diff --git a/linPEAS/linpeas.sh b/linPEAS/linpeas.sh index bd1fc7b..4efa2f9 100755 --- a/linPEAS/linpeas.sh +++ b/linPEAS/linpeas.sh @@ -1083,140 +1083,140 @@ if echo $CHECKS | grep -q ProCronSrvcsTmrsSocks || echo $CHECKS | grep -q IntFil CONT_THREADS=0 # FIND ALL KNOWN INTERESTING SOFTWARE FILES - FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"system.d\" -o -name \"bind\" -o -name \"couchdb\" -o -name \"postfix\" -o -name \"cacti\" -o -name \"environments\" -o -name \"ldap\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"seeddms*\" -o -name \".cloudflared\" -o -name \"sentry\" -o -name \".irssi\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"couchdb\" -o -name \".cloudflared\" -o -name \"postfix\" -o -name \"sentry\" -o -name \"cacti\" -o -name \"environments\" -o -name \".irssi\" -o -name \"ldap\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"bind\" -o -name \"couchdb\" -o -name \"postfix\" -o -name \"cacti\" -o -name \"environments\" -o -name \"ldap\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"seeddms*\" -o -name \".cloudflared\" -o -name \"sentry\" -o -name \".irssi\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"bind\" -o -name \"couchdb\" -o -name \"postfix\" -o -name \"cacti\" -o -name \"environments\" -o -name \"ldap\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"seeddms*\" -o -name \".cloudflared\" -o -name \"sentry\" -o -name \".irssi\" -o -name \"mysql\" -o -name \".vnc\" -o -name \".bluemix\" -o -name \"logstash\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_BIN=`eval_bckgrd "find /bin -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_CACHE=`eval_bckgrd "find /.cache -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_CDROM=`eval_bckgrd "find /cdrom -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_ETC=`eval_bckgrd "find /etc -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \"*knockd*\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"ssh*config\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB=`eval_bckgrd "find /lib -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_MEDIA=`eval_bckgrd "find /media -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_MNT=`eval_bckgrd "find /mnt -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"sess_*\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_OPT=`eval_bckgrd "find /opt -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_PRIVATE=`eval_bckgrd "find /private -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"agent*\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"sess_*\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_RUN=`eval_bckgrd "find /run -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SBIN=`eval_bckgrd "find /sbin -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SNAP=`eval_bckgrd "find /snap -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SRV=`eval_bckgrd "find /srv -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYS=`eval_bckgrd "find /sys -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.service\" -o -name \"*.socket\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_TMP=`eval_bckgrd "find /tmp -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"agent*\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"sess_*\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_USR=`eval_bckgrd "find /usr -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"ssh*config\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` - FIND_VAR=`eval_bckgrd "find /var -name \"access.log\" -o -name \"*.pfx\" -o -name \"settings.php\" -o -name \"ftp.ini\" -o -name \".bashrc\" -o -name \"ipsec.secrets\" -o -name \"wp-config.php\" -o -name \"legacy_credentials.db\" -o -name \"drives.xml\" -o -name \"setupinfo.bak\" -o -name \"ipsec.conf\" -o -name \"*.crt\" -o -name \"access_tokens.db\" -o -name \"scclient.exe\" -o -name \"hostapd.conf\" -o -name \"authorized_hosts\" -o -name \"*.jks\" -o -name \"rsyncd.secrets\" -o -name \"cesi.conf\" -o -name \"accessTokens.json\" -o -name \"docker-compose.yml\" -o -name \"*vnc*.c*nf*\" -o -name \"wcx_ftp.ini\" -o -name \"KeePass.enforced*\" -o -name \".pypirc\" -o -name \"credentials\" -o -name \"*.keyring\" -o -name \".git-credentials\" -o -name \"tomcat-users.xml\" -o -name \"known_hosts\" -o -name \"recentservers.xml\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \".k5login\" -o -name \"wsl.exe\" -o -name \"my.cnf\" -o -name \"pg_hba.conf\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"000-default.conf\" -o -name \"bash.exe\" -o -name \"authorized_keys\" -o -name \".plan\" -o -name \"debian.cnf\" -o -name \"*.gnupg\" -o -name \"groups.xml\" -o -name \"scheduledtasks.xml\" -o -name \"httpd.conf\" -o -name \"passwd\" -o -name \".wgetrc\" -o -name \"*vnc*.xml\" -o -name \"sysprep.inf\" -o -name \"SYSTEM\" -o -name \"setupinfo\" -o -name \"*.swp\" -o -name \"docker.socket\" -o -name \"*.rdg\" -o -name \"*.db\" -o -name \"gvm-tools.conf\" -o -name \"*.service\" -o -name \"*.csr\" -o -name \"fastcgi_params\" -o -name \"*.der\" -o -name \"AppEvent.Evt\" -o -name \"*.key\" -o -name \"Ntds.dit\" -o -name \"sitemanager.xml\" -o -name \"software\" -o -name \"psk.txt\" -o -name \"access_tokens.json\" -o -name \"NetSetup.log\" -o -name \"iis6.log\" -o -name \".profile\" -o -name \"*.socket\" -o -name \"cloud.cfg\" -o -name \"FreeSSHDservice.ini\" -o -name \"docker.sock\" -o -name \"*.ftpconfig\" -o -name \".git\" -o -name \"*.pem\" -o -name \"azureProfile.json\" -o -name \"Dockerfile\" -o -name \"server.xml\" -o -name \"sess_*\" -o -name \"gitlab.rm\" -o -name \".github\" -o -name \"KeePass.config*\" -o -name \"rsyncd.conf\" -o -name \".gitconfig\" -o -name \"*.sqlite\" -o -name \"software.sav\" -o -name \"sentry.conf.py\" -o -name \"autologin\" -o -name \".sudo_as_admin_successful\" -o -name \"db.php\" -o -name \"SAM\" -o -name \"ddclient.conf\" -o -name \"default.sav\" -o -name \"gitlab.yml\" -o -name \"id_dsa*\" -o -name \"*.cer\" -o -name \"protecteduserkey.bin\" -o -name \"pagefile.sys\" -o -name \"mongod*.conf\" -o -name \"TokenCache.dat\" -o -name \"printers.xml\" -o -name \"ws_ftp.ini\" -o -name \"error.log\" -o -name \"credentials.db\" -o -name \"krb5.conf\" -o -name \"https.conf\" -o -name \"supervisord.conf\" -o -name \"backups\" -o -name \"*credential*\" -o -name \"AzureRMContext.json\" -o -name \"my.ini\" -o -name \"php.ini\" -o -name \"https-xampp.conf\" -o -name \"pgadmin*.db\" -o -name \"ffftp.ini\" -o -name \".env\" -o -name \"SecEvent.Evt\" -o -name \"kcpassword\" -o -name \"*.sqlite3\" -o -name \"ConsoleHost_history.txt\" -o -name \"vault-ssh-helper.hcl\" -o -name \"mosquitto.conf\" -o -name \"appcmd.exe\" -o -name \"*.gpg\" -o -name \"KeePass.ini\" -o -name \"creds*\" -o -name \"pgsql.conf\" -o -name \"index.dat\" -o -name \"kibana.y*ml\" -o -name \".ldaprc\" -o -name \".lesshst\" -o -name \"security.sav\" -o -name \".erlang.cookie\" -o -name \"system.sav\" -o -name \"*.keystore\" -o -name \"snmpd.conf\" -o -name \"sysprep.xml\" -o -name \"backup\" -o -name \"RDCMan.settings\" -o -name \"*password*\" -o -name \"ftp.config\" -o -name \"autologin.conf\" -o -name \"storage.php\" -o -name \"sites.ini\" -o -name \"config.php\" -o -name \"*.timer\" -o -name \"racoon.conf\" -o -name \"*vnc*.txt\" -o -name \"ntuser.dat\" -o -name \"*.p12\" -o -name \".msmtprc\" -o -name \"filezilla.xml\" -o -name \"*config*.php\" -o -name \".htpasswd\" -o -name \"krb5.keytab\" -o -name \"secrets.yml\" -o -name \"*.pgp\" -o -name \"unattend.xml\" -o -name \"datasources.xml\" -o -name \"database.php\" -o -name \"redis.conf\" -o -name \"*.viminfo\" -o -name \"postgresql.conf\" -o -name \"*.kdbx\" -o -name \"web*.config\" -o -name \"unattend.inf\" -o -name \".vault-token\" -o -name \"*vnc*.ini\" -o -name \".*_history.*\" -o -name \"elasticsearch.y*ml\" -o -name \"unattend.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"hosts.equiv\" -o -name \".rhosts\" -o -name \".google_authenticator\" -o -name \"mariadb.cnf\" -o -name \"unattended.xml\" -o -name \".recently-used.xbel\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"cacti\" -o -name \"neo4j\" -o -name \".vnc\" -o -name \".irssi\" -o -name \"sites-enabled\" -o -name \"system.d\" -o -name \"keyrings\" -o -name \"environments\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"sentry\" -o -name \".bluemix\" -o -name \"bind\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"postfix\" -o -name \"ldap\" -o -name \"seeddms*\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"cacti\" -o -name \"neo4j\" -o -name \"keyrings\" -o -name \".vnc\" -o -name \"environments\" -o -name \".svn\" -o -name \"seeddms*\" -o -name \"mysql\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"postfix\" -o -name \"filezilla\" -o -name \"ldap\" -o -name \".bluemix\" -o -name \"sentry\" -o -name \"sites-enabled\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"cacti\" -o -name \"neo4j\" -o -name \".vnc\" -o -name \".irssi\" -o -name \"sites-enabled\" -o -name \"keyrings\" -o -name \"environments\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"sentry\" -o -name \".bluemix\" -o -name \"bind\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"postfix\" -o -name \"ldap\" -o -name \"seeddms*\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"cacti\" -o -name \"neo4j\" -o -name \".vnc\" -o -name \".irssi\" -o -name \"sites-enabled\" -o -name \"keyrings\" -o -name \"environments\" -o -name \"mysql\" -o -name \"filezilla\" -o -name \"sentry\" -o -name \".bluemix\" -o -name \"bind\" -o -name \"logstash\" -o -name \".cloudflared\" -o -name \".svn\" -o -name \"postfix\" -o -name \"ldap\" -o -name \"seeddms*\" -o -name \"couchdb\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_BIN=`eval_bckgrd "find /bin -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_CACHE=`eval_bckgrd "find /.cache -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_CDROM=`eval_bckgrd "find /cdrom -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_ETC=`eval_bckgrd "find /etc -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"*knockd*\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"ssh*config\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB=`eval_bckgrd "find /lib -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_MEDIA=`eval_bckgrd "find /media -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_MNT=`eval_bckgrd "find /mnt -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"sess_*\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_OPT=`eval_bckgrd "find /opt -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_PRIVATE=`eval_bckgrd "find /private -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \"agent*\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"sess_*\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_RUN=`eval_bckgrd "find /run -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SBIN=`eval_bckgrd "find /sbin -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SNAP=`eval_bckgrd "find /snap -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SRV=`eval_bckgrd "find /srv -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYS=`eval_bckgrd "find /sys -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_TMP=`eval_bckgrd "find /tmp -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \"agent*\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"sess_*\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_USR=`eval_bckgrd "find /usr -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"ssh*config\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` + FIND_VAR=`eval_bckgrd "find /var -name \"credentials.db\" -o -name \"mongod*.conf\" -o -name \"recentservers.xml\" -o -name \"KeePass.ini\" -o -name \"*.csr\" -o -name \"access.log\" -o -name \"azureProfile.json\" -o -name \"settings.php\" -o -name \"supervisord.conf\" -o -name \"tomcat-users.xml\" -o -name \"authorized_hosts\" -o -name \"fastcgi_params\" -o -name \"backup\" -o -name \"creds*\" -o -name \"db.php\" -o -name \"AppEvent.Evt\" -o -name \"*.ovpn\" -o -name \"my.cnf\" -o -name \"postgresql.conf\" -o -name \"cloud.cfg\" -o -name \"kibana.y*ml\" -o -name \"sysprep.inf\" -o -name \"unattended.xml\" -o -name \"ftp.ini\" -o -name \"SYSTEM\" -o -name \"racoon.conf\" -o -name \"unattend.txt\" -o -name \"*.keystore\" -o -name \"pagefile.sys\" -o -name \".sudo_as_admin_successful\" -o -name \".pypirc\" -o -name \"*.key\" -o -name \"docker.socket\" -o -name \"system.sav\" -o -name \".github\" -o -name \"autologin.conf\" -o -name \"docker.sock\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"https.conf\" -o -name \"AzureRMContext.json\" -o -name \".rhosts\" -o -name \"*.pgp\" -o -name \"krb5.keytab\" -o -name \"*.jks\" -o -name \"ftp.config\" -o -name \"TokenCache.dat\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"psk.txt\" -o -name \"*config*.php\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"cesi.conf\" -o -name \"ntuser.dat\" -o -name \"KeePass.enforced*\" -o -name \"access_tokens.db\" -o -name \"software\" -o -name \".git-credentials\" -o -name \"*.db\" -o -name \"*vnc*.c*nf*\" -o -name \"*.p12\" -o -name \"*credential*\" -o -name \"*.kdbx\" -o -name \"security.sav\" -o -name \".htpasswd\" -o -name \"gitlab.rm\" -o -name \"*.swp\" -o -name \"kcpassword\" -o -name \"setupinfo\" -o -name \"ddclient.conf\" -o -name \"Dockerfile\" -o -name \"elasticsearch.y*ml\" -o -name \".*_history.*\" -o -name \"hostapd.conf\" -o -name \"scclient.exe\" -o -name \"sentry.conf.py\" -o -name \"RDCMan.settings\" -o -name \"sitemanager.xml\" -o -name \"protecteduserkey.bin\" -o -name \"server.xml\" -o -name \"*.der\" -o -name \"datasources.xml\" -o -name \".env\" -o -name \"id_dsa*\" -o -name \"wsl.exe\" -o -name \"ws_ftp.ini\" -o -name \".google_authenticator\" -o -name \"sysprep.xml\" -o -name \".profile\" -o -name \"groups.xml\" -o -name \"ConsoleHost_history.txt\" -o -name \"gitlab.yml\" -o -name \".gitconfig\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"bash.exe\" -o -name \".lesshst\" -o -name \"pgsql.conf\" -o -name \"id_rsa*\" -o -name \"snmpd.conf\" -o -name \"anaconda-ks.cfg\" -o -name \"*.gnupg\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"web*.config\" -o -name \"known_hosts\" -o -name \"backups\" -o -name \".recently-used.xbel\" -o -name \"*password*\" -o -name \"redis.conf\" -o -name \"passwd\" -o -name \"ipsec.secrets\" -o -name \"php.ini\" -o -name \"*.sqlite\" -o -name \".ldaprc\" -o -name \"storage.php\" -o -name \"https-xampp.conf\" -o -name \"*vnc*.txt\" -o -name \"*.cer\" -o -name \"*.viminfo\" -o -name \"*.gpg\" -o -name \"vault-ssh-helper.hcl\" -o -name \"winscp.ini\" -o -name \".git\" -o -name \"rsyncd.conf\" -o -name \"software.sav\" -o -name \"*vnc*.xml\" -o -name \"config.php\" -o -name \".k5login\" -o -name \"appcmd.exe\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"KeePass.config*\" -o -name \"printers.xml\" -o -name \"000-default.conf\" -o -name \"NetSetup.log\" -o -name \"*.pem\" -o -name \"*.timer\" -o -name \"access_tokens.json\" -o -name \"sites.ini\" -o -name \"default.sav\" -o -name \"krb5.conf\" -o -name \"accessTokens.json\" -o -name \"*.sqlite3\" -o -name \"*.ftpconfig\" -o -name \"*vnc*.ini\" -o -name \".bashrc\" -o -name \"database.php\" -o -name \"debian.cnf\" -o -name \"httpd.conf\" -o -name \"my.ini\" -o -name \"legacy_credentials.db\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"*.service\" -o -name \"*.keyring\" -o -name \"setupinfo.bak\" -o -name \"pg_hba.conf\" -o -name \"*.crt\" -o -name \".vault-token\" -o -name \"docker-compose.yml\" -o -name \"autologin\" -o -name \"gvm-tools.conf\" -o -name \"kadm5.acl\" -o -name \".msmtprc\" -o -name \"mariadb.cnf\" -o -name \"wp-config.php\" -o -name \"SecEvent.Evt\" -o -name \"pgadmin*.db\" -o -name \"SAM\" -o -name \".plan\" -o -name \"authorized_keys\" -o -name \".wgetrc\" -o -name \"unattend.inf\" -o -name \"sess_*\" -o -name \"mosquitto.conf\" -o -name \"scheduledtasks.xml\" -o -name \"credentials\" -o -name \"filezilla.xml\" -o -name \"ffftp.ini\" -o -name \"*.pfx\" -o -name \"rsyncd.secrets\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"` wait # Always wait at the end CONT_THREADS=0 #Reset the threads counter #GENERATE THE STORAGES OF THE FOUND FILES - PSTORAGE_SYSTEMD=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/systemd|^/var|^/opt|^/etc|^/snap|^/mnt|^/system|^/srv|^/lib64|^/private|^/run|^/cdrom|^/usr|^/applications|^/lib|^/tmp|^/bin|^$GREPHOMESEARCH|^/lib32|^/.cache|^/sbin|^/sys" | grep -E ".*\.service$" | sort | uniq | head -n 70) - PSTORAGE_TIMER=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/systemd|^/var|^/opt|^/etc|^/snap|^/mnt|^/system|^/srv|^/lib64|^/private|^/run|^/cdrom|^/usr|^/applications|^/lib|^/tmp|^/bin|^$GREPHOMESEARCH|^/lib32|^/.cache|^/sbin|^/sys" | grep -E ".*\.timer$" | sort | uniq | head -n 70) - PSTORAGE_SOCKET=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/systemd|^/var|^/opt|^/etc|^/snap|^/mnt|^/system|^/srv|^/lib64|^/private|^/run|^/cdrom|^/usr|^/applications|^/lib|^/tmp|^/bin|^$GREPHOMESEARCH|^/lib32|^/.cache|^/sbin|^/sys" | grep -E ".*\.socket$" | sort | uniq | head -n 70) - PSTORAGE_DBUS=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70) - PSTORAGE_MYSQL=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "mysql$" | sort | uniq | head -n 70) - PSTORAGE_MARIADB=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "mariadb\.cnf$|debian\.cnf$" | sort | uniq | head -n 70) - PSTORAGE_POSTGRESQL=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70) - PSTORAGE_APACHE=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN\n$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "sites-enabled$|000-default\.conf$" | sort | uniq | head -n 70) - PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/var|^/private|^/tmp|^/mnt" | grep -E "sess_.*$" | sort | uniq | head -n 70) - PSTORAGE_PHP_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70) - PSTORAGE_WORDPRESS=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "wp-config\.php$" | sort | uniq | head -n 70) - PSTORAGE_DRUPAL=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E '/default/settings.php' | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "settings\.php$" | sort | uniq | head -n 70) - PSTORAGE_MOODLE=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E 'moodle/config.php' | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "config\.php$" | sort | uniq | head -n 70) - PSTORAGE_TOMCAT=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70) - PSTORAGE_MONGO=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70) - PSTORAGE_SUPERVISORD=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70) - PSTORAGE_CESI=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "cesi\.conf$" | sort | uniq | head -n 70) - PSTORAGE_RSYNC=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70) - PSTORAGE_HOSTAPD=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70) - PSTORAGE_RACOON=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "racoon\.conf$|psk\.txt$" | sort | uniq | head -n 70) - PSTORAGE_VNC=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN\n$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70) - PSTORAGE_LDAP=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "ldap$" | sort | uniq | head -n 70) - PSTORAGE_OPENVPN=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70) - PSTORAGE_SSH=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70) - PSTORAGE_CERTSB4=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70) - PSTORAGE_CERTSBIN=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70) - PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70) - PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/tmp|^/private" | grep -E "agent.*$" | sort | uniq | head -n 70) - PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/usr|^$GREPHOMESEARCH" | grep -E "ssh.