PenTest/privilege-escalation-awesome-scripts-suite
1
0
Fork 0
mirror of https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite.git synced 2025-12-19 06:39:02 +00:00
Code Issues Projects Releases Wiki Activity

linpeas

Browse Source
This commit is contained in:
Carlos.Martin
2021-08-08 17:20:45 +01:00
parent fe3ec9ea12
commit 14ebbdb3e2
5 changed files with 448 additions and 305 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
build_lists/sensitive_files.yaml
View File

@@ -79,6 +79,13 @@ storage_template: >
int_hidden_files_markup: "peass{INT_HIDDEN_FILES}"
suidVB1_markup: "peass{SUIDVB1_HERE}"
suidVB2_markup: "peass{SUIDVB2_HERE}"
sudoVB1_markup: "peass{SUDOVB1_HERE}"
sudoVB2_markup: "peass{SUDOVB2_HERE}"
cap_setuid_markup: "peass{CAP_SETUID_HERE}"
cap_setgid_markup: "peass{CAP_SETGID_HERE}"
##############################
@@ -594,6 +601,33 @@ search:
search_in:
- common
- name: Racoon
value:
config:
auto_check: True
files:
- name: "racoon.conf"
value:
remove_empty_lines: True
bad_regex: "pre_shared_key.*"
remove_regex: '^#'
type: f
search_in:
- common
files:
- name: "racoon"
value:
files:
- name: "psk.txt"
value:
bad_regex: ".*"
type: d
search_in:
- common
- name: VNC
value:
config:

60
linPEAS/builder/linpeas_base.sh
View File

@@ -299,7 +299,7 @@ knw_grps='\(lpadmin\)|\(cdrom\)|\(plugdev\)|\(nogroup\)' #https://www.togaware.c
mygroups=$(groups 2>/dev/null | tr " " "|")
# Default Binaries List
sidG1="/abuild-sudo$|/accton$|/allocate$|/ARDAgent|/arping$|/atq$|/atrm$|/authpf$|/authpf-noip$|/authopen$|/batch$|/bbsuid$|/bsd-write$|/btsockstat$|/bwrap$|/cacaocsc$|/camel-lock-helper-1.2$|/ccreds_validate$|/cdrw$|/chage$|/check-foreground-console$|/chrome-sandbox$|/chsh$|/cons.saver$|/crontab$|/ct$|/cu$|/dbus-daemon-launch-helper$|/deallocate$|/desktop-create-kmenu$|/dma$|/dma-mbox-create$|/dmcrypt-get-device$|/doas$|/dotlockfile$|/dotlock.mailutils$|/dtaction$|/dtfile$|/eject$|/execabrt-action-install-debuginfo-to-abrt-cache$|/execdbus-daemon-launch-helper$|/execdma-mbox-create$|/execlockspool$|/execlogin_chpass$|/execlogin_lchpass$|/execlogin_passwd$|/execssh-keysign$|/execulog-helper$|/exim4|/expiry$|/fdformat$|/fstat$|/fusermount$|/fusermount3$"
sidG1="/abuild-sudo$|/accton$|/allocate$|/ARDAgent$|/arping$|/atq$|/atrm$|/authpf$|/authpf-noip$|/authopen$|/batch$|/bbsuid$|/bsd-write$|/btsockstat$|/bwrap$|/cacaocsc$|/camel-lock-helper-1.2$|/ccreds_validate$|/cdrw$|/chage$|/check-foreground-console$|/chrome-sandbox$|/chsh$|/cons.saver$|/crontab$|/ct$|/cu$|/dbus-daemon-launch-helper$|/deallocate$|/desktop-create-kmenu$|/dma$|/dma-mbox-create$|/dmcrypt-get-device$|/doas$|/dotlockfile$|/dotlock.mailutils$|/dtaction$|/dtfile$|/eject$|/execabrt-action-install-debuginfo-to-abrt-cache$|/execdbus-daemon-launch-helper$|/execdma-mbox-create$|/execlockspool$|/execlogin_chpass$|/execlogin_lchpass$|/execlogin_passwd$|/execssh-keysign$|/execulog-helper$|/exim4|/expiry$|/fdformat$|/fstat$|/fusermount$|/fusermount3$"
sidG2="/gnome-pty-helper$|/glines$|/gnibbles$|/gnobots2$|/gnome-suspend$|/gnometris$|/gnomine$|/gnotski$|/gnotravex$|/gpasswd$|/gpg$|/gpio$|/gtali|/.hal-mtab-lock$|/helper$|/imapd$|/inndstart$|/kismet_cap_nrf_51822$|/kismet_cap_nxp_kw41z$|/kismet_cap_ti_cc_2531$|/kismet_cap_ti_cc_2540$|/kismet_cap_ubertooth_one$|/kismet_capture$|/kismet_cap_linux_bluetooth$|/kismet_cap_linux_wifi$|/kismet_cap_nrf_mousejack$|/ksu$|/list_devices$|/load_osxfuse$|/locate$|/lock$|/lockdev$|/lockfile$|/login_activ$|/login_crypto$|/login_radius$|/login_skey$|/login_snk$|/login_token$|/login_yubikey$|/lpc$|/lpd$|/lpd-port$|/lppasswd$|/lpq$|/lpr$|/lprm$|/lpset$|/lxc-user-nic$|/mahjongg$|/mail-lock$|/mailq$|/mail-touchlock$|/mail-unlock$|/mksnap_ffs$|/mlocate$|/mlock$|/mount$|/mount.cifs$|/mount.ecryptfs_private$|/mount.nfs$|/mount.nfs4$|/mount_osxfuse$|/mtr$|/mutt_dotlock$"
sidG3="/ncsa_auth$|/netpr$|/netkit-rcp$|/netkit-rlogin$|/netkit-rsh$|/netreport$|/netstat$|/newgidmap$|/newtask$|/newuidmap$|/nvmmctl$|/opieinfo$|/opiepasswd$|/pam_auth$|/pam_extrausers_chkpwd$|/pam_timestamp_check$|/pamverifier$|/pfexec$|/ping$|/ping6$|/pmconfig$|/pmap$|/polkit-agent-helper-1$|/polkit-explicit-grant-helper$|/polkit-grant-helper$|/polkit-grant-helper-pam$|/polkit-read-auth-helper$|/polkit-resolve-exe-helper$|/polkit-revoke-helper$|/polkit-set-default-helper$|/postdrop$|/postqueue$|/poweroff$|/ppp$|/procmail$|/pstat$|/pt_chmod$|/pwdb_chkpwd$|/quota$|/rcmd|/remote.unknown$|/rlogin$|/rmformat$|/rnews$|/run-mailcap$|/sacadm$|/same-gnome$|screen.real$|/security_authtrampoline$|/sendmail.sendmail$|/shutdown$|/skeyaudit$|/skeyinfo$|/skeyinit$|/sliplogin|/slocate$|/smbmnt$|/smbumount$|/smpatch$|/smtpctl$|/sperl5.8.8$|/ssh-agent$|/ssh-keysign$|/staprun$|/startinnfeed$|/stclient$|/su$|/suexec$|/sys-suspend$|/sysstat$|/systat$"
sidG4="/telnetlogin$|/timedc$|/tip$|/top$|/traceroute6$|/traceroute6.iputils$|/trpt$|/tsoldtlabel$|/tsoljdslabel$|/tsolxagent$|/ufsdump$|/ufsrestore$|/ulog-helper$|/umount.cifs$|/umount.nfs$|/umount.nfs4$|/unix_chkpwd$|/uptime$|/userhelper$|/userisdnctl$|/usernetctl$|/utempter$|/utmp_update$|/uucico$|/uuglist$|/uuidd$|/uuname$|/uusched$|/uustat$|/uux$|/uuxqt$|/VBoxHeadless$|/VBoxNetAdpCtl$|/VBoxNetDHCP$|/VBoxNetNAT$|/VBoxSDL$|/VBoxVolInfo$|/VirtualBoxVM$|/vmstat$|/vmware-authd$|/vmware-user-suid-wrapper$|/vmware-vmx$|/vmware-vmx-debug$|/vmware-vmx-stats$|/vncserver-x11$|/volrmmount$|/w$|/wall$|/whodo$|/write$|/X$|/Xorg.wrap$|/Xsun$|/Xvnc$|/yppasswd$"
@@ -359,16 +359,29 @@ sidB="/apache2$%Read_root_passwd__apache2_-f_/etc/shadow\(CVE-2019-0211\)\
/xorg$%Xorg_1.19_to_1.20.x\(CVE_2018-14665\)/xorg-x11-server<=1.20.3/AIX_7.1_\(6.x_to_7.x_should_be_vulnerable\)_X11.base.rte<7.1.5.32_and_\
/xterm$%Solaris_5.5.1_X11R6.3\(05-1997\)/Debian_xterm_version_222-1etch2\(01-2009\)"
#To update sidVB: curl https://github.com/GTFOBins/GTFOBins.github.io/tree/master/_gtfobins 2>/dev/null | grep 'href="/GTFOBins/' | grep '.md">' | awk -F 'title="' '{print $2}' | cut -d '"' -f1 | cut -d "." -f1 | sed -e 's,^,/,' | sed -e 's,$,\$,' | tr '\n' '|'
sidVB='/apt-get$|/apt$|/ar$|/aria2c$|/arp$|/ash$|/at$|/atobm$|/awk$|/base32$|/base64$|/basenc$|/bash$|/bpftrace$|/bridge$|/bundler$|/busctl$|/busybox$|/byebug$|/cancel$|/capsh$|/cat$|/certbot$|/check_by_ssh$|/check_cups$|/check_log$|/check_memory$|/check_raid$|/check_ssl_cert$|/check_statusfile$|/chmod$|/chown$|/chroot$|/cobc$|/column$|/comm$|/composer$|/cowsay$|/cowthink$|/cp$|/cpan$|/cpio$|/cpulimit$|/crash$|/crontab$|/csh$|/csplit$|/csvtool$|/cupsfilter$|/curl$|/cut$|/dash$|/date$|/dd$|/dialog$|/diff$|/dig$|/dmesg$|/dmsetup$|/dnf$|/docker$|/dpkg$|/dvips$|/easy_install$|/eb$|/ed$|/emacs$|/env$|/eqn$|/ex$|/exiftool$|/expand$|/expect$|/facter$|/file$|/find$|/finger$|/flock$|/fmt$|/fold$|/ftp$|/gawk$|/gcc$|/gdb$|/gem$|/genisoimage$|/ghc$|/ghci$|/gimp$|/git$|/grep$|/gtester$|/gzip$|/hd$|/head$|/hexdump$|/highlight$|/hping3$|/iconv$|/iftop$|/install$|/ionice$|/ip$|/irb$|/jjs$|/join$|/journalctl$|/jq$|/jrunscript$|/ksh$|/ksshell$'
sidVB2='/latex$|/ld$|/ldconfig$|/less$|/logsave$|/look$|/ltrace$|/lua$|/lualatex$|/luatex$|/lwp-download$|/lwp-request$|/mail$|/make$|/man$|/mawk$|/more$|/mount$|/mtr$|/mv$|/mysql$|/nano$|/nawk$|/nc$|/nice$|/nl$|/nmap$|/node$|/nohup$|/npm$|/nroff$|/nsenter$|/octave$|/od$|/openssl$|/openvpn$|/openvt$|/paste$|/pdb$|/pdflatex$|/pdftex$|/perl$|/pg$|/php$|/pic$|/pico$|/pip$|/pkexec$|/pkg$|/pr$|/pry$|/psql$|/puppet$|/python$|/rake$|/readelf$|/red$|/redcarpet$|/restic$|/rev$|/rlogin$|/rlwrap$|/rpm$|/rpmquery$|/rsync$|/ruby$|/run-mailcap$|/run-parts$|/rview$|/rvim$|/scp$|/screen$|/script$|/sed$|/service$|/setarch$|/sftp$|/sg$|/shuf$|/slsh$|/smbclient$|/snap$|/socat$|/soelim$|/sort$|/split$|/sqlite3$|/ss$|/ssh-keygen$|/ssh-keyscan$|/ssh$|/start-stop-daemon$|/stdbuf$|/strace$|/strings$|/su$|/sysctl$|/systemctl$|/tac$|/tail$|/tar$|/taskset$|/tbl$|/tclsh$|/tcpdump$|/tee$|/telnet$|/tex$|/tftp$|/time$|/timeout$|/tmux$|/top$|/troff$|/ul$|/unexpand$|/uniq$|/unshare$|/update-alternatives$|/uudecode$|/uuencode$|/valgrind$|/vi$|/view$|/vigr$|/vim$|/vimdiff$|/vipw$|/virsh$|/watch$|/wc$|/wget$|/whois$|/wish$|/xargs$|/xelatex$|/xetex$|/xmodmap$|/xxd$|/xz$|/yelp$|/yum$|/zip$|/zsh$|/zsoelim$|/zypper$'
sidVB='peass{SUIDVB1_HERE}'
sidVB2='peass{SUIDVB2_HERE}'
cfuncs='file|free|main|more|read|split|write'
