n0mad1k
88 lines
2.7 KiB
Bash
Executable File
88 lines
2.7 KiB
Bash
Executable File
#!/bin/bash
|
|
# Emergency Wipe Script for OPSEC
|
|
# Quickly sanitizes system for emergency situations
|
|
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
NC='\033[0m'
|
|
|
|
echo -e "${RED}=== EMERGENCY SANITIZATION PROTOCOL ===${NC}"
|
|
echo -e "${YELLOW}This will clear sensitive data and logs${NC}"
|
|
echo ""
|
|
|
|
# Confirm emergency wipe
|
|
read -p "Are you sure you want to proceed? (type YES): " CONFIRM
|
|
if [ "$CONFIRM" != "YES" ]; then
|
|
echo -e "${GREEN}Emergency wipe cancelled${NC}"
|
|
exit 0
|
|
fi
|
|
|
|
echo -e "${RED}[*] Beginning emergency sanitization...${NC}"
|
|
|
|
# Clear command history
|
|
echo -e "${YELLOW}[*] Clearing command history${NC}"
|
|
history -c
|
|
> ~/.bash_history
|
|
> ~/.zsh_history
|
|
> ~/.python_history
|
|
> ~/.mysql_history
|
|
> ~/.psql_history
|
|
|
|
# Clear system logs
|
|
echo -e "${YELLOW}[*] Clearing system logs${NC}"
|
|
sudo find /var/log -type f -exec truncate -s 0 {} \; 2>/dev/null
|
|
sudo truncate -s 0 /var/log/auth.log 2>/dev/null
|
|
sudo truncate -s 0 /var/log/syslog 2>/dev/null
|
|
sudo truncate -s 0 /var/log/kern.log 2>/dev/null
|
|
|
|
# Clear temporary files
|
|
echo -e "${YELLOW}[*] Clearing temporary files${NC}"
|
|
sudo rm -rf /tmp/* 2>/dev/null
|
|
sudo rm -rf /var/tmp/* 2>/dev/null
|
|
rm -rf ~/.cache/* 2>/dev/null
|
|
|
|
# Clear SSH known hosts
|
|
echo -e "${YELLOW}[*] Clearing SSH artifacts${NC}"
|
|
> ~/.ssh/known_hosts
|
|
sudo truncate -s 0 /var/log/btmp 2>/dev/null
|
|
sudo truncate -s 0 /var/log/wtmp 2>/dev/null
|
|
sudo truncate -s 0 /var/log/lastlog 2>/dev/null
|
|
|
|
# Clear network traces
|
|
echo -e "${YELLOW}[*] Clearing network artifacts${NC}"
|
|
sudo ip neigh flush all 2>/dev/null
|
|
|
|
# Clear DNS cache
|
|
echo -e "${YELLOW}[*] Clearing DNS cache${NC}"
|
|
sudo systemctl restart systemd-resolved 2>/dev/null
|
|
|
|
# Clear browser data if present
|
|
echo -e "${YELLOW}[*] Clearing browser data${NC}"
|
|
rm -rf ~/.mozilla/firefox/*/sessionstore* 2>/dev/null
|
|
rm -rf ~/.mozilla/firefox/*/cookies.sqlite 2>/dev/null
|
|
rm -rf ~/.config/google-chrome/Default/History 2>/dev/null
|
|
rm -rf ~/.config/google-chrome/Default/Cookies 2>/dev/null
|
|
|
|
# Secure delete free space (optional - takes time)
|
|
read -p "Perform secure free space wipe? (y/N): " WIPE_FREE
|
|
if [ "$WIPE_FREE" = "y" ] || [ "$WIPE_FREE" = "Y" ]; then
|
|
echo -e "${YELLOW}[*] Securely wiping free space (this may take a while)${NC}"
|
|
dd if=/dev/urandom of=/tmp/wipe_file bs=1M 2>/dev/null || true
|
|
rm -f /tmp/wipe_file 2>/dev/null
|
|
fi
|
|
|
|
# Clear systemd journal
|
|
echo -e "${YELLOW}[*] Clearing systemd journal${NC}"
|
|
sudo journalctl --vacuum-time=1s 2>/dev/null
|
|
|
|
# Final cleanup
|
|
echo -e "${YELLOW}[*] Final cleanup${NC}"
|
|
sync
|
|
sudo updatedb 2>/dev/null
|
|
|
|
echo ""
|
|
echo -e "${GREEN}=== EMERGENCY SANITIZATION COMPLETE ===${NC}"
|
|
echo -e "${YELLOW}Consider rebooting the system for maximum effectiveness${NC}"
|
|
echo -e "${RED}WARNING: This does not guarantee complete data removal${NC}"
|