*config$" | sort | uniq | head -n 70) - PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN\n$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70) - PSTORAGE_KERBEROS=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70) - PSTORAGE_KIBANA=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70) - PSTORAGE_KNOCKD=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70) - PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "logstash$" | sort | uniq | head -n 70) - PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70) - PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70) - PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.vault-token$" | sort | uniq | head -n 70) - PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "couchdb$" | sort | uniq | head -n 70) - PSTORAGE_REDIS=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "redis\.conf$" | sort | uniq | head -n 70) - PSTORAGE_MOSQUITTO=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70) - PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "neo4j$" | sort | uniq | head -n 70) - PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70) - PSTORAGE_ERLANG=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70) - PSTORAGE_GMV_AUTH=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70) - PSTORAGE_IPSEC=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70) - PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.irssi$" | sort | uniq | head -n 70) - PSTORAGE_KEYRING=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN\n$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70) - PSTORAGE_FILEZILLA=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN\n$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70) - PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70) - PSTORAGE_SPLUNK=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "passwd$" | sort | uniq | head -n 70) - PSTORAGE_GITLAB=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -v -E '/lib' | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70) - PSTORAGE_PGP_GPG=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -v -E 'README.gnupg' | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70) - PSTORAGE_CACHE_VI=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70) - PSTORAGE_DOCKER=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70) - PSTORAGE_FIREFOX=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^" | grep -E "\.mozilla$|Firefox$" | sort | uniq | head -n 70) - PSTORAGE_CHROME=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^" | grep -E "google-chrome$|Chrome$" | sort | uniq | head -n 70) - PSTORAGE_OPERA=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^" | grep -E "com\.operasoftware\.Opera$" | sort | uniq | head -n 70) - PSTORAGE_SAFARI=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^" | grep -E "Safari$" | sort | uniq | head -n 70) - PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70) - PSTORAGE_FASTCGI=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "fastcgi_params$" | sort | uniq | head -n 70) - PSTORAGE_SNMP=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_PYPIRC=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.pypirc$" | sort | uniq | head -n 70) - PSTORAGE_POSTFIX=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "postfix$" | sort | uniq | head -n 70) - PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.cloudflared$" | sort | uniq | head -n 70) - PSTORAGE_HISTORY=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\..*_history\..*$" | sort | uniq | head -n 70) - PSTORAGE_HTTP_CONF=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "httpd\.conf$" | sort | uniq | head -n 70) - PSTORAGE_HTPASSWD=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.htpasswd$" | sort | uniq | head -n 70) - PSTORAGE_LDAPRC=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.ldaprc$" | sort | uniq | head -n 70) - PSTORAGE_ENV=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.env$" | sort | uniq | head -n 70) - PSTORAGE_MSMTPRC=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.msmtprc$" | sort | uniq | head -n 70) - PSTORAGE_GITHUB=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70) - PSTORAGE_SVN=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.svn$" | sort | uniq | head -n 70) - PSTORAGE_KEEPASS=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70) - PSTORAGE_FTP=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70) - PSTORAGE_BIND=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/usr|^/var|^/etc" | grep -E "bind$" | sort | uniq | head -n 70) - PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "seeddms.*$" | sort | uniq | head -n 70) - PSTORAGE_DDCLIENT=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70) - PSTORAGE_KCPASSWORD=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "kcpassword$" | sort | uniq | head -n 70) - PSTORAGE_SENTRY=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN\n$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "sentry$|sentry\.conf\.py$" | sort | uniq | head -n 70) - PSTORAGE_STRAPI=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "environments$" | sort | uniq | head -n 70) - PSTORAGE_CACTI=$(echo -e "$FIND_DIR_ETC\n$FIND_DIR_USR\n$FIND_DIR_VAR\n$FIND_DIR_OPT\n$FIND_DIR_CDROM\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_SNAP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_CACHE\n$FIND_DIR_SRV" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "cacti$" | sort | uniq | head -n 70) - PSTORAGE_WGET=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.wgetrc$" | sort | uniq | head -n 70) - PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70) - PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70) - PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70) - PSTORAGE_DATABASE=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70) - PSTORAGE_BACKUPS=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E "backup$|backups$" | sort | uniq | head -n 70) - PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CACHE\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_USR\n$FIND_ETC\n$FIND_BIN\n$FIND_SYS\n$FIND_OPT\n$FIND_TMP\n$FIND_CDROM\n$FIND_VAR\n$FIND_HOMESEARCH\n$FIND_MNT\n$FIND_SRV\n$FIND_SNAP\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_MEDIA\n$FIND_RUN" | grep -E "^/media|^/applications|^/srv|^/.cache|^/sbin|^/tmp|^/var|^/snap|^/bin|^/opt|^/etc|^$GREPHOMESEARCH|^/private|^/cdrom|^/usr|^/mnt" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70) + PSTORAGE_SYSTEMD=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/bin|^/lib64|^/cdrom|^/etc|^/opt|^$GREPHOMESEARCH|^/mnt|^/sys|^/.cache|^/private|^/media|^/srv|^/var|^/systemd|^/system|^/snap|^/applications|^/tmp|^/usr|^/lib|^/lib32|^/run|^/sbin" | grep -E ".*\.service$" | sort | uniq | head -n 70) + PSTORAGE_TIMER=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/bin|^/lib64|^/cdrom|^/etc|^/opt|^$GREPHOMESEARCH|^/mnt|^/sys|^/.cache|^/private|^/media|^/srv|^/var|^/systemd|^/system|^/snap|^/applications|^/tmp|^/usr|^/lib|^/lib32|^/run|^/sbin" | grep -E ".*\.timer$" | sort | uniq | head -n 70) + PSTORAGE_SOCKET=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/bin|^/lib64|^/cdrom|^/etc|^/opt|^$GREPHOMESEARCH|^/mnt|^/sys|^/.cache|^/private|^/media|^/srv|^/var|^/systemd|^/system|^/snap|^/applications|^/tmp|^/usr|^/lib|^/lib32|^/run|^/sbin" | grep -E ".*\.socket$" | sort | uniq | head -n 70) + PSTORAGE_DBUS=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70) + PSTORAGE_MYSQL=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "mysql$" | sort | uniq | head -n 70) + PSTORAGE_MARIADB=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "mariadb\.cnf$|debian\.cnf$" | sort | uniq | head -n 70) + PSTORAGE_POSTGRESQL=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70) + PSTORAGE_APACHE=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "sites-enabled$|000-default\.conf$" | sort | uniq | head -n 70) + PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/var|^/tmp|^/mnt|^/private" | grep -E "sess_.*$" | sort | uniq | head -n 70) + PSTORAGE_PHP_FILES=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70) + PSTORAGE_WORDPRESS=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "wp-config\.php$" | sort | uniq | head -n 70) + PSTORAGE_DRUPAL=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E '/default/settings.php' | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "settings\.php$" | sort | uniq | head -n 70) + PSTORAGE_MOODLE=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E 'moodle/config.php' | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "config\.php$" | sort | uniq | head -n 70) + PSTORAGE_TOMCAT=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70) + PSTORAGE_MONGO=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70) + PSTORAGE_SUPERVISORD=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70) + PSTORAGE_CESI=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "cesi\.conf$" | sort | uniq | head -n 70) + PSTORAGE_RSYNC=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70) + PSTORAGE_HOSTAPD=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70) + PSTORAGE_RACOON=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "racoon\.conf$|psk\.txt$" | sort | uniq | head -n 70) + PSTORAGE_VNC=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70) + PSTORAGE_LDAP=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "ldap$" | sort | uniq | head -n 70) + PSTORAGE_OPENVPN=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70) + PSTORAGE_SSH=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70) + PSTORAGE_CERTSB4=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70) + PSTORAGE_CERTSBIN=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70) + PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70) + PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/tmp|^/private" | grep -E "agent.*$" | sort | uniq | head -n 70) + PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/usr|^$GREPHOMESEARCH" | grep -E "ssh.*config$" | sort | uniq | head -n 70) + PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70) + PSTORAGE_KERBEROS=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70) + PSTORAGE_KIBANA=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70) + PSTORAGE_KNOCKD=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70) + PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "logstash$" | sort | uniq | head -n 70) + PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70) + PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70) + PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.vault-token$" | sort | uniq | head -n 70) + PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "couchdb$" | sort | uniq | head -n 70) + PSTORAGE_REDIS=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "redis\.conf$" | sort | uniq | head -n 70) + PSTORAGE_MOSQUITTO=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70) + PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "neo4j$" | sort | uniq | head -n 70) + PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70) + PSTORAGE_ERLANG=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70) + PSTORAGE_GMV_AUTH=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70) + PSTORAGE_IPSEC=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70) + PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.irssi$" | sort | uniq | head -n 70) + PSTORAGE_KEYRING=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70) + PSTORAGE_FILEZILLA=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70) + PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70) + PSTORAGE_SPLUNK=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "passwd$" | sort | uniq | head -n 70) + PSTORAGE_GITLAB=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -v -E '/lib' | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70) + PSTORAGE_PGP_GPG=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -v -E 'README.gnupg' | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70) + PSTORAGE_CACHE_VI=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70) + PSTORAGE_DOCKER=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70) + PSTORAGE_FIREFOX=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^" | grep -E "\.mozilla$|Firefox$" | sort | uniq | head -n 70) + PSTORAGE_CHROME=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^" | grep -E "google-chrome$|Chrome$" | sort | uniq | head -n 70) + PSTORAGE_OPERA=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^" | grep -E "com\.operasoftware\.Opera$" | sort | uniq | head -n 70) + PSTORAGE_SAFARI=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^" | grep -E "Safari$" | sort | uniq | head -n 70) + PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70) + PSTORAGE_FASTCGI=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "fastcgi_params$" | sort | uniq | head -n 70) + PSTORAGE_SNMP=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_PYPIRC=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.pypirc$" | sort | uniq | head -n 70) + PSTORAGE_POSTFIX=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "postfix$" | sort | uniq | head -n 70) + PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.cloudflared$" | sort | uniq | head -n 70) + PSTORAGE_HISTORY=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\..*_history\..