searchall3.5 Security Auditing Tool

searchall3.5 is a tool designed to quickly search servers for sensitive information, including usernames, passwords, accounts, and credentials. It also includes functionality to extract account passwords and cookies from web browsers.

Key capabilities include:

• Scanning for sensitive credentials (passwords, access keys, etc.) across the filesystem.
• Extracting browser data (passwords, cookies) including support for recent Chrome versions.
• Identifying installed software like Sunlogin (向日葵) and parsing connection history.
• Detecting Docker installations.
• Scanning system logs like /var/log/secure for successful login records.
• Filtering results using a rule library for specific patterns like accessKeyId, accessKeySecret, and jdbc.

For a complete guide on how to use the tool, refer to the official usage documentation hosted on GitHub:

https://github.com/Naturehi666/searchall/blob/main3.5.6/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E.md

The searchall CLI provides flags to refine the scanning process based on file extensions:

• -e: Extends the scan to include custom file extensions (e.g., .java, .log).
• -n: Restricts the scan to only specific file extensions.

# Example: Scan only .log files
searchall -n .log

# Example: Include .java files in the scan
searchall -e .java

The searchall tool is executed via the main package, which invokes flagsearch.FlagSearchall(). This entry point initializes the command-line interface and processes flags defined within the flagsearch package to perform search operations.

# To run the tool, use the standard Go run command or build the binary
go run main.go