Shadow-Here


Server : Apache/2.4.41 (Ubuntu)
System : Linux cls 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : iscuser ( 1001)
PHP Version : 7.4.12
Disable Function : shell_exec,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Directory :  /home/akriveia/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :
Current File : //home/akriveia/.bash_history
ping sahs.jainuniversity.ac.in
ping theneurospinesurgeon.com
sudo nano theneurospinesurgeon.com.conf 
sudo certbot --apache -d theneurospinesurgeon.com -d www.theneurospinesurgeon.com
sudo service apache2 reload
cd /etc/
ls
cd apache2/
ls
cd sites-available/
ls
cat akriveiatech.com.conf
cd /home/akriveia/domains/addon/akriveiatech.com/www/
ls
clear
ls
cd about/
ls
cat index.php 
cd ..
grep -rw "uhrenservice" .
ls
cat index.php.save 
git status
ls
nano index.php
nano header.php 
ls -al
cd about/
ls
cd ..
rm -rf about
sudo rm -rf about
ls
nano index.php
grep -rw "International American School of Warsaw"
grep -rw "International American School of Warsaw" .
grep -rw "Internationa" .
grep -rw "meta" .
grep -rw "meta name=\"title" .
grep -rw "meta name=" .
grep -rw "<title>" .
cat ./mailers/eften/mailer-1.html
clear
grep -rw "Akriveia | Home " .
grep -rw "title" .
grep -rw "title>" .
cat search-engine-marketing.php
ls
ls -al search-engine-marketing.php
grep -rw "base"
grep -rw "base64"
grep -rw "eval"
cat assets/images/photos/blog/security-hide.php
grep -rw "bujang"
cat mailers/polyfluoro/lubring/image/security-hide.php
grep -rw "aHR0cHM6Ly9idWphbmcub25saW5lL3Jhdy9ncEtNUVNYRzdI"
grep -rw "base64_decode"
cd rigas
ls
cd assets/
ls
cd css/
ls
cd ..
ls
cd ..
ls
ls -al mailers/quest/coworks/images/
grep -rw "aHR0cHM6Ly9idWphbmcub25saW5lL3Jhdy9ncEtNUVNYRzdI"
ls -al rigas/assets/image/products/safe/
rm -rf ./rigas/
sudo rm -rf ./rigas/
ls
sudo rm -rf ./rigas/
ls
clear
grep -rw "aHR0cHM6Ly9idWphbmcub25saW5lL3Jhdy9ncEtNUVNYRzdI"
rm rigas/assets/image/products/safe/index-extra.php
sudo rm rigas/assets/image/products/safe/index-extra.php
ls -al rigas/assets/image/products/safe/index-extra.php
sudo chattr -i rigas/assets/image/products/safe/index-extra.php
sudo rm rigas/assets/image/products/safe/index-extra.php
rm rigas/assets/image/products/safe/index-extra.php
lsattr rigas/assets/image/products/safe
lsattr rigas/assets/image/products/
sudo chattr -i rigas/assets/image/products/safe
sudo rm rigas/assets/image/products/safe/index-extra.php
grep -rw "aHR0cHM6Ly9idWphbmcub25saW5lL3Jhdy9ncEtNUVNYRzdI"
lsattr ppc/assets/images/photos/services/
sudo chattr +i rigas/assets/image/products/safe
sudo chattr -i rigas/assets/image/products/safe
lsattr rigas/assets/image/products/safe
lsattr rigas/assets/image/products
sudo chattr +i rigas/assets/image/products/safe
lsattr rigas/assets/image/products
ls -al ppc/assets/images/photos/services/
lsattr ppc/assets/images/photos/services/
sudo chattr -i ppc/assets/images/photos/services/
lsattr ppc/assets/images/photos/services/
rm ppc/assets/images/photos/services/index-extra.php
ls
sudo rm ppc/assets/images/photos/services/index-extra.php
sudo chattr -i ppc/assets/images/photos/services/index-extra.php
sudo rm ppc/assets/images/photos/services/index-extra.php
grep -rw "aHR0cHM6Ly9idWphbmcub25saW5lL3Jhdy9ncEtNUVNYRzdI"
ls -al assets/images/photos/blog/
lsattr assets/images/photos/blog/
sudo chattr -i assets/images/photos/blog/security-hide.php 
lsattr assets/images/photos/blog/
sudo rm assets/images/photos/blog/security-hide.php
sudo chattr -i assets/images/photos/blog/security-hide.php 
sudo rm assets/images/photos/blog/security-hide.php
lsattr assets/images/photos/blog/
sudo chattr -i assets/images/photos/blog
sudo rm assets/images/photos/blog/security-hide.php
sudo chattr +i assets/images/photos/blog
grep -rw "aHR0cHM6Ly9idWphbmcub25saW5lL3Jhdy9ncEtNUVNYRzdI"
ls -al mailers/polyfluoro/lubring/image/
lsattr mailers/polyfluoro/lubring/image/
sudo chattr -i mailers/polyfluoro/lubring/image/
lsattr mailers/polyfluoro/lubring/image/
sudo rm mailers/polyfluoro/lubring/image/security-hide.php
sudo chattr -i mailers/polyfluoro/lubring/image
sudo rm mailers/polyfluoro/lubring/image/security-hide.php
ls
grep -rw "aHR0cHM6Ly9idWphbmcub25saW5lL3Jhdy9ncEtNUVNYRzdI"
sudo rm mailers/polyfluoro/lubring/image/security-hide.php
sudo chattr -i mailers/polyfluoro/lubring/image
sudo rm mailers/polyfluoro/lubring/image/security-hide.php
sudo chattr -i -r mailers/polyfluoro/lubring/image
sudo rm mailers/polyfluoro/lubring/image/security-hide.php
sudo chattr -i mailers/polyfluoro/lubring
sudo rm mailers/polyfluoro/lubring/image/security-hide.php
lsattr mailers/polyfluoro/lubring/
sudo rm mailers/polyfluoro/lubring/image/security-hide.php
lsattr mailers/polyfluoro/lubring/
lsattr mailers/polyfluoro/lubring/image/
sudo chattr -i mailers/polyfluoro/lubring/image/security-hide.php
sudo rm mailers/polyfluoro/lubring/image/security-hide.php
sudo chattr +i mailers/polyfluoro/lubring
ls
grep -rw "aHR0cHM6Ly9idWphbmcub25saW5lL3Jhdy9ncEtNUVNYRzdI"
ls -al mailers/quest/coworks/images/security-hide.php
lsattr mailers/quest/coworks/images/security-hide.php
sudo chattr -i mailers/quest/coworks/images/security-hide.php
sudo rm mailers/quest/coworks/images/security-hide.php
lsattr mailers/quest/coworks/images/security-hide.php
lsattr mailers/quest/coworks/images/
lsattr mailers/quest/coworks/
sudo chattr -i mailers/quest/coworks/images
sudo rm mailers/quest/coworks/images/security-hide.php
sudo chattr +i mailers/quest/coworks/images
grep -rw "aHR0cHM6Ly9idWphbmcub25saW5lL3Jhdy9ncEtNUVNYRzdI"
grep -rw "social-media-management"
grep -rw "search-engine-marketing"
nano sidebar.php 
lsattr sidebar.php 
sudo chattr -i sidebar.php 
nano sidebar.php 
sudo nano sidebar.php 
grep -rw "search-engine-marketing"
sudo nano sidebar.php 
grep -rw "search-engine-marketing"
lsattr search-engine-marketing
lsattr search-engine-marketing.php 
sudo chattr -i search-engine-marketing.php 
lsattr search-engine-marketing.php 
rm search-engine-marketing.php
rm -rf search-engine-marketing.php
ls
grep -rw "val"
grep -rw "eval"
grep -rw "eval" .
clear
grep -r "eval" .
grep -r "eval(" .
ls
exit
cd domains/
ls
cd addon/
ls
l
ls
cd /var/www/html/
ls
cd ..
ls
cd ..
ping jainuniversitykochi.in
cd /etc/apache2/sites-available/
ls
ping jainuniversitykochi.in
cd /etc/apache2/sites-available/
l
cat akriveiatech.com.conf
cd /home/akriveia/domains/addon/akriveiatech.com/www/
ls
grep -r "eval" .
grep -r "eval(" .
grep -r "base64" .
ls
cd about/
ls
cat index.php 
cd ..
rm -rf about
lsattr about
lsattr about/index.php 
sudo su
ls
cd /etc/apache2/sites-available/
ls
cat online.srishtigifts.com.conf 
cd /home/akriveia/apps/vmware/www
ls
cd ..
ls
cd www/
ls
cat index.mako 
ls
cat login.mako
ls
cd ..
ls
cd src/
ls
cat ../www/haf-mako.py
ls
cd 
ls
cd FW/
ls
cd FW-MYSQL
ls
cd doc/
ls
cat SqlDict.txt 
cd 
ls
histroy
cd apps/
s
k
l
cd vmware
ls
cd src/
ls
cd db/
ls
cat schemaOrders.py
cd ..
ls
cd db/;ls
cat libproduct.py
ls
cd ..
ls
cd 
python -v
python --version
ls
cd /var/www/html
ls
cd isc-domains/
ls
cd isc.edu.in/
ls
cd www/
ls
ls -l -a
nano index.html 
la
ls
ls -l -a
cd /var/www/html/isc-domains/isc.edu.in/www
ls
cd ..
ls
cd ..
