Linux Commands
Grep
<Command Options>
-o, --only-matching: Print only the matched (non-empty) parts of a matching line, with each such part on a separate output line.
-P, --perl-regexp: Interpret the pattern as a Perl-compatible regular expression (PCRE).
-v, --invert-match: Invert the sense of matching, to select non-matching lines.
-r, --recursive: Read all files under each directory, recursively, following symbolic links only if they are on the command line.
-l, --files-with-matches: Suppress normal output; instead print the name of each input file from which output would normally have been printed.
<Examples of Usage>
#Selected lines are those not matching any of the specified patterns.
grep -v ‘keyword’ test.txt
#Print only the mached parts with regular expression
grep -oP '\d{1,5}/open' allports.gnmap | sort -u
# 特定のキーワードを含まない行を表示
grep -v ‘keyword’ test.txt
# 検索したい文字列を含むファイルを表示
grep <keyword> -rl <path>Sort
<Command Options>
-u, --unique: output only the first of an equal run
<Examples of Usage>
#Print only the mached parts with regular expression and make each line unique
grep -oP '\d{1,5}/open' allports.gnmap | sort -uWget
# 指定したURLからのファイルダウンロード
wget -O <url>
# 指定したURLからの再起的のファイルダウンロード
wget -r <url>
# 証明書の確認せずにコンテンツを取得
wget <url> --no-check-certificateSed
<Command Options>
<Examples of Usage>
#Selected lines are those not matching any of the specified patterns.
cat srcip_area.csv | sed 's/"//g' |sed 's/,/ /g' | awk '{print $3, $4$5}' | awk '{arr[$1]+=$2} END {for (i in arr) {print i,arr[i]}}' | sort -nrk 2
cat file.txt | sed -e "s/<instance to find>/<instance to replace it with>/g" > output.txt
Awk
* 「cat access_log | grep bullet.gif | awk -F'"' '{print $1 $4}’」
* -F’”'よりデリミターを指定して、文字を取得
* 「ls -lt | awk '$5>1000 {print $0}'」
* ファイルの容量が1000bytes以上の行のみを表示
* 「ls /Applications | awk 'length($0)>13{print}'」
* 長さが13を超える行数のみを表示
* 「cat access_log | awk '$9 == "404"{print $1}' | sort | uniq | wc -l」
* Awk のマッチング
* 「lsof -nPi | awk '/LISTEN/‘」
* 「ifconfig en1 | awk '/inet/{print substr($2,5,3)}'」
* print substr（$2, 開始文字位置, 切り取り文字数）
* 「# ps -ef | awk '/sshd/ && !($3 == 1 || /sshd: hal[@ ]/) {print $2}'」
* &&条件Tr
* 「cat /etc/shells/ | tr a-z A-Z」
* 小文字を大文字に変換
* 「cat /etc/shells/ | tr -d ‘d’」
* dを削除
* 「ls -l | tr -s ' ' ‘,'」
* 連続したスペースを,に変換
* 「ls -l | tr -s ' ' '\t' | cut -f 1,5,9-」Tar
圧縮：tar cvzf tgzファイル名 圧縮対象ディレクトリ
解凍：ar xvzf tgzファイル名Ps
charix@Poison:~ % ps -auwwx
-a: list the processes of all users on the system
-u: provide detailed information about each process
-x: list processes that have no controlling terminal, such as daemons
-ww: Wide output with unlimited widthFind
<Command Options>
-name pattern: True if the last component of the pathname being examined matches pattern.
-type t: True if the file is of the specified type.
b block special
c character special
d directory
f regular file
l symbolic link
p FIFO
s socket
-iname pattern: Like -name, but the match is case insensitive.
-exec command: Execute command
<Examples of Usage>
find / -name .DS_Store > filelist.txt 2> errlist.txt
# 標準出力と標準エラー出力をそれぞれリダイレクトするfind [検索対象フォルダのパス]
-type f -name "[検索したい文字列]"
# 指定フォルダを配下を再帰的検索
find / -name example.txt 2>/dev/null
# 標準エラー出力を捨てる
find . -name "*.php" -type f -exec chmod 755 {} \;
find / -perm -o+w -type d
# Show all world readable directories
find / -perm -o+e -type d
# Show all world executable directories
find / -perm -1000 -type d 2>/dev/null
# Sticky bit - Only the owner of the directory or the owner of a file can delete or rename here.
find / -perm -g=s -type f 2>/dev/null
# SGID (chmod 2000) - run as the group, not the user who started it.
find / -perm -u=s -type f 2>/dev/null
# SUID (chmod 4000) - run as the owner, not the user who started it.Cut
Kill
kill -9 $PIDSudo
<Command Options>
-l, --list: list user's privileges or check a specific command; use twice for longer format
-u, --user=user: run command (or edit file) as specified user name or ID
<Examples of Usage>
sudo -l
sudo -u scriptmanager bash
# execute command as specified userExtracting archives
tar xvfj test.tar.bz2
tar zxvf test.tar.gz
tar zxvf test.tar
gzip -d test.gz
unzip test.zip
zcat rockyou.txt.gz > rockyou.txtCompressing archives
tar -zcvf test.tar test
gzip test
zip -9 test.zip test
zip -r test.zip test/Copy files remotely
scp /path/to/local/file.txt user@targetIP:/path/to/share # local to remote
scp -r user@targetIP:/path/to/share /local/share # remote to local
cat ~/.ssh/id_rsa.pub | ssh user@targetIP 'cat >> .ssh/authorized_keys'Bash
for
for i in $(seq 0 12); do echo -n '|base64 -d';done
|base64 -d|base64 -d|base64 -d|base64 -d|base64 -d|base64 -d|base64 -d|base64 -d|base64 -d|base64 -d|base64 -d|base64 -d|base64 -dLast updated