diff --git a/build_lists/sensitive_files.yaml b/build_lists/sensitive_files.yaml index a05660d..9da2f08 100644 --- a/build_lists/sensitive_files.yaml +++ b/build_lists/sensitive_files.yaml @@ -484,7 +484,7 @@ search: files: ? "*.ovpn" : - bad_regex: "auth-user-pass.*" + bad_regex: "auth-user-pass.+" only_bad_lines: True type: f search_in: @@ -606,21 +606,12 @@ search: auto_check: False files: - ? "*ssh*config*" + ? "ssh*config" : type: f - remove_path: '\..{1,4}$' #No interested in filenames with extensions - search_in: + search_in: - /usr - $HOMESEARCH - - ? "*config*ssh*" - : - type: f - remove_path: '\..{1,4}$' #No interested in filenames with extensions - search_in: - - /usr - - $HOMESEARCH Cloud credentials: config: @@ -1079,6 +1070,7 @@ search: ? "*.gnupg" : type: f + remove_path: "README.gnupg" search_in: - common @@ -1304,7 +1296,7 @@ search: files: ? "snmpd.conf" : - bad_regex: "rocommunity|rwcommunity" + bad_regex: "rocommunity|rwcommunity|extend.*" only_bad_lines: True type: f search_in: @@ -1556,6 +1548,22 @@ search: search_in: - common + SeedDMS: + config: + auto_check: True + + files: + ? "seeddms*" + : + files: + ? "settings.xml" + : + bad_regex: "[pP][aA][sS][sS]" + line_grep: '"="' + type: d + search_in: + - common + Ddclient: config: auto_check: True diff --git a/linPEAS/builder/linpeas_base.sh b/linPEAS/builder/linpeas_base.sh index 0768ec9..4debbc6 100755 --- a/linPEAS/builder/linpeas_base.sh +++ b/linPEAS/builder/linpeas_base.sh @@ -565,7 +565,7 @@ print_2title(){ END_T2_TIME=`date +%s 2>/dev/null` if [ "$START_T2_TIME" ]; then TOTAL_T2_TIME=$(($END_T2_TIME - $START_T2_TIME)) - printf $DG"The section execution took $TOTAL_T2_TIME seconds\n"$NC + printf $DG"This check took $TOTAL_T2_TIME seconds\n"$NC echo "" fi @@ -892,7 +892,7 @@ enumerateDockerSockets() { if ! [ "$SEARCHED_DOCKER_SOCKETS" ]; then SEARCHED_DOCKER_SOCKETS="1" for dock_sock in `find / ! -path "/sys/*" -type s -name "docker.sock" -o -name "docker.socket" 2>/dev/null`; do - if [ -w "$dock_sock" ]; then + if ! [ "$IAMROOT" ] && [ -w "$dock_sock" ]; then echo "You have write permissions over Docker socket $dock_sock" | sed -${E} "s,$dock_sock,${SED_RED_YELLOW},g" echo "Docker enummeration:" docker_enumerated="" @@ -1143,7 +1143,7 @@ if [ "`echo $CHECKS | grep SysI`" ]; then #-- SY) PaX print_list "PaX bins present? .............. "$NC - (which paxctl-ng paxctl >/dev/null 2>&1 && echo "Yes" || echo_not_found "PaX") + (command -v paxctl-ng paxctl >/dev/null 2>&1 && echo "Yes" || echo_not_found "PaX") #-- SY) Execshield print_list "Execshield enabled? ............ "$NC @@ -1190,7 +1190,7 @@ if [ "`echo $CHECKS | grep Container`" ]; then containerCheck print_2title "Container related tools present" - which $CONTAINER_CMDS + command -v $CONTAINER_CMDS print_2title "Container details" print_list "Is this a container? ...........$NC $containerType" @@ -1315,12 +1315,12 @@ if [ "`echo $CHECKS | grep AvaSof`" ]; then #-- 1AS) Useful software print_2title "Useful software" - which $CONTAINER_CMDS nmap aws nc ncat netcat nc.traditional wget curl ping gcc g++ make gdb base64 socat python python2 python3 python2.7 python2.6 python3.6 python3.7 perl php ruby xterm doas sudo fetch ctr 2>/dev/null + command -v $CONTAINER_CMDS nmap aws nc ncat netcat nc.traditional wget curl ping gcc g++ make gdb base64 socat python python2 python3 python2.7 python2.6 python3.6 python3.7 perl php ruby xterm doas sudo fetch ctr 2>/dev/null echo "" #-- 2AS) Search for compilers print_2title "Installed Compiler" - (dpkg --list 2>/dev/null | grep "compiler" | grep -v "decompiler\|lib" 2>/dev/null || yum list installed 'gcc*' 2>/dev/null | grep gcc 2>/dev/null; which gcc g++ 2>/dev/null || locate -r "/gcc[0-9\.-]\+$" 2>/dev/null | grep -v "/doc/"); + (dpkg --list 2>/dev/null | grep "compiler" | grep -v "decompiler\|lib" 2>/dev/null || yum list installed 'gcc*' 2>/dev/null | grep gcc 2>/dev/null; command -v gcc g++ 2>/dev/null || locate -r "/gcc[0-9\.-]\+$" 2>/dev/null | grep -v "/doc/"); echo "" echo "" if [ "$WAIT" ]; then echo "Press enter to continue"; read "asd"; fi @@ -1429,7 +1429,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#services" printf "%s\n" "$PSTORAGE_SYSTEMD\n" | while read s; do if [ ! -O "$s" ]; then #Remove services that belongs to the current user - if [ -w "$s" ] && [ -f "$s" ]; then + if ! [ "$IAMROOT" ] && [ -w "$s" ] && [ -f "$s" ]; then echo "$s" | sed -${E} "s,.*,${SED_RED_YELLOW},g" fi servicebinpaths="`grep -Eo '^Exec.*?=[!@+-]*[a-zA-Z0-9_/\-]+' \"$s\" 2>/dev/null | cut -d '=' -f2 | sed 's,^[@\+!-]*,,'`" #Get invoked paths @@ -1462,7 +1462,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then print_2title "Analyzing .timer files" print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#timers" printf "%s\n" "$PSTORAGE_TIMER\n" | while read t; do - if [ -w "$t" ]; then + if ! [ "$IAMROOT" ] && [ -w "$t" ]; then echo "$t" | sed -${E} "s,.*,${SED_RED},g" fi timerbinpaths="`grep -Po '^Unit=*(.*?$)' \"$t\" 2>/dev/null | cut -d '=' -f2`" @@ -1483,7 +1483,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then print_2title "Analyzing .socket files" print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#sockets" printf "%s\n" "$PSTORAGE_SOCKET" | while read s; do - if [ -w "$s" ] && [ -f "$s" ]; then + if ! [ "$IAMROOT" ] && [ -w "$s" ] && [ -f "$s" ]; then echo "Writable .socket file: $s" | sed "s,/.*,${SED_RED},g" fi socketsbinpaths="`grep -Eo '^(Exec).*?=[!@+-]*/[a-zA-Z0-9_/\-]+' \"$s\" 2>/dev/null | cut -d '=' -f2 | sed 's,^[@\+!-]*,,'`" @@ -1499,10 +1499,10 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then fi done done - if [ -w "/var/run/docker.sock" ]; then + if ! [ "$IAMROOT" ] && [ -w "/var/run/docker.sock" ]; then echo "Docker socket /var/run/docker.sock is writable (https://book.hacktricks.xyz/linux-unix/privilege-escalation#writable-docker-socket)" | sed "s,/var/run/docker.sock is writable,${SED_RED_YELLOW},g" fi - if [ -w "/run/docker.sock" ]; then + if ! [ "$IAMROOT" ] && [ -w "/run/docker.sock" ]; then echo "Docker socket /run/docker.sock is writable (https://book.hacktricks.xyz/linux-unix/privilege-escalation#writable-docker-socket)" | sed "s,/var/run/docker.sock is writable,${SED_RED_YELLOW},g" fi echo "" @@ -1526,7 +1526,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then if [ "$PSTORAGE_DBUS" ]; then printf "%s\n" "$PSTORAGE_DBUS" | while read d; do for f in $d/*; do - if [ -w "$f" ]; then + if ! [ "$IAMROOT" ] && [ -w "$f" ]; then echo "Writable $f" | sed -${E} "s,.*,${SED_RED},g" fi @@ -1678,7 +1678,7 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then (echo "$PASSWORD" | sudo -S -l | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "sudo" fi (cat /etc/sudoers | grep -Iv "^$" | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "/etc/sudoers" - if [ -w '/etc/sudoers.d/' ]; then + if ! [ "$IAMROOT" ] && [ -w '/etc/sudoers.d/' ]; then echo "You can create a file in /etc/sudoers.d/ and escalate privileges" | sed -${E} "s,.*,${SED_RED_YELLOW}," fi for filename in '/etc/sudoers.d/*'; do @@ -2276,7 +2276,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#writable-docker-socket" printf "%s\n" "$PSTORAGE_DOCKER" | head -n 70 | while read f; do ls -l "$f" 2>/dev/null - if [ -S "$f" ] && [ -w "$f" ]; then + if ! [ "$IAMROOT" ] && [ -S "$f" ] && [ -w "$f" ]; then echo "Docker socket file ($f) is writable" | sed -${E} "s,.*,${SED_RED_YELLOW}," fi done @@ -2294,7 +2294,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then printf "System supports$RED S/Key$NC authentication\n" if ! [ -d /etc/skey/ ]; then echo "${GREEN}S/Key authentication enabled, but has not been initialized" - elif [ -w /etc/skey/ ]; then + elif ! [ "$IAMROOT" ] && [ -w /etc/skey/ ]; then echo "${RED}/etc/skey/ is writable by you" ls -ld /etc/skey/ else @@ -2307,7 +2307,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then print_2title "YubiKey authentication" if [ "`grep auth= /etc/login.conf 2>/dev/null | grep -v \"^#\" | grep yubikey`" ]; then printf "System supports$RED YubiKey$NC authentication\n" - if [ -w /var/db/yubikey/ ]; then + if ! [ "$IAMROOT" ] && [ -w /var/db/yubikey/ ]; then echo "${RED}/var/db/yubikey/ is writable by you" ls -ld /var/db/yubikey/ else @@ -2371,9 +2371,9 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then sname="`echo \"$s\" | awk '{print $9}'`" if [ "$sname" = "." ] || [ "$sname" = ".." ]; then true #Don't do nothing - elif [ -O "$sname" ]; then + elif ! [ "$IAMROOT" ] && [ -O "$sname" ]; then echo "You own the SUID file: $sname" | sed -${E} "s,.