sudoVB=" \*|env_keep\+=LD_PRELOAD|apt-get$|apt$|aria2c$|arp$|ash$|awk$|base64$|bash$|busybox$|cat$|chmod$|chown$|cp$|cpan$|cpulimit$|crontab$|csh$|curl$|cut$|dash$|date$|dd$|diff$|dmesg$|dmsetup$|dnf$|docker$|dpkg$|easy_install$|ed$|emacs$|env$|expand$|expect$|facter$|file$|find$|flock$|fmt$|fold$|ftp$|gdb$|gimp$|git$|grep$|head$|ionice$|ip$|irb$|jjs$|journalctl$|jq$|jrunscript$|ksh$|ld.so$|less$|logsave$|ltrace$|lua$|mail$|make$|man$|more$|mount$|mtr$|mv$|mysql$|nano$|nc$|nice$|nl$|nmap$|node$|od$|openssl$|perl$|pg$|php$|pic$|pico$|pip$|puppet$|python$|readelf$|red$|rlwrap$|rpm$|rpmquery$|rsync$|ruby$|run-mailcap$|run-parts$|rvim$|scp$|screen$|script$|sed$|service$|setarch$|sftp$|smbclient$|socat$|sort$|sqlite3$|ssh$|start-stop-daemon$|stdbuf$|strace$|systemctl$|tail$|tar$|taskset$|tclsh$|tcpdump$|tee$|telnet$|tftp$|time$|timeout$|tmux$|ul$|unexpand$|uniq$|unshare$|vi$|vim$|watch$|wget$|wish$|xargs$|xxd$|yum$|zip$|zsh$|zypper$"
sudoVB1=" \*|env_keep\+=LD_PRELOAD|peass{SUDOVB1_HERE}"
sudoVB2="peass{SUDOVB2_HERE}"
sudoB="$(whoami)|ALL:ALL|ALL : ALL|ALL|NOPASSWD|SETENV|/apache2|/cryptsetup|/mount"
sudoG="NOEXEC"
sudocapsB="/apt-get|/apt|/aria2c|/arp|/ash|/awk|/base64|/bash|/busybox|/cat|/chmod|/chown|/cp|/cpan|/cpulimit|/crontab|/csh|/curl|/cut|/dash|/date|/dd|/diff|/dmesg|/dmsetup|/dnf|/docker|/dpkg|/easy_install|/ed|/emacs|/env|/expand|/expect|/facter|/file|/find|/flock|/fmt|/fold|/ftp|/gdb|/gimp|/git|/grep|/head|/ionice|/ip|/irb|/jjs|/journalctl|/jq|/jrunscript|/ksh|/ld.so|/less|/logsave|/ltrace|/lua|/mail|/make|/man|/more|/mount|/mtr|/mv|/mysql|/nano|/nc|/nice|/nl|/nmap|/node|/od|/openssl|/perl|/pg|/php|/pic|/pico|/pip|/puppet|/python|/readelf|/red|/rlwrap|/rpm|/rpmquery|/rsync|/ruby|/run-mailcap|/run-parts|/rvim|/scp|/screen|/script|/sed|/service|/setarch|/sftp|/smbclient|/socat|/sort|/sqlite3|/ssh|/start-stop-daemon|/stdbuf|/strace|/systemctl|/tail|/tar|/taskset|/tclsh|/tcpdump|/tee|/telnet|/tftp|/time|/timeout|/tmux|/ul|/unexpand|/uniq|/unshare|/vi|/vim|/watch|/wget|/wish|/xargs|/xxd|/yum|/zip|/zsh|/zypper"
capsB="=ep|cap_chown|cap_dac_override|cap_dac_read_search|cap_setuid|sys_admin|sys_ptrace|sys_module"
capsVB="cap_sys_admin:mount|python\n\
cap_sys_ptrace:python\n\
cap_sys_module:kmod|python\n\
cap_dac_override:python|vim\n\
cap_chown:chown|python\n\
cap_former:chown|python\n\
cap_setuid:peass{CAP_SETUID_HERE}\n\
cap_setgid:peass{CAP_SETGID_HERE}\n\
cap_kill:kill|python\n\
cap_net_bind_service:nc|ncat|python\n\
cap_net_raw:python|tcpdump"
capsB="=ep|cap_chown|cap_former|cap_setfcap|cap_dac_override|cap_dac_read_search|cap_setuid|cap_setgid|cap_kill|cap_net_bind_service|cap_net_raw|cap_net_admin|cap_sys_admin|cap_sys_ptrace|cap_sys_module"
containercapsB="sys_admin|sys_ptrace|sys_module|dac_read_search|dac_override"
OLDPATH=$PATH
@@ -1154,7 +1167,7 @@ if echo $CHECKS | grep -q SysI; then
#-- SY) Environment vars
print_2title "Environment"
print_info "Any private information inside environment variables?"
(env || printenv || set) 2>/dev/null | grep -v "RELEVANT*|FIND*|^VERSION=|dbuslistG|mygroups|ldsoconfdG|pwd_inside_history|kernelDCW_Ubuntu_Precise|kernelDCW_Ubuntu_Trusty|kernelDCW_Ubuntu_Xenial|kernelDCW_Rhel|^sudovB=|^rootcommon=|^mounted=|^mountG=|^notmounted=|^mountpermsB=|^mountpermsG=|^kernelB=|^C=|^RED=|^GREEN=|^Y=|^B=|^NC=|TIMEOUT=|groupsB=|groupsVB=|knw_grps=|sidG|sidB=|sidVB=|sidVB2=|sudoB=|sudoG=|sudoVB=|sudocapsB=|timersG=|capsB=|notExtensions=|Wfolders=|writeB=|writeVB=|_usrs=|compiler=|PWD=|LS_COLORS=|pathshG=|notBackup=|processesDump|processesB|commonrootdirs" | sed -${E} "s,[pP][wW][dD]|[pP][aA][sS][sS][wW]|[aA][pP][iI][kK][eE][yY]|[aA][pP][iI][_][kK][eE][yY],${SED_RED},g" || echo_not_found "env || set"
(env || printenv || set) 2>/dev/null | grep -v "RELEVANT*|FIND*|^VERSION=|dbuslistG|mygroups|ldsoconfdG|pwd_inside_history|kernelDCW_Ubuntu_Precise|kernelDCW_Ubuntu_Trusty|kernelDCW_Ubuntu_Xenial|kernelDCW_Rhel|^sudovB=|^rootcommon=|^mounted=|^mountG=|^notmounted=|^mountpermsB=|^mountpermsG=|^kernelB=|^C=|^RED=|^GREEN=|^Y=|^B=|^NC=|TIMEOUT=|groupsB=|groupsVB=|knw_grps=|sidG|sidB=|sidVB=|sidVB2=|sudoB=|sudoG=|sudoVB=|timersG=|capsB=|notExtensions=|Wfolders=|writeB=|writeVB=|_usrs=|compiler=|PWD=|LS_COLORS=|pathshG=|notBackup=|processesDump|processesB|commonrootdirs" | sed -${E} "s,[pP][wW][dD]|[pP][aA][sS][sS][wW]|[aA][pP][iI][kK][eE][yY]|[aA][pP][iI][_][kK][eE][yY],${SED_RED},g" || echo_not_found "env || set"
echo ""
#-- SY) Dmesg
@@ -1798,18 +1811,18 @@ if echo $CHECKS | grep -q UsrI; then
#-- UI) Sudo -l
print_2title "Checking 'sudo -l', /etc/sudoers, and /etc/sudoers.d"
print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#sudo-and-suid"
(echo '' | sudo -S -l | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW}," | sed "s,\!root,${SED_RED},") 2>/dev/null || echo_not_found "sudo"
(echo '' | sudo -S -l | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed -${E} "s,$sudoVB1,${SED_RED_YELLOW}," | sed -${E} "s,$sudoVB2,${SED_RED_YELLOW}," | sed "s,\!root,${SED_RED},") 2>/dev/null || echo_not_found "sudo"
if [ "$PASSWORD" ]; then
(echo "$PASSWORD" | sudo -S -l | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "sudo"
(echo "$PASSWORD" | sudo -S -l | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed -${E} "s,$sudoVB1,${SED_RED_YELLOW}," | sed -${E} "s,$sudoVB2,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "sudo"
fi
( grep -Iv "^$" cat /etc/sudoers | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "/etc/sudoers"
( grep -Iv "^$" cat /etc/sudoers | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g" | sed -${E} "s,$sudoVB1,${SED_RED_YELLOW}," | sed -${E} "s,$sudoVB2,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "/etc/sudoers"
if ! [ "$IAMROOT" ] && [ -w '/etc/sudoers.d/' ]; then
echo "You can create a file in /etc/sudoers.d/ and escalate privileges" | sed -${E} "s,.*,${SED_RED_YELLOW},"
fi
for filename in '/etc/sudoers.d/*'; do
if [ -r "$filename" ]; then
echo "Sudoers file: $filename is readable" | sed -${E} "s,.*,${SED_RED},g"
grep -Iv "^$" "$filename" | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW},"
grep -Iv "^$" "$filename" | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g" | sed -${E} "s,$sudoVB1,${SED_RED_YELLOW}," | sed -${E} "s,$sudoVB2,${SED_RED_YELLOW},"
fi
done
echo ""
@@ -2665,7 +2678,22 @@ if echo $CHECKS | grep -q IntFiles; then
echo ""
echo "Files with capabilities (limited to 50):"
getcap -r / 2>/dev/null | head -n 50 | while read cb; do
echo "$cb" | sed -${E} "s,$sudocapsB,${SED_RED}," | sed -${E} "s,$capsB,${SED_RED},"
capsVB_vuln=""
for capVB in $capsVB; do
capname="$(echo $capVB | cut -d ':' -f 1)"
capbins="$(echo $capVB | cut -d ':' -f 2)"
if [ "$(echo $cb | grep -Ei $capname)" ] && [ "$(echo $cb | grep -E $capbins)" ]; then
echo "$cb" | sed -${E} "s,.*,${SED_RED_YELLOW},"
capsVB_vuln="1"
break
fi
done
if ! [ "$capsVB_vuln" ]; then
echo "$cb" | sed -${E} "s,$capsB,${SED_RED},"
fi
if ! [ "$IAMROOT" ] && [ -w "$(echo \"$cb\" | cut -d \" \" -f1)" ]; then
echo "$cb is writable" | sed -${E} "s,.*,${SED_RED},"
fi
@@ -2763,7 +2791,7 @@ if echo $CHECKS | grep -q IntFiles; then
##-- IF) Hashes in passwd file
print_list "Hashes inside passwd file? ........... "
if grep -qv '^[^:]*:[x\*\!]\|^#\|^$' /etc/passwd /etc/master.passwd /etc/group; then grep -v '^[^:]*:[x\*]\|^#\|^$' /etc/passwd /etc/pwd.db /etc/master.passwd /etc/group 2>/dev/null | sed -${E} "s,.*,${SED_RED},"
if grep -qv '^[^:]*:[x\*\!]\|^#\|^$' /etc/passwd /etc/master.passwd /etc/group 2>/dev/null; then grep -v '^[^:]*:[x\*]\|^#\|^$' /etc/passwd /etc/pwd.db /etc/master.passwd /etc/group 2>/dev/null | sed -${E} "s,.*,${SED_RED},"
else echo_no
fi
@@ -2788,10 +2816,12 @@ if echo $CHECKS | grep -q IntFiles; then
fi
print_list "Can I read shadow plists? ............ "
(for l in /var/db/dslocal/nodes/Default/users/*; do if [ -r "$l" ];then echo "$l"; defaults read "$l"; fi; done) 2>/dev/null || echo_no
possible_check=""
(for l in /var/db/dslocal/nodes/Default/users/*; do if [ -r "$l" ];then echo "$l"; defaults read "$l"; possible_check="1"; fi; done; if ! [ "$possible_check" ]; then echo_no; fi) 2>/dev/null || echo_no
print_list "Can I write shadow plists? ........... "
(for l in /var/db/dslocal/nodes/Default/users/*; do if [ -w "$l" ];then echo "$l"; fi; done) 2>/dev/null || echo_no
possible_check=""
(for l in /var/db/dslocal/nodes/Default/users/*; do if [ -w "$l" ];then echo "$l"; possible_check="1"; fi; done; if ! [ "$possible_check" ]; then echo_no; fi) 2>/dev/null || echo_no
##-- IF) Read opasswd file
print_list "Can I read opasswd file? ............. "

51
linPEAS/builder/src/linpeasBuilder.py
View File

@@ -1,4 +1,5 @@
import re
import requests
from .peasLoaded import PEASLoaded
from .peassRecord import PEASRecord
@@ -17,7 +18,13 @@ from .yamlGlobals import (
STORAGE_LINE_EXTRA_MARKUP,
EXTRASECTIONS_MARKUP,
PEAS_VARIABLES_MARKUP,
YAML_VARIABLES
YAML_VARIABLES,
SUIDVB1_MARKUP,
SUIDVB2_MARKUP,
SUDOVB1_MARKUP,
SUDOVB2_MARKUP,
CAP_SETUID_MARKUP,
CAP_SETGID_MARKUP
)
@@ -32,12 +39,15 @@ class LinpeasBuilder:
self.linpeas_sh = file.read()
def build(self):
print("[+] Building variables...")
