-
Notifications
You must be signed in to change notification settings - Fork 11
/
.nsaway
34 lines (23 loc) · 901 Bytes
/
.nsaway
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
- Check video source
- Check audio source
- Check sudo/root action
- Check for new listening ports (TCP e UDP)
- Check insert/remove USB device
- Check inotify on sensible file /etc/hosts, /etc/passwd, /etc/shadow
- Check inotify for file with High Entropy (Anti-Ransomware)
- Check for MiTM/SSLstrip
- start-stop-daemon
- Halt Notify (daemon keep logging) + Restart Report
- Configuration file [ini]
##############################################################
which notify-send
which pacmd
which netstat
which lsusb
notify-send -i /usr/share/pixmaps/nsaway/nsaway_mini.png "Ciao" "<i><b>Ciao</b></i>"
pacmd list-source-outputs | grep 'application.process.id' | awk -F\" '{print $2}'
ls -l -R /proc 2> /dev/null | grep -m1 /dev/video | awk -F"->" '{print $2}'
grep sudo /var/log/auth.log /var/log/messages /var/log/secure
netstat -nltp | grep LISTEN
lsusb
stat -c '%X|%Y|%Z' /etc/hosts