*$" | sort | uniq | head -n 70) + PSTORAGE_HTTP_CONF=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "httpd\.conf$" | sort | uniq | head -n 70) + PSTORAGE_HTPASSWD=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.htpasswd$" | sort | uniq | head -n 70) + PSTORAGE_LDAPRC=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.ldaprc$" | sort | uniq | head -n 70) + PSTORAGE_ENV=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.env$" | sort | uniq | head -n 70) + PSTORAGE_MSMTPRC=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.msmtprc$" | sort | uniq | head -n 70) + PSTORAGE_GITHUB=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70) + PSTORAGE_SVN=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.svn$" | sort | uniq | head -n 70) + PSTORAGE_KEEPASS=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70) + PSTORAGE_FTP=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70) + PSTORAGE_BIND=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/var|^/etc|^/usr" | grep -E "bind$" | sort | uniq | head -n 70) + PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "seeddms.*$" | sort | uniq | head -n 70) + PSTORAGE_DDCLIENT=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70) + PSTORAGE_KCPASSWORD=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "kcpassword$" | sort | uniq | head -n 70) + PSTORAGE_SENTRY=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "sentry$|sentry\.conf\.py$" | sort | uniq | head -n 70) + PSTORAGE_STRAPI=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "environments$" | sort | uniq | head -n 70) + PSTORAGE_CACTI=$(echo -e "$FIND_DIR_HOMESEARCH\n$FIND_DIR_SRV\n$FIND_DIR_TMP\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_SNAP\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_USR\n$FIND_DIR_MEDIA\n$FIND_DIR_PRIVATE\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_CDROM\n$FIND_DIR_ETC\n$FIND_DIR_BIN" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "cacti$" | sort | uniq | head -n 70) + PSTORAGE_WGET=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.wgetrc$" | sort | uniq | head -n 70) + PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70) + PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70) + PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70) + PSTORAGE_DATABASE=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70) + PSTORAGE_BACKUPS=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E "backup$|backups$" | sort | uniq | head -n 70) + PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_LIB\n$FIND_ETC\n$FIND_PRIVATE\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_LIB64\n$FIND_HOMESEARCH\n$FIND_SBIN\n$FIND_SNAP\n$FIND_MEDIA\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_OPT\n$FIND_CDROM\n$FIND_TMP\n$FIND_CACHE\n$FIND_USR\n$FIND_MNT\n$FIND_SYSTEM" | grep -E "^/mnt|^/tmp|^/snap|^/bin|^/.cache|^/cdrom|^/private|^/media|^/srv|^/var|^/etc|^/applications|^/usr|^/opt|^/sbin|^$GREPHOMESEARCH" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70) ##### POST SERACH VARIABLES ##### diff --git a/winPEAS/winPEASexe/README.md b/winPEAS/winPEASexe/README.md index e9c8590..0490e62 100755 --- a/winPEAS/winPEASexe/README.md +++ b/winPEAS/winPEASexe/README.md @@ -81,7 +81,7 @@ filesinfo Search files that can contains credentials eventsinfo Display interesting events information wait Wait for user input between checks debug Display debugging information - memory usage, method execution time -log Log all output to file "out.txt" +log=[logfile] Log all output to file defined as logfile, or to "out.txt" if not specified Additional checks (slower): -lolbas Run additional LOLBAS check diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/any/winPEASany.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/any/winPEASany.exe index 7e5b20b..c80bc51 100644 Binary files a/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/any/winPEASany.exe and b/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/any/winPEASany.exe differ diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x64/winPEASx64.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x64/winPEASx64.exe index a9e457e..1916b02 100644 Binary files a/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x64/winPEASx64.exe and b/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x64/winPEASx64.exe differ diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x86/winPEASx86.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x86/winPEASx86.exe index 52675f6..218b8e9 100644 Binary files a/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x86/winPEASx86.exe and b/winPEAS/winPEASexe/binaries/Obfuscated Releases/Dotfuscated/x86/winPEASx86.exe differ diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASany.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASany.exe index 7e5b20b..c80bc51 100755 Binary files a/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASany.exe and b/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASany.exe differ diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx64.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx64.exe index a9e457e..1916b02 100755 Binary files a/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx64.exe and b/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx64.exe differ diff --git a/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx86.exe b/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx86.exe index 52675f6..218b8e9 100755 Binary files a/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx86.exe and b/winPEAS/winPEASexe/binaries/Obfuscated Releases/winPEASx86.exe differ diff --git a/winPEAS/winPEASexe/binaries/Release/winPEASany.exe b/winPEAS/winPEASexe/binaries/Release/winPEASany.exe index b080ffa..5e7312c 100755 Binary files a/winPEAS/winPEASexe/binaries/Release/winPEASany.exe and b/winPEAS/winPEASexe/binaries/Release/winPEASany.exe differ diff --git a/winPEAS/winPEASexe/binaries/x64/Release/winPEASx64.exe b/winPEAS/winPEASexe/binaries/x64/Release/winPEASx64.exe index 4efa793..783cb73 100755 Binary files a/winPEAS/winPEASexe/binaries/x64/Release/winPEASx64.exe and b/winPEAS/winPEASexe/binaries/x64/Release/winPEASx64.exe differ diff --git a/winPEAS/winPEASexe/binaries/x86/Release/winPEASx86.exe b/winPEAS/winPEASexe/binaries/x86/Release/winPEASx86.exe index b23ae6b..045a6c7 100755 Binary files a/winPEAS/winPEASexe/binaries/x86/Release/winPEASx86.exe and b/winPEAS/winPEASexe/binaries/x86/Release/winPEASx86.exe differ diff --git a/winPEAS/winPEASexe/winPEAS/Checks/Checks.cs b/winPEAS/winPEASexe/winPEAS/Checks/Checks.cs index 9ce51be..f386204 100644 --- a/winPEAS/winPEASexe/winPEAS/Checks/Checks.cs +++ b/winPEAS/winPEASexe/winPEAS/Checks/Checks.cs @@ -44,11 +44,11 @@ namespace winPEAS.Checks // github url for Linpeas.sh public