAGE_SYSTEMD=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/var|^/etc|^/mnt|^/lib64|^/tmp|^/cdrom|^/srv|^/systemd|^/usr|^/bin|^/applications|^/sbin|^/private|^/lib|^/sys|^/snap|^/media|^/system|^/run|^/lib32|^$GREPHOMESEARCH|^/.cache|^/opt" | grep -E ".*\.service$" | sort | uniq | head -n 70) - PSTORAGE_TIMER=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/var|^/etc|^/mnt|^/lib64|^/tmp|^/cdrom|^/srv|^/systemd|^/usr|^/bin|^/applications|^/sbin|^/private|^/lib|^/sys|^/snap|^/media|^/system|^/run|^/lib32|^$GREPHOMESEARCH|^/.cache|^/opt" | grep -E ".*\.timer$" | sort | uniq | head -n 70) - PSTORAGE_SOCKET=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/var|^/etc|^/mnt|^/lib64|^/tmp|^/cdrom|^/srv|^/systemd|^/usr|^/bin|^/applications|^/sbin|^/private|^/lib|^/sys|^/snap|^/media|^/system|^/run|^/lib32|^$GREPHOMESEARCH|^/.cache|^/opt" | grep -E ".*\.socket$" | sort | uniq | head -n 70) - PSTORAGE_DBUS=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70) - PSTORAGE_MYSQL=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "mysql$" | sort | uniq | head -n 70) - PSTORAGE_MARIADB=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "mariadb\.cnf$|debian\.cnf$" | sort | uniq | head -n 70) - PSTORAGE_POSTGRESQL=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70) - PSTORAGE_APACHE=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "sites-enabled$|000-default\.conf$|php\.ini$" | sort | uniq | head -n 70) - PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/private|^/mnt|^/tmp|^/var" | grep -E "sess_.*$" | sort | uniq | head -n 70) - PSTORAGE_PHP_FILES=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70) - PSTORAGE_WORDPRESS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "wp-config\.php$" | sort | uniq | head -n 70) - PSTORAGE_DRUPAL=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E '/default/settings.php' | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "settings\.php$" | sort | uniq | head -n 70) - PSTORAGE_MOODLE=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E 'moodle/config.php' | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "config\.php$" | sort | uniq | head -n 70) - PSTORAGE_TOMCAT=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70) - PSTORAGE_MONGO=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70) - PSTORAGE_SUPERVISORD=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70) - PSTORAGE_CESI=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "cesi\.conf$" | sort | uniq | head -n 70) - PSTORAGE_RSYNC=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70) - PSTORAGE_HOSTAPD=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_WIFI_CONNECTIONS=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/etc" | grep -E "system-connections$" | sort | uniq | head -n 70) - PSTORAGE_PAM_AUTH=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/etc" | grep -E "pam\.d$" | sort | uniq | head -n 70) - PSTORAGE_NFS_EXPORTS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/etc" | grep -E "exports$" | sort | uniq | head -n 70) - PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70) - PSTORAGE_RACOON=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "racoon\.conf$|psk\.txt$" | sort | uniq | head -n 70) - PSTORAGE_VNC=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70) - PSTORAGE_LDAP=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "ldap$" | sort | uniq | head -n 70) - PSTORAGE_OPENVPN=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70) - PSTORAGE_SSH=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70) - PSTORAGE_CERTSB4=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70) - PSTORAGE_CERTSBIN=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70) - PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70) - PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/tmp" | grep -E "agent.*$" | sort | uniq | head -n 70) - PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^$GREPHOMESEARCH|^/usr" | grep -E "ssh.*config$" | sort | uniq | head -n 70) - PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70) - PSTORAGE_KERBEROS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$|secrets\.ldb$|\.secrets\.mkey$|sssd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_KIBANA=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70) - PSTORAGE_KNOCKD=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70) - PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "logstash$" | sort | uniq | head -n 70) - PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70) - PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70) - PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.vault-token$" | sort | uniq | head -n 70) - PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "couchdb$" | sort | uniq | head -n 70) - PSTORAGE_REDIS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "redis\.conf$" | sort | uniq | head -n 70) - PSTORAGE_MOSQUITTO=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70) - PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "neo4j$" | sort | uniq | head -n 70) - PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70) - PSTORAGE_ERLANG=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70) - PSTORAGE_GMV_AUTH=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70) - PSTORAGE_IPSEC=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70) - PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.irssi$" | sort | uniq | head -n 70) - PSTORAGE_KEYRING=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70) - PSTORAGE_FILEZILLA=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70) - PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70) - PSTORAGE_SPLUNK=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "passwd$" | sort | uniq | head -n 70) - PSTORAGE_GITLAB=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -v -E '/lib' | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70) - PSTORAGE_PGP_GPG=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -v -E 'README.gnupg' | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70) - PSTORAGE_CACHE_VI=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70) - PSTORAGE_DOCKER=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70) - PSTORAGE_FIREFOX=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^" | grep -E "\.mozilla$|Firefox$" | sort | uniq | head -n 70) - PSTORAGE_CHROME=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^" | grep -E "google-chrome$|Chrome$" | sort | uniq | head -n 70) - PSTORAGE_OPERA=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^" | grep -E "com\.operasoftware\.Opera$" | sort | uniq | head -n 70) - PSTORAGE_SAFARI=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^" | grep -E "Safari$" | sort | uniq | head -n 70) - PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70) - PSTORAGE_FASTCGI=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "fastcgi_params$" | sort | uniq | head -n 70) - PSTORAGE_SNMP=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_PYPIRC=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.pypirc$" | sort | uniq | head -n 70) - PSTORAGE_POSTFIX=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "postfix$" | sort | uniq | head -n 70) - PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.cloudflared$" | sort | uniq | head -n 70) - PSTORAGE_HISTORY=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*_history.