variables = self.__generate_variables()
self.__replace_mark(PEAS_VARIABLES_MARKUP, variables, "")
print("[+] Building finds...")
find_calls = self.__generate_finds()
self.__replace_mark(PEAS_FINDS_MARKUP, find_calls, " ")
print("[+] Building storages...")
storage_vars = self.__generate_storages()
self.__replace_mark(PEAS_STORAGES_MARKUP, storage_vars, " ")
@@ -45,16 +55,16 @@ class LinpeasBuilder:
for s in re.findall(r'PSTORAGE_[\w]*', self.linpeas_sh):
assert s in self.bash_storages, f"{s} isn't created"
#Replace interesting hidden files markup for a list of all the serched hidden files
#Replace interesting hidden files markup for a list of all the searched hidden files
self.__replace_mark(INT_HIDDEN_FILES_MARKUP, sorted(self.hidden_files), "|")
#Check if there are duplicate peass marks
print("[+] Checking duplicates...")
peass_marks = self.__get_peass_marks()
for i,mark in enumerate(peass_marks):
for j in range(i+1,len(peass_marks)):
assert mark != peass_marks[j], f"Found repeated peass mark: {mark}"
#Generate autocheck sections
print("[+] Building autocheck sections...")
sections = self.__generate_sections()
for section_name, bash_lines in sections.items():
mark = "peass{"+section_name+"}"
@@ -65,7 +75,17 @@ class LinpeasBuilder:
self.__replace_mark(EXTRASECTIONS_MARKUP, list(""), "") #Delete extra markup
#Check that there aren peass marks left in linpeas
print("[+] Building GTFOBins lists...")
suidVB, sudoVB, capsVB = self.__get_gtfobins_lists()
self.__replace_mark(SUIDVB1_MARKUP, suidVB[:int(len(suidVB)/2)], "|")
self.__replace_mark(SUIDVB2_MARKUP, suidVB[int(len(suidVB)/2):], "|")
self.__replace_mark(SUDOVB1_MARKUP, sudoVB[:int(len(sudoVB)/2)], "|")
self.__replace_mark(SUDOVB2_MARKUP, sudoVB[int(len(sudoVB)/2):], "|")
self.__replace_mark(CAP_SETUID_MARKUP, capsVB, "|")
self.__replace_mark(CAP_SETGID_MARKUP, capsVB, "|")
print("[+] Final sanity checks...")
#Check that there arent peass marks left in linpeas
peass_marks = self.__get_peass_marks()
assert len(peass_marks) == 0, f"There are peass marks left: {', '.join(peass_marks)}"
@@ -167,8 +187,6 @@ class LinpeasBuilder:
return storages
def __generate_sections(self) -> dict:
"""Generate sections for records with auto_check to True"""
sections = {}
@@ -249,6 +267,25 @@ class LinpeasBuilder:
analise_line += 'done; echo "";'
return analise_line
def __get_gtfobins_lists(self) -> tuple:
r = requests.get("https://github.com/GTFOBins/GTFOBins.github.io/tree/master/_gtfobins")
bins = re.findall(r'/GTFOBins/GTFOBins.github.io/blob/master/_gtfobins/([\w_ \-]+).md', r.text)
sudoVB = []
suidVB = []
capsVB = []
for b in bins:
rb = requests.get(f"https://raw.githubusercontent.com/GTFOBins/GTFOBins.github.io/master/_gtfobins/{b}.md")
if "sudo:" in rb.text:
sudoVB.append(b+"$")
if "suid:" in rb.text:
suidVB.append("/"+b+"$")
if "capabilities:" in rb.text:
capsVB.append(b)
return (suidVB, sudoVB, capsVB)
def __replace_mark(self, mark: str, find_calls: list, join_char: str):
"""Substitude the markup with the actual code"""

7
linPEAS/builder/src/yamlGlobals.py
View File

@@ -33,3 +33,10 @@ YAML_VARIABLES = YAML_LOADED["variables"]
INT_HIDDEN_FILES_MARKUP = YAML_LOADED["int_hidden_files_markup"]
EXTRASECTIONS_MARKUP = YAML_LOADED["peas_extrasections_markup"]
SUIDVB1_MARKUP = YAML_LOADED["suidVB1_markup"]
SUIDVB2_MARKUP = YAML_LOADED["suidVB2_markup"]
SUDOVB1_MARKUP = YAML_LOADED["sudoVB1_markup"]
SUDOVB2_MARKUP = YAML_LOADED["sudoVB2_markup"]
CAP_SETUID_MARKUP = YAML_LOADED["cap_setuid_markup"]
CAP_SETGID_MARKUP = YAML_LOADED["cap_setgid_markup"]

309
linPEAS/linpeas.sh
View File

@@ -299,7 +299,7 @@ knw_grps='\(lpadmin\)|\(cdrom\)|\(plugdev\)|\(nogroup\)' #https://www.togaware.c
mygroups=$(groups 2>/dev/null | tr " " "|")
# Default Binaries List
sidG1="/abuild-sudo$|/accton$|/allocate$|/ARDAgent|/arping$|/atq$|/atrm$|/authpf$|/authpf-noip$|/authopen$|/batch$|/bbsuid$|/bsd-write$|/btsockstat$|/bwrap$|/cacaocsc$|/camel-lock-helper-1.2$|/ccreds_validate$|/cdrw$|/chage$|/check-foreground-console$|/chrome-sandbox$|/chsh$|/cons.saver$|/crontab$|/ct$|/cu$|/dbus-daemon-launch-helper$|/deallocate$|/desktop-create-kmenu$|/dma$|/dma-mbox-create$|/dmcrypt-get-device$|/doas$|/dotlockfile$|/dotlock.mailutils$|/dtaction$|/dtfile$|/eject$|/execabrt-action-install-debuginfo-to-abrt-cache$|/execdbus-daemon-launch-helper$|/execdma-mbox-create$|/execlockspool$|/execlogin_chpass$|/execlogin_lchpass$|/execlogin_passwd$|/execssh-keysign$|/execulog-helper$|/exim4|/expiry$|/fdformat$|/fstat$|/fusermount$|/fusermount3$"
sidG1="/abuild-sudo$|/accton$|/allocate$|/ARDAgent$|/arping$|/atq$|/atrm$|/authpf$|/authpf-noip$|/authopen$|/batch$|/bbsuid$|/bsd-write$|/btsockstat$|/bwrap$|/cacaocsc$|/camel-lock-helper-1.2$|/ccreds_validate$|/cdrw$|/chage$|/check-foreground-console$|/chrome-sandbox$|/chsh$|/cons.saver$|/crontab$|/ct$|/cu$|/dbus-daemon-launch-helper$|/deallocate$|/desktop-create-kmenu$|/dma$|/dma-mbox-create$|/dmcrypt-get-device$|/doas$|/dotlockfile$|/dotlock.mailutils$|/dtaction$|/dtfile$|/eject$|/execabrt-action-install-debuginfo-to-abrt-cache$|/execdbus-daemon-launch-helper$|/execdma-mbox-create$|/execlockspool$|/execlogin_chpass$|/execlogin_lchpass$|/execlogin_passwd$|/execssh-keysign$|/execulog-helper$|/exim4|/expiry$|/fdformat$|/fstat$|/fusermount$|/fusermount3$"
sidG2="/gnome-pty-helper$|/glines$|/gnibbles$|/gnobots2$|/gnome-suspend$|/gnometris$|/gnomine$|/gnotski$|/gnotravex$|/gpasswd$|/gpg$|/gpio$|/gtali|/.hal-mtab-lock$|/helper$|/imapd$|/inndstart$|/kismet_cap_nrf_51822$|/kismet_cap_nxp_kw41z$|/kismet_cap_ti_cc_2531$|/kismet_cap_ti_cc_2540$|/kismet_cap_ubertooth_one$|/kismet_capture$|/kismet_cap_linux_bluetooth$|/kismet_cap_linux_wifi$|/kismet_cap_nrf_mousejack$|/ksu$|/list_devices$|/load_osxfuse$|/locate$|/lock$|/lockdev$|/lockfile$|/login_activ$|/login_crypto$|/login_radius$|/login_skey$|/login_snk$|/login_token$|/login_yubikey$|/lpc$|/lpd$|/lpd-port$|/lppasswd$|/lpq$|/lpr$|/lprm$|/lpset$|/lxc-user-nic$|/mahjongg$|/mail-lock$|/mailq$|/mail-touchlock$|/mail-unlock$|/mksnap_ffs$|/mlocate$|/mlock$|/mount$|/mount.cifs$|/mount.ecryptfs_private$|/mount.nfs$|/mount.nfs4$|/mount_osxfuse$|/mtr$|/mutt_dotlock$"
sidG3="/ncsa_auth$|/netpr$|/netkit-rcp$|/netkit-rlogin$|/netkit-rsh$|/netreport$|/netstat$|/newgidmap$|/newtask$|/newuidmap$|/nvmmctl$|/opieinfo$|/opiepasswd$|/pam_auth$|/pam_extrausers_chkpwd$|/pam_timestamp_check$|/pamverifier$|/pfexec$|/ping$|/ping6$|/pmconfig$|/pmap$|/polkit-agent-helper-1$|/polkit-explicit-grant-helper$|/polkit-grant-helper$|/polkit-grant-helper-pam$|/polkit-read-auth-helper$|/polkit-resolve-exe-helper$|/polkit-revoke-helper$|/polkit-set-default-helper$|/postdrop$|/postqueue$|/poweroff$|/ppp$|/procmail$|/pstat$|/pt_chmod$|/pwdb_chkpwd$|/quota$|/rcmd|/remote.unknown$|/rlogin$|/rmformat$|/rnews$|/run-mailcap$|/sacadm$|/same-gnome$|screen.real$|/security_authtrampoline$|/sendmail.sendmail$|/shutdown$|/skeyaudit$|/skeyinfo$|/skeyinit$|/sliplogin|/slocate$|/smbmnt$|/smbumount$|/smpatch$|/smtpctl$|/sperl5.8.8$|/ssh-agent$|/ssh-keysign$|/staprun$|/startinnfeed$|/stclient$|/su$|/suexec$|/sys-suspend$|/sysstat$|/systat$"
sidG4="/telnetlogin$|/timedc$|/tip$|/top$|/traceroute6$|/traceroute6.iputils$|/trpt$|/tsoldtlabel$|/tsoljdslabel$|/tsolxagent$|/ufsdump$|/ufsrestore$|/ulog-helper$|/umount.cifs$|/umount.nfs$|/umount.nfs4$|/unix_chkpwd$|/uptime$|/userhelper$|/userisdnctl$|/usernetctl$|/utempter$|/utmp_update$|/uucico$|/uuglist$|/uuidd$|/uuname$|/uusched$|/uustat$|/uux$|/uuxqt$|/VBoxHeadless$|/VBoxNetAdpCtl$|/VBoxNetDHCP$|/VBoxNetNAT$|/VBoxSDL$|/VBoxVolInfo$|/VirtualBoxVM$|/vmstat$|/vmware-authd$|/vmware-user-suid-wrapper$|/vmware-vmx$|/vmware-vmx-debug$|/vmware-vmx-stats$|/vncserver-x11$|/volrmmount$|/w$|/wall$|/whodo$|/write$|/X$|/Xorg.wrap$|/Xsun$|/Xvnc$|/yppasswd$"
@@ -359,16 +359,29 @@ sidB="/apache2$%Read_root_passwd__apache2_-f_/etc/shadow\(CVE-2019-0211\)\
/xorg$%Xorg_1.19_to_1.20.x\(CVE_2018-14665\)/xorg-x11-server<=1.20.3/AIX_7.1_\(6.x_to_7.x_should_be_vulnerable\)_X11.base.rte<7.1.5.32_and_\
/xterm$%Solaris_5.5.1_X11R6.3\(05-1997\)/Debian_xterm_version_222-1etch2\(01-2009\)"
#To update sidVB: curl https://github.com/GTFOBins/GTFOBins.github.io/tree/master/_gtfobins 2>/dev/null | grep 'href="/GTFOBins/' | grep '.md">' | awk -F 'title="' '{print $2}' | cut -d '"' -f1 | cut -d "." -f1 | sed -e 's,^,/,' | sed -e 's,$,\$,' | tr '\n' '|'
sidVB='/apt-get$|/apt$|/ar$|/aria2c$|/arp$|/ash$|/at$|/atobm$|/awk$|/base32$|/base64$|/basenc$|/bash$|/bpftrace$|/bridge$|/bundler$|/busctl$|/busybox$|/byebug$|/cancel$|/capsh$|/cat$|/certbot$|/check_by_ssh$|/check_cups$|/check_log$|/check_memory$|/check_raid$|/check_ssl_cert$|/check_statusfile$|/chmod$|/chown$|/chroot$|/cobc$|/column$|/comm$|/composer$|/cowsay$|/cowthink$|/cp$|/cpan$|/cpio$|/cpulimit$|/crash$|/crontab$|/csh$|/csplit$|/csvtool$|/cupsfilter$|/curl$|/cut$|/dash$|/date$|/dd$|/dialog$|/diff$|/dig$|/dmesg$|/dmsetup$|/dnf$|/docker$|/dpkg$|/dvips$|/easy_install$|/eb$|/ed$|/emacs$|/env$|/eqn$|/ex$|/exiftool$|/expand$|/expect$|/facter$|/file$|/find$|/finger$|/flock$|/fmt$|/fold$|/ftp$|/gawk$|/gcc$|/gdb$|/gem$|/genisoimage$|/ghc$|/ghci$|/gimp$|/git$|/grep$|/gtester$|/gzip$|/hd$|/head$|/hexdump$|/highlight$|/hping3$|/iconv$|/iftop$|/install$|/ionice$|/ip$|/irb$|/jjs$|/join$|/journalctl$|/jq$|/jrunscript$|/ksh$|/ksshell$'
sidVB2='/latex$|/ld$|/ldconfig$|/less$|/logsave$|/look$|/ltrace$|/lua$|/lualatex$|/luatex$|/lwp-download$|/lwp-request$|/mail$|/make$|/man$|/mawk$|/more$|/mount$|/mtr$|/mv$|/mysql$|/nano$|/nawk$|/nc$|/nice$|/nl$|/nmap$|/node$|/nohup$|/npm$|/nroff$|/nsenter$|/octave$|/od$|/openssl$|/openvpn$|/openvt$|/paste$|/pdb$|/pdflatex$|/pdftex$|/perl$|/pg$|/php$|/pic$|/pico$|/pip$|/pkexec$|/pkg$|/pr$|/pry$|/psql$|/puppet$|/python$|/rake$|/readelf$|/red$|/redcarpet$|/restic$|/rev$|/rlogin$|/rlwrap$|/rpm$|/rpmquery$|/rsync$|/ruby$|/run-mailcap$|/run-parts$|/rview$|/rvim$|/scp$|/screen$|/script$|/sed$|/service$|/setarch$|/sftp$|/sg$|/shuf$|/slsh$|/smbclient$|/snap$|/socat$|/soelim$|/sort$|/split$|/sqlite3$|/ss$|/ssh-keygen$|/ssh-keyscan$|/ssh$|/start-stop-daemon$|/stdbuf$|/strace$|/strings$|/su$|/sysctl$|/systemctl$|/tac$|/tail$|/tar$|/taskset$|/tbl$|/tclsh$|/tcpdump$|/tee$|/telnet$|/tex$|/tftp$|/time$|/timeout$|/tmux$|/top$|/troff$|/ul$|/unexpand$|/uniq$|/unshare$|/update-alternatives$|/uudecode$|/uuencode$|/valgrind$|/vi$|/view$|/vigr$|/vim$|/vimdiff$|/vipw$|/virsh$|/watch$|/wc$|/wget$|/whois$|/wish$|/xargs$|/xelatex$|/xetex$|/xmodmap$|/xxd$|/xz$|/yelp$|/yum$|/zip$|/zsh$|/zsoelim$|/zypper$'
