DE

↑ ↓ select, Enter open, Esc close

Find world-writable files and directories

harmlessSecurityalle
Adjust the values, the command updates live
user@server
find /var/www/vhosts -xdev -perm -0002 ! -type l -ls 2>/dev/null

Lists all files and directories below the path that every user can write to. Symbolic links are skipped because they always show 777. In web directories, matches point to an earlier chmod -R 777 through which other users or compromised scripts can modify files.

Note: Under /tmp and /var/tmp, such permissions are normal when combined with the sticky bit.

Also searched as

  • find world writable files
  • find files with 777 permissions
  • check chmod 777 web directory

Related one-liners

All in Security

List all SSH keys authorized on the server

#find / -xdev -path '*/.ssh/authorized_keys' -type f -exec awk 'NF && !/^#/ {print FILENAME ": " $NF}' {} + 2>/dev/null
harmlessSecurity

Find hidden PHP files in the web directory

$find /var/www/vhosts/example.com/httpdocs -type f -name '.*.php' -ls
harmlessSecurity

Find PHP files in the WordPress uploads folder

$find /var/www/vhosts/example.com/httpdocs/wp-content/uploads -type f \( -iname '*.php' -o -iname '*.phtml' -o -iname '*.php[0-9]' \) -ls
harmlessSecurity

Find recently modified PHP files

$find /var/www/vhosts/example.com/httpdocs -type f -name '*.php' -mtime -7 -printf '%TY-%Tm-%Td %TH:%TM %p\n' | sort -r
harmlessSecurity

List user accounts with a login shell

$awk -F: '$7 !~ /(nologin|false)$/ {print $1, $3, $6, $7}' /etc/passwd
harmlessSecurity

Show commands run with sudo from the journal

#journalctl _COMM=sudo --since "7 days ago" --no-pager | grep 'COMMAND='
harmlessSecurity

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.