Attention:
Uname:
Php:
Hdd:
Cwd:		Yanz Webshell! - PRIV8 WEB SHELL ORB YANZ BYPASS!
Linux webd002.cluster113.gra.hosting.ovh.net 6.18.39-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Tue Jul 21 12:03:15 CEST
8.4.22 Safe mode: OFF Datetime: 2026-07-28 00:37:29
63728.17 GB Free: 38061.76 GB (59%)
/home/mesyno/forensics-2026-06-15/day4-2026-06-19/ drwxr-xr-x [ root ] [ home ] Text

Server IP:
10.113.40.2
Client IP:
216.73.217.24
[ Files ][ Logout ]

File manager

NameSizeModifyPermissionsActions
[ . ]dir2026-06-23 14:32:10drwxr-xr-xRename Touch
[ .. ]dir2026-06-25 08:02:06drwxr-xr-xRename Touch
[ blocks_button__button ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ blocks_comment-content__comment-content ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ blocks_file__file ]dir2026-06-19 10:16:37drwxr-xr-xRename Touch
[ blocks_footnotes__footnotes ]dir2026-06-19 10:16:37drwxr-xr-xRename Touch
[ blocks_gallery__gallery ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ blocks_group_group_juejiang_webshell ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ blocks_heading__heading ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ blocks_more__more ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ blocks_navigation-link__shared__shared ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ blocks_query-no-results__query-no-results ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ blocks_quote__quote ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ blocks_rss__rss ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ blocks_site-tagline__site-tagline ]dir2026-06-19 10:16:37drwxr-xr-xRename Touch
[ blocks_widget-group__widget-group ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ home__mesyno-claude__www__wp-content__plugins__backup-module-614 ]dir2026-06-18 07:05:08drwxr-xr-xRename Touch
[ home__mesyno-claude__www__wp-content__plugins__Nxploited_01f07a ]dir2026-06-18 07:05:08drwxr-xr-xRename Touch
[ home__mesyno-claude__www__wp-content__plugins__Nxploited_b1fcba ]dir2026-06-18 11:37:14drwxr-xr-xRename Touch
[ home__mesyno-claude__www__wp-content__plugins__query-api ]dir2026-06-18 07:05:11drwxr-xr-xRename Touch
[ home__mesyno-claude__www__wp-content__plugins__url-params ]dir2026-06-18 07:05:12drwxr-xr-xRename Touch
[ PM2_doubled_wp-includes_css_dist_components_components_20260622T131623 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM2_doubled_wp-includes_css_dist_nux_nux_20260622T131623 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM2_doubled_wp-includes_js_mediaelement_renderers_renderers_20260622T131623 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM2_doubled_wp-includes_php-ai-client_src_Operations_Operations_20260622T131623 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM2_doubled_wp-includes_Requests_src_Exception_Exception_20260622T131623 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM2_doubled_wp-includes_SimplePie_src_src_20260622T131623 ]dir2026-06-19 16:39:13drwxr-xr-xRename Touch
[ PM2_doubled_wp-includes_sodium_compat_namespaced_Core_Core_20260622T131623 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM2_plugin_wp-page-widget_20260622T131623 ]dir2026-06-18 07:05:13drwxr-xr-xRename Touch
[ PM2_plugin_wp-show-posts_20260622T131623 ]dir2026-06-18 07:05:13drwxr-xr-xRename Touch
[ PM3_plugin_backupbuddy_CVE_20260622T133328 ]dir2026-06-18 07:05:08drwxr-xr-xRename Touch
[ PM3_plugin_ocean-extra_20260622T133328 ]dir2026-06-18 07:05:11drwxr-xr-xRename Touch
[ PM3_plugin_pixelyoursite-pro_CVE_20260622T133328 ]dir2026-06-18 07:05:11drwxr-xr-xRename Touch
[ PM3_plugin_updraftplus_CVE-2026-10795_20260623T143209 ]dir2026-06-18 07:05:12drwxr-xr-xRename Touch
[ PM_doubled_wp-content_plugins_ele-custom-skin_skins_skins_20260622T105338 ]dir2026-06-18 07:05:09drwxr-xr-xRename Touch