*,${SED_RED}," - elif [ -w "$sname" ]; then #If write permision, win found (no check exploits) + elif ! [ "$IAMROOT" ] && [ -w "$sname" ]; then #If write permision, win found (no check exploits) echo "You can write SUID file: $sname" | sed -${E} "s,.*,${SED_RED_YELLOW}," else c="a" @@ -2432,9 +2432,9 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then sname="`echo \"$s\" | awk '{print $9}'`" if [ "$sname" = "." ] || [ "$sname" = ".." ]; then true #Don't do nothing - elif [ -O "$sname" ]; then + elif ! [ "$IAMROOT" ] && [ -O "$sname" ]; then echo "You own the SGID file: $sname" | sed -${E} "s,.*,${SED_RED}," - elif [ -w "$sname" ]; then #If write permision, win found (no check exploits) + elif ! [ "$IAMROOT" ] &6 [ -w "$sname" ]; then #If write permision, win found (no check exploits) echo "You can write SGID file: $sname" | sed -${E} "s,.*,${SED_RED_YELLOW}," else c="a" @@ -2513,7 +2513,7 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then echo "Files with capabilities (limited to 50):" getcap -r / 2>/dev/null | head -n 50 | while read cb; do echo "$cb" | sed -${E} "s,$sudocapsB,${SED_RED}," | sed -${E} "s,$capsB,${SED_RED}," - if [ -w "`echo \"$cb\" | cut -d \" \" -f1`" ]; then + if ! [ "$IAMROOT" ] && [ -w "`echo \"$cb\" | cut -d \" \" -f1`" ]; then echo "$cb is writable" | sed -${E} "s,.*,${SED_RED}," fi done @@ -2539,9 +2539,9 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#script-binaries-in-path" echo $PATH | tr ":" "\n" | while read d; do for f in `find "$d" -name "*.sh" 2>/dev/null`; do - if [ -O "$f" ]; then + if ! [ "$IAMROOT" ] && [ -O "$f" ]; then echo "You own the script: $f" | sed -${E} "s,.*,${SED_RED}," - elif [ -w "$f" ]; then #If write permision, win found (no check exploits) + elif ! [ "$IAMROOT" ] && [ -w "$f" ]; then #If write permision, win found (no check exploits) echo "You can write script: $f" | sed -${E} "s,.*,${SED_RED_YELLOW}," else echo $f | sed -${E} "s,$shscripsG,${SED_GREEN}," | sed -${E} "s,$Wfolders,${SED_RED},"; @@ -2564,9 +2564,9 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#profiles-files" if [ ! "$MACPEAS" ]; then #Those folders don´t exist on a MacOS (ls -la /etc/profile.d/ 2>/dev/null | sed -${E} "s,$profiledG,${SED_GREEN},") || echo_not_found "/etc/profile.d/" - if [ -w "/etc/profile" ]; then echo "You can modify /etc/profile" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/etc/profile.d/" ]; then echo "You have write privileges over /etc/profile.d/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/profile.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/profile.d/ '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/profile" ]; then echo "You can modify /etc/profile" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/profile.d/" ]; then echo "You have write privileges over /etc/profile.d/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/profile.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/profile.d/ '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi fi echo "" @@ -2574,20 +2574,20 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then print_2title "Permissions in init, init.d, systemd, and rc.d" print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#init-init-d-systemd-and-rc-d" if [ ! "$MACPEAS" ]; then #Those folders don´t exist on a MacOS - if [ -w "/etc/init/" ]; then echo "You have write privileges over /etc/init/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/init/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/init/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/etc/init.d/" ]; then echo "You have write privileges over /etc/init.d/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/init.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/init.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/etc/rc.d/init.d" ]; then echo "You have write privileges over /etc/rc.d/init.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/rc.d/init.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/rc.d/init.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/usr/local/etc/rc.d" ]; then echo "You have write privileges over /usr/local/etc/rc.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /usr/local/etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /usr/local/etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/etc/rc.d" ]; then echo "You have write privileges over /etc/rc.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/etc/systemd/" ]; then echo "You have write privileges over /etc/systemd/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/lib/systemd/" ]; then echo "You have write privileges over /lib/systemd/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /lib/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /lib/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/init/" ]; then echo "You have write privileges over /etc/init/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/init/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/init/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/init.d/" ]; then echo "You have write privileges over /etc/init.d/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/init.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/init.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/rc.d/init.d" ]; then echo "You have write privileges over /etc/rc.d/init.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/rc.d/init.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/rc.d/init.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/usr/local/etc/rc.d" ]; then echo "You have write privileges over /usr/local/etc/rc.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /usr/local/etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /usr/local/etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/rc.d" ]; then echo "You have write privileges over /etc/rc.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/systemd/" ]; then echo "You have write privileges over /etc/systemd/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/lib/systemd/" ]; then echo "You have write privileges over /lib/systemd/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /lib/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /lib/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi fi echo "" @@ -2625,7 +2625,7 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then ##-- IF) network-scripts print_list "Can I write in network-scripts? ...... " - if [ -w "/etc/sysconfig/network-scripts/" ]; then echo "You have write privileges on /etc/sysconfig/network-scripts/" | sed -${E} "s,.*,${SED_RED_YELLOW}," + if ! [ "$IAMROOT" ] && [ -w "/etc/sysconfig/network-scripts/" ]; then echo "You have write privileges on /etc/sysconfig/network-scripts/" | sed -${E} "s,.*,${SED_RED_YELLOW}," elif [ "`find /etc/sysconfig/network-scripts/ '(' -not -type l -and '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges on `find /etc/sysconfig/network-scripts/ '(' -not -type l -and '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' ')' 2>/dev/null`" | sed -${E} "s,.*,${SED_RED_YELLOW}," else echo_no fi @@ -2666,11 +2666,11 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then lastWlogFolder="ImPOsSiBleeElastWlogFolder" logfind=`find / -type f -name "*.log" -o -name "*.log.