{"id":16895383,"url":"https://github.com/sundowndev/covermyass","last_synced_at":"2025-10-11T11:38:25.602Z","repository":{"id":40200840,"uuid":"164627361","full_name":"sundowndev/covermyass","owner":"sundowndev","description":"Post-exploitation tool to cover your tracks on a compromised machine (beta)","archived":false,"fork":false,"pushed_at":"2023-02-01T07:58:48.000Z","size":108,"stargazers_count":397,"open_issues_count":5,"forks_count":57,"subscribers_count":14,"default_branch":"master","last_synced_at":"2025-05-26T06:11:36.783Z","etag":null,"topics":["cli","command-line-tool","ctf","ctf-challenges","data-erasure","hacking","pentest","post-exploitation","redteam","shred","shredding","tracks"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sundowndev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null},"funding":{"github":["sundowndev"]}},"created_at":"2019-01-08T10:46:06.000Z","updated_at":"2025-05-23T07:19:32.000Z","dependencies_parsed_at":"2023-02-12T16:00:57.268Z","dependency_job_id":null,"html_url":"https://github.com/sundowndev/covermyass","commit_stats":null,"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/sundowndev/covermyass","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sundowndev%2Fcovermyass","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sundowndev%2Fcovermyass/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sundowndev%2Fcovermyass/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sundowndev%2Fcovermyass/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sundowndev","download_url":"https://codeload.github.com/sundowndev/covermyass/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sundowndev%2Fcovermyass/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279007035,"owners_count":26084227,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-11T02:00:06.511Z","response_time":55,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cli","command-line-tool","ctf","ctf-challenges","data-erasure","hacking","pentest","post-exploitation","redteam","shred","shredding","tracks"],"created_at":"2024-10-13T17:23:23.858Z","updated_at":"2025-10-11T11:38:25.572Z","avatar_url":"https://github.com/sundowndev.png","language":"Go","funding_links":["https://github.com/sponsors/sundowndev"],"categories":[],"sub_categories":[],"readme":"[![build status](https://img.shields.io/github/actions/workflow/status/sundowndev/covermyass/build.yml)](https://github.com/sundowndev/covermyass/actions)\n[![Coverage Status](https://coveralls.io/repos/github/sundowndev/covermyass/badge.svg?branch=master)](https://coveralls.io/github/sundowndev/covermyass?branch=master)\n[![Go Report Card](https://goreportcard.com/badge/github.com/sundowndev/covermyass/v2)](https://goreportcard.com/report/github.com/sundowndev/covermyass/v2)\n![GitHub all releases](https://img.shields.io/github/downloads/sundowndev/covermyass/total?color=brightgreen)\n\n# Introduction\n\nCovermyass is a post-exploitation tool to cover your tracks on various operating systems. It was designed for penetration testing \"covering tracks\" phase, before exiting the compromised server. At any time, you can run the tool to find which log files exists on the system, then run again later to erase those files. The tool will tell you which file can be erased with the current user permissions. Files are overwritten repeatedly with random data, in order to make it harder for even very expensive hardware probing to recover the data.\n\nIt supports the three major operating systems (Linux, macOS, Windows) and a few smaller ones (FreeBSD, OpenBSD).\n\n### Current status ###\n\nThis tool is still in beta. Upcoming versions might bring breaking changes. For now, we're focusing Linux and Darwin support, Windows may come later.\n\n### Installation ###\n\nDownload the latest release : \n\n```bash\ncurl -sSL https://github.com/sundowndev/covermyass/releases/latest/download/covermyass_linux_amd64 -o ./covermyass\n```\n\n```bash\nchmod +x ./covermyass\n```\n\n### Verify digital signatures ###\n\ncovermyass releases are signed using PGP key (rsa4096) with ID `E5BC23488DA8C7AC` and fingerprint `1A662C679AD91F549A77CD96E5BC23488DA8C7AC`. Our key can be retrieved from common keyservers.\n\n1. Download binary, checksums and signature\n```bash\ncurl -L https://github.com/sundowndev/covermyass/releases/latest/download/covermyass_linux_amd64 -o covermyass_linux_amd64 \u0026\u0026 \\\ncurl -L https://github.com/sundowndev/covermyass/releases/latest/download/covermyass_SHA256SUMS -o covermyass_SHA256SUMS \u0026\u0026 \\\ncurl -L https://github.com/sundowndev/covermyass/releases/latest/download/covermyass_SHA256SUMS.gpg -o covermyass_SHA256SUMS.gpg\n```\n\n2. Import key\n```bash\ngpg --keyserver https://keys.openpgp.org --recv-keys 0xE5BC23488DA8C7AC\n```\n\n3. Verify signature (optionally trust the key from gnupg to avoid any warning)\n```bash\ngpg --verify covermyass_SHA256SUMS.gpg covermyass_SHA256SUMS\n```\n\n4. Verify checksum\n```bash\nsha256sum --ignore-missing -c covermyass_SHA256SUMS\n```\n\n### Usage ###\n\n```\n$ covermyass -h\n\nUsage:\n  covermyass [flags]\n\nExamples:\n\nOverwrite log files 5 times with a final overwrite with zeros to hide shredding\ncovermyass --write -z -n 5\n\n\nFlags:\n  -f, --filter strings   File paths to ignore (supports glob patterns)\n  -h, --help             help for covermyass\n  -n, --iterations int   Overwrite N times instead of the default (default 3)\n  -l, --list             Show files in a simple list format. This will prevent any write operation\n      --no-read-only     Exclude read-only files in the list. Must be used with --list\n  -v, --version          version for covermyass\n      --write            Erase found log files. This WILL shred the files!\n  -z, --zero             Add a final overwrite with zeros to hide shredding\n```\n\nFirst, run an analysis. This will not erase anything.\n\n```shell\n$ covermyass\n\nLoaded known log files for linux\nScanning file system...\n\nFound the following files\n/var/log/lastlog (29.5 kB, -rw-rw-r--)\n/var/log/btmp (0 B, -rw-rw----)\n/var/log/wtmp (0 B, -rw-rw-r--)\n/var/log/faillog (3.2 kB, -rw-r--r--)\n\nSummary\nFound 4 files (4 read-write, 0 read-only) in 27ms\n```\n\nWhen you acknowledged the results, erase those files.\n\n```shell\n$ whoami\nroot\n$ covermyass --write -n 100\n\nLoaded known log files for linux\nScanning file system...\n\nFound the following files\n/var/log/lastlog (29.5 kB, -rw-rw-r--)\n/var/log/btmp (0 B, -rw-rw----)\n/var/log/wtmp (0 B, -rw-rw-r--)\n/var/log/faillog (3.2 kB, -rw-r--r--)\n\nSummary\nFound 4 files (4 read-write, 0 read-only) in 27ms\n\n⣾ Shredding files... (3.1 MB, 1.3 MB/s) [2s] \n\nSuccessfully shredded 4 files 100 times\n```\n\nFilter out some paths : \n\n```shell\n$ covermyass -f '/foo/**/*.log' -f '/bar/foo.log'\n```\n\n### License ###\n\nCovermyass is licensed under the MIT license. Refer to [LICENSE](LICENSE) for more information.\n\n## Sponsorship\n\n\u003cdiv align=\"center\"\u003e\n  \u003cimg src=\"https://github.com/sundowndev/static/raw/main/sponsors.svg?v=c68eba9\" width=\"100%\" heigh=\"auto\" /\u003e\n\u003c/div\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsundowndev%2Fcovermyass","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsundowndev%2Fcovermyass","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsundowndev%2Fcovermyass/lists"}