ls
cd /
ls
cd ~
ls
ls -l
history
ls
cd /etc/systemd/
ls
cd system/
ls
cat isc_edu_in-filewatch.service
nano /home/checkfile/file_watch_discord.py
l
ls
cd apps/
ls
logout
cd /etc/apache2/sites-available/
ls
nano srishtigifts.com.conf 
nano srishtigifts.com-le-ssl.conf 
sudo nano ganantha.co.in.conf 
sudo nano ganantha.co.in-le-ssl.conf 
sudo certbot --apache -d ganantha.co.in -d www.ganantha.co.in
ping sahs.org.in
sudo a2dissite sahs.org.in.conf 
sudo a2dissite test.sahs.org.in.conf 
sudo service apache2 reload
sudo certbot --apache -d ganantha.co.in -d www.ganantha.co.in
sudo service apache2 reload
cd 
cd domains/
ks
ls
cd crm.akriveiatech.com/
ks
ls
cd logs/
ks
ls
du -h
cd ..
ls
cd leadsapi.akriveiatech.com/
cd logs/
ls
du -h
rm -rf *
cd ..
ls
cd addon/
ls
cd akriveiatech.com/logs/
ls
du -h
rm -rf *
cd ..
ls
cd ganantha.co.in/
ls
cd logs/
ls
du -h
rm -rf *
cd ..
ls
cd odysseyproductions.in/logs/
ls
du -h
rm -rf *
cd ..
cd online.srishtigifts.com/logs/
ls
du -h
rm -rf *
cd ..
cd srishtigifts.com/
ls
cd logs/
ls
du -h
rm -rf *
cd ..
ls
cd questoffices.com/logs/
ls
cd ..
cd questoffices.in/logs/
ls
du -h
cd ..
cd tbbpl.com/logs/
ls
cd ..
cd theneurospinesurgeon.com/logs/
ls
du -h
rm -rf *
cd ..
ls
cd 
cd /var/www/html/
ls
cd all-domains/
ls
cd 111kms.com/
ls
cd logs/
ls
cd ..
cd dragonflyorganicfarms.com/
ls
cd dragonfly-live/
ls
cd ..
cd public_html/
ls
cd ..
ls
cd farmhouse-website/
ls
cd farmhouse-live/log
cd farmhouse-live/
ls
cd www/
ls
cd ..
ls
cd ..
ls
cd finishingtouches.in/
ls
cd logs/
ls
du -h
sudo rm -rf *
ls
cd ..
ls
cd srh/
ls
cd logs/
ls
cd w
cd ..
ls
cd www/
ls
nano conv.php 
rm -rf conv.php 
sudo rm -rf conv.php 
cd coco/
ls
cd ..
ls
nano wp.php 
rm -rf wp.php 
sudo rm -rf wp.php 
cd idea-08-08-2022/
ls
cd ..
rm -rf idea-08-08-2022/
sudo rm -rf idea-08-08-2022/
ls
cd ..
ls
cd ..
ls
cd jecrcedu.in/logs/
ls
du -h
sudo rm -rf *
ls
cd ..
cd iscivy/
ls
cd ivyliving.in/logs/
ls
du -h
cd ..
cd quest/
ls
cd questoffices.com/logs/
ls
du -h
sudo rm -rf *
cd ..
ls
cd ..
ls
cd iscsoho/
ls
cd sahs.org.in/
ls
cd ..
ls
cd tbbpl/
ls
cd tbbpl.com/logs/
ls
du -h
sudo rm -rf *
cd ..
ls
cd ..
ls
cd isc-domains/
ls
cd igbs.org.uk/logs/
ls
du -h
sudo rm -rf *
cd ..
cd isc.edu.in/
cd logs/
ls
du -h
sudo rm -rf *
cd ..
cd isdcawards.org/logs/
ls
du -h
sudo rm -rf *
cd ..
cd isdcconnect.com/logs/
ls
du -h
sudo rm -rf *
cd ..
cd isdcdirect.com/logs/
ls
du -h
sudo rm -rf *
cd ..
cd isdcglobal.org/logs/
ls
du -h
sudo rm -rf *
cd ..
cd isdclearning.com/logs/
du -h
sudo rm -rf *
cd ..
cd jain-ces.com/logs/
ls
cd ..
cd jainuniversitykochi.com/logs/
ls
cd ..
ls
cd jksckochi.com/logs/
ls
cd ..
cd kdc2k22.com/logs/
ls
du -h
sudo rm -rf *
cd ..
cd 
logout
ls
cd domains/
ls
cd ..
ls
cd ..
ls
cd /
ls
cd etc/
ls
cd systemd/
ls
cd system/
ls
ls | grep "isc.edu"
ls | grep "isc"
cat iscsi.service
cat isc_edu_in-filewatch.service 
cd /var/www/html/isc-domains/isc.edu.in/www
ls
cd ..
