ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.0.30

Path:root/home/aljabrcp/public_html/

Name	Size	Perm	Actions
📁 .render-cache	-	0755	🗑️ 🏷️
📁 .tmb	-	0777	🗑️ 🏷️
📁 .well-known	-	0755	🗑️ 🏷️
📁 e4b5c3	-	0755	🗑️ 🏷️
📁 well-known	-	0755	🗑️ 🏷️
📁 wp-admin	-	0755	🗑️ 🏷️
📁 wp-content	-	0755	🗑️ 🏷️
📁 wp-includes	-	0755	🗑️ 🏷️
📄 .072335799904244.php	0.73 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .303133550574645.php	0.73 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .771565434277360.php	0.72 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .ftpquota	0.02 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .htaccess	0.06 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .htaccess_old	2.38 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .maintenance	0.03 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 .render-orig.php	0.4 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 admin.php	1073.33 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ajyycson.php	18.36 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 bjspsdnw.php	18.36 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 btxouxnz.php	18.36 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 byobdpit.php	161.75 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 dot.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 dtypulkn.php	18.48 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 error_log	1.32 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 fdkvhqgp.php	18.36 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 features.php	9.84 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 fiouvmwk.php	18.51 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 gkliwelb.php	19.47 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 hhxpypnm.php	18.48 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ichqcdtz.php	18.48 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 iggrnuqs.php	1073.33 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ijigqafs.php	215.7 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ilkifkhe.php	18.48 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 index.php	0.08 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 japeqpqk.php	18.55 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 kxkjgars.php	14.76 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 legcmbtx.php	161.75 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 license.txt	19.44 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 lufix.php	53.27 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 mdlyonrh.php	161.75 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 memkgrwi.php	18.55 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 min.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 mlqeheok.php	35.6 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 mmkegijm.php	18.5 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 mqbfmtzr.php	14.76 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 nkuxvifp.php	18.56 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ocngdtip.php	18.55 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ops.php	31 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 options.php	1.29 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 php.ini	0.1 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 pjqgidra.php	19.54 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 qpggioxw.php	14.76 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 readme.html	7.23 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 robots.txt	0.35 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 rpudqgij.php	15.4 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 tvuydrna.php	18.36 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 uymbqzzs.php	215.7 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 vxbezeuh.php	15.4 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 vxeskmxs.php	19.54 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-activate.php	7.2 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-blog-header.php	0.34 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-comments-post.php	2.27 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config-sample.php	3.26 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php	3.31 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.bak	3.31 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.before-debug	3.31 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.before-debug.2026-06-26-151429	3.31 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.before-debug.2026-06-26-151542	3.26 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.broken.2026-06-26-152109	3.27 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.broken.2026-06-26-152153	3.27 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php.broken.2026-06-26-152623	3.27 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-cron.php	5.49 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-links-opml.php	2.43 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-load.php	3.84 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	8.52 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-server.php	162 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-settings.php	31.88 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-signup.php	33.81 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wp-trackback.php	5.09 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 wpxml.php	12.37 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 xmlrpc.php	3.13 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 xyn.php	5.65 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 ydrqjvyq.php	18.51 KB	0777	🗑️ 🏷️ ⬇️ ✏️
📄 zwmxmsbj.php	215.7 KB	0777	🗑️ 🏷️ ⬇️ ✏️

Edit: purge-nobody-user

#!/bin/bash -eu

if [ $UID -ne 0 ]; then
    echo "WARNING: This script needs to run as root to be effective"
    exit 1
fi

export SYSTEMD_NSS_BYPASS_SYNTHETIC=1

if [ "${1:-}" = "--ignore-journal" ]; then
    shift
    ignore_journal=1
else
    ignore_journal=0
fi

echo "Checking processes..."
if ps h -u 99 | grep .; then
    echo "ERROR: ps reports processes with UID 99!"
    exit 2
fi
echo "... not found"

echo "Checking UTMP..."
if w -h 199 | grep . ; then
    echo "ERROR: w reports UID 99 as active!"
    exit 2
fi
if w -h nobody | grep . ; then
    echo "ERROR: w reports user nobody as active!"
    exit 2
fi
echo "... not found"

echo "Checking the journal..."
if [ "$ignore_journal" = 0 ] && journalctl -q -b -n10 _UID=99 | grep . ; then
    echo "ERROR: journalctl reports messages from UID 99 in current boot!"
    exit 2
fi
echo "... not found"

echo "Looking for files in /etc, /run, /tmp, and /var..."
if find /etc /run /tmp /var -uid 99 -print | grep -m 10 . ; then
    echo "ERROR: found files belonging to UID 99"
    exit 2
fi
echo "... not found"

echo "Checking if nobody is defined correctly..."
if getent passwd nobody |
	grep '^nobody:[x*]:65534:65534:.*:/:/sbin/nologin';
then
    echo "OK, nothing to do."
    exit 0
else
    echo "NOTICE: User nobody is not defined correctly"
fi

echo "Checking if nfsnobody or something else is using the uid..."
if getent passwd 65534 | grep . ; then
    echo "NOTICE: will have to remove this user"
else
    echo "... not found"
fi

if [ "${1:-}" = "-x" ]; then
    if getent passwd nobody >/dev/null; then
	# this will remove both the user and the group.
	( set -x
   	  userdel nobody
	)
    fi

if getent passwd 65534 >/dev/null; then
	# Make sure the uid is unused. This should free gid too.
	name="$(getent passwd 65534 | cut -d: -f1)"
	( set -x
	  userdel "$name"
	)
    fi

if grep -qE '^(passwd|group):.*\bsss\b' /etc/nsswitch.conf; then
	echo "Sleeping, so sss can catch up"
	sleep 3
    fi

if getent group 65534; then
	# Make sure the gid is unused, even if uid wasn't.
	name="$(getent group 65534 | cut -d: -f1)"
	( set -x
	  groupdel "$name"
	)
    fi

# systemd-sysusers uses the same gid and uid
    ( set -x
      systemd-sysusers --inline 'u nobody 65534 "Kernel Overflow User" / /sbin/nologin'
    )
else
    echo "Pass '-x' to perform changes"
fi

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v8.0.30

Edit: purge-nobody-user

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.0.30