风迷 Onils

## show_same_rows.sh
awk 'FNR==NR{a[$1];next}($1 in a){print}' a.string b.string

## check_python_evil_request.sh
for i in $(find / -xtype f -name "python" 2>/dev/null );do $i -m pip list 2>/dev/null |grep "request ";done

## strings_extraction
#linux

#!/bin/bash
(strings -a -td "$@" | sed 's/^\(\s*[0-9][0-9]*\) \(.*\)$/\1 A \2/' ; strings -a -td -el "$@" | sed 's/^\(\s*[0-9][0-9]*\) \(.*\)$/\1 W \2/') | sort -n


#mac os

#!/bin/bash

## audit.rules
-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -F key=ptrace_poketext
-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -F key=ptrace_pokedata
	#linux

	#!/bin/bash
	(strings -a -td "$@" \| sed 's/^\(\s[0-9][0-9]\) \(.\)$/\1 A \2/' ; strings -a -td -el "$@" \| sed 's/^\(\s[0-9][0-9]\) \(.\)$/\1 W \2/') \| sort -n



	#mac os

	#!/bin/bash
	-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -F key=ptrace_poketext
	-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -F key=ptrace_pokedata