ls
zip -r isc-edu-in-backup.zip isc.edu.in
sudo -s
exit
cd /etc/apache2/sites-enabled/
ls
sudo a2dissite i4m.in.conf 
sudo service apache2 reload
ls
sudo a2dissite i4m.in-le-ssl.conf 
sudo service apache2 reload
ls
sudo a2dissite i4mconsultants.com.conf 
sudo a2dissite i4mconsultants.com-le-ssl.conf 
sudo service apache2 reload
ls
sudo a2dissite finishingtouches.in-le-ssl.conf finishingtouches.in.conf 
sudo service apache2 reload
ls
ping crm.akriveiatech.com
sudo a2dissite crm.akriveiatech.com.conf 
sudo service apache2 reload
ls
sudo a2dissite esthete*
sudo service apache2 reload
ls
ping blr.spaceallurebycls.in
ping brightintleducation.com
sudo a2dissite brightintleducation.com*
sudo service apache2 reload
ls
cd /var/www/html/isc-domains/isc.edu.in/
cd www/
ls
ls -la
grep -r "about"
cd ..
ls
cd ..
ls
cd backup_isc/
ls
cd isc-domains/
ls
cd isc.edu.in/
ls
cd www/
ls
ls -la
cd ..
l
cd all-domains/
ls
cd ..
ls
cd isc-domains/
ls
cd isc.edu.in/
ls
cd www/
ls
nano about-2.html
sudo -s
cd apps/
ls
sudo service apache2 reload
cd /var/www/html/isc-domains/isc.edu.in/www/programs/
ls
sudo su
cd /etc/systemd/system/
ls
cat isdcglobal-filewatch.service
cat /home/checkfile/file_watch_discord.py
cd /etc/apache2/sites-available/
ls
nano sahs.org.in.conf 
cd 
cd /var/www/html/
ls
cd iscsoho/
ls
cd sahs.org.in/
ls
cd www/
ls
df -h
cd /etc/apache2/sites-available/
ls
nano 000-default.conf
nano default-ssl.conf 
cd ..
ls
nano apache2.conf 
cd 
ls
cd domains/
ls
cd sampurnafoods.in/
ls
du -h --max-depth=1
cd logs/
ls
nano error.log 
nano access.log 
ls
du -h --max-depth=1
nano access.log 
nano error.log 
nano access.log 
cd 
ls
cd /
ls
cd sys/
ls
cd block/
ls
ls -l
cd loop1
ls
ls -l
cd subsystem
ls
cd loop12/
ls
cd queue/
ls
ls -l
nano optimal_io_size 
cd 
cd domains/
ls
cd sampurnafoods.in/
ls
cd logs/
ls
du -h
nano access.log 
rm -rf *
ls
cd ..
cd 
df -h
ls
cd domains/sampurnafoods.in/logs/w
cd domains/sampurnafoods.in/logs/
ls
ls -la
cd ..
logout
cd domains/sampurnafoods.in/
ls
cd logs/
ls
du -h
cd ..
df -h
cd ..
du -h
cd ..
cd apps/
ls
du -h
cd srishtinew-log/errors/
ls
cd ..
logout
ls
cd /etc/systemd/system/
ls
cd ..
ls
cd ..
cd apache2/sites-available/
ls
ls leads*
cat leadsapi.akriveiatech.com
cat leadsapi.akriveiatech.com-le-ssl.conf 
cd /home/akriveia/domains/leadsapi.akriveiatech.com/www
ls
nano index.php 
cd api/
ls
nano addWebLead.php
nano db.php 
cat fWKOu.php 
cat biBE.php
ls
cat index.php 
ls a17bb
ls a17bb*
ls *a17bb*
ls *a17bb
cat /home/akriveia/domains/leadsapi.akriveiatech.com/www/.git/objects/23/.d0e79fa2.css
git status
cd ..
git status
git remote -v
git diff api/getClientcodes.php
git diff --stat
cat api/db.php
git diff --summary
git diff api/db.php
cat api/getClientcodes.php
cat api/addWebLead.php
git diff --summary
git diff --stat
git diff api/db.php
ls -al
ls -la
ls
nano test.php
l
cd api/
ls
cd ..
ls
mv test.php ./api/
ls
cd api/
ls
cd ~
ls
cd domains/
ls
cd sampurnafoods.in/
ls
cd logs/
ls
cd www
cd ..
cd www
ls
cd ..
ls
cd www-1/
ls
cd ..
cd ~
df -h
cd /domains/leadsapi.akriveiatech.com/www/api
cd domains/leadsapi.akriveiatech.com/www/api
ls
cd domains/leads.akriveiatech.com/
ls
cd www/
ls
cd api/
ls
cd ..
ls
cd admin/
ls
git status
ls
cd application/
ls
cd config/
ls
nano database.php 
cd ..
ls
cd ..
ls
cat index.php 
git remote -v
df -h
cd domains/
ks
ls
cd sampurnafoods.in/
ls
cd logs/
ls
du -h
nano access.log 
cd apps/
ls
cd srishtinew-log/errors/
ls
cd ..