[ PM_doubled_wp-content_uploads_rsssl_rsssl_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_blocks_calendar_calendar_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_blocks_latest-comments_latest-comments_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_blocks_missing_missing_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_blocks_preformatted_preformatted_20260622T105338 ]dir2026-06-22 10:21:59drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_blocks_pullquote_pullquote_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_blocks_query_query_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_blocks_spacer_spacer_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_blocks_table_table_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_css_dist_widgets_widgets_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_js_imgareaselect_imgareaselect_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_js_swfupload_swfupload_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_js_tinymce_themes_themes_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_Requests_src_Transport_Transport_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ PM_doubled_wp-includes_SimplePie_src_Cache_Cache_20260622T105338 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
[ uploads_cache_hidden_dir ]dir2026-06-18 07:06:01drwxr-xr-xRename Touch
[ wp-includes_rest-api_search_search_juejiang_v2 ]dir2026-06-18 07:05:19drwxr-xr-xRename Touch
.htaccess.malicious-2026-06-22T08212.65 KB2026-06-22 10:21:40-rw-rw-rw-Rename Touch Edit Download
.htaccess.with-attacker-block2.65 KB2026-06-19 10:16:19-r--r--r--Rename Touch Edit Download
blocks_group_htaccess325 B2026-06-18 07:05:19-rw-r--r--Rename Touch Edit Download
cleanup.log1.37 KB2026-06-19 09:59:25-rw-r--r--Rename Touch Edit Download
decoy__wp-content__uploads__.well-known__.dashicons.ttc8.29 KB2026-02-15 05:51:39-rw-r--r--Rename Touch Edit Download
home__mesyno-claude__www__3PJcpMFsD8B.php80.07 KB2026-06-18 04:03:57-rw-r--r--Rename Touch Edit Download
home__mesyno-claude__www__image__index.php3.96 KB2026-06-18 04:03:57-rw-r--r--Rename Touch Edit Download
home__mesyno-claude__www__wp-content__mu-plugins__.htaccess325 B2026-06-18 07:05:08-rw-r--r--Rename Touch Edit Download
home__mesyno-claude__www__wp-content__r.php14.12 KB2026-06-18 03:38:19-rw-r--r--Rename Touch Edit Download
home__mesyno-claude__www__wp-content__uploads__mc4wp-debug-log.php0 B2026-06-15 09:17:18-rw-r--r--Rename Touch Edit Download
home__mesyno-claude__www__wp-includes__php-compat__.htaccess325 B2026-06-18 07:05:19-rw-r--r--Rename Touch Edit Download
htaccess-root.before-cleanup2.65 KB2026-06-18 07:06:01-rw-rw-rw-Rename Touch Edit Download
icon_3e4b.jpg.zip-payload6.11 MB2026-06-18 07:20:13-rw-r--r--Rename Touch Edit Download
image_index.php.reinjected-2026-06-224.69 KB2026-06-22 10:20:01-rw-r--r--Rename Touch Edit Download
index.php.infected-6312bytes6.16 KB2026-06-18 07:06:01-r--r--r--Rename Touch Edit Download
index.php.infected-again-after-restore6.16 KB2026-06-19 10:01:18-r--r--r--Rename Touch Edit Download
monitor.php.before-day411.38 KB2026-06-17 16:33:21-rw-r--r--Rename Touch Edit Download
PM2_wp-content_plugins_ocean-extra_includes_helper-ecacc489.php_20260622T131623209 B2026-06-18 01:07:02-rw-r--r--Rename Touch Edit Download
PM2_wp-content_plugins_ocean-extra_lib_util-14d3d040.php_20260622T131623277 B2026-06-18 01:07:02-rw-r--r--Rename Touch Edit Download
PM2_wp-content_plugins_ocean-extra_vendor_cache-35efa356.php_20260622T131623226 B2026-06-18 01:07:02-rw-r--r--Rename Touch Edit Download
PM2_wp-content_plugins_wp-show-posts_includes_helper-780e4542.php_20260622T131623231 B2026-06-18 01:06:50-rw-r--r--Rename Touch Edit Download
PM2_wp-content_plugins_wp-show-posts_lib_util-1706d57b.php_20260622T131623215 B2026-06-18 01:06:50-rw-r--r--Rename Touch Edit Download
PM2_wp-content_plugins_wp-show-posts_vendor_cache-bfde40c3.php_20260622T131623271 B2026-06-18 01:06:50-rw-r--r--Rename Touch Edit Download
twentytwentyfive_fonts.htaccess219 B2026-06-19 10:10:21-rw-r--r--Rename Touch Edit Download
twentytwentyfive_fonts_index.php.webshell3.91 KB2026-06-19 10:10:21-rw-r--r--Rename Touch Edit Download
wp-admin.htaccess.malicious325 B2026-06-18 07:05:07-r--r--r--Rename Touch Edit Download
wp-config.php.before-cleanup4.98 KB2026-06-17 19:31:52-rw----r--Rename Touch Edit Download
wp-includes_load.php.infected66.50 KB2026-03-03 23:22:08-rw-r--r--Rename Touch Edit Download
wp-includes_plugin.php.infected46.99 KB2026-02-15 20:38:16-rw-r--r--Rename Touch Edit Download
 
Change dir:
Read file:
Make dir: (Writeable)
Make file: (Writeable)
Terminal:
Upload file: (Writeable)