⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.173
Server IP:
78.40.11.138
Server:
Linux tango.o2switch.net 4.18.0-553.30.1.lve.el8.x86_64 #1 SMP Tue Dec 3 01:21:19 UTC 2024 x86_64
Server Software:
Apache
PHP Version:
7.4.33
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
home
/
sc1voni9410
/
Edit File: scan2.sh
#!/bin/bash BADLOGINS="mainauth,wplogin,adminwp,cmsuser,mainpanel,archiverss,wp-admin,admin1,wpsupport" for wc in ~/*/wp-config.php ~/*/*/wp-config.php ~/*/wordpress/wp-config.php; do [ -f "$wc" ] || continue dir=$(dirname "$wc") case "$dir" in *dup-installer*) echo "SKIPDIR|$dir"; continue;; esac PRE=$(wp --path="$dir" config get table_prefix --skip-plugins --skip-themes 2>/dev/null) if [ -z "$PRE" ]; then echo "WPFAIL|$dir"; continue; fi # rogue admins R=$(wp --path="$dir" --skip-plugins --skip-themes db query "SELECT CONCAT('ROGUE|$dir|',u.user_login,'|',u.user_email) FROM ${PRE}users u JOIN ${PRE}usermeta m ON u.ID=m.user_id WHERE m.meta_key='${PRE}capabilities' AND m.meta_value LIKE '%administrator%' AND (u.user_login IN (${BADLOGINS//,/\',\'}) OR u.user_login IN ('mainauth','wplogin','adminwp','cmsuser','mainpanel','archiverss','wp-admin','admin1','wpsupport') OR u.user_email LIKE '%rambler%' OR u.user_email LIKE '%@wordpress.org' OR u.user_email LIKE '%nomxwp%');" --skip-column-names 2>/tmp/e) [ -s /tmp/e ] && echo "QERR|$dir|$(head -1 /tmp/e)" [ -n "$R" ] && echo "$R" # count total admins remaining C=$(wp --path="$dir" --skip-plugins --skip-themes db query "SELECT CONCAT('ADMINCOUNT|$dir|',COUNT(*)) FROM ${PRE}usermeta WHERE meta_key='${PRE}capabilities' AND meta_value LIKE '%administrator%';" --skip-column-names 2>/dev/null) [ -n "$C" ] && echo "$C" done echo "SCAN_DONE"
Simpan