searching for iframe tags in a directory and subdirectories

mia_tech · 12-23-2013, 06:16 PM

guys, I have detected some malware on my site, so I made a local backup and I'm trying to use a command that search all php files for iframe tags containing especific links which have been reported to me....
I'm using

find . -name "*.php" -exec linkName '{}' ';'

however, this one outputs the iframe line, but not the filename or path... could someone shed some light on this... open to suggestions

thanks

Habitual · 12-23-2013, 06:25 PM

Try

Code:

find `pwd` -iname "*.php" -exec grep <string> -Rl

mia_tech · 12-23-2013, 09:28 PM

Quote:

Originally Posted by Habitual

Try

Code:

find `pwd` -iname "*.php" -exec grep <string> -Rl

I couldn't make your example print the path though...

chrism01 · 12-24-2013, 12:10 AM

quick n dirty

Code:

grep -ir <string> *

Habitual · 12-24-2013, 09:22 AM

Quote:

Originally Posted by mia_tech

I couldn't make your example print the path though...

you may have a find alias defined that pre-empts this command, so use

Quote:

Originally Posted by chrism01

quick n dirty

Code:

grep -ir <string> *

have a look at
http://blog.unmaskparasites.com/2009...idden-iframes/

or a search engine using
"find hidden iframes using grep"

https://www.linuxquestions.org/quest...5/#post5086418
You may not be using Wordpress but the scan links in that may show you more than you can find on your own.