Shell Scripting

Shell Scripting RSS

Listing files with certain text

•

Join Date: Jul 2009

Posts: 1

Reputation: daprezjer is an unknown quantity at this point

Solved Threads: 0

daprezjer

Offline

Newbie Poster

Listing files with certain text

Jul 8th, 2009

Pretty new at shell scripting. My server was hacked and instances of links for viagra were placed in it. I have lots of sites, so I need to search for all instances of "viagra" and list the files, so I can go remove the intrusions. Can this be done using shell?

Thanks.

•

Join Date: Feb 2009

Posts: 3,208

Reputation: sknake has much to be proud of

Solved Threads: 571

sknake

Online

.NET Enthusiast

Re: Listing files with certain text

Jul 9th, 2009

I'm going out on a limb and assuming you are using linux. If that is the case you can use grep to find the word:

 Help with Code Tags 
 bash Syntax (Toggle Plain Text) 
sk@svn:/tmp$ ls
sk@svn:/tmp$ mkdir -p ./some/junk/dir
sk@svn:/tmp$ echo "viagra" >> ./some/junk/dir/somefile.txt
sk@svn:/tmp$ grep -l -r -i viagra .
./some/junk/dir/somefile.txt
sk@svn:/tmp$ ls
sk@svn:/tmp$ mkdir -p ./some/junk/dir
sk@svn:/tmp$ echo "viagra" >> ./some/junk/dir/somefile.txt
sk@svn:/tmp$ grep -l -r -i viagra .
./some/junk/dir/somefile.txt

For grep --
-l: list files, not the lines
-r: recursive
-i: case insensitive

Scott Knake
Custom Software Development
Apex Software, Inc.

•

Join Date: Jul 2009

Posts: 2

Reputation: parul1234 is an unknown quantity at this point

Solved Threads: 0

parul1234

Offline

Newbie Poster

Re: Listing files with certain text

Jul 10th, 2009

Are you using wordpress it happened with me few days back ... the reason was the old version of wordpress

free eng book | call center

•

Join Date: Aug 2007

Posts: 165

Reputation: Fest3er is an unknown quantity at this point

Solved Threads: 18

Fest3er

Offline

Junior Poster

Re: Listing files with certain text

Jul 10th, 2009

•

Originally Posted by daprezjer

Pretty new at shell scripting. My server was hacked and instances of links for viagra were placed in it. I have lots of sites, so I need to search for all instances of "viagra" and list the files, so I can go remove the intrusions. Can this be done using shell?

Thanks.

Yes, it can. A simplistic way to find all affected files, leaving you to do the rest of the work:

 Help with Code Tags 
 Shell Scripting Syntax (Toggle Plain Text) 
find / -type f -exec grep -li viagra {} \;
find / -type f -exec grep -li viagra {} \;

Or, assuming you are on a reasonably POSIX-ish system, a more complex way to find and edit all affected files, minimizing the effort you must exert:

 Help with Code Tags 
 Shell Scripting Syntax (Toggle Plain Text) 
find / -type f -exec grep -li viagra {} \; | while read a; do
  echo -n "Press <ENTER> to edit "
  tput smso
  echo -n "$a"
  tput rmso
  echo "  or <CTRL/C> to quit"
  read b </dev/tty
  vi "$a" </dev/tty
done
find / -type f -exec grep -li viagra {} \; | while read a; do
  echo -n "Press <ENTER> to edit "
  tput smso
  echo -n "$a"
  tput rmso
  echo "  or <CTRL/C> to quit"
  read b </dev/tty
  vi "$a" </dev/tty
done

The tput() commands assist clarity, but aren't vital; delete them if your system doesn't speak terminfo. This is re-entrant. You don't have to remember where you were when you took a break or erred; once the noxious content has been removed, find() won't find it again.

This works on Debian Linux.

Last edited by Fest3er; Jul 10th, 2009 at 2:05 pm.