Linux中用find命令找出隐藏文件和目录

[root@localhost log]# find /t -name ".*" -printf

find: missing argument to `-printf'

[root@localhost log]# find /t -name ".*" -print

/t/home/drosen/.emacs

/t/home/drosen/.bash_logout

/t/home/drosen/.bash_profile

/t/home/drosen/.bashrc

/t/home/drosen/.screenrc

/t/home/drosen/.bash_history

/t/usr/doc/bind-8.2.2_P5/bog/.cvsignore

/t/usr/doc/pmake-2.1.34/tests/.purify

/t/usr/doc/samba-2.0.6/docs/yodldocs/.cvsignore

/t/usr/doc/ucd-snmp-4.1.1/local/.cvsignore

/t/usr/lib/perl5/5.00503/i386-linux/.packlist

/t/usr/lib/perl5/site_perl/5.005/i386-linux/auto/MD5/.packlist

/t/usr/lib/perl5/site_perl/5.005/i386-linux/auto/mod_perl/.packlist

/t/usr/lib/linuxconf/install/gnome/.directory

/t/usr/lib/linuxconf/install/gnome/.order

/t/usr/man/man1/..1.gz

/t/usr/man/.Ci

/t/usr/man/.p

/t/usr/man/.a

/t/usr/bin/.gitaction

/t/usr/games/.bash_history

/t/usr/share/git/.gitrc.aixterm

/t/usr/share/git/.gitrc.common

/t/usr/share/git/.gitrc.hft

/t/usr/share/git/.gitrc.hpterm

/t/usr/share/git/.gitrc.hp

/t/usr/share/git/.gitrc.iris-ansi-net

/t/usr/share/git/.gitrc.ansi

/t/usr/share/git/.gitrc.iris-ansi

/t/usr/share/git/.gitrc.linux

/t/usr/share/git/.gitrc.console

/t/usr/share/git/.gitrc.mach

/t/usr/share/git/.gitrc.minix

/t/usr/share/git/.gitrc.sun-cmd

/t/usr/share/git/.gitrc.eterm

/t/usr/share/git/.gitrc.generic

/t/usr/share/git/.gitrc.pc3

/t/usr/share/git/.gitrc.sun

/t/usr/share/git/.gitrc.thix

/t/usr/share/git/.gitrc.vt102

/t/usr/share/git/.gitrc.vt420

/t/usr/share/git/.gitrc.screen

/t/usr/share/git/.gitrc.vt100

/t/usr/share/git/.gitrc.vt125

/t/usr/share/git/.gitrc.vt200

/t/usr/share/git/.gitrc.vt201

/t/usr/share/git/.gitrc.vt220

/t/usr/share/git/.gitrc.vt240

/t/usr/share/git/.gitrc.vt300

/t/usr/share/git/.gitrc.vt320

/t/usr/share/git/.gitrc.vt400

/t/usr/share/git/.gitrc.xterm-debian

/t/usr/share/git/.gitrc.dtterm

/t/usr/share/git/.gitrc.rxvt

/t/usr/share/git/.gitrc.xterm-color

/t/usr/share/git/.gitrc.xterms

/t/usr/share/git/.gitrc.xterm

/t/var/lib/news/.news.daily

/t/var/spool/at/.SEQ

/t/tmp/.font-unix

/t/tmp/.bash_history

/t/etc/.pwd.lock

/t/etc/skel/.emacs

/t/etc/skel/.bash_logout

/t/etc/skel/.bash_profile

/t/etc/skel/.bashrc

/t/etc/skel/.screenrc

/t/lib/modules/2.2.14-5.0/.rhkmvtag

/t/root/.Xdefaults

/t/root/.bash_logout

/t/root/.bash_profile

/t/root/.bashrc

/t/root/.cshrc

/t/root/.tcshrc

/t/root/.bash_history

/t/root/.ssh

/t/.bash_history

/t/.automount

[root@localhost log]#

 以上的输出是我正在研究的一台被黑的机器的景象硬盘中输出的结果，可以清晰的看到很多有价值的东西。

详细分析这个被入侵的系统的方法我以后会慢慢写出来的来帮助大家一起提高技术。