Six small bash scripts uploaded to /tmp on 172.16.3.22 during the OwnCloud cron stacking incident — investigation, group enumeration, failed group-restrict attempt, occ subcommand discovery. Captured for audit; full context in clients/pavon/session-logs/2026-04-29-session.md. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
10 lines
354 B
Bash
10 lines
354 B
Bash
#!/bin/bash
|
|
echo "=== EXISTING GROUPS ==="
|
|
sudo -u apache php /var/www/owncloud/occ group:list 2>&1
|
|
echo
|
|
echo "=== PAVON'S GROUPS ==="
|
|
sudo -u apache php /var/www/owncloud/occ user:show pavon 2>&1 | grep -iE 'group|enabled'
|
|
echo
|
|
echo "=== APP ENABLE/DISABLE PER-GROUP SUPPORT ==="
|
|
sudo -u apache php /var/www/owncloud/occ help app:enable 2>&1 | head -20
|