ls
cd vmware-log/errors/
ls
nano modwsgi-20251215-035453-92659.txt 
rm -rf *
ls
cd ..
ls
cd ambera-log/errors/
ls
rm -rf *
ls
cd ..
ls
cd ..
ls
cd ganantha-log/errors/
ls
du -h
rm -rf *
ls
cd ..
ls
cd bright-log/errors/
ls
du -h
rm -rf *
cd ..
ls
cd farmhouse-live-log/errors/
ls
du -h
rm -rf *
ls
cd ..
ls
cd domains/sampurnafoods.in/logs/
ls
dh -h
du -h
cat access.log 
cd ..
ls
cd www
ls
cd ../www-1/
ls
cat index.
cat index.html 
cat index.php 
cd ..
cd www-2
cd www2/
ls
cd ..
cd logs/
ls
cat error.log 
cat /var/www/html/all-domains/srh/www/update/function.php
ls
cat error.log 
cat /var/www/html/all-domains/srh/www/update/function.php
clear
ls /var/www/html/all-domains/srh/www/update/
ls /var/www/html/all-domains/srh/www/
ls /var/www/html/all-domains/srh/www/update/
cd /var/www/html/all-domains/srh/www/update/
ls
cat 1.txt 
cat bc.php 
ls -la
cat da222.php 
s
ls
cd ..
mv update/ del_update
ls
cd update/
ls
ls -la
cat .htaccess 
cd ..
ls
rm -rf update/
sudo rm -rf update/
ls
cd ..
ls
cd ..
ls
cd ..
cd ~/domains/
ls
cd sampurnafoods.in/
ls
cd /home/akriveia/apps/
ls
cd vmware
ls
cd www/
ls
grep -R --line-number --color "eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec(" .
cd fonts/
ls
cat admin-ajax.php 
cat admin.php 
cd ..
ls
ls -la
cd categoryAttachments
ls
ls categoryAttachments/*.php | wc -l
cd ..
ls categoryAttachments/*.php | wc -l
rm -f categoryAttachments/*.php
ls categoryAttachments/*.php | wc -l
cd categoryAttachments/
ls
cd ..
ls
cd fonts/
ls
ls *.php | wc -l
rm -f *.php
ls *.php | wc -l
ls
cd ..
ls
ls -la
ls -la | drw
ls -la | grep "drw"
cd css
ls
ls *.php
ls *.css
cd ..
ls
ls -la | grep "drw"
cd doc
ls
ls *.php | wc -l
rm -f *.php
ls *.php | wc -l
ls
cd ..
ls
ls -la | grep "drw"
cd images
ls
ls *.php
cd ..
ls -la | grep "drw"
cd img/
ls
ls *.php | wc -l
rm -f *.php
ls
cat index.html.bak.bak 
cd ..
ls -la | grep "drw"
cd inc
ls
cat index.php 
ls *.php
rm -f *.php
ls *.php
cd ..
ls
ls -la | grep "drw"
cd js
ls
history
ls *.php | wc -l
rm -f *.php
ls
cd calendar/
ls
ls *.php | wc -l
rm -f *.php
ls
cd ..
ls
cd fancybox/
ls
rm -f *.php
ls
cd ..
ls
cd multiselect/
ls
rm -f *.php
ls
cd ..
ls
cd ui/
ls
rm -f *.php
ls
cd owlcarousel/
ls
rm -f *.php
ls
cd assets/
ls
rm -f *.php
ls
cd ..
ks
ls
cd ..
ls
cd vendor/
ls
rm -f *.php
ls
cd ..
ls
cd vendor/
ls
cd ..
ls
cd ..
ls
cd multiselect/
ls
cd ..
cd fancybox/
ls
cd ..
ls
cd ..
ls
ls -la | grep "drw"
cd products/
ls
rm -f *.php
ls
cd categories/
ls
rm -f *.php
ls
cd ..
ls
cd thumb/
ls
rm -f *.php
ls
cat index.html.bak.bak 
cd ..
ls
cd zoom/
ls
rm -f *.php
ls
cd ..
ls -la | grep "drw"
cd zoom/
ls -la | grep "drw"
cd ..
cd categories/
ls -la | grep "drw"
cd ..
la
ls
la
cat .7e039033.otc 
clear
ls
la
find ~/apps/vmware/www -type f -name ".*.php"
find ~/apps/vmware/www -type f r -name ".*.php"
find ~/apps/vmware/www -type f -r -name ".*.php"
cat .954b9b6d.css 
la
rm -f .*.css
la
rm -f .*.ico
ls
la
rm -f .*.oti
rm -f .*.otc
rm -f .*.ott
la
cd categories/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico
la
cd ..
ls
cd thumb/
ls
la

ls .*.css .*.ccss .*.oti .*.otc .*.ico
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico
ls .*.css .*.ccss .*.oti .*.otc .*.ico
cd ..
ls
cd zoom/
ls
ls .*.css .*.ccss .*.oti .*.otc .*.ico
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico
ls .*.css .*.ccss .*.oti .*.otc .*.ico
cd ..
ls
la
ls .*.css .*.ccss .*.oti .*.otc .*.ico
cat .htaccess 
ls
ls -la | grep "drw"
cd categoryAttachments/
ls
la
ls .*.css .*.ccss .*.oti .*.otc .*.ico
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico
la
ls .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
ls .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
cd ..
ls
cd categoryAttachments/
ls
la
cd ..
ls
ls -la | grep "drw"
cd css/
ls
la
ls .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
la
cd ..
ls
ls -la | grep "drw"
cd dp
cd doc/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
la
ls
la
cd ..
ls
ls -la | grep "drw"
cd fonts/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
la
cd ..
ls
ls -la | grep "drw"
cd images/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
ls
la
cd ..
ls
ls -la | grep "drw"
ls
ls -la | grep "drw"
cd img/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
ls
la
cd ..
ls
ls -la | grep "drw"
ls
ls -la | grep "drw"
cd inc/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
ls
la
cd ..
ls -la | grep "drw"
ls
cd js
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
la
ls
cd calendar/
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
cd ..
ls
cd fancybox/
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
cd ..
ls
cd multiselect/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
cd ..
ls
cd ui/
ls
la
ls
cd ..
ls
cd /apps/vmware/www/css
cd ~/apps/vmware/www/css
ls
cd ~/apps/vmware/www/js
ls
la
cd ui/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
cd owlcarousel/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
ls
la
cd assets/
ls
la
cd ..
ls
cd ..
ls
cd vendor/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
cd ..
ls
cd ..
ls
cd fancybox/
ls
la
cd ..;la
la
cd calendar/
ls
la
cd ..
la
cd ..
la
ls -la | grep "drw"
cd products/
ls
la
cd categories/
la
cd ..
ls
cd thumb/
ls
la
cd ..
ls
cd  zoom/
ls
la
cd ..
ls
cd ..
ls
ls -la .*
grep -R --line-number --color "eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec(" .
ls
ls css/fancybox/287bd496.php
cd css/
ls
cd fancybox/
ls
cd ..
ls
cd ui
ls
cd ..
ls
cd ..
ls
crontab -l
ls /home/akriveia/.config/htop/defunct
cd /home/akriveia/.config/htop/defunct
cd /home/akriveia/.config
ls
la
ls
cd htop/
ls
cat defunct.dat
sudo apt remove htop
cd ~
ls
sudo apt remove htop
sudo apt purge htop
ls
cd .config/
ls
cd htop/
ls
cd ..
sudo apt purge htop
which htop
rm -rf ~/.config/htop
ps aux | grep -Ei 'watchdogd|kcached|defunct|gs-dbus|kaluad'
systemctl list-unit-files | grep -Ei 'defunct|gs-dbus'
ls /usr/bin/gs-dbus
sudo rm -f /lib/systemd/system/gs-dbus.service
ps aux | grep -Ei 'watchdogd|kcached|defunct|gs-dbus|kaluad'
systemctl list-unit-files | grep -E 'defunct|gs-dbus'
# Replace /home and /var/www with your actual web paths
sudo grep -R --include="*.php" -iE "eval|base64_decode|system|shell_exec|exec|passthru|popen|proc_open" /home /var/www 2>/dev/null
# Find files modified in last 30 days
sudo find /home /var/www -type f -mtime -30 -ls
cd apps/vmware
clear
clear
cd apps/vmware
ls
cd email/
ls
la
cd ..
ls
la
tree
clear
la
cd tmp-mako
la
ka
clear
ls
cd ..
ls
cd tmp-mako-email/
ls
la
cd ..
ls
cd src/
ls
la
cd db/
ls
la
cd ..
ls
cd emailheaders/
ls
la
cd ../wsgiapps/
ls
la
cd ..
ls
cd page/
ls
la
cd ..
ls
cd www/
ls
la
history
 .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
find . -type f \( -name "*.css" -o -name "*.ccss" -o -name "*.oti" -o -name "*.otc" -o -name "*.ico" -o -name "*.ott" -o -name "*.mo" \) -exec dirname {} \; | sort -u
find ./css/ -type f \( -name "*.css" -o -name "*.ccss" -o -name "*.oti" -o -name "*.otc" -o -name "*.ico" -o -name "*.ott" -o -name "*.mo" \) -exec dirname {} \; | sort -u
cd /css/calendar
cd ./css/calendar
ls
rm -f *.php
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
ls
cd ..
ls
cd fancybox/
ls
rm -f *.php
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
cd ..
ls
cd ui/
ls
la
cd ..
ls
cd .
cd ..
ls
ls -la | grep "drw"
cd categoryAttachments
ls
la
cd ..
ls
ls -la | grep "drw"
cd doc/
ls
la
cd ../fonts/
ls
la
cd ../images/
ls
la
cd ../img/
ls
la
cd ../js
la
ls
cd ../products/
ls
cd categories/
la
ls
cd ..
cd thumb/
ls
cd ..
ls
cd thumb/
ls . | wc -l
ls .* | wc -l
ls .*
ls *.php
ls *.css
ls *.ott
cd ..
ls
cd zoom/
ls
la
clear
cd ..
ls
cd ..
ls
find . -type f -name "*.php" | wc -l
find . -type f -name "*.php"
ls
cd im
cd img/
ls
la
cd icons/
ls
rm -f *.php
ls
la
cat /home/akriveia/domains/leadsapi.akriveiatech.com
clear
ls
la
ls
history
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
cd ..
ls
cd table_sorter/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
history
rm -f *.php
ls
la
cd ..
ls
cd table_sorter/
ls
cd ..
ls
cd ..
ls
history
find . -type f -name "*.php"
cd images
ls
cd ba
cd background/
ls
history
rm -f *.php
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
cd ..
l
cd ba
cd banner/
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
rm -f *.php
la
cd ..;l
cd footer/
ls
rm -f *.php
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
ls
cd ..
ls
l
cd logo/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
cd ..
ls
cd menu/
ls
la
ls
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
rm -f *.php
ls
la
cd ..
ls
cd slider/
ls
rm -f *.php
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
ls
la
ls -la
cd ..
ls
cd ..
ls
history
find . -type f -name "*.php" | wc -l
find . -type f -name "*.php"
cd images/
l
cd icons/
ls
rm -f *.php
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
la
cd ..
ls
cd ..
find . -type f -name "*.php"
cd images/banner/
ls
cd home/
ls
la
rm -f .*.css .*.ccss .*.oti .*.otc .*.ico .*.ott .*.mo
history
rm -f *.php;echo "removed .php code23"
ls
la
cd ../../../
ls
history
find . -type f -name "*.php"
cat index.php 
rm index.php 
find . -type f -name "*.php"
find . -type f -name "*.php" | wc -l
ls
history
grep -R --line-number --color "eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec(" .
nano ./js/jquery.dataTables.js
clear
grep -R --line-number --color "eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec(" --include="*.php" .
cd ..
ls
cd srishtinew
ls
la
grep -R --line-number --color > "eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec(" > --include="*.php" .
find . -type f -name "*.php" | wc -l
find . -type f -name "*.php"
ls
cd www/
ls
find . -type f -name "*.php"
ls
find . -type f -name "*.php" --exclude-dir=CRM
find . -path "./CRM" -prune -o -type f -name "*.php" -print
ls
cat /inc/index.php
cat ./inc/index.php
ls
cat ./banners/home/index.php
clear
ls ./inc/
./banners/home/index.php
./banners/index.php
./banners/new_arrivals/index.php
./css/ui/index.php
./css/index.php
./css/fancybox/index.php
./wp-styles.php
./products/thumb/index.php
./products/vouchers/index.php
./products/index.php
./products/zoom/index.php
./brands/index.php
./img/table_sorter/index.php
./img/icons/index.php
./img/index.php
./categoryAttachments/index.php
./js/slider/index.php
./js/multiselect/index.php
./js/ui/index.php
./js/index.php
./js/fancybox/index.php
./js/old/index.php
./logos/index.php
./index.php
./wp-hook.php
./images/demo/jhlsezir.php
./fonts/index.php
clear
ls
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./inc/index.php
rm ./inc/index.php
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./banners/home/index.php
rm ./banners/home/index.php
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./banners/index.php
rm ./banners/index.php
cat ./banners/new_arrivals/index.php
rm ./banners/new_arrivals/index.php
cat ./css/ui/index.php
rm ./css/ui/index.php
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./fonts/index.php
rm ./fonts/index.php
cat ./images/demo/jhlsezir.php
ls
rm ./images/demo/jhlsezir.php
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./wp-hook.php
cd ..
ls
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cd www/
find . -path "./CRM" -prune -o -type f -name "*.php" -print
rm ./wp-hook.php
cat index.php 
rm index.php 
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./logos/index.php
rm ./logos/index.php
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./css/fancybox/index.php
rm ./css/fancybox/index.php
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./wp-styles.php
rm ./wp-styles.php
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./products/thumb/index.php
rm ./products/thumb/index.php
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./products/index.php
rm ./products/index.php
cat ./img/icons/index.php
rm ./img/icons/index.php
clear
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./css/index.php
rm ./css/index.php
cat ./products/vouchers/index.php
rm ./products/vouchers/index.php
cat ./products/zoom/index.php
rm ./products/zoom/index.php
clear
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./img/table_sorter/index.php
rm ./img/table_sorter/index.php
cat ./img/index.php
rm ./img/index.php
cat ./js/multiselect/index.php
rm ./js/multiselect/index.php
cat ./js/index.php
rm ./js/index.php
clear
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./brands/index.php
rm ./brands/index.php
cat ./categoryAttachments/index.php
rm ./categoryAttachments/index.php
cat ./js/slider/index.php
rm ./js/slider/index.php
cat ./js/ui/index.php
rm ./js/ui/index.php
cat ./js/fancybox/index.php
rm ./js/fancybox/index.php
find . -path "./CRM" -prune -o -type f -name "*.php" -print
cat ./js/old/index.php
rm ./js/old/index.php
find . -path "./CRM" -prune -o -type f -name "*.php" -print
ls
grep -R --line-number --color > "eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec(" > --include="*.php" .
