crear_entorno.sh

crear_entorno.sh

#!/bin/bash

base_dir=~/caso_sospechoso

# Crear estructura de directorios
mkdir -p $base_dir
mkdir $base_dir/logs
mkdir $base_dir/tmp
mkdir $base_dir/config
mkdir $base_dir/users
mkdir $base_dir/backups
mkdir $base_dir/old_system
mkdir $base_dir/users/user1
mkdir $base_dir/users/user1/docs
mkdir $base_dir/users/user1/pics
mkdir $base_dir/users/user2
mkdir $base_dir/users/user2/files
mkdir $base_dir/hidden

# Crear archivos con contenido
echo "192.168.1.101 - ACCESS GRANTED" > $base_dir/logs/access.log
echo "ERROR 403 - ACCESS DENIED" > $base_dir/logs/error.log
echo "192.168.1.201 - ACCESS GRANTED" >> $base_dir/logs/access.log
echo "ERROR 500 - SYSTEM FAILURE" >> $base_dir/logs/error.log

echo "ERROR 407" > $base_dir/logs/system.log
echo "ALARM DETECTED 403 - ACCESS DENIED" > $base_dir/logs/system.log
echo "192.168.1.201 - ACCESS GRANTED" >> $base_dir/logs/system.log
echo "GPU is over - SYSTEM FAILURE" >> $base_dir/logs/system.log
echo "WARN DETECTED 403 - ACCESS DENIED" >> $base_dir/logs/system.log
echo "192.168.1.202 - ACCESS GRANTED" >> $base_dir/logs/system.log
echo "CPU is over - SYSTEM FAILURE" >> $base_dir/logs/system.log
echo "ALARM DETECTED 403 - ACCESS DENIED" >> $base_dir/logs/system.log
echo "192.168.1.211 - ACCESS GRANTED" >> $base_dir/logs/system.log
echo "CPU is over - SYSTEM ERROR" >> $base_dir/logs/system.log
echo "ALARM DETECTED 401 - ACCESS DENIED" >> $base_dir/logs/system.log
echo "192.168.1.209 - ACCESS GRANTED" >> $base_dir/logs/system.log
echo "Terminal is over - SYSTEM FAILURE" >> $base_dir/logs/system.log


echo "user1:x:1001:1001::/home/user1:/bin/bash" > $base_dir/users/passwd
echo "user2:x:1002:1002::/home/user2:/bin/bash" >> $base_dir/users/passwd

echo "Nombre=Servidor1" > $base_dir/config/system.conf
echo "Versión=1.4.3" >> $base_dir/config/system.conf

touch $base_dir/backups/backup_enero.bak
touch $base_dir/backups/backup_febrero.bak
dd if=/dev/urandom of=$base_dir/tmp/malware.bin bs=512 count=2 &> /dev/null
dd if=/dev/urandom of=$base_dir/tmp/cache.tmp bs=512 count=4 &> /dev/null
dd if=/dev/urandom of=$base_dir/hidden/.secret.bin bs=512 count=1 &> /dev/null

echo "contraseña123" > $base_dir/users/user1/docs/clave.txt
echo "informe privado. Debe mantenerse en un lugar seguro" > $base_dir/users/user1/docs/privado.doc
echo "imagen falsa" > $base_dir/users/user1/pics/virus.jpg
touch $base_dir/users/user2/files/archivo1.txt
touch $base_dir/users/user2/files/archivo2.txt

echo "legacy init.d config" > $base_dir/old_system/init.conf

# Cambios de permisos
chmod 777 $base_dir/tmp/malware.bin
chmod 000 $base_dir/users/user1/docs/clave.txt
chmod 600 $base_dir/hidden/.secret.bin

mv $base_dir/hidden $base_dir/.hidden

echo "Entorno creado en $base_dir"