mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Eric McGinnis
61 lines
948 B
CSV
61 lines
948 B
CSV
process
|
|
cat /proc/version
|
|
cat /etc/*-release
|
|
/etc/passwd
|
|
cat /etc/*
|
|
lastlog
|
|
id
|
|
PermitRootLogin
|
|
sestatus *
|
|
ps
|
|
mysql*
|
|
netstat*
|
|
find *
|
|
head /var/mail/root
|
|
docker
|
|
cat /etc/issue
|
|
cat /etc/*-release
|
|
cat /proc/version
|
|
uname -a
|
|
uname -mrs
|
|
rpm -q kernel
|
|
dmesg | grep Linux
|
|
ls /boot | grep vmlinuz-
|
|
cat /etc/profile
|
|
cat /etc/bashrc
|
|
cat ~/.bash_profile
|
|
cat ~/.bashrc
|
|
cat ~/.bash_logout
|
|
ps -aux | grep root
|
|
ps -ef | grep root
|
|
crontab -l
|
|
cat /etc/cron*
|
|
cat /etc/cron.allow
|
|
cat /etc/cron.deny
|
|
cat /etc/crontab
|
|
grep -i user *
|
|
grep -i pass *
|
|
ifconfig
|
|
cat /etc/network/interfaces
|
|
cat /etc/sysconfig/network
|
|
cat /etc/resolv.conf
|
|
cat /etc/networks
|
|
cvelist-file:*
|
|
exploit-db*
|
|
strings -e /etc/apache2/apache2.conf
|
|
strings -e /etc/ssh/sshd_config
|
|
strings -e /etc/shadow
|
|
iptables -L
|
|
lsof -i
|
|
netstat -antup
|
|
netstat -antpx
|
|
netstat -tulpn
|
|
arp -e
|
|
route
|
|
cat /etc/passwd
|
|
cat /etc/group
|
|
cat /etc/shadow
|
|
find / -perm -u=s
|
|
find / -perm -g=s
|
|
find / -perm -4000
|
|
find / -perm -2000 |