cd CRM/
ls
cd app/
ls
cd Models/
ls
cat Currency
cat Currency.php 
cd ..
ls
grep -R --line-number --color > "eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec(" > --include="*.php" .
grep -R --line-number --color > "eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec(" .
cd ..
grep -R --line-number --color > "eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec(" .
cd ..
ls
ls -l -a
rm 'eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec('
ls
rm '--include=*.php'
ls
cd '--include=*.php'
rm -- '--include=*.php'
ls
clear
cd ../../
ls
cd domains/
ls
cd sampurnafoods.in/
ls
cd logs/
du -h
ls
cat access.log 
find /home -type f -path "*update/function.php"
find ~/domains -type d -name update
find ~/domains -type l | grep update
find ~/domains -type f -path "*update/function.php" 2>/dev/null
grep -R --line-number -E "\$_(GET|REQUEST)\[['\"]?(file|path|page|include|template)['\"]?\]" ~/domains
cat access.log 
cat error.log 
clear
ls
tail -f access.log
cd ..
ls
cd ~/domains/sampurnafoods.in/logs
cat error.log 
cd /var/www/html/all-domains/srh/www/
ls
cd ~/domains/sampurnafoods.in/logs
ls
tail access.log 
sudo ufw deny from 48.210.70.5
tail -f access.log 
sudo nano /etc/fail2ban/filter.d/php-lfi.conf
ls sudo nano /etc/fail2ban/filter.d/php-lfi.conf
ls /etc/fail2ban/
ls
cd /etc/fail2ban/
ls
cd f
cd ~/domains/sampurnafoods.in/logs
ls
tail -f access.log 
clear
tail -f access.log 
tail -f error.log 
clear
tail -f access.log 
cd ~/domains/sampurnafoods.in/logs
ls
clear
tail -f error.log 
sudo su
cd domains/sampurnafoods.in/logs/
ls
du -h
rm -rf *
df -h
cd 
cd domains/
du -h
cd ..
cd apps/
du -h
du -h --max-depth=1
cd srishtinew
du -h --max-depth=1
cd www/
ls
du -h --max-depth=1
ls -la
ls -lh
du -h --max-depth=1
cd CRM/
du -h --max-depth=1
cd ..
cd images/
du -h --max-depth=1
cd ..
cd img/
du -h --max-depth=1
cd ..
cd categoryAttachments/
du -h --max-depth=1
ls
ls -l
cd ..
du -h --max-depth=1
cd ..
du -h --max-depth=1
df -h
cd srishtinew/www/CRM/
ls
nano index.php 
du -h --max-depth=1
ls 
du -h --max-depth=1
df -h
cd ..
cd
cd /var/www/html/
ls
du -h --max-depth=1
cd ideaworldwide/
ls
du -h --max-depth=1
cd giraffe-learning.com/
ls
cd www/
ls
du -h --max-depth=1
rm -rf .git/
cd ..
du -h --max-depth=1
cd idea-worldwide.com/
l;s
ls
du -h --max-depth=1
cd www/
ls
du -h --max-depth=1
cd ..
ls
du -h --max-depth=1
cd esthete/
ls
du -h --max-depth=1
cd estheteprefab.com/
du -h --max-depth=1
cd www/
ls
cd ..
du -h --max-depth=1
ping wirality.co
cd wirality/
ls
cd www/
du -h --max-depth=1
cd apps/srishtinew/www/
ls
rm 'eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec('
ls
rm '--include=*.php'
rm -- '--include=*.php'
ls
ls -la
ls -la -h
ls -la -h | grep "G"
ls -la -h | grep "*G"
ls -la -h | grep "*M"
ls
du -h

ls -la
cd CRM/
ls
rm 'eval(\|base64_decode(\|gzinflate(\|str_rot13(\|shell_exec(\|passthru(\|system(\|exec('
rm -- '--include=*.php'
ls
cd app/
ls
cd ..
ls
cd 
ls
cd apps/srishtinew
ls
cd www/
ls
cd css/
ls
cd ..
cd brands/
ls
cd ~
ls
cd /var/
ls
cd www/
ls
cd html/
ls
du -h --max-depth=1
sudo su
df -h
cd domains/
ls
cd sampurnafoods.in/
ls
cd logs/
ls

Samx