Skip to content

Instantly share code, notes, and snippets.

@datadavev
Last active December 21, 2021 15:01
Show Gist options
  • Save datadavev/bb06fb5658bbd0c9da706434e6b9c577 to your computer and use it in GitHub Desktop.
Save datadavev/bb06fb5658bbd0c9da706434e6b9c577 to your computer and use it in GitHub Desktop.
#!/bin/bash
# Run sudo updatedb first
# Then run this with sudo if read access to any jars is restricted
TEST='JndiLookup'
LOGF="$(date --iso-8601=date)-${TEST}-search.txt"
echo "Logging to ${LOGF}..."
echo "# Generated $(date --iso-8601)" > $LOGF
echo "# Locate ${TEST}" >> $LOGF
echo "# " >> $LOGF
CNT=0
FND=0
echo -n "\r\033[0KChecked ${CNT}, found ${FND}"
for F in $(locate /*.jar); do
CNT=$((CNT+1))
RES=$(unzip -l $F | grep -i ${TEST}.);
if [[ ! -z ${RES} ]]; then
echo "# " >> ${LOGF};
echo "${F}" >> ${LOGF};
echo "${RES}" >> ${LOGF};
FND=$((FND+1))
fi ;
echo -n -e "\r\033[0KChecked ${CNT}, found ${FND}"
done;
echo
#!/bin/bash
# Run sudo updatedb first
# Then run this with sudo if read access to any jars is restricted
TEST='JMSAppender'
LOGF="$(date --iso-8601=date)-${TEST}-search.txt"
echo "Logging to ${LOGF}..."
echo "# Generated $(date --iso-8601)" > $LOGF
echo "# Locate ${TEST}" >> $LOGF
echo "# " >> $LOGF
CNT=0
FND=0
echo -n "\r\033[0KChecked ${CNT}, found ${FND}"
for F in $(locate /*.jar); do
CNT=$((CNT+1))
RES=$(unzip -l $F | grep -i ${TEST}.);
if [[ ! -z ${RES} ]]; then
echo "# " >> ${LOGF};
echo "\n${F}" >> ${LOGF};
echo "${RES}" >> ${LOGF};
FND=$((FND+1))
fi ;
echo -n -e "\r\033[0KChecked ${CNT}, found ${FND}"
done;
echo
echo "Done.";
@datadavev
Copy link
Author

datadavev commented Dec 21, 2021

e.g. for 44228:

bash <(curl -s 'https://gist.githubusercontent.com/datadavev/bb06fb5658bbd0c9da706434e6b9c577/raw/f1053908f44f4e5f2da2e09868d37576650242bf/locate-44228')

and 45046

bash <(curl -s 'https://gist.githubusercontent.com/datadavev/bb06fb5658bbd0c9da706434e6b9c577/raw/f1053908f44f4e5f2da2e09868d37576650242bf/locate-45046')

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment