Ravi Sir's Cyber Security Cards › Revision Cards
Finding Files: find
Finding Files: find find searches for files by name, size, owner or time changed. find /etc -name "*.conf" -mtime -7 = .conf files changed in the last 7 days. Attackers use find to look for SUID files and keys. Defenders use -mmin / -mtime to find web shells changed around the attack time. Running f
Read card text
What this card says
What it is
find searches for files by name, size, owner or time changed.
Example
find /etc -name "*.conf" -mtime -7 = .conf files changed in the last 7 days.
Why it matters for security
Attackers use find to look for SUID files and keys.
Defenders use -mmin/-mtime to find web shells changed around the attack time.
Common mistake
Running find with -delete straight away. Run it without -delete first and check the list.
Learn more in the lesson: 6.2 Finding Files: find