ffind
is a tool to find files of interest on a compromised host during a penetration test
go install -v github.com/bin3xish477/ffind@latest
git clone https://github.com/bin3xish477/ffind.git
cd ffind
go build -ldflags '-w -s' *.go
ffind -p /
ffind
By default, PowerShell is not set to escape ANSI color so the output of ffind
will look weird. To fix this, open a PowerShell prompt and run the following command to enable
support:
Set-ItemProperty HKCU:\Console VirtualTerminalLevel -Type DWORD 1
Then, open up a new PowerShell prompt, and you should be good to go: