1#! /bin/bash
 2
 3# Frontmatter 
 4black='\033[0;30m'        # Black
 5red='\033[0;31m'          # Red
 6green='\033[0;32m'        # Green
 7yellow='\033[0;33m'       # Yellow
 8blue='\033[0;34m'         # Blue
 9purple='\033[0;35m'       # Purple
10cyan='\033[0;36m'         # Cyan
11white='\033[0;37m'        # White
12nocolor='\033[0m'         # Text Reset
13blink='\E[5m'             # Blink
14halfline="${green}------------------${nocolor}"
15newline="${green}------------------------------------${nocolor}"
16
17# Get Arguments
18while getopts ":a:" opt; do
19    case $opt in
20        a)
21            echo -e ${red}${blink}"All Scripts are going to be run when enumeration is finished...${nocolor}"
22            sleep 5 
23            all=1
24            ;;
25        \?)
26            echo "Invalid options: -$OPTARG" >&2
27            exit 1
28            ;;
29        :)
30            echo "Option -$OPTARG requires an argument." >&2
31            exit 1
32            ;;
33        esac
34done
35
36
37
38clear
39# Grab basic system info
40echo -e $halfline${purple} Grabbing basic system info $halfline
41echo -e "${green}> whoami${nocolor}"
42whoami
43
44echo -e "${green}> Who is logged in?${nocolor}"
45w
46
47echo -e "${green}> Last 10 logins${nocolor}"
48last -n 10 | sed '/^wtmp/d' | sed '/^[[:space:]]*$/d'
49
50echo -e "${green}> System information${nocolor}"
51lsb_release -a 2>/dev/null
52
53echo -e "${green}> IP Information${nocolor}"
54ip a | egrep -A3 "^[0-9]" | awk {'print $2'}
55
56# Check history
57echo -e "${green}> Last 10 zsh commands${nocolor}"
58cat ~/.zsh_history| tail -n 10 | cut -d\; -f2
59
60        echo -e "${green}> Last 10 bash commands${nocolor}"
61        cat ~/.bash_history | tail -n 10 
62
63        echo -e "${green}> Checking for SSH commands in bash and ZSH history${nocolor}"
64        cat ~/.zsh_history | egrep "^ssh" | cut -d\; -f3
65        cat ~/.bash_history| egrep "^ssh" 
66
67        echo -e "${green}> Got anything to hide?${nocolor}"
68        cat ~/.bash_history | tail -n 100| egrep "rm "
69        cat ~/.zsh_history | tail -n 100 | egrep "rm " | cut -d\; -f3
70
71# Check users
72#echo -e "${green}> Users in system${nocolor}"
73#cat /etc/passwd | cut -d: -f1,7
74
75# Enumerate folders
76echo -e $halfline${purple} Getting home folders $halfline
77echo -ne ${yellow} ; ls /home/ ; echo -ne ${nocolor}
78
79echo -e "$halfline${purple} Last edited files in current user's home directory $halfline"
80ls $HOME -ch -lt -r | tail -n 10
81
82echo -e "$halfline${purple} Looking for backup files $halfline"
83find / -type f -name "*.bak" 2>/dev/null
84
85# check listening ports
86echo -e $halfline${purple} "Getting ports listening (non root)" $halfline
87lsof -nP -iTCP -sTCP:LISTEN
88
89echo -e $halfline${purple} "Checking /etc/hosts" $halfline
90cat /etc/hosts
91
92# Run aggressive scripts from -a
93if [[ $all -eq 1 ]]
94then
95            echo -e $halfline${purple}"Running ${red}ALL${purple} scripts"$halfline
96
97fi