*$" | sort | uniq | head -n 70) - PSTORAGE_HTTP_CONF=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "httpd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_HTPASSWD=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.htpasswd$" | sort | uniq | head -n 70) - PSTORAGE_LDAPRC=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.ldaprc$" | sort | uniq | head -n 70) - PSTORAGE_ENV=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.env$" | sort | uniq | head -n 70) - PSTORAGE_MSMTPRC=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.msmtprc$" | sort | uniq | head -n 70) - PSTORAGE_INFLUXDB=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "influxdb\.conf$" | sort | uniq | head -n 70) - PSTORAGE_ZABBIX=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "zabbix_server\.conf$|zabbix_agentd\.conf$|zabbix$" | sort | uniq | head -n 70) - PSTORAGE_GITHUB=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70) - PSTORAGE_SVN=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.svn$" | sort | uniq | head -n 70) - PSTORAGE_KEEPASS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70) - PSTORAGE_PRE_SHARED_KEYS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*\.psk$" | sort | uniq | head -n 70) - PSTORAGE_PASS_STORE_DIRECTORIES=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.password-store$" | sort | uniq | head -n 70) - PSTORAGE_FTP=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70) - PSTORAGE_BIND=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/usr|^/etc|^/var" | grep -E "bind$" | sort | uniq | head -n 70) - PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "seeddms.*$" | sort | uniq | head -n 70) - PSTORAGE_DDCLIENT=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70) - PSTORAGE_KCPASSWORD=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "kcpassword$" | sort | uniq | head -n 70) - PSTORAGE_SENTRY=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "sentry$|sentry\.conf\.py$" | sort | uniq | head -n 70) - PSTORAGE_STRAPI=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "environments$" | sort | uniq | head -n 70) - PSTORAGE_CACTI=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "cacti$" | sort | uniq | head -n 70) - PSTORAGE_ROUNDCUBE=$(echo -e "$FIND_DIR_PRIVATE\n$FIND_DIR_MNT\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_SBIN\n$FIND_DIR_BIN\n$FIND_DIR_CACHE\n$FIND_DIR_TMP\n$FIND_DIR_MEDIA" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "roundcube$" | sort | uniq | head -n 70) - PSTORAGE_PASSBOLT=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "passbolt\.php$" | sort | uniq | head -n 70) - PSTORAGE_JETTY=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "jetty-realm\.properties$" | sort | uniq | head -n 70) - PSTORAGE_WGET=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.wgetrc$" | sort | uniq | head -n 70) - PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70) - PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70) - PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70) - PSTORAGE_DATABASE=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70) - PSTORAGE_BACKUPS=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E "backup$|backups$" | sort | uniq | head -n 70) - PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_LIB\n$FIND_OPT\n$FIND_SYSTEM\n$FIND_USR\n$FIND_SRV\n$FIND_LIB32\n$FIND_VAR\n$FIND_MNT\n$FIND_CDROM\n$FIND_RUN\n$FIND_LIB64\n$FIND_BIN\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SYS\n$FIND_APPLICATIONS\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_SNAP\n$FIND_HOMESEARCH\n$FIND_TMP" | grep -E "^/private|^/var|^$GREPHOMESEARCH|^/etc|^/mnt|^/tmp|^/.cache|^/usr|^/cdrom|^/snap|^/bin|^/media|^/srv|^/opt|^/applications|^/sbin" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70) + PSTORAGE_SYSTEMD=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/lib64|^/media|^/sbin|^/opt|^/srv|^/.cache|^/applications|^/etc|^/snap|^/system|^/run|^/cdrom|^/var|^$GREPHOMESEARCH|^/mnt|^/usr|^/lib|^/lib32|^/bin|^/tmp|^/sys|^/systemd|^/private" | grep -E ".*\.service$" | sort | uniq | head -n 70) + PSTORAGE_TIMER=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/lib64|^/media|^/sbin|^/opt|^/srv|^/.cache|^/applications|^/etc|^/snap|^/system|^/run|^/cdrom|^/var|^$GREPHOMESEARCH|^/mnt|^/usr|^/lib|^/lib32|^/bin|^/tmp|^/sys|^/systemd|^/private" | grep -E ".*\.timer$" | sort | uniq | head -n 70) + PSTORAGE_SOCKET=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/lib64|^/media|^/sbin|^/opt|^/srv|^/.cache|^/applications|^/etc|^/snap|^/system|^/run|^/cdrom|^/var|^$GREPHOMESEARCH|^/mnt|^/usr|^/lib|^/lib32|^/bin|^/tmp|^/sys|^/systemd|^/private" | grep -E ".*\.socket$" | sort | uniq | head -n 70) + PSTORAGE_DBUS=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70) + PSTORAGE_MYSQL=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "mysql$" | sort | uniq | head -n 70) + PSTORAGE_MARIADB=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "mariadb\.cnf$|debian\.cnf$" | sort | uniq | head -n 70) + PSTORAGE_POSTGRESQL=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70) + PSTORAGE_APACHE=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "sites-enabled$|000-default\.conf$|php\.ini$" | sort | uniq | head -n 70) + PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/tmp|^/mnt|^/var|^/private" | grep -E "sess_.