Results 1 to 2 of 2
  1. #1
    Join Date
    Mar 2003
    Charlotte, NC

    Find all files owned by a user

    I'm attempting to clean & secure a Mac that was hacked and compromised through its BSD core. I found the UDP flooding script and some other suspect files in the /Private/Var/Tmp which were all owned by the Guest user. Now I want to search the entire computer to see what else was done by the hacker besides depositing the udp flood script payload. What's the best way to find all of the files that are owned by the Guest user through the shell, and are there any other directories or settings I should check?


  2. #2
    Join Date
    Dec 2005
    On Linux, it would be:
    find / -user Guest

    I'm assuming it's the same / similar in BSD (although the username is case sensitive, not sure if it's actually capitalized on Mac).

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts