Hacker Term Search
From James Dooley's Wiki
Overview
Simple find statement coupled with a grep statement. Will return path of any file containing these terms.
Script
find /home*/ -type f -name "*.htm*" -print0 -o -type f -name "*.php" -print0 | xargs -0 grep -il "hacked by\|script kitten" >> /home/malware_hits.txt
What to change
Change the terms in the grep statement.
Hacked by is the most common, Kittens use the same terms on all of their pages. No need to be original.
Additional terms can be added if looking for a specific hacker group.
