Operator
0799bfbae8
Sanitized version of red team infrastructure automation platform. Operational content (implant pipelines, lures, credential capture) replaced with documented stubs. Architecture and infrastructure automation code intact.
88 lines
2.7 KiB
Bash
Executable File
88 lines
2.7 KiB
Bash
Executable File
#!/bin/bash
|
|
# Emergency Wipe Script for OPSEC
|
|
# Quickly sanitizes system for emergency situations
|
|
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
NC='\033[0m'
|
|
|
|
echo -e "${RED}=== EMERGENCY SANITIZATION PROTOCOL ===${NC}"
|
|
echo -e "${YELLOW}This will clear sensitive data and logs${NC}"
|
|
echo ""
|
|
|
|
# Confirm emergency wipe
|
|
read -p "Are you sure you want to proceed? (type YES): " CONFIRM
|
|
if [ "$CONFIRM" != "YES" ]; then
|
|
echo -e "${GREEN}Emergency wipe cancelled${NC}"
|
|
exit 0
|
|
fi
|
|
|
|
echo -e "${RED}[*] Beginning emergency sanitization...${NC}"
|
|
|
|
# Clear command history
|
|
echo -e "${YELLOW}[*] Clearing command history${NC}"
|
|
history -c
|
|
> ~/.bash_history
|
|
> ~/.zsh_history
|
|
> ~/.python_history
|
|
> ~/.mysql_history
|
|
> ~/.psql_history
|
|
|
|
# Clear system logs
|
|
echo -e "${YELLOW}[*] Clearing system logs${NC}"
|
|
sudo find /var/log -type f -exec truncate -s 0 {} \; 2>/dev/null
|
|
sudo truncate -s 0 /var/log/auth.log 2>/dev/null
|
|
sudo truncate -s 0 /var/log/syslog 2>/dev/null
|
|
sudo truncate -s 0 /var/log/kern.log 2>/dev/null
|
|
|
|
# Clear temporary files
|
|
echo -e "${YELLOW}[*] Clearing temporary files${NC}"
|
|
sudo rm -rf /tmp/* 2>/dev/null
|
|
sudo rm -rf /var/tmp/* 2>/dev/null
|
|
rm -rf ~/.cache/* 2>/dev/null
|
|
|
|
# Clear SSH known hosts
|
|
echo -e "${YELLOW}[*] Clearing SSH artifacts${NC}"
|
|
> ~/.ssh/known_hosts
|
|
sudo truncate -s 0 /var/log/btmp 2>/dev/null
|
|
sudo truncate -s 0 /var/log/wtmp 2>/dev/null
|
|
sudo truncate -s 0 /var/log/lastlog 2>/dev/null
|
|
|
|
# Clear network traces
|
|
echo -e "${YELLOW}[*] Clearing network artifacts${NC}"
|
|
sudo ip neigh flush all 2>/dev/null
|
|
|
|
# Clear DNS cache
|
|
echo -e "${YELLOW}[*] Clearing DNS cache${NC}"
|
|
sudo systemctl restart systemd-resolved 2>/dev/null
|
|
|
|
# Clear browser data if present
|
|
echo -e "${YELLOW}[*] Clearing browser data${NC}"
|
|
rm -rf ~/.mozilla/firefox/*/sessionstore* 2>/dev/null
|
|
rm -rf ~/.mozilla/firefox/*/cookies.sqlite 2>/dev/null
|
|
rm -rf ~/.config/google-chrome/Default/History 2>/dev/null
|
|
rm -rf ~/.config/google-chrome/Default/Cookies 2>/dev/null
|
|
|
|
# Secure delete free space (optional - takes time)
|
|
read -p "Perform secure free space wipe? (y/N): " WIPE_FREE
|
|
if [ "$WIPE_FREE" = "y" ] || [ "$WIPE_FREE" = "Y" ]; then
|
|
echo -e "${YELLOW}[*] Securely wiping free space (this may take a while)${NC}"
|
|
dd if=/dev/urandom of=/tmp/wipe_file bs=1M 2>/dev/null || true
|
|
rm -f /tmp/wipe_file 2>/dev/null
|
|
fi
|
|
|
|
# Clear systemd journal
|
|
echo -e "${YELLOW}[*] Clearing systemd journal${NC}"
|
|
sudo journalctl --vacuum-time=1s 2>/dev/null
|
|
|
|
# Final cleanup
|
|
echo -e "${YELLOW}[*] Final cleanup${NC}"
|
|
sync
|
|
sudo updatedb 2>/dev/null
|
|
|
|
echo ""
|
|
echo -e "${GREEN}=== EMERGENCY SANITIZATION COMPLETE ===${NC}"
|
|
echo -e "${YELLOW}Consider rebooting the system for maximum effectiveness${NC}"
|
|
echo -e "${RED}WARNING: This does not guarantee complete data removal${NC}"
|