*" 2>/dev/null | awk -F/ '{line_init=$0; if (!cont){ cont=0 }; $NF=""; act=$0; if (act == pre){(cont += 1)} else {cont=0}; if (cont < 3){ print line_init; }; if (cont == "3"){print "#)You_can_write_more_log_files_inside_last_directory"}; pre=act}' | head -n 100` printf "%s\n" "$logfind" | while read log; do - if [ -w "$log" ] || [ `echo "$log" | grep -E "$Wfolders"` ]; then #Only print info if something interesting found + if ! [ "$IAMROOT" ] && [ -w "$log" ] || ! [ "$IAMROOT" ] && [ `echo "$log" | grep -E "$Wfolders"` ]; then #Only print info if something interesting found if [ "`echo \"$log\" | grep \"You_can_write_more_log_files_inside_last_directory\"`" ]; then printf $ITALIC"$log\n"$NC; - elif [ -w "$log" ] && [ "`command -v logrotate 2>/dev/null`" ] && [ "`logrotate --version 2>&1 | grep -E ' 1| 2| 3.1'`" ]; then printf "Writable:$RED $log\n"$NC; #Check vuln version of logrotate is used and print red in that case - elif [ -w "$log" ]; then echo "Writable: $log"; - elif [ "`echo \"$log\" | grep -E \"$Wfolders\"`" ] && [ "$log" ] && [ ! "$lastWlogFolder" == "$log" ]; then lastWlogFolder="$log"; echo "Writable folder: $log" | sed -${E} "s,$Wfolders,${SED_RED},g"; + elif ! [ "$IAMROOT" ] && [ -w "$log" ] && [ "`command -v logrotate 2>/dev/null`" ] && [ "`logrotate --version 2>&1 | grep -E ' 1| 2| 3.1'`" ]; then printf "Writable:$RED $log\n"$NC; #Check vuln version of logrotate is used and print red in that case + elif ! [ "$IAMROOT" ] && [ -w "$log" ]; then echo "Writable: $log"; + elif ! [ "$IAMROOT" ] && [ "`echo \"$log\" | grep -E \"$Wfolders\"`" ] && [ "$log" ] && [ ! "$lastWlogFolder" == "$log" ]; then lastWlogFolder="$log"; echo "Writable folder: $log" | sed -${E} "s,$Wfolders,${SED_RED},g"; fi fi done diff --git a/linPEAS/linpeas.sh b/linPEAS/linpeas.sh index 314d4cc..cc80d2e 100755 --- a/linPEAS/linpeas.sh +++ b/linPEAS/linpeas.sh @@ -485,7 +485,7 @@ GREP_DOCKER_SOCK_INFOS="Architecture|OSType|Name|DockerRootDir|NCPU|OperatingSys GREP_DOCKER_SOCK_INFOS_IGNORE="IndexConfig" GREP_IGNORE_MOUNTS="/ /|/cgroup|/var/lib/docker/|/null | proc proc |/dev/console|docker.sock" -INT_HIDDEN_FILES=".irssi|.gnupg|._history|.vault-token|.plan|.db|.rdg|.socket|.keyring|.htpasswd|.gitconfig|.pgp|.ldaprc|.p12|.bluemix|.viminfo|.der|.kdbx|.lesshst|.mozilla|.sqlite3|.key|.github|.profile|.cloudflared|.git|.sudo_as_admin_successful|.rhosts|.pem|.jks|.msmtprc|.git-credentials|.sqlite|.pfx|.timer|.vnc|.ovpn|.swp|.svn|.k5login|.gpg|.ftpconfig|.csr|.env|.recently-used.xbel|.cer|.crt|.keystore|.google_authenticator|.service|.pypirc|.erlang.cookie|.bashrc" +INT_HIDDEN_FILES=".pypirc|.db|.sqlite3|.svn|.crt|.gitconfig|.bluemix|.ovpn|.pfx|.msmtprc|.pem|.key|.mozilla|.der|.ldaprc|.sqlite|.git|.socket|.gnupg|.lesshst|.rhosts|.viminfo|.rdg|.kdbx|.k5login|.profile|.vault-token|.github|.erlang.cookie|.cer|.git-credentials|.irssi|.vnc|.cloudflared|.keyring|.p12|.gpg|.jks|.recently-used.xbel|.bashrc|.pgp|.env|.plan|.timer|.swp|.keystore|.csr|.ftpconfig|.sudo_as_admin_successful|.google_authenticator|._history|.service|.htpasswd" ########################################### #---------) Checks before start (---------# @@ -565,7 +565,7 @@ print_2title(){ END_T2_TIME=`date +%s 2>/dev/null` if [ "$START_T2_TIME" ]; then TOTAL_T2_TIME=$(($END_T2_TIME - $START_T2_TIME)) - printf $DG"The section execution took $TOTAL_T2_TIME seconds\n"$NC + printf $DG"This check took $TOTAL_T2_TIME seconds\n"$NC echo "" fi @@ -892,7 +892,7 @@ enumerateDockerSockets() { if ! [ "$SEARCHED_DOCKER_SOCKETS" ]; then SEARCHED_DOCKER_SOCKETS="1" for dock_sock in `find / ! -path "/sys/*" -type s -name "docker.sock" -o -name "docker.socket" 2>/dev/null`; do - if [ -w "$dock_sock" ]; then + if ! [ "$IAMROOT" ] && [ -w "$dock_sock" ]; then echo "You have write permissions over Docker socket $dock_sock" | sed -${E} "s,$dock_sock,${SED_RED_YELLOW},g" echo "Docker enummeration:" docker_enumerated="" @@ -1033,129 +1033,130 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ] || [ "`echo $CHECKS | grep CONT_THREADS=0 # FIND ALL KNOWN INTERESTING SOFTWARE FILES - FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"system.d\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \".mozilla\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_BIN=`eval_bckgrd "find /bin -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_CACHE=`eval_bckgrd "find /.cache -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_CDROM=`eval_bckgrd "find /cdrom -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_ETC=`eval_bckgrd "find /etc -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"*knockd*\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"*config*ssh*\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"*ssh*config*\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"google-chrome\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB=`eval_bckgrd "find /lib -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_MEDIA=`eval_bckgrd "find /media -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_MNT=`eval_bckgrd "find /mnt -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"sess_*\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_OPT=`eval_bckgrd "find /opt -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_PRIVATE=`eval_bckgrd "find /private -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_RUN=`eval_bckgrd "find /run -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SBIN=`eval_bckgrd "find /sbin -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SNAP=`eval_bckgrd "find /snap -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SRV=`eval_bckgrd "find /srv -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYS=`eval_bckgrd "find /sys -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_TMP=`eval_bckgrd "find /tmp -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"agent*\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"sess_*\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_USR=`eval_bckgrd "find /usr -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"*config*ssh*\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"*ssh*config*\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_VAR=`eval_bckgrd "find /var -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"sess_*\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"system.d\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \".mozilla\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"ldap\" -o -name \"couchdb\" -o -name \"keyrings\" -o -name \"neo4j\" -o -name \"logstash\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \".irssi\" -o -name \".vnc\" -o -name \"bind\" -o -name \"mysql\" -o -name \".bluemix\" -o -name \".cloudflared\" -o -name \"filelliza\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_BIN=`eval_bckgrd "find /bin -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_CACHE=`eval_bckgrd "find /.cache -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_CDROM=`eval_bckgrd "find /cdrom -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_ETC=`eval_bckgrd "find /etc -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"*knockd*\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"ssh*config\" -o -name \"*vnc*.txt\" -o -name \"TokenCache.dat\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"google-chrome\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB=`eval_bckgrd "find /lib -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_MEDIA=`eval_bckgrd "find /media -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_MNT=`eval_bckgrd "find /mnt -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"sess_*\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_OPT=`eval_bckgrd "find /opt -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_PRIVATE=`eval_bckgrd "find /private -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_RUN=`eval_bckgrd "find /run -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SBIN=`eval_bckgrd "find /sbin -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SNAP=`eval_bckgrd "find /snap -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SRV=`eval_bckgrd "find /srv -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYS=`eval_bckgrd "find /sys -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.socket\" -o -name \"*.timer\" -o -name \"*.service\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_TMP=`eval_bckgrd "find /tmp -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"sess_*\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"agent*\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_USR=`eval_bckgrd "find /usr -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"ssh*config\" -o -name \"*vnc*.txt\" -o -name \"TokenCache.dat\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_VAR=`eval_bckgrd "find /var -name \"access_tokens.json\" -o -name \"unattended.xml\" -o -name \"software.sav\" -o -name \"*.socket\" -o -name \"*.gnupg\" -o -name \"ipsec.conf\" -o -name \"*vnc*.xml\" -o -name \"groups.xml\" -o -name \"authorized_hosts\" -o -name \"azureProfile.json\" -o -name \"config.php\" -o -name \"httpd.conf\" -o -name \"known_hosts\" -o -name \"*.keyring\" -o -name \"scheduledtasks.xml\" -o -name \"*credential*\" -o -name \"setupinfo.bak\" -o -name \"software\" -o -name \"*.db\" -o -name \"*.viminfo\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"https-xampp.conf\" -o -name \"*config*.php\" -o -name \"Ntds.dit\" -o -name \"kadm5.acl\" -o -name \"unattend.inf\" -o -name \"cesi.conf\" -o -name \"unattend.xml\" -o -name \"NetSetup.log\" -o -name \".plan\" -o -name \"ftp.ini\" -o -name \"index.dat\" -o -name \"legacy_credentials.db\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"vault-ssh-helper.hcl\" -o -name \"hosts.equiv\" -o -name \"security\" -o -name \"id_dsa*\" -o -name \"*.kdbx\" -o -name \"gitlab.yml\" -o -name \"fastcgi_params\" -o -name \"*.key\" -o -name \"TokenCache.dat\" -o -name \"*vnc*.txt\" -o -name \"backup\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"Dockerfile\" -o -name \"ffftp.ini\" -o -name \"*.gpg\" -o -name \"000-default\" -o -name \"wsl.exe\" -o -name \"pgsql.conf\" -o -name \"*.p12\" -o -name \"ConsoleHost_history.txt\" -o -name \"*password*\" -o -name \"system.sav\" -o -name \"sitemanager.xml\" -o -name \"filezilla.xml\" -o -name \"id_rsa*\" -o -name \"*.der\" -o -name \"docker.sock\" -o -name \"*.jks\" -o -name \"printers.xml\" -o -name \"drives.xml\" -o -name \"cloud.cfg\" -o -name \"db.php\" -o -name \"pg_hba.conf\" -o -name \"ws_ftp.ini\" -o -name \"*.swp\" -o -name \"wp-config.php\" -o -name \"pagefile.sys\" -o -name \"supervisord.conf\" -o -name \"sess_*\" -o -name \"server.xml\" -o -name \"bash.exe\" -o -name \"pgadmin*.db\" -o -name \".htpasswd\" -o -name \".pypirc\" -o -name \"*vnc*.c*nf*\" -o -name \"FreeSSHDservice.ini\" -o -name \"mongod*.conf\" -o -name \"RDCMan.settings\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.ini\" -o -name \"datasources.xml\" -o -name \"gitlab.rm\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \"*.pfx\" -o -name \"https.conf\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \".git\" -o -name \"*.timer\" -o -name \".rhosts\" -o -name \"anaconda-ks.cfg\" -o -name \"snmpd.conf\" -o -name \"*.ovpn\" -o -name \".vault-token\" -o -name \"hostapd.conf\" -o -name \"docker.socket\" -o -name \"AzureRMContext.json\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"access.log\" -o -name \".recently-used.xbel\" -o -name \"rsyncd.conf\" -o -name \".bashrc\" -o -name \"creds*\" -o -name \"tomcat-users.xml\" -o -name \"error.log\" -o -name \"credentials\" -o -name \"access_tokens.db\" -o -name \"KeePass.config*\" -o -name \".sudo_as_admin_successful\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"settings.php\" -o -name \"ntuser.dat\" -o -name \"services.xml\" -o -name \"*.ftpconfig\" -o -name \"winscp.ini\" -o -name \"mosquitto.conf\" -o -name \"*.crt\" -o -name \"backups\" -o -name \"SYSTEM\" -o -name \"recentservers.xml\" -o -name \"rsyncd.secrets\" -o -name \"*.cer\" -o -name \".gitconfig\" -o -name \"SecEvent.Evt\" -o -name \"autologin\" -o -name \"passwd\" -o -name \"elasticsearch.y*ml\" -o -name \"scclient.exe\" -o -name \"*.sqlite\" -o -name \"KeePass.enforced*\" -o -name \".*_history\" -o -name \"*.pem\" -o -name \".ldaprc\" -o -name \"*.keystore\" -o -name \"docker-compose.yml\" -o -name \"ftp.config\" -o -name \"AppEvent.Evt\" -o -name \"sysprep.xml\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"ipsec.secrets\" -o -name \".k5login\" -o -name \".profile\" -o -name \".github\" -o -name \"setupinfo\" -o -name \"sysprep.inf\" -o -name \"gvm-tools.conf\" -o -name \"appcmd.exe\" -o -name \".git-credentials\" -o -name \"krb5.conf\" -o -name \"my.cnf\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"credentials.db\" -o -name \"*.rdg\" -o -name \"*.service\" -o -name \"redis.conf\" -o -name \".google_authenticator\" -o -name \"SAM\" -o -name \"*.csr\" -o -name \"unattend.txt\" -o -name \"web*.config\" -o -name \"postgresql.conf\" -o -name \"authorized_keys\" -o -name \"autologin.conf\" -o -name \"iis6.log\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` wait # Always wait at the end CONT_THREADS=0 #Reset the threads counter #GENERATE THE STORAGES OF THE FOUND FILES - PSTORAGE_SYSTEMD=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/system|^/lib64|^/snap|^/srv|^/run|^/bin|^/var|^$GREPHOMESEARCH|^/.cache|^/tmp|^/sys|^/lib|^/systemd|^/media|^/usr|^/lib32|^/opt|^/private|^/applications|^/mnt|^/etc|^/cdrom|^/sbin" | grep -E ".*\.service$" | sort | uniq | head -n 70) - PSTORAGE_TIMER=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/system|^/lib64|^/snap|^/srv|^/run|^/bin|^/var|^$GREPHOMESEARCH|^/.cache|^/tmp|^/sys|^/lib|^/systemd|^/media|^/usr|^/lib32|^/opt|^/private|^/applications|^/mnt|^/etc|^/cdrom|^/sbin" | grep -E ".*\.timer$" | sort | uniq | head -n 70) - PSTORAGE_SOCKET=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/system|^/lib64|^/snap|^/srv|^/run|^/bin|^/var|^$GREPHOMESEARCH|^/.cache|^/tmp|^/sys|^/lib|^/systemd|^/media|^/usr|^/lib32|^/opt|^/private|^/applications|^/mnt|^/etc|^/cdrom|^/sbin" | grep -E ".*\.socket$" | sort | uniq | head -n 70) - PSTORAGE_DBUS=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70) - PSTORAGE_MYSQL=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "mysql$" | sort | uniq | head -n 70) - PSTORAGE_POSTGRESQL=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70) - PSTORAGE_APACHE=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "sites-enabled$|000-default$" | sort | uniq | head -n 70) - PSTORAGE_PHPCOOKIES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/tmp|^/var|^/mnt" | grep -E "sess_.*$" | sort | uniq | head -n 70) - PSTORAGE_PHP_FILES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70) - PSTORAGE_WORDPRESS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "wp-config\.php$" | sort | uniq | head -n 70) - PSTORAGE_DRUPAL=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E '/default/settings.php' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "settings\.php$" | sort | uniq | head -n 70) - PSTORAGE_MOODLE=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E 'moodle/config.php' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "config\.php$" | sort | uniq | head -n 70) - PSTORAGE_TOMCAT=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70) - PSTORAGE_MONGO=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70) - PSTORAGE_SUPERVISORD=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70) - PSTORAGE_CESI=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "cesi\.conf$" | sort | uniq | head -n 70) - PSTORAGE_RSYNC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70) - PSTORAGE_HOSTAPD=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70) - PSTORAGE_VNC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70) - PSTORAGE_LDAP=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "ldap$" | sort | uniq | head -n 70) - PSTORAGE_OPEN_VPN=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70) - PSTORAGE_SSH_FILES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70) - PSTORAGE_CERTSB4=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70) - PSTORAGE_CERTSBIN=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70) - PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70) - PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/tmp" | grep -E "agent.*$" | sort | uniq | head -n 70) - PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -v -E '\..{1,4}$' | grep -E "^/usr|^$GREPHOMESEARCH" | grep -E ".*ssh.*config.*$|.*config.*ssh.*$" | sort | uniq | head -n 70) - PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70) - PSTORAGE_KERBEROS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70) - PSTORAGE_KIBANA=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70) - PSTORAGE_KNOCKD=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70) - PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "logstash$" | sort | uniq | head -n 70) - PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70) - PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70) - PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.vault-token$" | sort | uniq | head -n 70) - PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "couchdb$" | sort | uniq | head -n 70) - PSTORAGE_REDIS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "redis\.conf$" | sort | uniq | head -n 70) - PSTORAGE_MOSQUITTO=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70) - PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "neo4j$" | sort | uniq | head -n 70) - PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70) - PSTORAGE_ERLANG=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70) - PSTORAGE_GMV_AUTH=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70) - PSTORAGE_IPSEC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70) - PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.irssi$" | sort | uniq | head -n 70) - PSTORAGE_KEYRING=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70) - PSTORAGE_FILEZILLA=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "filelliza$|filezilla\.xml$" | sort | uniq | head -n 70) - PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70) - PSTORAGE_SPLUNK=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "passwd$" | sort | uniq | head -n 70) - PSTORAGE_GITLAB=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -v -E '/lib' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70) - PSTORAGE_PGP_GPG=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70) - PSTORAGE_CACHE_VI=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70) - PSTORAGE_DOCKER=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70) - PSTORAGE_FIREFOX=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^$GREPHOMESEARCH" | grep -E "\.mozilla$" | sort | uniq | head -n 70) - PSTORAGE_CHROME=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^$GREPHOMESEARCH" | grep -E "google-chrome$" | sort | uniq | head -n 70) - PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70) - PSTORAGE_FASTCGI=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "fastcgi_params$" | sort | uniq | head -n 70) - PSTORAGE_SNMP=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_PYPIRC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.pypirc$" | sort | uniq | head -n 70) - PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.cloudflared$" | sort | uniq | head -n 70) - PSTORAGE_HISTORY=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\..*_history$" | sort | uniq | head -n 70) - PSTORAGE_HTTP_CONF=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "httpd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_HTPASSWD=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.htpasswd$" | sort | uniq | head -n 70) - PSTORAGE_LDAPRC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.ldaprc$" | sort | uniq | head -n 70) - PSTORAGE_ENV=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.env$" | sort | uniq | head -n 70) - PSTORAGE_MSMTPRC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.msmtprc$" | sort | uniq | head -n 70) - PSTORAGE_GITHUB=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70) - PSTORAGE_SVN=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.svn$" | sort | uniq | head -n 70) - PSTORAGE_KEEPASS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70) - PSTORAGE_FTP=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|ws_ftp\.ini$" | sort | uniq | head -n 70) - PSTORAGE_BIND=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "bind$" | sort | uniq | head -n 70) - PSTORAGE_DDCLIENT=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70) - PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70) - PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70) - PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security$|security\.sav$|server\.xml$|services\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70) - PSTORAGE_DATABASE=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70) - PSTORAGE_BACKUPS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "backup$|backups$" | sort | uniq | head -n 70) - PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE" | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70) + PSTORAGE_SYSTEMD=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/lib64|^$GREPHOMESEARCH|^/opt|^/systemd|^/sys|^/media|^/bin|^/system|^/.cache|^/lib32|^/lib|^/mnt|^/snap|^/cdrom|^/applications|^/sbin|^/var|^/private|^/etc|^/run|^/tmp|^/srv|^/usr" | grep -E ".*\.service$" | sort | uniq | head -n 70) + PSTORAGE_TIMER=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/lib64|^$GREPHOMESEARCH|^/opt|^/systemd|^/sys|^/media|^/bin|^/system|^/.cache|^/lib32|^/lib|^/mnt|^/snap|^/cdrom|^/applications|^/sbin|^/var|^/private|^/etc|^/run|^/tmp|^/srv|^/usr" | grep -E ".*\.timer$" | sort | uniq | head -n 70) + PSTORAGE_SOCKET=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/lib64|^$GREPHOMESEARCH|^/opt|^/systemd|^/sys|^/media|^/bin|^/system|^/.cache|^/lib32|^/lib|^/mnt|^/snap|^/cdrom|^/applications|^/sbin|^/var|^/private|^/etc|^/run|^/tmp|^/srv|^/usr" | grep -E ".*\.socket$" | sort | uniq | head -n 70) + PSTORAGE_DBUS=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70) + PSTORAGE_MYSQL=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "mysql$" | sort | uniq | head -n 70) + PSTORAGE_POSTGRESQL=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70) + PSTORAGE_APACHE=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "sites-enabled$|000-default$" | sort | uniq | head -n 70) + PSTORAGE_PHPCOOKIES=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/var|^/tmp|^/mnt" | grep -E "sess_.*$" | sort | uniq | head -n 70) + PSTORAGE_PHP_FILES=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70) + PSTORAGE_WORDPRESS=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "wp-config\.php$" | sort | uniq | head -n 70) + PSTORAGE_DRUPAL=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E '/default/settings.php' | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "settings\.php$" | sort | uniq | head -n 70) + PSTORAGE_MOODLE=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E 'moodle/config.php' | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "config\.php$" | sort | uniq | head -n 70) + PSTORAGE_TOMCAT=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70) + PSTORAGE_MONGO=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70) + PSTORAGE_SUPERVISORD=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70) + PSTORAGE_CESI=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "cesi\.conf$" | sort | uniq | head -n 70) + PSTORAGE_RSYNC=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70) + PSTORAGE_HOSTAPD=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70) + PSTORAGE_VNC=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70) + PSTORAGE_LDAP=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "ldap$" | sort | uniq | head -n 70) + PSTORAGE_OPEN_VPN=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70) + PSTORAGE_SSH_FILES=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70) + PSTORAGE_CERTSB4=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70) + PSTORAGE_CERTSBIN=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70) + PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70) + PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/tmp" | grep -E "agent.*$" | sort | uniq | head -n 70) + PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^/usr|^$GREPHOMESEARCH" | grep -E "ssh.*config$" | sort | uniq | head -n 70) + PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70) + PSTORAGE_KERBEROS=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70) + PSTORAGE_KIBANA=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70) + PSTORAGE_KNOCKD=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70) + PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "logstash$" | sort | uniq | head -n 70) + PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70) + PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70) + PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.vault-token$" | sort | uniq | head -n 70) + PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "couchdb$" | sort | uniq | head -n 70) + PSTORAGE_REDIS=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "redis\.conf$" | sort | uniq | head -n 70) + PSTORAGE_MOSQUITTO=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70) + PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "neo4j$" | sort | uniq | head -n 70) + PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70) + PSTORAGE_ERLANG=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70) + PSTORAGE_GMV_AUTH=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70) + PSTORAGE_IPSEC=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70) + PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.irssi$" | sort | uniq | head -n 70) + PSTORAGE_KEYRING=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70) + PSTORAGE_FILEZILLA=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "filelliza$|filezilla\.xml$" | sort | uniq | head -n 70) + PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70) + PSTORAGE_SPLUNK=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "passwd$" | sort | uniq | head -n 70) + PSTORAGE_GITLAB=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E '/lib' | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70) + PSTORAGE_PGP_GPG=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E 'README.gnupg' | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70) + PSTORAGE_CACHE_VI=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70) + PSTORAGE_DOCKER=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70) + PSTORAGE_FIREFOX=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH" | grep -E "\.mozilla$" | sort | uniq | head -n 70) + PSTORAGE_CHROME=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH" | grep -E "google-chrome$" | sort | uniq | head -n 70) + PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70) + PSTORAGE_FASTCGI=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "fastcgi_params$" | sort | uniq | head -n 70) + PSTORAGE_SNMP=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_PYPIRC=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.pypirc$" | sort | uniq | head -n 70) + PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.cloudflared$" | sort | uniq | head -n 70) + PSTORAGE_HISTORY=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\..*_history$" | sort | uniq | head -n 70) + PSTORAGE_HTTP_CONF=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "httpd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_HTPASSWD=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.htpasswd$" | sort | uniq | head -n 70) + PSTORAGE_LDAPRC=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.ldaprc$" | sort | uniq | head -n 70) + PSTORAGE_ENV=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.env$" | sort | uniq | head -n 70) + PSTORAGE_MSMTPRC=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.msmtprc$" | sort | uniq | head -n 70) + PSTORAGE_GITHUB=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70) + PSTORAGE_SVN=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.svn$" | sort | uniq | head -n 70) + PSTORAGE_KEEPASS=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70) + PSTORAGE_FTP=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|ws_ftp\.ini$" | sort | uniq | head -n 70) + PSTORAGE_BIND=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "bind$" | sort | uniq | head -n 70) + PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_SNAP\n$FIND_DIR_ETC\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_PRIVATE\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "seeddms.*$" | sort | uniq | head -n 70) + PSTORAGE_DDCLIENT=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70) + PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70) + PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70) + PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security$|security\.sav$|server\.xml$|services\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70) + PSTORAGE_DATABASE=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70) + PSTORAGE_BACKUPS=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E "backup$|backups$" | sort | uniq | head -n 70) + PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_SRV\n$FIND_CDROM\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_TMP\n$FIND_VAR\n$FIND_SYSTEM\n$FIND_OPT\n$FIND_RUN\n$FIND_BIN\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_SYS\n$FIND_PRIVATE\n$FIND_SNAP\n$FIND_MNT\n$FIND_CACHE\n$FIND_ETC\n$FIND_LIB64\n$FIND_SYSTEMD\n$FIND_LIB" | grep -E "^$GREPHOMESEARCH|^/media|^/bin|^/sbin|^/mnt|^/var|^/private|^/etc|^/tmp|^/snap|^/cdrom|^/srv|^/opt|^/usr|^/applications|^/.cache" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70) ##### POST SERACH VARIABLES ##### @@ -1260,7 +1261,7 @@ if [ "`echo $CHECKS | grep SysI`" ]; then #-- SY) PaX print_list "PaX bins present? .............. "$NC - (which paxctl-ng paxctl >/dev/null 2>&1 && echo "Yes" || echo_not_found "PaX") + (command -v paxctl-ng paxctl >/dev/null 2>&1 && echo "Yes" || echo_not_found "PaX") #-- SY) Execshield print_list "Execshield enabled? ............ "$NC @@ -1307,7 +1308,7 @@ if [ "`echo $CHECKS | grep Container`" ]; then containerCheck print_2title "Container related tools present" - which $CONTAINER_CMDS + command -v $CONTAINER_CMDS print_2title "Container details" print_list "Is this a container? ...........$NC $containerType" @@ -1432,12 +1433,12 @@ if [ "`echo $CHECKS | grep AvaSof`" ]; then #-- 1AS) Useful software print_2title "Useful software" - which $CONTAINER_CMDS nmap aws nc ncat netcat nc.traditional wget curl ping gcc g++ make gdb base64 socat python python2 python3 python2.7 python2.6 python3.6 python3.7 perl php ruby xterm doas sudo fetch ctr 2>/dev/null + command -v $CONTAINER_CMDS nmap aws nc ncat netcat nc.traditional wget curl ping gcc g++ make gdb base64 socat python python2 python3 python2.7 python2.6 python3.6 python3.7 perl php ruby xterm doas sudo fetch ctr 2>/dev/null echo "" #-- 2AS) Search for compilers print_2title "Installed Compiler" - (dpkg --list 2>/dev/null | grep "compiler" | grep -v "decompiler\|lib" 2>/dev/null || yum list installed 'gcc*' 2>/dev/null | grep gcc 2>/dev/null; which gcc g++ 2>/dev/null || locate -r "/gcc[0-9\.-]\+$" 2>/dev/null | grep -v "/doc/"); + (dpkg --list 2>/dev/null | grep "compiler" | grep -v "decompiler\|lib" 2>/dev/null || yum list installed 'gcc*' 2>/dev/null | grep gcc 2>/dev/null; command -v gcc g++ 2>/dev/null || locate -r "/gcc[0-9\.-]\+$" 2>/dev/null | grep -v "/doc/"); echo "" echo "" if [ "$WAIT" ]; then echo "Press enter to continue"; read "asd"; fi @@ -1546,7 +1547,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#services" printf "%s\n" "$PSTORAGE_SYSTEMD\n" | while read s; do if [ ! -O "$s" ]; then #Remove services that belongs to the current user - if [ -w "$s" ] && [ -f "$s" ]; then + if ! [ "$IAMROOT" ] && [ -w "$s" ] && [ -f "$s" ]; then echo "$s" | sed -${E} "s,.*,${SED_RED_YELLOW},g" fi servicebinpaths="`grep -Eo '^Exec.*?=[!@+-]*[a-zA-Z0-9_/\-]+' \"$s\" 2>/dev/null | cut -d '=' -f2 | sed 's,^[@\+!-]*,,'`" #Get invoked paths @@ -1579,7 +1580,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then print_2title "Analyzing .timer files" print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#timers" printf "%s\n" "$PSTORAGE_TIMER\n" | while read t; do - if [ -w "$t" ]; then + if ! [ "$IAMROOT" ] && [ -w "$t" ]; then echo "$t" | sed -${E} "s,.*,${SED_RED},g" fi timerbinpaths="`grep -Po '^Unit=*(.*?