kohjhjhصثقصثقصثقgdfgdg
Ele57885fddfgdfgfghgقفغفغفقhfg555434536
/
home
/
u542670534
/
Upload FileeE
HOME
b0VIM 8.2 �+vh��x�J u542670534 in-mum-web1671.main-hosting.eu ~u542670534/scan.php utf-8 U3210 #"! U tp < ad � < � � � � n W = � � � � � � � u T Q P � � � � J I ( � � k < ; � ` A : ( � � � l L � � u A ; 9 8 ?????????????? ?>q?> echo "<br><strong>Scan complete.</strong>"; } } scanFiles($publicHtml, $maliciousPatterns); echo "<hr><strong>Scanning:</strong> $publicHtml<br>"; if (is_dir($publicHtml)) { $publicHtml = $domainsRoot . '/' . $domain . '/public_html'; if ($domain === '.' || $domain === '..') continue; foreach ($domains as $domain) { $domains = scandir($domainsRoot); echo "<h3>Scanning domains for malware in PHP files...</h3>"; // Start scanning all public_html folders inside domains/ } } } } } break; echo "\n"; echo "<b >[ALERT]</b> Pattern <code>$pattern</code> found in: <code>$fullPath</code><br>"; if (stripos($contents, $pattern) !== false) { foreach ($patterns as $pattern) { if ($contents === false) continue; $contents = @file_get_contents($fullPath); } elseif (pathinfo($fullPath, PATHINFO_EXTENSION) === 'php') { scanFiles($fullPath, $patterns); // Recursive scan if (is_dir($fullPath)) { $fullPath = $dir . DIRECTORY_SEPARATOR . $file; if ($file === '.' || $file === '..') continue; foreach ($files as $file) { $files = scandir($dir); function scanFiles($dir, $patterns) { // Recursively scan PHP files for malicious patterns ]; 'file_put_contents($_POST[', 'php_uname', 'str_rot13', 'preg_replace("/.e."/', 'base64_decode(', 'system(', 'passthru(', 'exec(', 'shell_exec', 'eval(gzinflate', 'gzinflate(base64_decode', 'eval(base64_decode', $maliciousPatterns = [ // Suspicious patterns to look for $domainsRoot = __DIR__ . '/domains'; // Adjust if needed // Parent folder containing all domain folders <?php