sidVB='/ar$|/aria2c$|/arj$|/arp$|/ash$|/atobm$|/awk$|/base32$|/base64$|/basenc$|/bash$|/bridge$|/busybox$|/byebug$|/capsh$|/cat$|/chmod$|/chown$|/chroot$|/cmp$|/column$|/comm$|/composer$|/cp$|/cpio$|/cpulimit$|/csh$|/csplit$|/csvtool$|/cupsfilter$|/curl$|/cut$|/dash$|/date$|/dd$|/dialog$|/diff$|/dig$|/dmsetup$|/docker$|/dvips$|/ed$|/emacs$|/env$|/eqn$|/expand$|/expect$|/file$|/find$|/flock$|/fmt$|/fold$|/gawk$|/gdb$|/gimp$|/git$|/grep$|/gtester$|/gzip$|/hd$|/head$|/hexdump$|/highlight$|/hping3$|/iconv$|/iftop$|/install$|/ionice$|/ip$|/jjs$|/join$|/jq$|/jrunscript$|/ksh$|/ksshell$|/latex$|/ldconfig$|/less$|/logsave$|/look$|/lua$|/lualatex$|/luatex$|/make$|/mawk$|/more$|/msgattrib$|/msgcat$|/msgconv$|/msgfilter$|/msgmerge$|/msguniq$'
sidVB2='/mv$|/mysql$|/nano$|/nawk$|/nc$|/nice$|/nl$|/nmap$|/node$|/nohup$|/octave$|/od$|/openssl$|/openvpn$|/paste$|/pdflatex$|/pdftex$|/perl$|/pg$|/php$|/pic$|/pico$|/pr$|/pry$|/python$|/rake$|/readelf$|/restic$|/rev$|/rlwrap$|/rpm$|/rpmquery$|/rsync$|/run-parts$|/rview$|/rvim$|/scp$|/sed$|/setarch$|/shuf$|/slsh$|/socat$|/soelim$|/sort$|/sqlite3$|/ss$|/ssh-keygen$|/ssh-keyscan$|/start-stop-daemon$|/stdbuf$|/strace$|/strings$|/sysctl$|/systemctl$|/tac$|/tail$|/tar$|/taskset$|/tbl$|/tclsh$|/tee$|/telnet$|/tex$|/tftp$|/time$|/timeout$|/troff$|/ul$|/unexpand$|/uniq$|/unshare$|/update-alternatives$|/uudecode$|/uuencode$|/view$|/vigr$|/vim$|/vimdiff$|/vipw$|/watch$|/wc$|/wget$|/xargs$|/xelatex$|/xetex$|/xmodmap$|/xmore$|/xxd$|/xz$|/zip$|/zsh$|/zsoelim$'
cfuncs='file|free|main|more|read|split|write'
sudoVB=" \*|env_keep\+=LD_PRELOAD|apt-get$|apt$|aria2c$|arp$|ash$|awk$|base64$|bash$|busybox$|cat$|chmod$|chown$|cp$|cpan$|cpulimit$|crontab$|csh$|curl$|cut$|dash$|date$|dd$|diff$|dmesg$|dmsetup$|dnf$|docker$|dpkg$|easy_install$|ed$|emacs$|env$|expand$|expect$|facter$|file$|find$|flock$|fmt$|fold$|ftp$|gdb$|gimp$|git$|grep$|head$|ionice$|ip$|irb$|jjs$|journalctl$|jq$|jrunscript$|ksh$|ld.so$|less$|logsave$|ltrace$|lua$|mail$|make$|man$|more$|mount$|mtr$|mv$|mysql$|nano$|nc$|nice$|nl$|nmap$|node$|od$|openssl$|perl$|pg$|php$|pic$|pico$|pip$|puppet$|python$|readelf$|red$|rlwrap$|rpm$|rpmquery$|rsync$|ruby$|run-mailcap$|run-parts$|rvim$|scp$|screen$|script$|sed$|service$|setarch$|sftp$|smbclient$|socat$|sort$|sqlite3$|ssh$|start-stop-daemon$|stdbuf$|strace$|systemctl$|tail$|tar$|taskset$|tclsh$|tcpdump$|tee$|telnet$|tftp$|time$|timeout$|tmux$|ul$|unexpand$|uniq$|unshare$|vi$|vim$|watch$|wget$|wish$|xargs$|xxd$|yum$|zip$|zsh$|zypper$"
sudoVB1=" \*|env_keep\+=LD_PRELOAD|ansible-playbook$|apt-get$|apt$|ar$|aria2c$|arj$|arp$|ash$|at$|atobm$|awk$|base32$|base64$|basenc$|bash$|bpftrace$|bridge$|bundler$|busctl$|busybox$|byebug$|c89$|c99$|capsh$|cat$|certbot$|check_by_ssh$|check_cups$|check_log$|check_memory$|check_raid$|check_ssl_cert$|check_statusfile$|chmod$|chown$|chroot$|cmp$|cobc$|column$|comm$|composer$|cowsay$|cowthink$|cp$|cpan$|cpio$|cpulimit$|crash$|crontab$|csh$|csplit$|csvtool$|cupsfilter$|curl$|cut$|dash$|date$|dd$|dialog$|diff$|dig$|dmesg$|dmidecode$|dmsetup$|dnf$|docker$|dpkg$|dvips$|easy_install$|eb$|ed$|emacs$|env$|eqn$|ex$|exiftool$|expand$|expect$|facter$|file$|find$|flock$|fmt$|fold$|ftp$|gawk$|gcc$|gdb$|gem$|genisoimage$|ghc$|ghci$|gimp$|git$|grep$|gtester$|gzip$|hd$|head$|hexdump$|highlight$|hping3$|iconv$|iftop$|install$|ionice$|ip$|irb$|jjs$|join$|journalctl$|jq$|jrunscript$|knife$|ksh$|ksshell$|latex$|ldconfig$|less$|ln$|loginctl$|logsave$|look$|ltrace$|lua$|lualatex$|luatex$|lwp-download$|lwp-request$|mail$|make$|man$|mawk$|more$"
sudoVB2="mount$|msgattrib$|msgcat$|msgconv$|msgfilter$|msgmerge$|msguniq$|mtr$|mv$|mysql$|nano$|nawk$|nc$|nice$|nl$|nmap$|node$|nohup$|npm$|nroff$|nsenter$|octave$|od$|openssl$|openvpn$|openvt$|paste$|pdb$|pdflatex$|pdftex$|perl$|pg$|php$|pic$|pico$|pip$|pkexec$|pkg$|pr$|pry$|psql$|puppet$|python$|rake$|readelf$|red$|redcarpet$|restic$|rev$|rlwrap$|rpm$|rpmquery$|rsync$|ruby$|run-mailcap$|run-parts$|rview$|rvim$|scp$|screen$|script$|sed$|service$|setarch$|sftp$|sg$|shuf$|slsh$|smbclient$|snap$|socat$|soelim$|sort$|split$|sqlite3$|ss$|ssh-keygen$|ssh-keyscan$|ssh$|start-stop-daemon$|stdbuf$|strace$|strings$|su$|sysctl$|systemctl$|tac$|tail$|tar$|taskset$|tbl$|tclsh$|tcpdump$|tee$|telnet$|tex$|tftp$|time$|timedatectl$|timeout$|tmux$|top$|troff$|ul$|unexpand$|uniq$|unshare$|update-alternatives$|uudecode$|uuencode$|valgrind$|vi$|view$|vigr$|vim$|vimdiff$|vipw$|virsh$|watch$|wc$|wget$|wish$|xargs$|xelatex$|xetex$|xmodmap$|xmore$|xxd$|xz$|yarn$|yum$|zip$|zsh$|zsoelim$|zypper$"
sudoB="$(whoami)|ALL:ALL|ALL : ALL|ALL|NOPASSWD|SETENV|/apache2|/cryptsetup|/mount"
sudoG="NOEXEC"
sudocapsB="/apt-get|/apt|/aria2c|/arp|/ash|/awk|/base64|/bash|/busybox|/cat|/chmod|/chown|/cp|/cpan|/cpulimit|/crontab|/csh|/curl|/cut|/dash|/date|/dd|/diff|/dmesg|/dmsetup|/dnf|/docker|/dpkg|/easy_install|/ed|/emacs|/env|/expand|/expect|/facter|/file|/find|/flock|/fmt|/fold|/ftp|/gdb|/gimp|/git|/grep|/head|/ionice|/ip|/irb|/jjs|/journalctl|/jq|/jrunscript|/ksh|/ld.so|/less|/logsave|/ltrace|/lua|/mail|/make|/man|/more|/mount|/mtr|/mv|/mysql|/nano|/nc|/nice|/nl|/nmap|/node|/od|/openssl|/perl|/pg|/php|/pic|/pico|/pip|/puppet|/python|/readelf|/red|/rlwrap|/rpm|/rpmquery|/rsync|/ruby|/run-mailcap|/run-parts|/rvim|/scp|/screen|/script|/sed|/service|/setarch|/sftp|/smbclient|/socat|/sort|/sqlite3|/ssh|/start-stop-daemon|/stdbuf|/strace|/systemctl|/tail|/tar|/taskset|/tclsh|/tcpdump|/tee|/telnet|/tftp|/time|/timeout|/tmux|/ul|/unexpand|/uniq|/unshare|/vi|/vim|/watch|/wget|/wish|/xargs|/xxd|/yum|/zip|/zsh|/zypper"
capsB="=ep|cap_chown|cap_dac_override|cap_dac_read_search|cap_setuid|sys_admin|sys_ptrace|sys_module"
capsVB="cap_sys_admin:mount|python\n\
cap_sys_ptrace:python\n\
cap_sys_module:kmod|python\n\
cap_dac_override:python|vim\n\
cap_chown:chown|python\n\
cap_former:chown|python\n\
cap_setuid:gdb|node|perl|php|python|ruby|rview|rvim|view|vim|vimdiff\n\
cap_setgid:gdb|node|perl|php|python|ruby|rview|rvim|view|vim|vimdiff\n\
cap_kill:kill|python\n\
cap_net_bind_service:nc|ncat|python\n\
cap_net_raw:python|tcpdump"
capsB="=ep|cap_chown|cap_former|cap_setfcap|cap_dac_override|cap_dac_read_search|cap_setuid|cap_setgid|cap_kill|cap_net_bind_service|cap_net_raw|cap_net_admin|cap_sys_admin|cap_sys_ptrace|cap_sys_module"
containercapsB="sys_admin|sys_ptrace|sys_module|dac_read_search|dac_override"
OLDPATH=$PATH
@@ -1069,134 +1082,135 @@ if echo $CHECKS | grep -q ProCronSrvcsTmrsSocks || echo $CHECKS | grep -q IntFil
CONT_THREADS=0
# FIND ALL KNOWN INTERESTING SOFTWARE FILES
FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"system.d\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"logstash\" -o -name \"keyrings\" -o -name \".svn\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"neo4j\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".vnc\" -o -name \"ldap\" -o -name \".irssi\" -o -name \"cacti\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".bluemix\" -o -name \"bind\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_BIN=`eval_bckgrd "find /bin -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_CACHE=`eval_bckgrd "find /.cache -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_CDROM=`eval_bckgrd "find /cdrom -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_ETC=`eval_bckgrd "find /etc -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*knockd*\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"ssh*config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_LIB=`eval_bckgrd "find /lib -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_MEDIA=`eval_bckgrd "find /media -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_MNT=`eval_bckgrd "find /mnt -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"sess_*\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_OPT=`eval_bckgrd "find /opt -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_PRIVATE=`eval_bckgrd "find /private -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"agent*\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"sess_*\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_RUN=`eval_bckgrd "find /run -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SBIN=`eval_bckgrd "find /sbin -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SNAP=`eval_bckgrd "find /snap -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SRV=`eval_bckgrd "find /srv -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SYS=`eval_bckgrd "find /sys -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_TMP=`eval_bckgrd "find /tmp -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"agent*\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"sess_*\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_USR=`eval_bckgrd "find /usr -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"ssh*config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_VAR=`eval_bckgrd "find /var -name \".git\" -o -name \"rsyncd.secrets\" -o -name \"*.gnupg\" -o -name \"wp-config.php\" -o -name \"supervisord.conf\" -o -name \"Dockerfile\" -o -name \".lesshst\" -o -name \"database.php\" -o -name \"*.service\" -o -name \".erlang.cookie\" -o -name \"*.p12\" -o -name \"KeePass.config*\" -o -name \"*.csr\" -o -name \"SAM\" -o -name \"creds*\" -o -name \"rsyncd.conf\" -o -name \"ffftp.ini\" -o -name \"*.timer\" -o -name \".pypirc\" -o -name \"NetSetup.log\" -o -name \"*vnc*.txt\" -o -name \"error.log\" -o -name \".vault-token\" -o -name \"*.sqlite\" -o -name \"ftp.ini\" -o -name \"*.kdbx\" -o -name \"*.swp\" -o -name \".git-credentials\" -o -name \"AppEvent.Evt\" -o -name \"Ntds.dit\" -o -name \"*.rdg\" -o -name \"docker.sock\" -o -name \"sysprep.inf\" -o -name \"AzureRMContext.json\" -o -name \"setupinfo\" -o -name \"ipsec.conf\" -o -name \"known_hosts\" -o -name \"ipsec.secrets\" -o -name \"filezilla.xml\" -o -name \"gitlab.yml\" -o -name \"passwd\" -o -name \"autologin\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"*.sqlite3\" -o -name \"access_tokens.db\" -o -name \"backups\" -o -name \"TokenCache.dat\" -o -name \"gvm-tools.conf\" -o -name \".htpasswd\" -o -name \"id_dsa*\" -o -name \"mosquitto.conf\" -o -name \"elasticsearch.y*ml\" -o -name \"cesi.