Difference between revisions of "Hacker Term Search"
From James Dooley's Wiki
(→Script) |
|||
| Line 1: | Line 1: | ||
| + | [[Category:One Liners]] | ||
==Overview== | ==Overview== | ||
Simple find statement coupled with a grep statement. Will return path of any file containing these terms. | Simple find statement coupled with a grep statement. Will return path of any file containing these terms. | ||
Revision as of 17:39, 17 February 2012
Overview
Simple find statement coupled with a grep statement. Will return path of any file containing these terms.
Script
[bash,n]
find /home*/ -type f -name "*.htm*" -print0 -o -type f -name "*.php" -print0 | xargs -0 grep -il "hacked by\|script kitten" >> /home/malware_hits.txt
What to change
Change the terms in the grep statement.
Hacked by is the most common, Kittens use the same terms on all of their pages. No need to be original.
Additional terms can be added if looking for a specific hacker group.