*$" | sort | uniq | head -n 70) + PSTORAGE_PHP_FILES=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70) + PSTORAGE_WORDPRESS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "wp-config\.php$" | sort | uniq | head -n 70) + PSTORAGE_DRUPAL=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E '/default/settings.php' | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "settings\.php$" | sort | uniq | head -n 70) + PSTORAGE_MOODLE=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E 'moodle/config.php' | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "config\.php$" | sort | uniq | head -n 70) + PSTORAGE_TOMCAT=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70) + PSTORAGE_MONGO=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70) + PSTORAGE_SUPERVISORD=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70) + PSTORAGE_CESI=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "cesi\.conf$" | sort | uniq | head -n 70) + PSTORAGE_RSYNC=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70) + PSTORAGE_HOSTAPD=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_WIFI_CONNECTIONS=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc" | grep -E "system-connections$" | sort | uniq | head -n 70) + PSTORAGE_PAM_AUTH=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc" | grep -E "pam\.d$" | sort | uniq | head -n 70) + PSTORAGE_NFS_EXPORTS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc" | grep -E "exports$" | sort | uniq | head -n 70) + PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70) + PSTORAGE_RACOON=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "racoon\.conf$|psk\.txt$" | sort | uniq | head -n 70) + PSTORAGE_VNC=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70) + PSTORAGE_LDAP=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "ldap$" | sort | uniq | head -n 70) + PSTORAGE_OPENVPN=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70) + PSTORAGE_SSH=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70) + PSTORAGE_CERTSB4=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70) + PSTORAGE_CERTSBIN=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70) + PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70) + PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/tmp|^/private" | grep -E "agent.*$" | sort | uniq | head -n 70) + PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/usr|^$GREPHOMESEARCH" | grep -E "ssh.*config$" | sort | uniq | head -n 70) + PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70) + PSTORAGE_KERBEROS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$|secrets\.ldb$|\.secrets\.mkey$|sssd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_KIBANA=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70) + PSTORAGE_KNOCKD=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70) + PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "logstash$" | sort | uniq | head -n 70) + PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70) + PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70) + PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.vault-token$" | sort | uniq | head -n 70) + PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "couchdb$" | sort | uniq | head -n 70) + PSTORAGE_REDIS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "redis\.conf$" | sort | uniq | head -n 70) + PSTORAGE_MOSQUITTO=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70) + PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "neo4j$" | sort | uniq | head -n 70) + PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70) + PSTORAGE_ERLANG=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70) + PSTORAGE_GMV_AUTH=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70) + PSTORAGE_IPSEC=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70) + PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.irssi$" | sort | uniq | head -n 70) + PSTORAGE_KEYRING=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70) + PSTORAGE_FILEZILLA=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70) + PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70) + PSTORAGE_SPLUNK=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "passwd$" | sort | uniq | head -n 70) + PSTORAGE_GITLAB=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E '/lib' | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70) + PSTORAGE_PGP_GPG=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E 'README.gnupg' | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70) + PSTORAGE_CACHE_VI=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70) + PSTORAGE_DOCKER=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70) + PSTORAGE_FIREFOX=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^" | grep -E "\.mozilla$|Firefox$" | sort | uniq | head -n 70) + PSTORAGE_CHROME=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^" | grep -E "google-chrome$|Chrome$" | sort | uniq | head -n 70) + PSTORAGE_OPERA=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^" | grep -E "com\.operasoftware\.Opera$" | sort | uniq | head -n 70) + PSTORAGE_SAFARI=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^" | grep -E "Safari$" | sort | uniq | head -n 70) + PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70) + PSTORAGE_FASTCGI=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "fastcgi_params$" | sort | uniq | head -n 70) + PSTORAGE_SNMP=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_PYPIRC=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.pypirc$" | sort | uniq | head -n 70) + PSTORAGE_POSTFIX=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "postfix$" | sort | uniq | head -n 70) + PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.cloudflared$" | sort | uniq | head -n 70) + PSTORAGE_HISTORY=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*_history.*$" | sort | uniq | head -n 70) + PSTORAGE_HTTP_CONF=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "httpd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_HTPASSWD=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.htpasswd$" | sort | uniq | head -n 70) + PSTORAGE_LDAPRC=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.ldaprc$" | sort | uniq | head -n 70) + PSTORAGE_ENV=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.env$" | sort | uniq | head -n 70) + PSTORAGE_MSMTPRC=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.msmtprc$" | sort | uniq | head -n 70) + PSTORAGE_INFLUXDB=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "influxdb\.conf$" | sort | uniq | head -n 70) + PSTORAGE_ZABBIX=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "zabbix_server\.conf$|zabbix_agentd\.conf$|zabbix$" | sort | uniq | head -n 70) + PSTORAGE_GITHUB=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70) + PSTORAGE_SVN=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.svn$" | sort | uniq | head -n 70) + PSTORAGE_KEEPASS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70) + PSTORAGE_PRE_SHARED_KEYS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*\.psk$" | sort | uniq | head -n 70) + PSTORAGE_PASS_STORE_DIRECTORIES=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.password-store$" | sort | uniq | head -n 70) + PSTORAGE_FTP=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70) + PSTORAGE_BIND=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/usr|^/var" | grep -E "bind$" | sort | uniq | head -n 70) + PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "seeddms.