Current Path : /opt/zabbix_scripts/ |
|
Current File : //opt/zabbix_scripts/malicious.findAnonymousFox.sh |
#!/bin/bash
#####################################################################
# Version: 20201205.1504
#
# Check common locations for Anonymousfox exploit users
#
#####################################################################
cpanelUsernames=`whmapi1 listaccts | grep -E '\ {6}user:' | cut -d: -f2 | sort`
for cpanelUsername in ${cpanelUsernames[@]}
do
if [[ -d /home/$cpanelUsername/etc/ ]]
then
grep -rE '(anonymous|smtp)fox' /home/$cpanelUsername/etc/
fi
if [[ -f /home/$cpanelUsername/.contactemail ]]
then
grep '(anonymous|smtp)fox' /home/$cpanelUsername/.contactemail
fi
done
Copyright 2K16 - 2K18 Indonesian Hacker Rulez