write a bash script that will print a report for 1. list the input director content(could be contain multiple children folders) 1.a. if the input is a directory, recursive do 1. 1.b. if the input is a file, check the content

check_content.sh

#!/bin/bash

target_dirs="/opt/"
target_tools="
scp
ssh
"

function print_report() {
    local input="$1"
    local indent="$2"

    if [ -d "$input" ]; then
        echo "${indent}Contents of directory: $input"
        for item in "$input"/*; do
            if [ -d "$item" ]; then
                print_report "$item" "    $indent"
            elif [ -f "$item" ]; then
                echo "${indent}File: $item"
                echo "${indent}Content:"
                local line_number=1
                while IFS= read -r line; do
                    printf "%s%s: %s\n" "$indent" "$line_number" "$line"
                    ((line_number++))
                done < "$item"
                echo ""
                echo ""
            fi
        done
    elif [ -f "$input" ]; then
        echo "${indent}File: $input"
        echo "${indent}Content:"
        local line_number=1
        while IFS= read -r line; do
            printf "%s%s: %s\n" "$indent" "$line_number" "$line"
            ((line_number++))
        done < "$input"
        echo ""
        echo ""
    else
        echo "Error: Input is neither a file nor a directory"
    fi
}

echo "Checking for system tools in target directories..."
echo ""

for tool in $target_tools; do
    echo "Searching for tool: $tool"
    echo ""
    for directory in $target_dirs; do
        echo "Directory: $directory"
        echo ""
        print_report "$directory" "    "
    done
done

This script serve as a reminder for several potential vulnerabilities in the script that could be exploited:

1. Command Injection: The script uses variables directly in echo statements without proper sanitization.

2. Unsanitized Input: The script does not validate or sanitize user input.

3. File Path Manipulation: The script does not check for malicious file paths.

4. Arbitrary Code Execution: The script executes commands such as cat and printf without proper input validation.