*$" | sort | uniq | head -n 70) + PSTORAGE_DDCLIENT=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70) + PSTORAGE_KCPASSWORD=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "kcpassword$" | sort | uniq | head -n 70) + PSTORAGE_SENTRY=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "sentry$|sentry\.conf\.py$" | sort | uniq | head -n 70) + PSTORAGE_STRAPI=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "environments$" | sort | uniq | head -n 70) + PSTORAGE_CACTI=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "cacti$" | sort | uniq | head -n 70) + PSTORAGE_ROUNDCUBE=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_USR\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE\n$FIND_DIR_ETC\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SRV\n$FIND_DIR_APPLICATIONS" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "roundcube$" | sort | uniq | head -n 70) + PSTORAGE_PASSBOLT=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "passbolt\.php$" | sort | uniq | head -n 70) + PSTORAGE_JETTY=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "jetty-realm\.properties$" | sort | uniq | head -n 70) + PSTORAGE_WGET=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.wgetrc$" | sort | uniq | head -n 70) + PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70) + PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70) + PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70) + PSTORAGE_DATABASE=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70) + PSTORAGE_BACKUPS=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E "backup$|backups$" | sort | uniq | head -n 70) + PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_SYSTEM\n$FIND_SRV\n$FIND_MNT\n$FIND_RUN\n$FIND_USR\n$FIND_ETC\n$FIND_MEDIA\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SBIN\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_OPT\n$FIND_BIN\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_TMP\n$FIND_SYS\n$FIND_CACHE\n$FIND_SNAP\n$FIND_CDROM\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/etc|^/snap|^/media|^/sbin|^/cdrom|^/opt|^/srv|^/bin|^/var|^/tmp|^/.cache|^$GREPHOMESEARCH|^/mnt|^/usr|^/applications|^/private" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70) ##### POST SERACH VARIABLES ##### @@ -3877,7 +3877,6 @@ if [ "$PSTORAGE_DATABASE" ]; then echo "" printf "%s\n" "$PSTORAGE_DATABASE" | while read f; do if ([ -r "$f" ] && [ "$FILECMD" ] && file "$f" | grep -qi sqlite) || ([ -r "$f" ] && [ ! "$FILECMD" ]); then #If readable and filecmd and sqlite, or readable and not filecmd - printf $GREEN" -> Extracting tables from$NC $f $DG(limit 20)\n"$NC if [ "$(command -v sqlite3 2>/dev/null)" ]; then tables=$(sqlite3 $f ".tables" 2>/dev/null) #printf "$tables\n" | sed "s,user.*\|credential.*,${SED_RED},g" @@ -3888,7 +3887,8 @@ if [ "$PSTORAGE_DATABASE" ]; then else tables="" fi - if [ "$tables" ]; then + if [ "$tables" ] || [ "$DEBUG" ]; then + printf $GREEN" -> Extracting tables from$NC $f $DG(limit 20)\n"$NC printf "%s\n" "$tables" | while read t; do columns="" # Search for credentials inside the table using sqlite3 @@ -3905,8 +3905,8 @@ if [ "$PSTORAGE_DATABASE" ]; then printf "$columns\n" | sed -${E} "s,username|passw|credential|email|hash|salt|$t,${SED_RED},g" (sqlite3 $f "select * from $t" || $SQLITEPYTHON -c "print(', '.join([str(x) for x in __import__('sqlite3').connect('$f').cursor().execute('SELECT * FROM \'$t\';').fetchall()[0]]))") 2>/dev/null | head fi + echo "" done - echo "" fi fi done @@ -3989,6 +3989,13 @@ if [ "$PSTORAGE_PHP_FILES" ] || [ "$DEBUG" ]; then echo "" fi +##-- IF) Passwords files in home +if [ "$PSTORAGE_PASSWORD_FILES" ] || [ "$DEBUG" ]; then + print_2title "Finding *password* or *credential* files in home (limit 70)" + (printf "%s\n" "$PSTORAGE_PASSWORD_FILES" | grep -v "/snap/" | awk -F/ '{line_init=$0; if (!cont){ cont=0 }; $NF=""; act=$0; if (cont < 3){ print line_init; } if (cont == "3"){print " #)There are more creds/passwds files in the previous parent folder\n"}; if (act == pre){(cont += 1)} else {cont=0}; pre=act }' | head -n 70 | sed -${E} "s,password|credential,${SED_RED}," | sed "s,There are more creds/passwds files in the previous parent folder,${C}[3m&${C}[0m,") || echo_not_found + echo "" +fi + ##-- IF) TTY passwords print_2title "Checking for TTY (sudo/su) passwords in audit logs" aureport --tty 2>/dev/null | grep -E "su |sudo " | sed -${E} "s,su|sudo,${SED_RED},g" @@ -3996,29 +4003,31 @@ find /var/log/ -type f -exec grep -RE 'comm="su"|comm="sudo"' '{}' \; 2>/dev/nul echo "" ##-- IF) IPs inside logs -print_2title "Finding IPs inside logs (limit 70)" -(find /var/log/ /private/var/log -type f -exec grep -R -a -E -o "(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)" "{}" \;) 2>/dev/null | grep -v "\.0\.\|:0\|\.0$" | sort | uniq -c | sort -r -n | head -n 70 -echo "" +if [ "$DEBUG" ]; then + print_2title "Finding IPs inside logs (limit 70)" + (find /var/log/ /private/var/log -type f -exec grep -R -a -E -o "(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)" "{}" \;) 2>/dev/null | grep -v "\.0\.\|:0\|\.0$" | sort | uniq -c | sort -r -n | head -n 70 + echo "" +fi ##-- IF) Passwords inside logs print_2title "Finding passwords inside logs (limit 70)" (find /var/log/ /private/var/log -type f -exec grep -R -i "pwd\|passw" "{}" \;) 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | grep -v "File does not exist:\|script not found or unable to stat:\|\"GET /.*\" 404" | head -n 70 | sed -${E} "s,pwd|passw,${SED_RED}," echo "" -##-- IF) Emails inside logs -print_2title "Finding emails inside logs (limit 70)" -(find /var/log/ /private/var/log -type f -exec grep -I -R -E -o "\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,6}\b" "{}" \;) 2>/dev/null | sort | uniq -c | sort -r -n | head -n 70 | sed -${E} "s,$knw_emails,${SED_GREEN},g" -echo "" +if [ "$DEBUG" ]; then + ##-- IF) Emails inside logs + print_2title "Finding emails inside logs (limit 70)" + (find /var/log/ /private/var/log -type f -exec grep -I -R -E -o "\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,6}\b" "{}" \;) 2>/dev/null | sort | uniq -c | sort -r -n | head -n 70 | sed -${E} "s,$knw_emails,${SED_GREEN},g" + echo "" +fi -##-- IF) Passwords files in home -print_2title "Finding *password* or *credential* files in home (limit 70)" -(printf "%s\n" "$PSTORAGE_PASSWORD_FILES" | grep -v "/snap/" | awk -F/ '{line_init=$0; if (!cont){ cont=0 }; $NF=""; act=$0; if (cont < 3){ print line_init; } if (cont == "3"){print " #)There are more creds/passwds files in the previous parent folder\n"}; if (act == pre){(cont += 1)} else {cont=0}; pre=act }' | head -n 70 | sed -${E} "s,password|credential,${SED_RED}," | sed "s,There are more creds/passwds files in the previous parent folder,${C}[3m&${C}[0m,") || echo_not_found -echo "" -if ! [ "$SUPERFAST" ] && [ "$TIMEOUT" ]; then + + +if ! [ "$FAST" ] && ! [ "$SUPERFAST" ] && [ "$TIMEOUT" ]; then ##-- IF) Find possible files with passwords print_2title "Finding passwords inside key folders (limit 70) - only PHP files" - intpwdfiles=$(timeout 150 grep -RiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" $HOMESEARCH /var/www /usr/local/www/ $backup_folders_row /tmp /etc /mnt /private 2>/dev/null) + intpwdfiles=$(timeout 150 find $HOMESEARCH /var/www /usr/local/www/ $backup_folders_row /tmp /etc /mnt /private -type f -exec grep -RiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null) printf "%s\n" "$intpwdfiles" | grep -I ".php:" | sed '/^.