HEX
Server: LiteSpeed
System: Linux s5529.usc1.stableserver.net 5.14.0-570.23.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jun 24 11:27:16 EDT 2025 x86_64
User: servcorps (2634)
PHP: 8.3.31
Disabled: NONE
$ pwd: /home/servcorps/
Upload Files
File: /home/servcorps/.bash_history
#1781703459
cd public_html
#1781703469
find -type d -exec chmod 755 {} + && find -type f -exec chmod 644 {} +
#1781703476
wp plugin activate --all
#1781800941
echo BEG''MQJQ9XA4YANE; ls -la  '~/public_html' 2>&1 | head -200; echo FIN''MQJQ9XA4YANE
#1781800944
echo BEG''MQJQ9ZGRGADC; echo "=user="; whoami; id; echo "=host="; hostname; uname -a; echo "=pwd="; pwd; echo FIN''MQJQ9ZGRGADC
#1781800946
echo BEG''MQJQA105M400; ls -la  '~/.' 2>&1 | head -200; echo FIN''MQJQA105M400
#1781800948
echo BEG''MQJQA2GPG0AV; ls -la  '/home/servcorps' 2>&1 | head -200; echo FIN''MQJQA2GPG0AV
#1781800950
echo BEG''MQJQA4ATN4TN; ls -la  '/home/servcorps/public_html' 2>&1 | head -200; echo FIN''MQJQA4ATN4TN
#1781800952
echo BEG''MQJQA693UL0K; stat -c%s '/home/servcorps/public_html/index.php' 2>/dev/null; echo "===BODY==="; head -c 200000 '/home/servcorps/public_html/index.php' 2>&1; echo FIN''MQJQA693UL0K
#1781800955
echo BEG''MQJQA8EBRAIE; stat -c%s '/home/servcorps/public_html/.htaccess' 2>/dev/null; echo "===BODY==="; head -c 200000 '/home/servcorps/public_html/.htaccess' 2>&1; echo FIN''MQJQA8EBRAIE
#1781800957
echo BEG''MQJQA9ZC943P; stat -c%s '/home/servcorps/public_html/bucae.php' 2>/dev/null; echo "===BODY==="; head -c 200000 '/home/servcorps/public_html/bucae.php' 2>&1; echo FIN''MQJQA9ZC943P
#1781800960
echo BEG''MQJQABY87YJI; tail -n 100 ~/logs/*.error_log ~/public_html/error_log 2>/dev/null | tail -n 100; echo FIN''MQJQABY87YJI
#1781800960
echo BEG''MQJQAC5AVSSD; find ~ -type f \( -name "*.log" -o -name "*error_log*" -o -name "debug.log" \) -size +0c 2>/dev/null | head -50 | xargs -I{} stat -c '%Y %s %n' {} 2>/dev/null | sort -rn | head -20; echo FIN''MQJQAC5AVSSD
#1781800964
echo BEG''MQJQAFCG6G1L; stat -c%s '/home/servcorps/public_html/wp-login.php' 2>/dev/null; echo "===BODY==="; head -c 200000 '/home/servcorps/public_html/wp-login.php' 2>&1; echo FIN''MQJQAFCG6G1L
#1781800968
echo BEG''MQJQAHYKVOH5; stat -c%s '/home/servcorps/public_html/wp-config.php' 2>/dev/null; echo "===BODY==="; head -c 200000 '/home/servcorps/public_html/wp-config.php' 2>&1; echo FIN''MQJQAHYKVOH5
#1781801280
echo BEG''MQJQH6PSY2MF; find '$HOME' -type f -name 'wordpress-6.9.4.zip' 2>/dev/null | head -100; echo FIN''MQJQH6PSY2MF
#1781801281
echo BEG''MQJQH7JDE5AA; stat -c%s '~/.bash_history' 2>/dev/null; echo "===BODY==="; head -c 200000 '~/.bash_history' 2>&1; echo FIN''MQJQH7JDE5AA
#1781801291
echo BEG''MQJQHFEXSRX8; find '$HOME' -type f -name 'wordpress-6.9.4.zip' 2>/dev/null | head -100; echo FIN''MQJQHFEXSRX8
#1781801292
echo BEG''MQJQHFWTSSZ6; stat -c%s '~/.bash_history' 2>/dev/null; echo "===BODY==="; head -c 200000 '~/.bash_history' 2>&1; echo FIN''MQJQHFWTSSZ6
#1781801292
echo BEG''MQJQHGEBMPDV; find '$HOME' -type f  2>/dev/null | head -100; echo FIN''MQJQHGEBMPDV
#1781801293
echo BEG''MQJQHGVB3IJ2; ls -la  '~/public_html' 2>&1 | head -200; echo FIN''MQJQHGVB3IJ2
#1781801294
echo BEG''MQJQHHMRG54U; (find ~ -type f \( -name "*.log" -o -name "*error_log*" -o -name "debug.log" -o -name "access*log*" \) -size +0c 2>/dev/null | head -100) | xargs -I{} stat -c '%Y %s %n' {} 2>/dev/null | sort -rn | head -30; echo FIN''MQJQHHMRG54U
#1781801295
echo BEG''MQJQHIG5DIHZ; echo "=recent="; find ~/public_html -type f -newermt "7 days ago" 2>/dev/null | head -50; echo "=eval="; grep -rE "eval\s*\(\s*(base64_decode|gzinflate|str_rot13)" ~/public_html 2>/dev/null | head -30; echo FIN''MQJQHIG5DIHZ
#1781801302
echo BEG''MQJQHMTO5JRK; ls -la  '/home/servcorps' 2>&1 | head -200; echo FIN''MQJQHMTO5JRK
#1781801302
echo BEG''MQJQHNU31ZMX; stat -c%s '/home/servcorps/public_html/error_log' 2>/dev/null; echo "===BODY==="; head -c 200000 '/home/servcorps/public_html/error_log' 2>&1; echo FIN''MQJQHNU31ZMX
#1781801303
echo BEG''MQJQHODS7EFL; stat -c%s '/home/servcorps/public_html/bucae.php' 2>/dev/null; echo "===BODY==="; head -c 200000 '/home/servcorps/public_html/bucae.php' 2>&1; echo FIN''MQJQHODS7EFL
#1781801303
echo BEG''MQJQHOXC3OVJ; find '$HOME' -type f -name 'wordpress-6.9.4.zip' 2>/dev/null | head -100; echo FIN''MQJQHOXC3OVJ
#1781801304
echo BEG''MQJQHPK36GDO; cd /home/servcorps/public_html && wp --skip-plugins --skip-themes plugin list --format=json 2>&1; echo FIN''MQJQHPK36GDO
#1781801305
echo BEG''MQJQHQHLF3MG; stat '/home/servcorps/public_html/bucae.php' 2>&1; echo FIN''MQJQHQHLF3MG
#1781801309
echo BEG''MQJQHTNPOS1B; find '$HOME' -type f -name '*wordpress-6.9.4.zip*' 2>/dev/null | head -100; echo FIN''MQJQHTNPOS1B
#1781801311
echo BEG''MQJQHUJZPW5U; stat -c%s '/home/servcorps/public_html/wp-login.php' 2>/dev/null; echo "===BODY==="; head -c 200000 '/home/servcorps/public_html/wp-login.php' 2>&1; echo FIN''MQJQHUJZPW5U
#1781801312
echo BEG''MQJQHVLHDTFL; echo "=lastlogin="; cat ~/.lastlogin 2>&1; echo "=quota="; quota -s 2>&1 | head -5; echo FIN''MQJQHVLHDTFL
#1781801313
echo BEG''MQJQHWO3AOK5; ls -la  '/home/servcorps/public_html/wp-content/uploads' 2>&1 | head -200; echo FIN''MQJQHWO3AOK5
#1781801314
echo BEG''MQJQHXA9K4CV; grep -rE --include='*' 'yrxc_uck' '$HOME' 2>/dev/null | head -50; echo FIN''MQJQHXA9K4CV
#1781801319
echo BEG''MQJQI10CV34V; stat -c%s '/home/servcorps/public_html/index.php' 2>/dev/null; echo "===BODY==="; head -c 200000 '/home/servcorps/public_html/index.php' 2>&1; echo FIN''MQJQI10CV34V
#1781801320
echo BEG''MQJQI1HT4U0J; stat -c%s '/home/servcorps/public_html/wp-config.php' 2>/dev/null; echo "===BODY==="; head -c 200000 '/home/servcorps/public_html/wp-config.php' 2>&1; echo FIN''MQJQI1HT4U0J
#1781801320
echo BEG''MQJQI1YGVAD5; find '$HOME' -type f -name '*wordpress-6.9.4*' 2>/dev/null | head -100; echo FIN''MQJQI1YGVAD5
#1781801321
echo BEG''MQJQI2EYCJ7T; ls -la  '/home/servcorps/public_html/wp-content/uploads/wp-file-manager-pro' 2>&1 | head -200; echo FIN''MQJQI2EYCJ7T
#1781801321
echo BEG''MQJQI2V2469M; grep -rE --include='*' 'yrxc_uck' '$HOME' 2>/dev/null | head -50; echo FIN''MQJQI2V2469M
#1781801322
echo BEG''MQJQI3C7W3ON; grep -rE --include='*' 'eval(' '$HOME' 2>/dev/null | head -50; echo FIN''MQJQI3C7W3ON
#1781801322
echo BEG''MQJQI3RYILYR; find '$HOME' -type f  2>/dev/null | head -100; echo FIN''MQJQI3RYILYR
#1781801327
echo BEG''MQJQI78A9ZYN; tail -n 100 ~/access-logs/theservcorps.com 2>/dev/null; echo FIN''MQJQI78A9ZYN
#1781801328
echo BEG''MQJQI7P484Q9; grep -rE --include='*' 'bucae.php' '$HOME' 2>/dev/null | head -50; echo FIN''MQJQI7P484Q9
#1781801328
echo BEG''MQJQI85DYUSX; stat -c%s '/home/servcorps/.ftp_history' 2>/dev/null; echo "===BODY==="; head -c 200000 '/home/servcorps/.ftp_history' 2>&1; echo FIN''MQJQI85DYUSX
#1781801329
echo BEG''MQJQI8NVPMOQ; grep -rE --include='*' 'wordpress-6.9.4' '$HOME' 2>/dev/null | head -50; echo FIN''MQJQI8NVPMOQ
@ Telegram