From b3eefad3feb2469581b92f7043db5c348e9e5b7d Mon Sep 17 00:00:00 2001
From: carlospolop <carlospolop@gmail.com>
Date: Mon, 14 Mar 2022 16:30:44 -0400
Subject: [PATCH] check /opt

---
 linPEAS/builder/linpeas_parts/7_interesting_files.sh | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/linPEAS/builder/linpeas_parts/7_interesting_files.sh b/linPEAS/builder/linpeas_parts/7_interesting_files.sh
index e45de5e..46b1123 100644
--- a/linPEAS/builder/linpeas_parts/7_interesting_files.sh
+++ b/linPEAS/builder/linpeas_parts/7_interesting_files.sh
@@ -257,12 +257,18 @@ if [ "$broken_links" ] || [ "$DEBUG" ]; then
   echo ""
 fi
 
-
 if [ "$MACPEAS" ]; then
   print_2title "Unsigned Applications"
   macosNotSigned /System/Applications
 fi
 
+##-- IF) Unexpected in /opt
+if [ "$(ls /opt 2>/dev/null)" ]; then
+  print_2title "Unexpected in /opt (usually empty)"
+  ls -la /opt
+  echo ""
+fi
+
 ##-- IF) Unexpected folders in /
 print_2title "Unexpected in root"
 if [ "$MACPEAS" ]; then