\{150\}./d' | sort | uniq | grep -iIv "linpeas" | head -n 70 | sed -${E} "s,[pP][wW][dD]|[pP][aA][sS][sS][wW]|[dD][eE][fF][iI][nN][eE],${SED_RED},g" echo "" @@ -4028,8 +4037,9 @@ if ! [ "$SUPERFAST" ] && [ "$TIMEOUT" ]; then ##-- IF) Find possible files with passwords print_2title "Finding possible password variables inside key folders (limit 140)" - timeout 150 grep -RiIE "($pwd_in_variables1|$pwd_in_variables2|$pwd_in_variables3|$pwd_in_variables4|$pwd_in_variables5|$pwd_in_variables6|$pwd_in_variables7|$pwd_in_variables8|$pwd_in_variables9|$pwd_in_variables10|$pwd_in_variables11).*[=:].+" $HOMESEARCH 2>/dev/null | sed '/^.\{150\}./d' | grep -Ev "^#" | grep -iv "linpeas" | sort | uniq | head -n 70 | sed -${E} "s,$pwd_in_variables1,${SED_RED},g" | sed -${E} "s,$pwd_in_variables2,${SED_RED},g" | sed -${E} "s,$pwd_in_variables3,${SED_RED},g" | sed -${E} "s,$pwd_in_variables4,${SED_RED},g" | sed -${E} "s,$pwd_in_variables5,${SED_RED},g" | sed -${E} "s,$pwd_in_variables6,${SED_RED},g" | sed -${E} "s,$pwd_in_variables7,${SED_RED},g" | sed -${E} "s,$pwd_in_variables8,${SED_RED},g" | sed -${E} "s,$pwd_in_variables9,${SED_RED},g" | sed -${E} "s,$pwd_in_variables10,${SED_RED},g" | sed -${E} "s,$pwd_in_variables11,${SED_RED},g" - timeout 150 grep -RiIE "($pwd_in_variables1|$pwd_in_variables2|$pwd_in_variables3|$pwd_in_variables4|$pwd_in_variables5|$pwd_in_variables6|$pwd_in_variables7|$pwd_in_variables8|$pwd_in_variables9|$pwd_in_variables10|$pwd_in_variables11).*[=:].+" /var/www $backup_folders_row /tmp /etc /root /mnt /private 2>/dev/null | sed '/^.\{150\}./d' | grep -Ev "^#" | grep -iv "linpeas" | sort | uniq | head -n 70 | sed -${E} "s,$pwd_in_variables1,${SED_RED},g" | sed -${E} "s,$pwd_in_variables2,${SED_RED},g" | sed -${E} "s,$pwd_in_variables3,${SED_RED},g" | sed -${E} "s,$pwd_in_variables4,${SED_RED},g" | sed -${E} "s,$pwd_in_variables5,${SED_RED},g" | sed -${E} "s,$pwd_in_variables6,${SED_RED},g" | sed -${E} "s,$pwd_in_variables7,${SED_RED},g" | sed -${E} "s,$pwd_in_variables8,${SED_RED},g" | sed -${E} "s,$pwd_in_variables9,${SED_RED},g" | sed -${E} "s,$pwd_in_variables10,${SED_RED},g" | sed -${E} "s,$pwd_in_variables11,${SED_RED},g" + timeout 150 find $HOMESEARCH -exec grep -HnRiIE "($pwd_in_variables1|$pwd_in_variables2|$pwd_in_variables3|$pwd_in_variables4|$pwd_in_variables5|$pwd_in_variables6|$pwd_in_variables7|$pwd_in_variables8|$pwd_in_variables9|$pwd_in_variables10|$pwd_in_variables11).*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | grep -Ev "^#" | grep -iv "linpeas" | sort | uniq | head -n 70 | sed -${E} "s,$pwd_in_variables1,${SED_RED},g" | sed -${E} "s,$pwd_in_variables2,${SED_RED},g" | sed -${E} "s,$pwd_in_variables3,${SED_RED},g" | sed -${E} "s,$pwd_in_variables4,${SED_RED},g" | sed -${E} "s,$pwd_in_variables5,${SED_RED},g" | sed -${E} "s,$pwd_in_variables6,${SED_RED},g" | sed -${E} "s,$pwd_in_variables7,${SED_RED},g" | sed -${E} "s,$pwd_in_variables8,${SED_RED},g" | sed -${E} "s,$pwd_in_variables9,${SED_RED},g" | sed -${E} "s,$pwd_in_variables10,${SED_RED},g" | sed -${E} "s,$pwd_in_variables11,${SED_RED},g" & + timeout 150 find /var/www $backup_folders_row /tmp /etc /mnt /private grep -HnRiIE "($pwd_in_variables1|$pwd_in_variables2|$pwd_in_variables3|$pwd_in_variables4|$pwd_in_variables5|$pwd_in_variables6|$pwd_in_variables7|$pwd_in_variables8|$pwd_in_variables9|$pwd_in_variables10|$pwd_in_variables11).*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | grep -Ev "^#" | grep -iv "linpeas" | sort | uniq | head -n 70 | sed -${E} "s,$pwd_in_variables1,${SED_RED},g" | sed -${E} "s,$pwd_in_variables2,${SED_RED},g" | sed -${E} "s,$pwd_in_variables3,${SED_RED},g" | sed -${E} "s,$pwd_in_variables4,${SED_RED},g" | sed -${E} "s,$pwd_in_variables5,${SED_RED},g" | sed -${E} "s,$pwd_in_variables6,${SED_RED},g" | sed -${E} "s,$pwd_in_variables7,${SED_RED},g" | sed -${E} "s,$pwd_in_variables8,${SED_RED},g" | sed -${E} "s,$pwd_in_variables9,${SED_RED},g" | sed -${E} "s,$pwd_in_variables10,${SED_RED},g" | sed -${E} "s,$pwd_in_variables11,${SED_RED},g" & + wait echo "" ##-- IF) Find possible conf files with passwords @@ -4043,48 +4053,601 @@ if ! [ "$SUPERFAST" ] && [ "$TIMEOUT" ]; then done echo "" - ##-- IF) Find possible files with usernames - print_2title "Finding 'username' string inside key folders (limit 70)" - timeout 150 grep -RiIE "username.*[=:].+" $HOMESEARCH 2>/dev/null | sed '/^.\{150\}./d' | grep -v "#" | grep -v "/linpeas" | sort | uniq | head -n 70 | sed -${E} "s,[uU][sS][eE][rR][nN][aA][mM][eE],${SED_RED},g" & - timeout 150 grep -RiIE "username.*[=:].+" /var/www $backup_folders_row /tmp /etc /root /mnt /private 2>/dev/null | sed '/^.\{150\}./d' | grep -v "#" | grep -v "/linpeas" | sort | uniq | head -n 70 | sed -${E} "s,[uU][sS][eE][rR][nN][aA][mM][eE],${SED_RED},g" & - wait - echo "" + ##-- IF) Find possible regexes + print_2title "Searching Hashed Passwords" +print_3title "Searching Apr1 MD5 (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +wait +print_3title "Searching Apache SHA (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~" & +wait +print_3title "Searching Blowfish (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~" & +wait +print_3title "Searching Drupal (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~" & +wait +print_3title "Searching Joomlavbulletin (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~" & +wait +print_3title "Searching Linux MD5 (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~" & +wait +print_3title "Searching phpbb3 (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +wait +print_3title "Searching sha512crypt (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~" & +wait +print_3title "Searching Wordpress (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~" & +wait +echo '' +print_2title "Searching Raw Hashes" +print_3title "Searching sha512 (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~" & +wait +echo '' +print_2title "Searching APIs" +print_3title "Searching Artifactory API Token (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "AKC[a-zA-Z0-9]{10,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AKC[a-zA-Z0-9]{10,}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "AKC[a-zA-Z0-9]{10,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AKC[a-zA-Z0-9]{10,}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "AKC[a-zA-Z0-9]{10,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AKC[a-zA-Z0-9]{10,}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "AKC[a-zA-Z0-9]{10,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AKC[a-zA-Z0-9]{10,}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "AKC[a-zA-Z0-9]{10,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AKC[a-zA-Z0-9]{10,}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "AKC[a-zA-Z0-9]{10,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AKC[a-zA-Z0-9]{10,}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "AKC[a-zA-Z0-9]{10,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AKC[a-zA-Z0-9]{10,}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "AKC[a-zA-Z0-9]{10,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AKC[a-zA-Z0-9]{10,}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "AKC[a-zA-Z0-9]{10,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AKC[a-zA-Z0-9]{10,}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "AKC[a-zA-Z0-9]{10,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AKC[a-zA-Z0-9]{10,}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "AKC[a-zA-Z0-9]{10,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AKC[a-zA-Z0-9]{10,}~${SED_RED}~" & +wait +print_3title "Searching Artifactory Password (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "AP[\dABCDEF][a-zA-Z0-9]{8,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AP[\dABCDEF][a-zA-Z0-9]{8,}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "AP[\dABCDEF][a-zA-Z0-9]{8,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AP[\dABCDEF][a-zA-Z0-9]{8,}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "AP[\dABCDEF][a-zA-Z0-9]{8,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AP[\dABCDEF][a-zA-Z0-9]{8,}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "AP[\dABCDEF][a-zA-Z0-9]{8,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AP[\dABCDEF][a-zA-Z0-9]{8,}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "AP[\dABCDEF][a-zA-Z0-9]{8,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AP[\dABCDEF][a-zA-Z0-9]{8,}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "AP[\dABCDEF][a-zA-Z0-9]{8,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AP[\dABCDEF][a-zA-Z0-9]{8,}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "AP[\dABCDEF][a-zA-Z0-9]{8,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AP[\dABCDEF][a-zA-Z0-9]{8,}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "AP[\dABCDEF][a-zA-Z0-9]{8,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AP[\dABCDEF][a-zA-Z0-9]{8,}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "AP[\dABCDEF][a-zA-Z0-9]{8,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AP[\dABCDEF][a-zA-Z0-9]{8,}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "AP[\dABCDEF][a-zA-Z0-9]{8,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AP[\dABCDEF][a-zA-Z0-9]{8,}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "AP[\dABCDEF][a-zA-Z0-9]{8,}" '{}' \; 2>/dev/null | grep -i "arti" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AP[\dABCDEF][a-zA-Z0-9]{8,}~${SED_RED}~" & +wait +print_3title "Searching AWS Client ID (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" '{}' \; 2>/dev/null | grep -Ev ":#|:<\!\-\-" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" '{}' \; 2>/dev/null | grep -Ev ":#|:<\!\-\-" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" '{}' \; 2>/dev/null | grep -Ev ":#|:<\!\-\-" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" '{}' \; 2>/dev/null | grep -Ev ":#|:<\!\-\-" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" '{}' \; 2>/dev/null | grep -Ev ":#|:<\!\-\-" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" '{}' \; 2>/dev/null | grep -Ev ":#|:<\!\-\-" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" '{}' \; 2>/dev/null | grep -Ev ":#|:<\!\-\-" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" '{}' \; 2>/dev/null | grep -Ev ":#|:<\!\-\-" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" '{}' \; 2>/dev/null | grep -Ev ":#|:<\!\-\-" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" '{}' \; 2>/dev/null | grep -Ev ":#|:<\!\-\-" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" '{}' \; 2>/dev/null | grep -Ev ":#|:<\!\-\-" | | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~" & +wait +print_3title "Searching AWS MWS Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~" & +wait +print_3title "Searching AWS Secret Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~" & +wait +print_3title "Searching Basic Auth Credentials (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~" & +wait +print_3title "Searching Cloudinary Basic Auth (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~" & +wait +print_3title "Searching Facebook Access Token (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~" & +wait +print_3title "Searching Facebook Client ID (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9]{13,17}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9]{13,17}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9]{13,17}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9]{13,17}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9]{13,17}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9]{13,17}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9]{13,17}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9]{13,17}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9]{13,17}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9]{13,17}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9]{13,17}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~" & +wait +print_3title "Searching Facebook Oauth (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~" & +wait +print_3title "Searching Facebook Secret Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(facebook|fb)(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~" & +wait +print_3title "Searching Github (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~" & +wait +print_3title "Searching Google API Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~" & +wait +print_3title "Searching Google Cloud Platform API Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~" & +wait +print_3title "Searching Google Drive Oauth (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~" & +wait +print_3title "Searching Google Oauth Access Token (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~" & +wait +print_3title "Searching Heroku API Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~" & +wait +print_3title "Searching LinkedIn Client ID (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~" & +wait +print_3title "Searching LinkedIn Secret Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~" & +wait +print_3title "Searching Mailchamp API Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~" & +wait +print_3title "Searching Mailgun API Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~key-[0-9a-zA-Z]{32}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~key-[0-9a-zA-Z]{32}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~key-[0-9a-zA-Z]{32}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~key-[0-9a-zA-Z]{32}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~key-[0-9a-zA-Z]{32}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~key-[0-9a-zA-Z]{32}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~key-[0-9a-zA-Z]{32}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~key-[0-9a-zA-Z]{32}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~key-[0-9a-zA-Z]{32}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~key-[0-9a-zA-Z]{32}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~key-[0-9a-zA-Z]{32}~${SED_RED}~" & +wait +print_3title "Searching Picatic API Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sk_live_[0-9a-z]{32}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sk_live_[0-9a-z]{32}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sk_live_[0-9a-z]{32}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sk_live_[0-9a-z]{32}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sk_live_[0-9a-z]{32}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sk_live_[0-9a-z]{32}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sk_live_[0-9a-z]{32}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sk_live_[0-9a-z]{32}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sk_live_[0-9a-z]{32}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sk_live_[0-9a-z]{32}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sk_live_[0-9a-z]{32}~${SED_RED}~" & +wait +print_3title "Searching Slack Token (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~" & +wait +print_3title "Searching Slack Webhook (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~https://hooks.slack.com/services/T[a-zA-Z0-9_]{10}/B[a-zA-Z0-9_]{10}/[a-zA-Z0-9_]{24}~${SED_RED}~" & +wait +print_3title "Searching Stripe API Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~" & +wait +print_3title "Searching Square Access Token (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~" & +wait +print_3title "Searching Square Oauth Secret (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~" & +wait +print_3title "Searching Twilio API Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~SK[0-9a-fA-F]{32}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~SK[0-9a-fA-F]{32}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~SK[0-9a-fA-F]{32}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~SK[0-9a-fA-F]{32}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~SK[0-9a-fA-F]{32}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~SK[0-9a-fA-F]{32}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~SK[0-9a-fA-F]{32}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~SK[0-9a-fA-F]{32}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~SK[0-9a-fA-F]{32}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~SK[0-9a-fA-F]{32}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~SK[0-9a-fA-F]{32}~${SED_RED}~" & +wait +print_3title "Searching Twitter Client ID (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{18,25}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{18,25}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{18,25}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{18,25}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{18,25}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{18,25}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{18,25}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{18,25}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{18,25}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{18,25}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{18,25}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~" & +wait +print_3title "Searching Twitter Oauth (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[t|T][w|W][i|I][t|T][t|T][e|E][r|R].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~" & +wait +print_3title "Searching Twitter Secret Key (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{35,44}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{35,44}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{35,44}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{35,44}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{35,44}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{35,44}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{35,44}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{35,44}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{35,44}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{35,44}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "twitter(.{0,20})?['\"][0-9a-z]{35,44}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~twitter(.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~" & +wait +print_3title "Searching Vault Token (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[sb]\.[a-zA-Z0-9]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[sb]\.[a-zA-Z0-9]{24}~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "[sb]\.[a-zA-Z0-9]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[sb]\.[a-zA-Z0-9]{24}~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "[sb]\.[a-zA-Z0-9]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[sb]\.[a-zA-Z0-9]{24}~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "[sb]\.[a-zA-Z0-9]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[sb]\.[a-zA-Z0-9]{24}~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "[sb]\.[a-zA-Z0-9]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[sb]\.[a-zA-Z0-9]{24}~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "[sb]\.[a-zA-Z0-9]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[sb]\.[a-zA-Z0-9]{24}~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "[sb]\.[a-zA-Z0-9]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[sb]\.[a-zA-Z0-9]{24}~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "[sb]\.[a-zA-Z0-9]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[sb]\.[a-zA-Z0-9]{24}~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[sb]\.[a-zA-Z0-9]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[sb]\.[a-zA-Z0-9]{24}~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[sb]\.[a-zA-Z0-9]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[sb]\.[a-zA-Z0-9]{24}~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[sb]\.[a-zA-Z0-9]{24}" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~[sb]\.[a-zA-Z0-9]{24}~${SED_RED}~" & +wait +echo '' +print_2title "Searching Misc" +print_3title "Searching Basic Auth (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "//(.+):(.+)@" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~//(.+):(.+)@~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "//(.+):(.+)@" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~//(.+):(.+)@~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "//(.+):(.+)@" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~//(.+):(.+)@~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "//(.+):(.+)@" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~//(.+):(.+)@~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "//(.+):(.+)@" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~//(.+):(.+)@~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "//(.+):(.+)@" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~//(.+):(.+)@~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "//(.+):(.+)@" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~//(.+):(.+)@~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "//(.+):(.+)@" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~//(.+):(.+)@~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "//(.+):(.+)@" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~//(.+):(.+)@~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "//(.+):(.+)@" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~//(.+):(.+)@~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "//(.+):(.+)@" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~//(.+):(.+)@~${SED_RED}~" & +wait +print_3title "Searching Passwords1 (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~" & +wait +print_3title "Searching Usernames (limited to 50)" +timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "username.*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~username.*[=:].+~${SED_RED}~" & +timeout 120 find /etc -type f -exec grep -HnRiIE "username.*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~username.*[=:].+~${SED_RED}~" & +timeout 120 find /opt -type f -exec grep -HnRiIE "username.*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~username.*[=:].+~${SED_RED}~" & +timeout 120 find /tmp -type f -exec grep -HnRiIE "username.*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~username.*[=:].+~${SED_RED}~" & +timeout 120 find /private -type f -exec grep -HnRiIE "username.*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~username.*[=:].+~${SED_RED}~" & +timeout 120 find /Applications -type f -exec grep -HnRiIE "username.*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~username.*[=:].+~${SED_RED}~" & +timeout 120 find /var/www -type f -exec grep -HnRiIE "username.*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~username.*[=:].+~${SED_RED}~" & +timeout 120 find /var/log -type f -exec grep -HnRiIE "username.*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~username.*[=:].+~${SED_RED}~" & +timeout 120 find /private/var/log -type f -exec grep -HnRiIE "username.*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~username.*[=:].+~${SED_RED}~" & +timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "username.*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~username.*[=:].+~${SED_RED}~" & +timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "username.*[=:].+" '{}' \; 2>/dev/null | sed '/^.\{150\}./d' | sort | uniq | head -n 50 | sed -${E} "s~username.*[=:].+~${SED_RED}~" & +wait +echo '' - ##-- IF) Specific hashes inside files - print_2title "Searching specific hashes inside files - less false positives (limit 70)" - regexblowfish='\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*' - regexjoomlavbulletin='[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}' - regexphpbb3='\$H\$[a-zA-Z0-9_/\.]{31}' - regexwp='\$P\$[a-zA-Z0-9_/\.]{31}' - regexdrupal='\$S\$[a-zA-Z0-9_/\.]{52}' - regexlinuxmd5='\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}' - regexapr1md5='\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}' - regexsha512crypt='\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}' - regexapachesha='\{SHA\}[0-9a-zA-Z/_=]{10,}' - timeout 150 grep -RIEHo "$regexblowfish|$regexjoomlavbulletin|$regexphpbb3|$regexwp|$regexdrupal|$regexlinuxmd5|$regexapr1md5|$regexsha512crypt|$regexapachesha" /etc $backup_folders_row /tmp /var/tmp /var/www $HOMESEARCH /mnt /private /Applications 2>/dev/null | grep -v "/.git/\|/sources/authors/" | grep -Ev "$notExtensions" | grep -Ev "0{20,}" | head -n 70 | sed "s,:.*,${SED_RED}," - echo "" -fi - -if ! [ "$FAST" ] && ! [ "$SUPERFAST" ] && [ "$TIMEOUT" ]; then - ##-- IF) Specific hashes inside files - print_2title "Searching md5/sha1/sha256/sha512 hashes inside files (limit 50 - only 1 per file)" - regexmd5='(^|[^a-zA-Z0-9])[a-fA-F0-9]{32}([^a-zA-Z0-9]|$)' - regexsha1='(^|[^a-zA-Z0-9])[a-fA-F0-9]{40}([^a-zA-Z0-9]|$)' - regexsha256='(^|[^a-zA-Z0-9])[a-fA-F0-9]{64}([^a-zA-Z0-9]|$)' - regexsha512='(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)' - timeout 150 grep -RIEHo "$regexmd5|$regexsha1|$regexsha256|$regexsha512" /etc $backup_folders_row /tmp /var/tmp /var/www $HOMESEARCH /mnt /private /Applications 2>/dev/null | grep -v "/.git/\|/sources/authors/" | grep -Ev "$notExtensions" | grep -Ev "0{20,}" | awk -F: '{if (pre != $1){ print $0; }; pre=$1}' | awk -F/ '{line_init=$0; if (!cont){ cont=0 }; $NF=""; act=$0; if (cont < 2){ print line_init; } if (cont == "2"){print " #)There are more hashes files in the previous parent folder\n"}; if (act == pre){(cont += 1)} else {cont=0}; pre=act }' | head -n 50 | sed "s,:.*,${SED_RED}," | sed "s,There are more hashes files in the previous parent folder,${C}[3m&${C}[0m," - echo "" -fi - -if ! [ "$SUPERFAST" ] && ! [ "$FAST" ]; then - ##-- IF) Find URIs with user:password@hoststrings - print_2title "Finding URIs with user:password@host inside key folders" - timeout 150 find /var/www $backup_folders_row /tmp /etc /var/log /private/var/log -type f -exec grep -RiIE "://(.+):(.+)@" "{}" \; 2>/dev/null | sed '/^.\{150\}./d' | grep -v "#" | sort | uniq | sed -${E} "s,:\/\/(.+):(.+)@,://${C}[1;31m\1:\2${C}[0m@,g" - timeout 150 grep -RiIE "://(.+):(.+)@" $HOMESEARCH 2>/dev/null | sed '/^.\{150\}./d' | grep -v "#" | sort | uniq | sed -${E} "s,:\/\/(.+):(.+)@,://${C}[1;31m\1:\2${C}[0m@,g" - timeout 150 grep -RiIE "://(.+):(.+)@" /mnt 2>/dev/null | sed '/^.\{150\}./d' | grep -v "#" | sort | uniq | sed -${E} "s,:\/\/(.+):(.+)@,://${C}[1;31m\1:\2${C}[0m@,g" - timeout 150 grep -RiIE "://(.+):(.+)@" /private 2>/dev/null | sed '/^.\{150\}./d' | grep -v "#" | sort | uniq | sed -${E} "s,:\/\/(.+):(.+)@,://${C}[1;31m\1:\2${C}[0m@,g" - timeout 150 grep -RiIE "://(.+):(.+)@" /Applications 2>/dev/null | sed '/^.\{150\}./d' | grep -v "#" | sort | uniq | sed -${E} "s,:\/\/(.+):(.+)@,://${C}[1;31m\1:\2${C}[0m@,g" - echo "" fi fi echo ''