static string LinpeasUrl = "https://raw.githubusercontent.com/carlospolop/privilege-escalation-awesome-scripts-suite/master/linPEAS/linpeas.sh"; - public const string LogFile = "out.txt"; + public const string DefaultLogFile = "out.txt"; class SystemCheck - { + { public string Key { get; } public ISystemCheck Check { get; } @@ -96,20 +96,34 @@ namespace winPEAS.Checks return; } - if (string.Equals(arg, "log", StringComparison.CurrentCultureIgnoreCase)) + if (arg.StartsWith("log", StringComparison.CurrentCultureIgnoreCase)) { + // get logfile argument if present + string logFile = DefaultLogFile; + var parts = arg.Split('='); + if (parts.Length == 2) + { + logFile = parts[1]; + + if (string.IsNullOrWhiteSpace(logFile)) + { + Beaprint.PrintException("Please specify a valid log file."); + return; + } + } + try { - fileStream = new FileStream(LogFile, FileMode.OpenOrCreate, FileAccess.Write); + fileStream = new FileStream(logFile, FileMode.OpenOrCreate, FileAccess.Write); fileWriter = new StreamWriter(fileStream); } catch (Exception ex) { - Beaprint.PrintException($"Cannot open \"{LogFile}\" for writing:\n {ex.Message}"); + Beaprint.PrintException($"Cannot open \"{logFile}\" for writing:\n {ex.Message}"); return; } - Beaprint.ColorPrint($"\"log\" argument present, redirecting output to file \"{LogFile}\"", Beaprint.ansi_color_good); + Beaprint.ColorPrint($"\"log\" argument present, redirecting output to file \"{logFile}\"", Beaprint.ansi_color_good); Console.SetOut(fileWriter); } @@ -257,7 +271,7 @@ namespace winPEAS.Checks try { Beaprint.GrayPrint(" - Getting Win32_UserAccount info..."); - + // by default only enumerate local users SelectQuery query = new SelectQuery("Win32_UserAccount", "LocalAccount=true"); if (IsDomainEnumeration) diff --git a/winPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs b/winPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs index 288db6c..ec329bc 100644 --- a/winPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs +++ b/winPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs @@ -15,13 +15,13 @@ namespace winPEAS.Checks Beaprint.GreatPrint("Services Information"); /// Start finding Modifiable services so any function could use them - + try { CheckRunner.Run(() => { modifiableServices = ServicesInfoHelper.GetModifiableServices(winPEAS.Checks.Checks.CurrentUserSiDs); - }, isDebug); + }, isDebug); } catch (Exception ex) { @@ -34,7 +34,7 @@ namespace winPEAS.Checks PrintModifiableServices, PrintWritableRegServices, PrintPathDllHijacking, - }.ForEach(action => CheckRunner.Run(action, isDebug)); + }.ForEach(action => CheckRunner.Run(action, isDebug)); } void PrintInterestingServices() @@ -124,10 +124,22 @@ namespace winPEAS.Checks Beaprint.LinkPrint("https://book.hacktricks.xyz/windows/windows-local-privilege-escalation#services", "Check if you can modify any service"); if (modifiableServices.Count > 0) { - Beaprint.BadPrint(" LOOKS LIKE YOU CAN MODIFY SOME SERVICE/s:"); + Beaprint.BadPrint(" LOOKS LIKE YOU CAN MODIFY OR START/STOP SOME SERVICE/s:"); Dictionary colorsMS = new Dictionary() { - { ".*", Beaprint.ansi_color_bad }, + // modify + { "AllAccess", Beaprint.ansi_color_bad }, + { "ChangeConfig", Beaprint.ansi_color_bad }, + { "WriteDac", Beaprint.ansi_color_bad }, + { "WriteOwner", Beaprint.ansi_color_bad }, + { "AccessSystemSecurity", Beaprint.ansi_color_bad }, + { "GenericAll", Beaprint.ansi_color_bad }, + { "GenericWrite (ChangeConfig)", Beaprint.ansi_color_bad }, + + // start/stop + { "GenericExecute (Start/Stop)", Beaprint.ansi_color_yellow }, + { "Start", Beaprint.ansi_color_yellow }, + { "Stop", Beaprint.ansi_color_yellow }, }; Beaprint.DictPrint(modifiableServices, colorsMS, false, true); } diff --git a/winPEAS/winPEASexe/winPEAS/Checks/WindowsCreds.cs b/winPEAS/winPEASexe/winPEAS/Checks/WindowsCreds.cs index 628b581..01d7a43 100644 --- a/winPEAS/winPEASexe/winPEAS/Checks/WindowsCreds.cs +++ b/winPEAS/winPEASexe/winPEAS/Checks/WindowsCreds.cs @@ -22,7 +22,7 @@ namespace winPEAS.Checks public void PrintInfo(bool isDebug) { Beaprint.GreatPrint("Windows Credentials"); - + new List { PrintVaultCreds, @@ -184,7 +184,7 @@ namespace winPEAS.Checks Beaprint.LinkPrint("https://book.hacktricks.xyz/windows/windows-local-privilege-escalation#dpapi"); var credFiles = KnownFileCredsInfo.GetCredFiles(); Beaprint.DictPrint(credFiles, false); - + if (credFiles.Count != 0) { Beaprint.InfoPrint("Follow the provided link for further instructions in how to decrypt the creds file"); @@ -201,11 +201,11 @@ namespace winPEAS.Checks try { Beaprint.MainPrint("Checking for RDCMan Settings Files"); - Beaprint.LinkPrint("https://book.hacktricks.xyz/windows/windows-local-privilege-escalation#remote-desktop-credential-manager", + Beaprint.LinkPrint("https://book.hacktricks.xyz/windows/windows-local-privilege-escalation#remote-desktop-credential-manager", "Dump credentials from Remote Desktop Connection Manager"); var rdcFiles = RemoteDesktop.GetRDCManFiles(); Beaprint.DictPrint(rdcFiles, false); - + if (rdcFiles.Count != 0) { Beaprint.InfoPrint("Follow the provided link for further instructions in how to decrypt the .rdg file"); @@ -252,6 +252,9 @@ namespace winPEAS.Checks try { Beaprint.MainPrint("Looking for saved Wifi credentials"); + + WlanClient wlanClient = new WlanClient(); + foreach (var @interface in new WlanClient().Interfaces) { foreach (var profile in @interface.GetProfiles()) @@ -276,6 +279,26 @@ namespace winPEAS.Checks catch (Exception ex) { Beaprint.PrintException(ex.Message); + + // revert to old way + Beaprint.NoColorPrint("Enumerating WLAN using wlanapi.dll failed, trying to enumerate using 'netsh'"); + + Dictionary networkConnections = Wifi.Wifi.Retrieve(); + Dictionary ansi_colors_regexp = new Dictionary(); + + if (networkConnections.Count > 0) + { + //Make sure the passwords are all flagged as ansi_color_bad. + foreach (var connection in networkConnections) + { + ansi_colors_regexp.Add(connection.Value, Beaprint.ansi_color_bad); + } + Beaprint.DictPrint(networkConnections, ansi_colors_regexp, false); + } + else + { + Beaprint.NoColorPrint("No saved Wifi credentials found"); + } } } @@ -302,7 +325,7 @@ namespace winPEAS.Checks Beaprint.NoColorPrint(" You must be an administrator to run this check"); return; } - + var script = AppCmd.GetExtractAppCmdCredsPowerShellScript(); string args = @$" {script}"; @@ -346,7 +369,7 @@ namespace winPEAS.Checks { Beaprint.MainPrint("Looking SSClient.exe"); Beaprint.LinkPrint("https://book.hacktricks.xyz/windows/windows-local-privilege-escalation#scclient-sccm"); - + if (File.Exists(Environment.ExpandEnvironmentVariables(@"%systemroot%\Windows\CCM\SCClient.exe"))) { Beaprint.BadPrint(" SCClient.exe was found in " + Environment.ExpandEnvironmentVariables(@"%systemroot%\Windows\CCM\SCClient.exe DLL Side loading?")); @@ -470,7 +493,7 @@ namespace winPEAS.Checks { 2, "Require Remote Credential Guard" }, { 3, "Require Restricted Admin or Remote Credential Guard" }, }; - + var str = $"{type} - Unknown"; if (types.ContainsKey(type.Value)) diff --git a/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs b/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs index 89b2c3b..51d373a 100644 --- a/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs +++ b/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs @@ -31,7 +31,7 @@ namespace winPEAS.Helpers public static string ansi_users_disabled = BLUE; public static string ansi_current_user = MAGENTA; - private static string Advisory = + private static string Advisory = "winpeas should be used for authorized penetration testing and/or educational purposes only." + "Any misuse of this software will not be the responsibility of the author or of any other collaborator. " + "Use it at your own networks and/or with the network owner's permission."; @@ -43,7 +43,7 @@ namespace winPEAS.Helpers ///////////////////////////////// public static void PrintBanner() { - Console.WriteLine(BLUE + string.Format(@" + Console.WriteLine(BLUE + string.Format(@" {0}*((,.,/((((((((((((((((((((/, */ {0},/*,..*((((((((((((((((((((((((((((((((((, {0},*/((((((((((((((((((/, .*//((//**, .*(((((((* @@ -71,9 +71,9 @@ namespace winPEAS.Helpers {0}(((((((((/,. ,*//////*,. ./(((((((((((((((. {0}(((((((((((((((((((((((((((((/", LGREEN, GREEN, BLUE, NOCOLOR) + NOCOLOR); - Console.WriteLine(); - Console.WriteLine(LYELLOW + "ADVISORY: " + BLUE + Advisory); - Console.WriteLine(); + Console.WriteLine(); + Console.WriteLine(LYELLOW + "ADVISORY: " + BLUE + Advisory); + Console.WriteLine(); } public static void PrintMarketingBanner() @@ -140,13 +140,13 @@ namespace winPEAS.Helpers Console.WriteLine(LBLUE + " eventsinfo" + GRAY + " Display interesting events information" + NOCOLOR); Console.WriteLine(LBLUE + " wait" + GRAY + " Wait for user input between checks" + NOCOLOR); Console.WriteLine(LBLUE + " debug" + GRAY + " Display debugging information - memory usage, method execution time" + NOCOLOR); - Console.WriteLine(LBLUE + " log" + GRAY +$" Log all output to file \"{Checks.Checks.LogFile}\"" + NOCOLOR); + Console.WriteLine(LBLUE + " log[=logfile]" + GRAY + $" Log all output to file defined as logfile, or to \"{Checks.Checks.DefaultLogFile}\" if not specified" + NOCOLOR); Console.WriteLine(); Console.WriteLine(LCYAN + " Additional checks (slower):"); Console.WriteLine(LBLUE + " -lolbas" + GRAY + $" Run additional LOLBAS check" + NOCOLOR); Console.WriteLine(LBLUE + " -linpeas=[url]" + GRAY + $" Run additional linpeas.sh check for default WSL distribution, optionally provide custom linpeas.sh URL\n" + $" (default: {Checks.Checks.LinpeasUrl})" + NOCOLOR); - + } @@ -215,7 +215,7 @@ namespace winPEAS.Helpers internal static void PrintDebugLine(string log) { - Console.WriteLine(YELLOW + " [Debug] " + log + NOCOLOR); + Console.WriteLine(YELLOW + " [Debug] " + log + NOCOLOR); Console.WriteLine(); } @@ -228,7 +228,7 @@ namespace winPEAS.Helpers public static void PrintException(string message) { GrayPrint($" [X] Exception: {message}"); - } + } public static void AnsiPrint(string to_print, Dictionary ansi_colors_regexp) { diff --git a/winPEAS/winPEASexe/winPEAS/Helpers/PermissionsHelper.cs b/winPEAS/winPEASexe/winPEAS/Helpers/PermissionsHelper.cs index d85cd4b..0c070ad 100644 --- a/winPEAS/winPEASexe/winPEAS/Helpers/PermissionsHelper.cs +++ b/winPEAS/winPEASexe/winPEAS/Helpers/PermissionsHelper.cs @@ -84,7 +84,7 @@ namespace winPEAS.Helpers return results; } - public static List GetMyPermissionsF(FileSecurity fSecurity, Dictionary SIDs, PermissionType permissionType = PermissionType.DEFAULT) + public static List GetMyPermissionsF(FileSecurity fSecurity, Dictionary SIDs, PermissionType permissionType = PermissionType.DEFAULT) { // Get interesting permissions in fSecurity (Only files and folders) List results = new List(); @@ -271,11 +271,15 @@ namespace winPEAS.Helpers else if (permissionType == PermissionType.WRITEABLE_OR_EQUIVALENT_SVC) { + // docs: + // https://docs.microsoft.com/en-us/windows/win32/services/service-security-and-access-rights + // https://docs.microsoft.com/en-us/troubleshoot/windows-server/windows-security/grant-users-rights-manage-services + interesting_perms = new Dictionary() { - { "AllAccess", 0xf01ff}, + { "AllAccess", 0xf01ff}, // full control //{"QueryConfig" , 1}, //Grants permission to query the service's configuration. - //{"ChangeConfig" , 2}, //Grants permission to change the service's permission. + {"ChangeConfig" , 2}, //Grants permission to change the service's permission. //{"QueryStatus" , 4}, //Grants permission to query the service's status. //{"EnumerateDependents" , 8}, //Grants permissionto enumerate the service's dependent services. //{"PauseContinue" , 64}, //Grants permission to pause/continue the service. @@ -283,15 +287,17 @@ namespace winPEAS.Helpers //{"UserDefinedControl" , 256}, //Grants permission to run the service's user-defined control. //{"Delete" , 65536}, //Grants permission to delete the service. //{"ReadControl" , 131072}, //Grants permission to query the service's security descriptor. - {"WriteDac" , 262144}, //Grants permission to set the service's discretionary access list. - {"WriteOwner" , 524288}, //Grants permission to modify the group and owner of a service. + {"WriteDac" , 0x40000}, //Grants permission to set the service's discretionary access list. + {"WriteOwner" , 0x80000}, //Grants permission to modify the group and owner of a service. //{"Synchronize" , 1048576}, {"AccessSystemSecurity" , 16777216}, //The right to get or set the SACL in the object security descriptor. - {"GenericAll" , 268435456}, - {"GenericWrite" , 1073741824}, - {"GenericExecute" , 536870912}, - {"Start" , 16}, //Grants permission to start the service. - {"Stop" , 32}, //Grants permission to stop the service. + {"GenericAll" , 0x1000_0000}, + //{"GenericWrite" , 0x4000_0000}, + //{"GenericExecute" , 0x2000_0000}, + {"GenericWrite (ChangeConfig)" , 0x2_0002}, + {"GenericExecute (Start/Stop)" , 0x2_01F0}, + {"Start" , 0x0010}, //Grants permission to start the service. + {"Stop" , 0x0020}, //Grants permission to stop the service. //{"GenericRead" , 2147483648} }; } @@ -302,8 +308,8 @@ namespace winPEAS.Helpers foreach (KeyValuePair entry in interesting_perms) { if ((entry.Value & current_perm) == entry.Value) - { - return entry.Key; + { + return entry.Key; } } }