Find all PHP code with base64_decode - useful to find suspected hacker files

base64_finder.sh

find /home/HOMEDIR/public_html \( -name "*.php" \) -type f -print0 | xargs -0 grep --binary-files=without-match -ir "base64_decode\s*("

find_new_files.sh

#To find files that are new within the last 5 days
find /home/HOMEDIR/public_html/ -type f -ctime -5

find_shell_scripts.sh

# To find .pl, .cgi and .sh files
find /home/HOMEDIR/public_html/ \( -iname "*.cgi" -o -iname "*.pl" -o -iname "*.sh" \) -exec ls -hog {} \;