UNIX for Beginners Questions & Answers

#!/bin/sh

# Some vars here

# Dangerous files, extensions and shells
SHELLDETECT=$( find /home/uvid/www/Uploads/ -type f \( -iname "1.*" -o -iname "*eicar*" -o -iname "*.php" -o -iname "*.pl" -o -iname "*.txt" -o -iname "*.py" -o -iname "*.c" -o -iname "*.deb" -o -iname "*.zip" -o -iname "*.tar" -o -iname "*.gz" -o -iname "*.tar.gz" -o -iname "*.js" -o -iname "*.vbs" -o -iname "*.exe" -o -iname "*.asp" -o -iname "*.jsp" -o -iname "*.cgi" -o -iname "c100*" -o -iname "c99*" -o -iname "cmd*" -o -iname "webadmin*" -o -iname "r57*" -o -iname "*shell*" -o -iname "*angel*" -o -iname "*b374k*" -o -iname "*bv7binary*" -o -iname "*webroot*" -o -iname "*kacak*" -o -iname "*symlink*" -o -iname "*h4cker*" -o -iname "*gazashell*" -o -iname "*locus7shell*" -o -iname "*syrianshell*" -o -iname "*injection*" -o -iname "*cyberwarrior*" -o -iname "*ernebypass*" -o -iname "*g6shell*" -o -iname "*pouyaserver*" -o -iname "*saudishell*" -o -iname "*simattacker*" -o -iname "*sosyeteshell*" -o -iname "*tryagshell*" -o -iname "*uploadshell*" -o -iname "*wsoshell*" -o -iname "*weevely*" -o -iname "*zehir4shell*" -o -iname "*lostdcshell*" -o -iname "*commandshell*" -o -iname "*mailershell*" -o -iname "*cwshell*" -o -iname "*iranshell*" -o -iname "*indishell*" -o -iname "**g6sshell" -o -iname "*sqlshell*" -o -iname "*simshell*" -o -iname "*tryagshell*" -o -iname "*zehirshell*" -o -iname "*unknown*" -o -iname "*k2ll33d*" -o -iname "*b1n4ry*" \) )

if [[ $? == "0" ]]
then
echo "$SHELLDETECT" | mail -s "Shell bad extensions $TODAY" "$EMAIL"
fi


# Find large strings, more than 100 chars
largeStrings=$( find /home/immo/uvid/Uploads/ -type f -exec grep -Eq '.{100}' {} \; -exec ls -l {} + )

if [[ $? == "0" ]]
then
echo "$largeStrings" | mail -s "Large strings $TODAY" "$EMAIL"
fi


# Find files that was modified or created in last 24 hours
# -1 the last 24 hours
# -0.5 the last 12 hours
# -0.25 the last 6 hours
# +3 more than three days
# 0 Files modified between now and 1 day ago
     # (i.e., within the past 24 hours)
# 1 Files modified between 24 and 48 hours ago
# +1 Files modified more than 48 hours ago
modifFiles=$( find '/home/immo/uvid/Uploads/' -mtime 0 -ls )

if [[ $? == "0" ]]
then    
	echo "$modifFiles" | mail -s "Modified files $TODAY" "$EMAIL"
fi