scanners: fs: add additional NOTROBIN artifacts from upcoming blog

scanners/fs-paths.sh

@@ -26,6 +26,26 @@ scan_fs_notrobin() {
         fi
     done
 
+    declare -a dirs;
+    dirs[0]="/var/vpn/theme";
+    dirs[1]="/var/vpn/themes";
+
+    declare -a blacklist;
+    blacklist[0]="[a-f0-9]\{32\}\.php";
+    blacklist[1]="[a-f0-9]\{32\}_[a-zA-Z0-9]\{1,12\}\.\(php\|pl\)";
+
+    for dir in "${dirs[@]}"; do
+        if [ -d "$root_directory/$dir" ]; then
+            for blackterm in "${blacklist[@]}"; do
+                local entries=$(ls "$root_directory/$dir" | grep "$blackterm");
+                if [ -n "$entries" ]; then
+                    found=true;
+                    report_match "$entries, known path to NOTROBIN artifact.";
+                fi
+            done
+        fi
+    done
+
     if [ "$found" != true ]; then
         debug "did not find NOTROBIN artifacts";
     fi