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"printers.xml\" -o -name \"httpd.conf\" -o -name \"*.cer\" -o -name \"drives.xml\" -o -name \"debian.cnf\" -o -name \"*credential*\" -o -name \".sudo_as_admin_successful\" -o -name \"ConsoleHost_history.txt\" -o -name \".k5login\" -o -name \"my.ini\" -o -name \"ws_ftp.ini\" -o -name \"access_tokens.json\" -o -name \"*.der\" -o -name \"scclient.exe\" -o -name \"vault-ssh-helper.hcl\" -o -name \"unattend.xml\" -o -name \"settings.php\" -o -name \"*vnc*.ini\" -o -name \"*vnc*.xml\" -o -name \"*.jks\" -o -name \"sysprep.xml\" -o -name \"https.conf\" -o -name \"unattended.xml\" -o -name \"scheduledtasks.xml\" -o -name \"mongod*.conf\" -o -name \"config.php\" -o -name \".env\" -o -name \"accessTokens.json\" -o -name \"KeePass.ini\" -o -name \"legacy_credentials.db\" -o -name \"*password*\" -o -name \"*.crt\" -o -name \"sitemanager.xml\" -o -name \"tomcat-users.xml\" -o -name \"default.sav\" -o -name \"docker-compose.yml\" -o -name \"*.socket\" -o -name \"*vnc*.c*nf*\" -o -name \"snmpd.conf\" -o -name \"id_rsa*\" -o -name \"docker.socket\" -o -name \"anaconda-ks.cfg\" -o -name \"kcpassword\" -o -name \"hostapd.conf\" -o -name \".bashrc\" -o -name \"iis6.log\" -o -name \".github\" -o -name \".recently-used.xbel\" -o -name \".gitconfig\" -o -name \"unattend.txt\" -o -name \"*config*.php\" -o -name \"hosts.equiv\" -o -name \"*.pgp\" -o -name \".google_authenticator\" -o -name \"KeePass.enforced*\" -o -name \"*.keystore\" -o -name \".rhosts\" -o -name \"my.cnf\" -o -name \"security.sav\" -o -name \"system.sav\" -o -name \"web*.config\" -o -name \"*.gpg\" -o -name \"*.ftpconfig\" -o -name \"access.log\" -o -name \"pg_hba.conf\" -o -name \"wsl.exe\" -o -name \"authorized_hosts\" -o -name \"gitlab.rm\" -o -name \".profile\" -o -name \".msmtprc\" -o -name \"sites.ini\" -o -name \".plan\" -o -name \"protecteduserkey.bin\" -o -name \".ldaprc\" -o -name \"pgadmin*.db\" -o -name \"bash.exe\" -o -name \"*.pem\" -o -name \"pgsql.conf\" -o -name \"RDCMan.settings\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"software.sav\" -o -name \"software\" -o -name \"pagefile.sys\" -o -name \"appcmd.exe\" -o -name \"krb5.keytab\" -o -name \"sess_*\" -o -name \"redis.conf\" -o -name \"FreeSSHDservice.ini\" -o -name \"groups.xml\" -o -name \"storage.php\" -o -name \"kadm5.acl\" -o -name \"credentials\" -o -name \"azureProfile.json\" -o -name \"winscp.ini\" -o -name \"db.php\" -o -name \"credentials.db\" -o -name \"ddclient.conf\" -o -name \"php.ini\" -o -name \"krb5.conf\" -o -name \"wcx_ftp.ini\" -o -name \"https-xampp.conf\" -o -name \"secrets.yml\" -o -name \"*.db\" -o -name \"index.dat\" -o -name \"authorized_keys\" -o -name \"setupinfo.bak\" -o -name \"000-default.conf\" -o -name \"*.ovpn\" -o -name \"datasources.xml\" -o -name \"backup\" -o -name \"ntuser.dat\" -o -name \"*.key\" -o -name \"SecEvent.Evt\" -o -name \"*.viminfo\" -o -name \".*_history.*\" -o -name \"unattend.inf\" -o -name \"SYSTEM\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"postgresql.conf\" -o -name \"autologin.conf\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"system.d\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \".vnc\" -o -name \".bluemix\" -o -name \"sites-enabled\" -o -name \"bind\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \"couchdb\" -o -name \"seeddms*\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \".svn\" -o -name \"racoon\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_BIN=`eval_bckgrd "find /bin -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_CACHE=`eval_bckgrd "find /.cache -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_CDROM=`eval_bckgrd "find /cdrom -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_ETC=`eval_bckgrd "find /etc -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \"*knockd*\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"ssh*config\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_LIB=`eval_bckgrd "find /lib -name \"*.timer\" -o -name \"*.service\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.timer\" -o -name \"*.service\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.timer\" -o -name \"*.service\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_MEDIA=`eval_bckgrd "find /media -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_MNT=`eval_bckgrd "find /mnt -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"sess_*\" -o -name \"db.php\" -o -name \"hosts.equiv\" -o -name \"pagefile.sys\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_OPT=`eval_bckgrd "find /opt -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_PRIVATE=`eval_bckgrd "find /private -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"sess_*\" -o -name \"db.php\" -o -name \"hosts.equiv\" -o -name \"pagefile.sys\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"agent*\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_RUN=`eval_bckgrd "find /run -name \"*.timer\" -o -name \"*.service\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SBIN=`eval_bckgrd "find /sbin -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SNAP=`eval_bckgrd "find /snap -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SRV=`eval_bckgrd "find /srv -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SYS=`eval_bckgrd "find /sys -name \"*.timer\" -o -name \"*.service\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.timer\" -o -name \"*.service\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.timer\" -o -name \"*.service\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_TMP=`eval_bckgrd "find /tmp -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"sess_*\" -o -name \"db.php\" -o -name \"hosts.equiv\" -o -name \"pagefile.sys\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"agent*\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_USR=`eval_bckgrd "find /usr -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"ssh*config\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"db.php\" -o -name \"pagefile.sys\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
FIND_VAR=`eval_bckgrd "find /var -name \"creds*\" -o -name \".recently-used.xbel\" -o -name \"drives.xml\" -o -name \".lesshst\" -o -name \".git-credentials\" -o -name \"authorized_hosts\" -o -name \"winscp.ini\" -o -name \"groups.xml\" -o -name \"Ntds.dit\" -o -name \"backups\" -o -name \"*.pgp\" -o -name \"*.crt\" -o -name \"scclient.exe\" -o -name \"sysprep.xml\" -o -name \"*.db\" -o -name \"access_tokens.json\" -o -name \"AppEvent.Evt\" -o -name \"server.xml\" -o -name \"security.sav\" -o -name \"passwd\" -o -name \".*_history.*\" -o -name \"*.sqlite\" -o -name \"FreeSSHDservice.ini\" -o -name \"autologin.conf\" -o -name \"*vnc*.txt\" -o -name \"azureProfile.json\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" -o -name \".pypirc\" -o -name \"SAM\" -o -name \"setupinfo\" -o -name \"sites.ini\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"TokenCache.dat\" -o -name \"cloud.cfg\" -o -name \"anaconda-ks.cfg\" -o -name \"database.php\" -o -name \"gvm-tools.conf\" -o -name \"php.ini\" -o -name \".github\" -o -name \"*.viminfo\" -o -name \"*.timer\" -o -name \"httpd.conf\" -o -name \".google_authenticator\" -o -name \".rhosts\" -o -name \"web*.config\" -o -name \"sess_*\" -o -name \"db.php\" -o -name \"hosts.equiv\" -o -name \"pagefile.sys\" -o -name \"wsl.exe\" -o -name \"legacy_credentials.db\" -o -name \"authorized_keys\" -o -name \"*.swp\" -o -name \"*.sqlite3\" -o -name \"KeePass.ini\" -o -name \"ipsec.secrets\" -o -name \".vault-token\" -o -name \".htpasswd\" -o -name \"debian.cnf\" -o -name \"sitemanager.xml\" -o -name \"kadm5.acl\" -o -name \"supervisord.conf\" -o -name \"krb5.conf\" -o -name \"postgresql.conf\" -o -name \"autologin\" -o -name \"kcpassword\" -o -name \"*.ovpn\" -o -name \"Dockerfile\" -o -name \"*.gnupg\" -o -name \"setupinfo.bak\" -o -name \"software.sav\" -o -name \"*credential*\" -o -name \"secrets.yml\" -o -name \"*.jks\" -o -name \"wp-config.php\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"credentials.db\" -o -name \"protecteduserkey.bin\" -o -name \"pgadmin*.db\" -o -name \"fastcgi_params\" -o -name \"ftp.ini\" -o -name \".sudo_as_admin_successful\" -o -name \".msmtprc\" -o -name \"iis6.log\" -o -name \"rsyncd.conf\" -o -name \"printers.xml\" -o -name \"appcmd.exe\" -o -name \"known_hosts\" -o -name \"*.gpg\" -o -name \"access_tokens.db\" -o -name \"RDCMan.settings\" -o -name \"NetSetup.log\" -o -name \"gitlab.yml\" -o -name \"accessTokens.json\" -o -name \"datasources.xml\" -o -name \"pg_hba.conf\" -o -name \"system.sav\" -o -name \"recentservers.xml\" -o -name \"credentials\" -o -name \"*vnc*.ini\" -o -name \"*.rdg\" -o -name \"software\" -o -name \"sysprep.inf\" -o -name \"*.p12\" -o -name \"*.kdbx\" -o -name \"redis.conf\" -o -name \"gitlab.rm\" -o -name \".erlang.cookie\" -o -name \"mosquitto.conf\" -o -name \".k5login\" -o -name \"scheduledtasks.xml\" -o -name \"docker-compose.yml\" -o -name \"unattend.inf\" -o -name \"*.key\" -o -name \"tomcat-users.xml\" -o -name \"config.php\" -o -name \"docker.socket\" -o -name \"ConsoleHost_history.txt\" -o -name \".ldaprc\" -o -name \"bash.exe\" -o -name \"kibana.y*ml\" -o -name \"vault-ssh-helper.hcl\" -o -name \"https.conf\" -o -name \"pgsql.conf\" -o -name \"hostapd.conf\" -o -name \"SecEvent.Evt\" -o -name \"index.dat\" -o -name \"*vnc*.xml\" -o -name \"*.csr\" -o -name \"000-default.conf\" -o -name \"*config*.php\" -o -name \".git\" -o -name \"cesi.conf\" -o -name \"wcx_ftp.ini\" -o -name \"snmpd.conf\" -o -name \"id_dsa*\" -o -name \".profile\" -o -name \"docker.sock\" -o -name \"https-xampp.conf\" -o -name \"storage.php\" -o -name \"ddclient.conf\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"ntuser.dat\" -o -name \".plan\" -o -name \".env\" -o -name \"filezilla.xml\" -o -name \"my.cnf\" -o -name \"*.keystore\" -o -name \"ws_ftp.ini\" -o -name \"backup\" -o -name \"id_rsa*\" -o -name \".gitconfig\" -o -name \"SYSTEM\" -o -name \"elasticsearch.y*ml\" -o -name \"ffftp.ini\" -o -name \"unattended.xml\" -o -name \"*password*\" -o -name \"*.cer\" -o -name \"KeePass.config*\" -o -name \"KeePass.enforced*\" -o -name \"*.socket\" -o -name \"access.log\" -o -name \"*.der\" -o -name \"default.sav\" -o -name \"my.ini\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.c*nf*\" -o -name \"*.keyring\" -o -name \".bashrc\" -o -name \"ftp.config\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
