From c764fa3be689725895079f89f47f7d42a8a54b25 Mon Sep 17 00:00:00 2001 From: Omar Santos Date: Tue, 2 May 2023 23:44:55 -0400 Subject: [PATCH] Create README.md --- .../finding_sensitive_files/README.md | 33 +++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 programming_and_scripting_for_cybersecurity/recon_scripts/finding_sensitive_files/README.md diff --git a/programming_and_scripting_for_cybersecurity/recon_scripts/finding_sensitive_files/README.md b/programming_and_scripting_for_cybersecurity/recon_scripts/finding_sensitive_files/README.md new file mode 100644 index 0000000..2a9398d --- /dev/null +++ b/programming_and_scripting_for_cybersecurity/recon_scripts/finding_sensitive_files/README.md @@ -0,0 +1,33 @@ +# Sensitive File Scanner + +This script scans a specified directory for sensitive files based on file extensions and patterns. It is designed to be used on Linux systems. + +## Requirements + +- Python 3.x + +## Usage + +To use the script, follow the steps below: + +1. Save the script to a file named `sensitive_file_scanner.py`. + +2. Run the script with the directory you want to scan as an argument: + +``` +python3 sensitive_file_scanner.py /path/to/scan +``` + +The script will output the paths of any matching sensitive files found in the specified directory and its subdirectories. + +## Customization +You can customize the list of sensitive file extensions and patterns by modifying the sensitive_extensions and sensitive_patterns lists in the sensitive_file_scanner.py script. Add or remove extensions and patterns based on your specific requirements. + +``` +sensitive_extensions = ['.key', '.pem', '.pgp', '.p12', '.pfx', '.csv'] +sensitive_patterns = ['*password*', '*secret*', '*private*', '*confidential*'] +``` + +## Disclaimer +This script is provided for educational and informational purposes only. The author (Omar Santos) and future contributors are not responsible for any misuse, damage, or unintended consequences caused by the use of this script. Always ensure you have proper authorization before scanning any system or network. +