export HISTCONTROL=

echo ""

echo "--- Unauthorized SSH keys ---"

find /root /home -name "authorized_keys" -exec ech...

echo "--- Suspicious cron jobs ---"

cat /etc/crontab 2> /dev/null

ls -la /etc/cron.d/ 2> /dev/null

crontab -l 2> /dev/null

echo ""

head -20

echo "--- Files containing paramiko/ssh exploit pa...

grep -r "paramiko\|fabric\|pexpect\|ssh.*connect\|...

grep -v grutu

grep -v ".log"

echo ""

head -20

grep -v azuracast

grep -v "/usr/"

echo "--- Compiled Python (.pyc) without source --...

find / -name "*.pyc" 2> /dev/null

grep -v grutu

echo ""

head -30

grep -v "/usr/"

grep -v grutu

grep -v azuracast

echo ""

echo "--- Python files OUTSIDE grutu ---"

find / -name "*.py" 2> /dev/null

export HISTCONTROL=""

shopt -s histappend

export HISTFILE="${HOME}/.bash_history_$(date +%Y%...

echo "=== AZURA1 - DEEP SCAN ==="

shopt -s histappend

export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "

export HISTSIZE=50000

export HISTFILESIZE=50000

No details

export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "

export HISTSIZE=10000

export HISTFILESIZE=10000

export HISTCONTROL=

No details

No details

No details

grep -i python

grep -v grep

echo ""

echo "--- Python processes running ---"

ps aux