wait # Always wait at the end
CONT_THREADS=0 #Reset the threads counter
#GENERATE THE STORAGES OF THE FOUND FILES
PSTORAGE_SYSTEMD=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/etc|^/lib32|^$GREPHOMESEARCH|^/private|^/snap|^/run|^/tmp|^/applications|^/usr|^/cdrom|^/lib|^/lib64|^/sys|^/systemd|^/.cache|^/srv|^/bin|^/media|^/system|^/mnt|^/sbin|^/opt" | grep -E ".*\.service$" | sort | uniq | head -n 70)
PSTORAGE_TIMER=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/etc|^/lib32|^$GREPHOMESEARCH|^/private|^/snap|^/run|^/tmp|^/applications|^/usr|^/cdrom|^/lib|^/lib64|^/sys|^/systemd|^/.cache|^/srv|^/bin|^/media|^/system|^/mnt|^/sbin|^/opt" | grep -E ".*\.timer$" | sort | uniq | head -n 70)
PSTORAGE_SOCKET=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/etc|^/lib32|^$GREPHOMESEARCH|^/private|^/snap|^/run|^/tmp|^/applications|^/usr|^/cdrom|^/lib|^/lib64|^/sys|^/systemd|^/.cache|^/srv|^/bin|^/media|^/system|^/mnt|^/sbin|^/opt" | grep -E ".*\.socket$" | sort | uniq | head -n 70)
PSTORAGE_DBUS=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70)
PSTORAGE_MYSQL=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "mysql$|debian\.cnf$" | sort | uniq | head -n 70)
PSTORAGE_POSTGRESQL=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70)
PSTORAGE_APACHE=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "sites-enabled$|000-default\.conf$" | sort | uniq | head -n 70)
PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/var|^/tmp|^/mnt|^/private" | grep -E "sess_.*$" | sort | uniq | head -n 70)
PSTORAGE_PHP_FILES=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70)
PSTORAGE_WORDPRESS=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "wp-config\.php$" | sort | uniq | head -n 70)
PSTORAGE_DRUPAL=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E '/default/settings.php' | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "settings\.php$" | sort | uniq | head -n 70)
PSTORAGE_MOODLE=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E 'moodle/config.php' | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "config\.php$" | sort | uniq | head -n 70)
PSTORAGE_TOMCAT=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70)
PSTORAGE_MONGO=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70)
PSTORAGE_SUPERVISORD=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70)
PSTORAGE_CESI=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "cesi\.conf$" | sort | uniq | head -n 70)
PSTORAGE_RSYNC=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70)
PSTORAGE_HOSTAPD=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70)
PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70)
PSTORAGE_VNC=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70)
PSTORAGE_LDAP=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "ldap$" | sort | uniq | head -n 70)
PSTORAGE_OPENVPN=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70)
PSTORAGE_SSH=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70)
PSTORAGE_CERTSB4=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70)
PSTORAGE_CERTSBIN=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70)
PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70)
PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/tmp|^/private" | grep -E "agent.*$" | sort | uniq | head -n 70)
PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/usr|^$GREPHOMESEARCH" | grep -E "ssh.*config$" | sort | uniq | head -n 70)
PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70)
PSTORAGE_KERBEROS=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70)
PSTORAGE_KIBANA=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70)
PSTORAGE_KNOCKD=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70)
PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "logstash$" | sort | uniq | head -n 70)
PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70)
PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70)
PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.vault-token$" | sort | uniq | head -n 70)
PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "couchdb$" | sort | uniq | head -n 70)
PSTORAGE_REDIS=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "redis\.conf$" | sort | uniq | head -n 70)
PSTORAGE_MOSQUITTO=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70)
PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "neo4j$" | sort | uniq | head -n 70)
PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70)
PSTORAGE_ERLANG=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70)
PSTORAGE_GMV_AUTH=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70)
PSTORAGE_IPSEC=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70)
PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.irssi$" | sort | uniq | head -n 70)
PSTORAGE_KEYRING=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70)
PSTORAGE_FILEZILLA=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS\n$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70)
PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70)
PSTORAGE_SPLUNK=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "passwd$" | sort | uniq | head -n 70)
PSTORAGE_GITLAB=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -v -E '/lib' | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70)
PSTORAGE_PGP_GPG=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -v -E 'README.gnupg' | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70)
PSTORAGE_CACHE_VI=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70)
PSTORAGE_DOCKER=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70)
PSTORAGE_FIREFOX=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^" | grep -E "\.mozilla$|Firefox$" | sort | uniq | head -n 70)
PSTORAGE_CHROME=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^" | grep -E "google-chrome$|Chrome$" | sort | uniq | head -n 70)
PSTORAGE_OPERA=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^" | grep -E "com\.operasoftware\.Opera$" | sort | uniq | head -n 70)
PSTORAGE_SAFARI=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^" | grep -E "Safari$" | sort | uniq | head -n 70)
PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70)
PSTORAGE_FASTCGI=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "fastcgi_params$" | sort | uniq | head -n 70)
PSTORAGE_SNMP=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70)
PSTORAGE_PYPIRC=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.pypirc$" | sort | uniq | head -n 70)
PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.cloudflared$" | sort | uniq | head -n 70)
PSTORAGE_HISTORY=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\..*_history\..*$" | sort | uniq | head -n 70)
PSTORAGE_HTTP_CONF=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "httpd\.conf$" | sort | uniq | head -n 70)
PSTORAGE_HTPASSWD=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.htpasswd$" | sort | uniq | head -n 70)
PSTORAGE_LDAPRC=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.ldaprc$" | sort | uniq | head -n 70)
PSTORAGE_ENV=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.env$" | sort | uniq | head -n 70)
PSTORAGE_MSMTPRC=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.msmtprc$" | sort | uniq | head -n 70)
PSTORAGE_GITHUB=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70)
PSTORAGE_SVN=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.svn$" | sort | uniq | head -n 70)
PSTORAGE_KEEPASS=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70)
PSTORAGE_FTP=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70)
PSTORAGE_BIND=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "bind$" | sort | uniq | head -n 70)
PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "seeddms.*$" | sort | uniq | head -n 70)
PSTORAGE_DDCLIENT=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70)
PSTORAGE_KCPASSWORD=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "kcpassword$" | sort | uniq | head -n 70)
PSTORAGE_CACTI=$(echo -e "$FIND_DIR_CDROM\n$FIND_DIR_USR\n$FIND_DIR_ETC\n$FIND_DIR_SNAP\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_VAR\n$FIND_DIR_PRIVATE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "cacti$" | sort | uniq | head -n 70)
PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70)
PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70)
PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70)
PSTORAGE_DATABASE=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70)
PSTORAGE_BACKUPS=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E "backup$|backups$" | sort | uniq | head -n 70)
PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_RUN\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_SNAP\n$FIND_VAR\n$FIND_BIN\n$FIND_LIB\n$FIND_LIB64\n$FIND_CDROM\n$FIND_MEDIA\n$FIND_USR\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_HOMESEARCH\n$FIND_SYSTEMD\n$FIND_CACHE\n$FIND_TMP\n$FIND_SYS\n$FIND_OPT\n$FIND_ETC\n$FIND_LIB32\n$FIND_SBIN\n$FIND_APPLICATIONS" | grep -E "^/var|^/applications|^/bin|^/etc|^/cdrom|^/usr|^/sbin|^/media|^/.cache|^$GREPHOMESEARCH|^/private|^/srv|^/mnt|^/snap|^/tmp|^/opt" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70)
PSTORAGE_SYSTEMD=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/srv|^/bin|^/tmp|^/applications|^/var|^/sbin|^/cdrom|^/etc|^/media|^/.cache|^/usr|^/run|^/lib32|^/private|^/lib64|^/opt|^/mnt|^/lib|^/systemd|^/snap|^$GREPHOMESEARCH|^/sys|^/system" | grep -E ".*\.service$" | sort | uniq | head -n 70)
PSTORAGE_TIMER=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/srv|^/bin|^/tmp|^/applications|^/var|^/sbin|^/cdrom|^/etc|^/media|^/.cache|^/usr|^/run|^/lib32|^/private|^/lib64|^/opt|^/mnt|^/lib|^/systemd|^/snap|^$GREPHOMESEARCH|^/sys|^/system" | grep -E ".*\.timer$" | sort | uniq | head -n 70)
PSTORAGE_SOCKET=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/srv|^/bin|^/tmp|^/applications|^/var|^/sbin|^/cdrom|^/etc|^/media|^/.cache|^/usr|^/run|^/lib32|^/private|^/lib64|^/opt|^/mnt|^/lib|^/systemd|^/snap|^$GREPHOMESEARCH|^/sys|^/system" | grep -E ".*\.socket$" | sort | uniq | head -n 70)
PSTORAGE_DBUS=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70)
PSTORAGE_MYSQL=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "mysql$|debian\.cnf$" | sort | uniq | head -n 70)
PSTORAGE_POSTGRESQL=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70)
PSTORAGE_APACHE=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "sites-enabled$|000-default\.conf$" | sort | uniq | head -n 70)
PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/mnt|^/tmp|^/var|^/private" | grep -E "sess_.*$" | sort | uniq | head -n 70)
PSTORAGE_PHP_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70)
PSTORAGE_WORDPRESS=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "wp-config\.php$" | sort | uniq | head -n 70)
PSTORAGE_DRUPAL=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E '/default/settings.php' | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "settings\.php$" | sort | uniq | head -n 70)
PSTORAGE_MOODLE=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E 'moodle/config.php' | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "config\.php$" | sort | uniq | head -n 70)
PSTORAGE_TOMCAT=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70)
PSTORAGE_MONGO=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70)
PSTORAGE_SUPERVISORD=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70)
PSTORAGE_CESI=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "cesi\.conf$" | sort | uniq | head -n 70)
PSTORAGE_RSYNC=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70)
PSTORAGE_HOSTAPD=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70)
PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70)
PSTORAGE_RACOON=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "racoon$" | sort | uniq | head -n 70)
PSTORAGE_VNC=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70)
PSTORAGE_LDAP=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "ldap$" | sort | uniq | head -n 70)
PSTORAGE_OPENVPN=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70)
PSTORAGE_SSH=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70)
PSTORAGE_CERTSB4=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70)
PSTORAGE_CERTSBIN=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70)
PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70)
PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/private|^/tmp" | grep -E "agent.*$" | sort | uniq | head -n 70)
PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^$GREPHOMESEARCH|^/usr" | grep -E "ssh.*config$" | sort | uniq | head -n 70)
PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70)
PSTORAGE_KERBEROS=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70)
PSTORAGE_KIBANA=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70)
PSTORAGE_KNOCKD=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70)
PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "logstash$" | sort | uniq | head -n 70)
PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70)
PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70)
PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.vault-token$" | sort | uniq | head -n 70)
PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "couchdb$" | sort | uniq | head -n 70)
PSTORAGE_REDIS=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "redis\.conf$" | sort | uniq | head -n 70)
PSTORAGE_MOSQUITTO=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70)
PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "neo4j$" | sort | uniq | head -n 70)
PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70)
PSTORAGE_ERLANG=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70)
PSTORAGE_GMV_AUTH=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70)
PSTORAGE_IPSEC=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70)
PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.irssi$" | sort | uniq | head -n 70)
PSTORAGE_KEYRING=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70)
PSTORAGE_FILEZILLA=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70)
PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70)
PSTORAGE_SPLUNK=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "passwd$" | sort | uniq | head -n 70)
PSTORAGE_GITLAB=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -v -E '/lib' | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70)
PSTORAGE_PGP_GPG=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -v -E 'README.gnupg' | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70)
PSTORAGE_CACHE_VI=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70)
PSTORAGE_DOCKER=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70)
PSTORAGE_FIREFOX=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^" | grep -E "\.mozilla$|Firefox$" | sort | uniq | head -n 70)
PSTORAGE_CHROME=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^" | grep -E "google-chrome$|Chrome$" | sort | uniq | head -n 70)
PSTORAGE_OPERA=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^" | grep -E "com\.operasoftware\.Opera$" | sort | uniq | head -n 70)
PSTORAGE_SAFARI=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^" | grep -E "Safari$" | sort | uniq | head -n 70)
PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70)
PSTORAGE_FASTCGI=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "fastcgi_params$" | sort | uniq | head -n 70)
PSTORAGE_SNMP=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70)
PSTORAGE_PYPIRC=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.pypirc$" | sort | uniq | head -n 70)
PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.cloudflared$" | sort | uniq | head -n 70)
PSTORAGE_HISTORY=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\..*_history\..*$" | sort | uniq | head -n 70)
PSTORAGE_HTTP_CONF=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "httpd\.conf$" | sort | uniq | head -n 70)
PSTORAGE_HTPASSWD=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.htpasswd$" | sort | uniq | head -n 70)
PSTORAGE_LDAPRC=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.ldaprc$" | sort | uniq | head -n 70)
PSTORAGE_ENV=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.env$" | sort | uniq | head -n 70)
PSTORAGE_MSMTPRC=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.msmtprc$" | sort | uniq | head -n 70)
PSTORAGE_GITHUB=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70)
PSTORAGE_SVN=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.svn$" | sort | uniq | head -n 70)
PSTORAGE_KEEPASS=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70)
PSTORAGE_FTP=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70)
PSTORAGE_BIND=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "bind$" | sort | uniq | head -n 70)
PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "seeddms.*$" | sort | uniq | head -n 70)
PSTORAGE_DDCLIENT=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70)
PSTORAGE_KCPASSWORD=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "kcpassword$" | sort | uniq | head -n 70)
PSTORAGE_CACTI=$(echo -e "$FIND_DIR_MNT\n$FIND_DIR_ETC\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CACHE" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "cacti$" | sort | uniq | head -n 70)
PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70)
PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70)
PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70)
PSTORAGE_DATABASE=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70)
PSTORAGE_BACKUPS=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E "backup$|backups$" | sort | uniq | head -n 70)
PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_SYSTEM\n$FIND_SRV\n$FIND_CACHE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_LIB\n$FIND_SYS\n$FIND_BIN\n$FIND_MNT\n$FIND_TMP\n$FIND_USR\n$FIND_RUN\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_LIB64\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_LIB32\n$FIND_OPT\n$FIND_APPLICATIONS\n$FIND_CDROM\n$FIND_SNAP" | grep -E "^/snap|^/srv|^/bin|^$GREPHOMESEARCH|^/applications|^/tmp|^/usr|^/var|^/sbin|^/cdrom|^/etc|^/opt|^/mnt|^/private|^/media|^/.cache" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70)
##### POST SERACH VARIABLES #####
@@ -1277,7 +1291,7 @@ if echo $CHECKS | grep -q SysI; then
#-- SY) Environment vars
print_2title "Environment"
print_info "Any private information inside environment variables?"
