D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
home
/
hrfiudwx
/
Filename :
.bash_history
back
Copy
cd public_html find. -name "*.php" -mtime -3 find . -name "*.php" -mtime -3 grep -Ril "eval(" . grep -Ril "base64_decode(" . grep -Ril "gzinflate\|shell_exec\|system\|passthru\|assert" . find . -type f \( -name "*wp-login*" -o -name "*signon*" -o -name "*config*" -o -name "*shell*" \) nano path/to/suspicious-file.php nano .htaccess cd ~/public_html tar -czf backup-uploads.tar.gz wp-content/uploads tar -czf backup-themes.tar.gz wp-content/themes tar -czf backup-plugins.tar.gz wp-content/plugins cd ~/public_html tar -czf backup-uploads.tar.gz wp-content/uploads tar -czf backup-themes.tar.gz wp-content/themes tar -czf backup-plugins.tar.gz wp-content/plugins rm -rf wp-admin rm -rf wp-includes rm -f *.php *.txt *.html wget https://wordpress.org/latest.zip unzip latest.zip cp -r wordpress/* . rm -rf wordpress latest.zip cd ~/public_html ls -l pwd cp wp-config-sample.php wp-config.php nano wp-config.php * The base configuration for WordPress * * The wp-config.php creation script uses this file during the installation. * You don't have to use the website, you can copy this file to "wp-config.php" * and fill in the values. * * This file contains the following configurations: * * * Database settings * * Secret keys * * Database table prefix * * ABSPATH * * @link https://developer.wordpress.org/advanced-administration/wordpress/wp-config/ * * @package WordPress */ // ** Database settings - You can get this info from your web host ** // /** The name of the database for WordPress */ define( 'DB_NAME', 'database_name_here' ); /** Database username */ define( 'DB_USER', 'username_here' ); /** Database password */ define( 'DB_PASSWORD', 'password_here' ); /** Database hostname */ nano wp-config.php cp wp-config-sample.php wp-config.php define( 'DB_NAME', 'hrfiudwx_wp62685' ); /** Database username */ define( 'DB_USER', 'hrfiudwx_wp62685' ); /** Database password */ define( 'DB_PASSWORD', 'p5.7t)5BS-1S.W)T' ); /** Database hostname */ define( 'DB_HOST', 'localhost' ); define( 'DB_NAME', 'hrfiudwx_wp62685' ); define( 'DB_USER', 'hrfiudwx_wp62685' ); define( 'DB_PASSWORD', 'p5.7t)5BS-1S.W)T' ); define( 'DB_HOST', 'localhost' ); nano wp-config.php rm -f '/home/hrfiudwx/access-logs' '/home/hrfiudwx/.trash/wp-content/plugins/akismet/akismet.php' '/home/hrfiudwx/enterpriseuplift.com/admin.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/plugins/akismet/akismet.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/plugins/loginizer/loginizer.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/themes/themify-ultra/themify/class-themify-enqueue.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/uploads/2024/03/axtra-3.zip' '/home/hrfiudwx/enterpriseuplift.com/wp-includes/version.php' '/home/hrfiudwx/hoseamande.com/admin.php' '/home/hrfiudwx/hoseamande.com/wp-includes/version.php' && rm -rf '/home/hrfiudwx/.nc_plugin/hidden' rm -f '/home/hrfiudwx/access-logs' '/home/hrfiudwx/.trash/wp-content/plugins/akismet/akismet.php' '/home/hrfiudwx/enterpriseuplift.com/admin.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/plugins/akismet/akismet.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/plugins/loginizer/loginizer.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/themes/themify-ultra/themify/class-themify-enqueue.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/uploads/2024/03/axtra-3.zip' '/home/hrfiudwx/enterpriseuplift.com/wp-includes/version.php' '/home/hrfiudwx/hoseamande.com/admin.php' '/home/hrfiudwx/hoseamande.com/wp-includes/version.php' && rm -rf '/home/hrfiudwx/.nc_plugin/hidden' rm -f '/home/hrfiudwx/access-logs' '/home/hrfiudwx/.trash/wp-content/plugins/akismet/akismet.php' '/home/hrfiudwx/enterpriseuplift.com/admin.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/plugins/akismet/akismet.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/plugins/loginizer/loginizer.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/themes/themify-ultra/themify/class-themify-enqueue.php' '/home/hrfiudwx/enterpriseuplift.com/wp-content/uploads/2024/03/axtra-3.zip' '/home/hrfiudwx/enterpriseuplift.com/wp-includes/version.php' '/home/hrfiudwx/hoseamande.com/admin.php' '/home/hrfiudwx/hoseamande.com/wp-includes/version.php' && rm -rf '/home/hrfiudwx/.nc_plugin/hidden' sudo rm -rf /home/hrfiudwx/.nc_plugin/hidden ls -ld /home/hrfiudwx/.nc_plugin/hidden [hrfiudwx@premium265 ~]$ ls -ld /home/hrfiudwx/.nc_plugin/hidden drwx-wx-wx 2 root root 4096 Jun 7 21:47 /home/hrfiudwx/.nc_plugin/hidden [hrfiudwx@premium265 ~]$ rm -f /home/hrfiudwx/softaculous_backups/smallbizsavvytips.com/wp-content/plugins/litespeed-cache/assets/radio.php && rm -rf /home/hrfiudwx/.nc_plugin && rm -rf /home/hrfiudwx/softaculous_backups/ && rm -rf /home/hrfiudwx/.trash/ clamscan -r /home/hrfiudwx/ ls -l /home/hrfiudwx/softaculous_backups/smallbizsavvytips.com/wp-content/plugins/litespeed-cache/assets/radio.php ls -ld /home/hrfiudwx/.nc_plugin find /home/hrfiudwx/ -name 'radio.php' ls -la /home/hrfiudwx/.trash/ rm -rf /home/hrfiudwx/.trash/* ls -lh /home/hrfiudwx/.trash/