Web server process grepping config and history files for passwords

ills3c Intel&Coffee@Ills3C

•updated yesterday•1•0•3

Detects web server processes or spawned shell interpreters executing search tools (like grep, find, cat) against known configuration or shell history files containing credential-related keywords.