Menu

find all files containing suspect words

,

1 . write all the suspect words in a text file, each word on a single line

suspect_words.txt

error_reporting(0)
http_response_code(
Darknet
xploit
Mamank
@copy
base64_
eval(
ip()
POST\[
_halt_

2. run the following command

grep -rnw '.' -f ./suspect_words.txt

 

or extended solution to output yout results to a file

grep -rnwi '.' -f ./suspect_words.txt --exclude=*temp.txt |  cut -c -400 >./temp.txt

Related Posts

Deny dns requests type=ANY using iptables

iptables -A INPUT -p udp –dport 53 -m string –from 50 –algo bm –hex-string ‘|0000FF0001|’ -m recent –set –name dnsanyqueryiptables -A INPUT -p udp –dport 53 -m string –from 50 –algo bm –hex-string ‘|0000FF0001|’ -m recent –name dnsanyquery –rcheck –seconds 60 –hitcount 1 -j DROPiptables -A INPUT -p udp –dport 53 -m u32 –u32 $(python […]

find open ports in linux

List open ports Using Netstat Command The flag -l tells netstat to print all listening sockets, -t shows all TCP connections, -u displays all UDP connections and -p enables printing of application/program name listening on the port. To print numeric values rather than service names, add the -n flag. netstat -ltup Using ss Command ss -lntu Using Nmap Command Installation apt install nmap [On Debian/Ubuntu] […]