$)' \"$t\" 2>/dev/null | cut -d '=' -f2`" @@ -1600,7 +1601,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then print_2title "Analyzing .socket files" print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#sockets" printf "%s\n" "$PSTORAGE_SOCKET" | while read s; do - if [ -w "$s" ] && [ -f "$s" ]; then + if ! [ "$IAMROOT" ] && [ -w "$s" ] && [ -f "$s" ]; then echo "Writable .socket file: $s" | sed "s,/.*,${SED_RED},g" fi socketsbinpaths="`grep -Eo '^(Exec).*?=[!@+-]*/[a-zA-Z0-9_/\-]+' \"$s\" 2>/dev/null | cut -d '=' -f2 | sed 's,^[@\+!-]*,,'`" @@ -1616,10 +1617,10 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then fi done done - if [ -w "/var/run/docker.sock" ]; then + if ! [ "$IAMROOT" ] && [ -w "/var/run/docker.sock" ]; then echo "Docker socket /var/run/docker.sock is writable (https://book.hacktricks.xyz/linux-unix/privilege-escalation#writable-docker-socket)" | sed "s,/var/run/docker.sock is writable,${SED_RED_YELLOW},g" fi - if [ -w "/run/docker.sock" ]; then + if ! [ "$IAMROOT" ] && [ -w "/run/docker.sock" ]; then echo "Docker socket /run/docker.sock is writable (https://book.hacktricks.xyz/linux-unix/privilege-escalation#writable-docker-socket)" | sed "s,/var/run/docker.sock is writable,${SED_RED_YELLOW},g" fi echo "" @@ -1643,7 +1644,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then if [ "$PSTORAGE_DBUS" ]; then printf "%s\n" "$PSTORAGE_DBUS" | while read d; do for f in $d/*; do - if [ -w "$f" ]; then + if ! [ "$IAMROOT" ] && [ -w "$f" ]; then echo "Writable $f" | sed -${E} "s,.*,${SED_RED},g" fi @@ -1795,7 +1796,7 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then (echo "$PASSWORD" | sudo -S -l | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "sudo" fi (cat /etc/sudoers | grep -Iv "^$" | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "/etc/sudoers" - if [ -w '/etc/sudoers.d/' ]; then + if ! [ "$IAMROOT" ] && [ -w '/etc/sudoers.d/' ]; then echo "You can create a file in /etc/sudoers.d/ and escalate privileges" | sed -${E} "s,.*,${SED_RED_YELLOW}," fi for filename in '/etc/sudoers.d/*'; do @@ -2132,7 +2133,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then print_2title "Analizing Open VPN Files (limit 70)" - if ! [ "`echo \"$PSTORAGE_OPEN_VPN\" | grep -E \"\.ovpn$\"`" ]; then echo_not_found "*.ovpn"; fi; printf "%s" "$PSTORAGE_OPEN_VPN" | grep -E "\.ovpn$" | while read f; do ls -ld "$f" | sed -${E} "s,\.ovpn$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$" | grep -E "auth-user-pass.*" | sed -${E} "s,auth-user-pass.*,${SED_RED},g"; done; echo ""; + if ! [ "`echo \"$PSTORAGE_OPEN_VPN\" | grep -E \"\.ovpn$\"`" ]; then echo_not_found "*.ovpn"; fi; printf "%s" "$PSTORAGE_OPEN_VPN" | grep -E "\.ovpn$" | while read f; do ls -ld "$f" | sed -${E} "s,\.ovpn$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$" | grep -E "auth-user-pass.+" | sed -${E} "s,auth-user-pass.+,${SED_RED},g"; done; echo ""; #-- SI) ssh files @@ -2520,7 +2521,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#writable-docker-socket" printf "%s\n" "$PSTORAGE_DOCKER" | head -n 70 | while read f; do ls -l "$f" 2>/dev/null - if [ -S "$f" ] && [ -w "$f" ]; then + if ! [ "$IAMROOT" ] && [ -S "$f" ] && [ -w "$f" ]; then echo "Docker socket file ($f) is writable" | sed -${E} "s,.*,${SED_RED_YELLOW}," fi done @@ -2545,7 +2546,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then printf "System supports$RED S/Key$NC authentication\n" if ! [ -d /etc/skey/ ]; then echo "${GREEN}S/Key authentication enabled, but has not been initialized" - elif [ -w /etc/skey/ ]; then + elif ! [ "$IAMROOT" ] && [ -w /etc/skey/ ]; then echo "${RED}/etc/skey/ is writable by you" ls -ld /etc/skey/ else @@ -2558,7 +2559,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then print_2title "YubiKey authentication" if [ "`grep auth= /etc/login.conf 2>/dev/null | grep -v \"^#\" | grep yubikey`" ]; then printf "System supports$RED YubiKey$NC authentication\n" - if [ -w /var/db/yubikey/ ]; then + if ! [ "$IAMROOT" ] && [ -w /var/db/yubikey/ ]; then echo "${RED}/var/db/yubikey/ is writable by you" ls -ld /var/db/yubikey/ else @@ -2573,7 +2574,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then echo "" print_2title "Analizing SNMP Files (limit 70)" - if ! [ "`echo \"$PSTORAGE_SNMP\" | grep -E \"snmpd\.conf$\"`" ]; then echo_not_found "snmpd.conf"; fi; printf "%s" "$PSTORAGE_SNMP" | grep -E "snmpd\.conf$" | while read f; do ls -ld "$f" | sed -${E} "s,snmpd\.conf$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$" | grep -E "rocommunity|rwcommunity" | sed -${E} "s,rocommunity|rwcommunity,${SED_RED},g"; done; echo ""; + if ! [ "`echo \"$PSTORAGE_SNMP\" | grep -E \"snmpd\.conf$\"`" ]; then echo_not_found "snmpd.conf"; fi; printf "%s" "$PSTORAGE_SNMP" | grep -E "snmpd\.conf$" | while read f; do ls -ld "$f" | sed -${E} "s,snmpd\.conf$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$" | grep -E "rocommunity|rwcommunity|extend.*" | sed -${E} "s,rocommunity|rwcommunity|extend.*,${SED_RED},g"; done; echo ""; print_2title "Analizing Pypirc Files (limit 70)" @@ -2611,6 +2612,10 @@ if [ "`echo $CHECKS | grep SofI`" ]; then if ! [ "`echo \"$PSTORAGE_BIND\" | grep -E \"bind$\"`" ]; then echo_not_found "bind"; fi; printf "%s" "$PSTORAGE_BIND" | grep -E "bind$" | while read f; do ls -ld "$f" | sed -${E} "s,bind$,${SED_RED},"; for ff in $(find "$f" -name "*"); do ls -ld "$ff" | sed -${E} "s,,${SED_RED},"; done; echo "";for ff in $(find "$f" -name "*.key"); do ls -ld "$ff" | sed -${E} "s,.key,${SED_RED},"; cat "$ff" 2>/dev/null | grep -IEv "^$" | grep -Ev "^#" | sed -${E} "s,.*,${SED_RED},g"; done; echo "";done; echo ""; + print_2title "Analizing SeedDMS Files (limit 70)" + if ! [ "`echo \"$PSTORAGE_SEEDDMS\" | grep -E \"seeddms.*$\"`" ]; then echo_not_found "seeddms*"; fi; printf "%s" "$PSTORAGE_SEEDDMS" | grep -E "seeddms.*$" | while read f; do ls -ld "$f" | sed -${E} "s,seeddms.*$,${SED_RED},"; for ff in $(find "$f" -name "settings.xml"); do ls -ld "$ff" | sed -${E} "s,settings.xml,${SED_RED},"; cat "$ff" 2>/dev/null | grep -IEv "^$" | grep -E "=" | sed -${E} "s,[pP][aA][sS][sS],${SED_RED},g"; done; echo "";done; echo ""; + + print_2title "Analizing Ddclient Files (limit 70)" if ! [ "`echo \"$PSTORAGE_DDCLIENT\" | grep -E \"ddclient\.conf$\"`" ]; then echo_not_found "ddclient.conf"; fi; printf "%s" "$PSTORAGE_DDCLIENT" | grep -E "ddclient\.conf$" | while read f; do ls -ld "$f" | sed -${E} "s,ddclient\.conf$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$" | sed -${E} "s,.*password.*,${SED_RED},g"; done; echo ""; @@ -2715,9 +2720,9 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then sname="`echo \"$s\" | awk '{print $9}'`" if [ "$sname" = "." ] || [ "$sname" = ".." ]; then true #Don't do nothing - elif [ -O "$sname" ]; then + elif ! [ "$IAMROOT" ] && [ -O "$sname" ]; then echo "You own the SUID file: $sname" | sed -${E} "s,.*,${SED_RED}," - elif [ -w "$sname" ]; then #If write permision, win found (no check exploits) + elif ! [ "$IAMROOT" ] && [ -w "$sname" ]; then #If write permision, win found (no check exploits) echo "You can write SUID file: $sname" | sed -${E} "s,.*,${SED_RED_YELLOW}," else c="a" @@ -2776,9 +2781,9 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then sname="`echo \"$s\" | awk '{print $9}'`" if [ "$sname" = "." ] || [ "$sname" = ".." ]; then true #Don't do nothing - elif [ -O "$sname" ]; then + elif ! [ "$IAMROOT" ] && [ -O "$sname" ]; then echo "You own the SGID file: $sname" | sed -${E} "s,.*,${SED_RED}," - elif [ -w "$sname" ]; then #If write permision, win found (no check exploits) + elif ! [ "$IAMROOT" ] &6 [ -w "$sname" ]; then #If write permision, win found (no check exploits) echo "You can write SGID file: $sname" | sed -${E} "s,.*,${SED_RED_YELLOW}," else c="a" @@ -2857,7 +2862,7 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then echo "Files with capabilities (limited to 50):" getcap -r / 2>/dev/null | head -n 50 | while read cb; do echo "$cb" | sed -${E} "s,$sudocapsB,${SED_RED}," | sed -${E} "s,$capsB,${SED_RED}," - if [ -w "`echo \"$cb\" | cut -d \" \" -f1`" ]; then + if ! [ "$IAMROOT" ] && [ -w "`echo \"$cb\" | cut -d \" \" -f1`" ]; then echo "$cb is writable" | sed -${E} "s,.