(env || printenv || set) 2>/dev/null | grep -v "RELEVANT*|FIND*|^VERSION=|dbuslistG|mygroups|ldsoconfdG|pwd_inside_history|kernelDCW_Ubuntu_Precise|kernelDCW_Ubuntu_Trusty|kernelDCW_Ubuntu_Xenial|kernelDCW_Rhel|^sudovB=|^rootcommon=|^mounted=|^mountG=|^notmounted=|^mountpermsB=|^mountpermsG=|^kernelB=|^C=|^RED=|^GREEN=|^Y=|^B=|^NC=|TIMEOUT=|groupsB=|groupsVB=|knw_grps=|sidG|sidB=|sidVB=|sidVB2=|sudoB=|sudoG=|sudoVB=|sudocapsB=|timersG=|capsB=|notExtensions=|Wfolders=|writeB=|writeVB=|_usrs=|compiler=|PWD=|LS_COLORS=|pathshG=|notBackup=|processesDump|processesB|commonrootdirs" | sed -${E} "s,[pP][wW][dD]|[pP][aA][sS][sS][wW]|[aA][pP][iI][kK][eE][yY]|[aA][pP][iI][_][kK][eE][yY],${SED_RED},g" || echo_not_found "env || set"
(env || printenv || set) 2>/dev/null | grep -v "RELEVANT*|FIND*|^VERSION=|dbuslistG|mygroups|ldsoconfdG|pwd_inside_history|kernelDCW_Ubuntu_Precise|kernelDCW_Ubuntu_Trusty|kernelDCW_Ubuntu_Xenial|kernelDCW_Rhel|^sudovB=|^rootcommon=|^mounted=|^mountG=|^notmounted=|^mountpermsB=|^mountpermsG=|^kernelB=|^C=|^RED=|^GREEN=|^Y=|^B=|^NC=|TIMEOUT=|groupsB=|groupsVB=|knw_grps=|sidG|sidB=|sidVB=|sidVB2=|sudoB=|sudoG=|sudoVB=|timersG=|capsB=|notExtensions=|Wfolders=|writeB=|writeVB=|_usrs=|compiler=|PWD=|LS_COLORS=|pathshG=|notBackup=|processesDump|processesB|commonrootdirs" | sed -${E} "s,[pP][wW][dD]|[pP][aA][sS][sS][wW]|[aA][pP][iI][kK][eE][yY]|[aA][pP][iI][_][kK][eE][yY],${SED_RED},g" || echo_not_found "env || set"
echo ""
#-- SY) Dmesg
@@ -1921,18 +1935,18 @@ if echo $CHECKS | grep -q UsrI; then
#-- UI) Sudo -l
print_2title "Checking 'sudo -l', /etc/sudoers, and /etc/sudoers.d"
print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#sudo-and-suid"
(echo '' | sudo -S -l | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW}," | sed "s,\!root,${SED_RED},") 2>/dev/null || echo_not_found "sudo"
(echo '' | sudo -S -l | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed -${E} "s,$sudoVB1,${SED_RED_YELLOW}," | sed -${E} "s,$sudoVB2,${SED_RED_YELLOW}," | sed "s,\!root,${SED_RED},") 2>/dev/null || echo_not_found "sudo"
if [ "$PASSWORD" ]; then
(echo "$PASSWORD" | sudo -S -l | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "sudo"
(echo "$PASSWORD" | sudo -S -l | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed -${E} "s,$sudoVB1,${SED_RED_YELLOW}," | sed -${E} "s,$sudoVB2,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "sudo"
fi
( grep -Iv "^$" cat /etc/sudoers | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "/etc/sudoers"
( grep -Iv "^$" cat /etc/sudoers | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g" | sed -${E} "s,$sudoVB1,${SED_RED_YELLOW}," | sed -${E} "s,$sudoVB2,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "/etc/sudoers"
if ! [ "$IAMROOT" ] && [ -w '/etc/sudoers.d/' ]; then
echo "You can create a file in /etc/sudoers.d/ and escalate privileges" | sed -${E} "s,.*,${SED_RED_YELLOW},"
fi
for filename in '/etc/sudoers.d/*'; do
if [ -r "$filename" ]; then
echo "Sudoers file: $filename is readable" | sed -${E} "s,.*,${SED_RED},g"
grep -Iv "^$" "$filename" | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g" | sed -${E} "s,$sudoVB,${SED_RED_YELLOW},"
grep -Iv "^$" "$filename" | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g" | sed -${E} "s,$sudoVB1,${SED_RED_YELLOW}," | sed -${E} "s,$sudoVB2,${SED_RED_YELLOW},"
fi
done
echo ""
@@ -2770,6 +2784,10 @@ if echo $CHECKS | grep -q SofI; then
if ! [ "`echo \"$PSTORAGE_FTP\" | grep -E \"ws_ftp\.ini$\"`" ]; then echo_not_found "ws_ftp.ini"; fi; printf "%s" "$PSTORAGE_FTP" | grep -E "ws_ftp\.ini$" | while read f; do ls -ld "$f" | sed -${E} "s,ws_ftp\.ini$,${SED_RED},"; done; echo "";
print_2title "Analyzing Racoon Files (limit 70)"
if ! [ "`echo \"$PSTORAGE_RACOON\" | grep -E \"racoon$\"`" ]; then echo_not_found "racoon"; fi; printf "%s" "$PSTORAGE_RACOON" | grep -E "racoon$" | while read f; do ls -ld "$f" | sed -${E} "s,racoon$,${SED_RED},"; for ff in $(find "$f" -name "psk.txt"); do ls -ld "$ff" | sed -${E} "s,psk.txt,${SED_RED},"; cat "$ff" 2>/dev/null | grep -IEv "^$" | sed -${E} "s,.*,${SED_RED},g"; done; echo "";done; echo "";
print_2title "Analyzing Opera Files (limit 70)"
if ! [ "`echo \"$PSTORAGE_OPERA\" | grep -E \"com\.operasoftware\.Opera$\"`" ]; then echo_not_found "com.operasoftware.Opera"; fi; printf "%s" "$PSTORAGE_OPERA" | grep -E "com\.operasoftware\.Opera$" | while read f; do ls -ld "$f" | sed -${E} "s,com\.operasoftware\.Opera$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$"; done; echo "";
@@ -3037,7 +3055,22 @@ if echo $CHECKS | grep -q IntFiles; then
echo ""
echo "Files with capabilities (limited to 50):"
getcap -r / 2>/dev/null | head -n 50 | while read cb; do
echo "$cb" | sed -${E} "s,$sudocapsB,${SED_RED}," | sed -${E} "s,$capsB,${SED_RED},"
capsVB_vuln=""
for capVB in $capsVB; do
capname="$(echo $capVB | cut -d ':' -f 1)"
capbins="$(echo $capVB | cut -d ':' -f 2)"
if [ "$(echo $cb | grep -Ei $capname)" ] && [ "$(echo $cb | grep -E $capbins)" ]; then
echo "$cb" | sed -${E} "s,.*,${SED_RED_YELLOW},"
capsVB_vuln="1"
break
fi
done
if ! [ "$capsVB_vuln" ]; then
echo "$cb" | sed -${E} "s,$capsB,${SED_RED},"
fi
if ! [ "$IAMROOT" ] && [ -w "$(echo \"$cb\" | cut -d \" \" -f1)" ]; then
echo "$cb is writable" | sed -${E} "s,.*,${SED_RED},"
fi
@@ -3135,7 +3168,7 @@ if echo $CHECKS | grep -q IntFiles; then
##-- IF) Hashes in passwd file
print_list "Hashes inside passwd file? ........... "
if grep -qv '^[^:]*:[x\*\!]\|^#\|^$' /etc/passwd /etc/master.passwd /etc/group; then grep -v '^[^:]*:[x\*]\|^#\|^$' /etc/passwd /etc/pwd.db /etc/master.passwd /etc/group 2>/dev/null | sed -${E} "s,.*,${SED_RED},"
if grep -qv '^[^:]*:[x\*\!]\|^#\|^$' /etc/passwd /etc/master.passwd /etc/group 2>/dev/null; then grep -v '^[^:]*:[x\*]\|^#\|^$' /etc/passwd /etc/pwd.db /etc/master.passwd /etc/group 2>/dev/null | sed -${E} "s,.*,${SED_RED},"
else echo_no
fi
@@ -3160,10 +3193,12 @@ if echo $CHECKS | grep -q IntFiles; then
fi
print_list "Can I read shadow plists? ............ "
(for l in /var/db/dslocal/nodes/Default/users/*; do if [ -r "$l" ];then echo "$l"; defaults read "$l"; fi; done) 2>/dev/null || echo_no
possible_check=""
(for l in /var/db/dslocal/nodes/Default/users/*; do if [ -r "$l" ];then echo "$l"; defaults read "$l"; possible_check="1"; fi; done; if ! [ "$possible_check" ]; then echo_no; fi) 2>/dev/null || echo_no
print_list "Can I write shadow plists? ........... "
(for l in /var/db/dslocal/nodes/Default/users/*; do if [ -w "$l" ];then echo "$l"; fi; done) 2>/dev/null || echo_no
possible_check=""
(for l in /var/db/dslocal/nodes/Default/users/*; do if [ -w "$l" ];then echo "$l"; possible_check="1"; fi; done; if ! [ "$possible_check" ]; then echo_no; fi) 2>/dev/null || echo_no
##-- IF) Read opasswd file
print_list "Can I read opasswd file? ............. "