*,${SED_RED}," fi done @@ -2883,9 +2888,9 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#script-binaries-in-path" echo $PATH | tr ":" "\n" | while read d; do for f in `find "$d" -name "*.sh" 2>/dev/null`; do - if [ -O "$f" ]; then + if ! [ "$IAMROOT" ] && [ -O "$f" ]; then echo "You own the script: $f" | sed -${E} "s,.*,${SED_RED}," - elif [ -w "$f" ]; then #If write permision, win found (no check exploits) + elif ! [ "$IAMROOT" ] && [ -w "$f" ]; then #If write permision, win found (no check exploits) echo "You can write script: $f" | sed -${E} "s,.*,${SED_RED_YELLOW}," else echo $f | sed -${E} "s,$shscripsG,${SED_GREEN}," | sed -${E} "s,$Wfolders,${SED_RED},"; @@ -2908,9 +2913,9 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#profiles-files" if [ ! "$MACPEAS" ]; then #Those folders don´t exist on a MacOS (ls -la /etc/profile.d/ 2>/dev/null | sed -${E} "s,$profiledG,${SED_GREEN},") || echo_not_found "/etc/profile.d/" - if [ -w "/etc/profile" ]; then echo "You can modify /etc/profile" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/etc/profile.d/" ]; then echo "You have write privileges over /etc/profile.d/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/profile.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/profile.d/ '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/profile" ]; then echo "You can modify /etc/profile" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/profile.d/" ]; then echo "You have write privileges over /etc/profile.d/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/profile.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/profile.d/ '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi fi echo "" @@ -2918,20 +2923,20 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then print_2title "Permissions in init, init.d, systemd, and rc.d" print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#init-init-d-systemd-and-rc-d" if [ ! "$MACPEAS" ]; then #Those folders don´t exist on a MacOS - if [ -w "/etc/init/" ]; then echo "You have write privileges over /etc/init/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/init/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/init/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/etc/init.d/" ]; then echo "You have write privileges over /etc/init.d/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/init.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/init.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/etc/rc.d/init.d" ]; then echo "You have write privileges over /etc/rc.d/init.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/rc.d/init.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/rc.d/init.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/usr/local/etc/rc.d" ]; then echo "You have write privileges over /usr/local/etc/rc.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /usr/local/etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /usr/local/etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/etc/rc.d" ]; then echo "You have write privileges over /etc/rc.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/etc/systemd/" ]; then echo "You have write privileges over /etc/systemd/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /etc/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ -w "/lib/systemd/" ]; then echo "You have write privileges over /lib/systemd/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi - if [ "`find /lib/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /lib/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/init/" ]; then echo "You have write privileges over /etc/init/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/init/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/init/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/init.d/" ]; then echo "You have write privileges over /etc/init.d/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/init.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/init.d/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/rc.d/init.d" ]; then echo "You have write privileges over /etc/rc.d/init.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/rc.d/init.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/rc.d/init.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/usr/local/etc/rc.d" ]; then echo "You have write privileges over /usr/local/etc/rc.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /usr/local/etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /usr/local/etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/rc.d" ]; then echo "You have write privileges over /etc/rc.d" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/rc.d -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/etc/systemd/" ]; then echo "You have write privileges over /etc/systemd/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /etc/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /etc/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ -w "/lib/systemd/" ]; then echo "You have write privileges over /lib/systemd/" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi + if ! [ "$IAMROOT" ] && [ "`find /lib/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges over `find /lib/systemd/ -type f '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')'`" | sed -${E} "s,.*,${SED_RED_YELLOW},"; fi fi echo "" @@ -2969,7 +2974,7 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then ##-- IF) network-scripts print_list "Can I write in network-scripts? ...... " - if [ -w "/etc/sysconfig/network-scripts/" ]; then echo "You have write privileges on /etc/sysconfig/network-scripts/" | sed -${E} "s,.*,${SED_RED_YELLOW}," + if ! [ "$IAMROOT" ] && [ -w "/etc/sysconfig/network-scripts/" ]; then echo "You have write privileges on /etc/sysconfig/network-scripts/" | sed -${E} "s,.*,${SED_RED_YELLOW}," elif [ "`find /etc/sysconfig/network-scripts/ '(' -not -type l -and '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' ')' 2>/dev/null`" ]; then echo "You have write privileges on `find /etc/sysconfig/network-scripts/ '(' -not -type l -and '(' '(' -user $USER ')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '(' $wgroups ')' ')' ')' ')' 2>/dev/null`" | sed -${E} "s,.*,${SED_RED_YELLOW}," else echo_no fi @@ -3010,11 +3015,11 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then lastWlogFolder="ImPOsSiBleeElastWlogFolder" logfind=`find / -type f -name "*.log" -o -name "*.log.*" 2>/dev/null | awk -F/ '{line_init=$0; if (!cont){ cont=0 }; $NF=""; act=$0; if (act == pre){(cont += 1)} else {cont=0}; if (cont < 3){ print line_init; }; if (cont == "3"){print "#)You_can_write_more_log_files_inside_last_directory"}; pre=act}' | head -n 100` printf "%s\n" "$logfind" | while read log; do - if [ -w "$log" ] || [ `echo "$log" | grep -E "$Wfolders"` ]; then #Only print info if something interesting found + if ! [ "$IAMROOT" ] && [ -w "$log" ] || ! [ "$IAMROOT" ] && [ `echo "$log" | grep -E "$Wfolders"` ]; then #Only print info if something interesting found if [ "`echo \"$log\" | grep \"You_can_write_more_log_files_inside_last_directory\"`" ]; then printf $ITALIC"$log\n"$NC; - elif [ -w "$log" ] && [ "`command -v logrotate 2>/dev/null`" ] && [ "`logrotate --version 2>&1 | grep -E ' 1| 2| 3.1'`" ]; then printf "Writable:$RED $log\n"$NC; #Check vuln version of logrotate is used and print red in that case - elif [ -w "$log" ]; then echo "Writable: $log"; - elif [ "`echo \"$log\" | grep -E \"$Wfolders\"`" ] && [ "$log" ] && [ ! "$lastWlogFolder" == "$log" ]; then lastWlogFolder="$log"; echo "Writable folder: $log" | sed -${E} "s,$Wfolders,${SED_RED},g"; + elif ! [ "$IAMROOT" ] && [ -w "$log" ] && [ "`command -v logrotate 2>/dev/null`" ] && [ "`logrotate --version 2>&1 | grep -E ' 1| 2| 3.1'`" ]; then printf "Writable:$RED $log\n"$NC; #Check vuln version of logrotate is used and print red in that case + elif ! [ "$IAMROOT" ] && [ -w "$log" ]; then echo "Writable: $log"; + elif ! [ "$IAMROOT" ] && [ "`echo \"$log\" | grep -E \"$Wfolders\"`" ] && [ "$log" ] && [ ! "$lastWlogFolder" == "$log" ]; then lastWlogFolder="$log"; echo "Writable folder: $log" | sed -${E} "s,$Wfolders,${SED_RED},g"; fi fi done