#1725635556
ll
#1725635558
ls -l
#1725635559
l
#1725635564
cd public_html/
#1725635566
ls
#1725635569
ls -l
#1725635581
ls -al
#1725635585
vi .htaccess 
#1725635606
vi wp-admin/
#1725635610
cd wp-admin/
#1725635616
ls -ltr
#1725637246
ls -l
#1725637248
cd ..
#1725637249
ls -l
#1725637260
grep -r base64
#1725637288
vi wp-includes/js/plupload/inc.php 
#1725637348
ls -l wp-includes/js/plupload/
#1725637381
ls -l
#1725637386
vi readme.html 
#1725637400
vi index.php 
#1725637421
grep -r wp_version
#1725637470
vi wp-includes/version.php 
#1725637502
vi wp-includes/js/plupload/inc.php 
#1725637580
fg
#1725637585
rm wp-includes/js/plupload/inc.php 
#1725637590
grep -r base64
#1725637620
vi wp-includes/js/dist/alfa-rex.php56
#1725637629
rm wp-includes/js/dist/alfa-rex.php56
#1725637632
grep -r base64
#1725637691
vi wp-includes/js/dist/alfa-rex.php8 
#1725637715
rm wp-includes/js/dist/alfa-rex.php8 
#1725637724
cd wp-includes/js/
#1725637726
grep -r base64
#1725637732
grep -r base64 | grep php
#1725637809
grep -r -o '.\{0,15\}saf.\{0,15\}' base64 --color
#1725637823
grep -r -o '.\{0,15\}base64\{0,15\}' --color
#1725637839
rm dist/alfa-rex.php 
#1725637842
vi dist/about.php7
#1725637852
rm dist/about.php7
#1725637859
vi dist/about.php
#1725637866
rm dist/about.php
#1725637872
vi dist/wp-login.php
#1725637880
rm dist/wp-login.php
#1725637893
grep -r -o '.\{0,15\}base64\{0,15\}' --color | grep php
#1725637902
rm dist/alfa-rex.php7
#1725637904
cd ..
#1725637905
cd ..
#1725637908
grep -r -o '.\{0,15\}base64\{0,15\}' --color | grep php
#1725637941
find . -name "*alfa-rex.php*"
#1725637995
find . -name "*alfa-rex.php*"  -exec rm -f {} \;
#1725637998
grep -r -o '.\{0,15\}base64\{0,15\}' --color | grep php
#1725638048
vi wp-content/plugins/wp-file-manager/lib/themes/light/MGgZGAZjRd.php 
#1725638094
rm wp-content/plugins/wp-file-manager/lib/themes/light/MGgZGAZjRd.php 
#1725638106
grep -r -o '.\{0,15\}eval.\{0,15\}' --color | grep php
#1725638122
grep -r -o '.\{0,15\}eval.\{0,15\}' --color
#1725638129
grep -r -o '.\{0,15\}eval(.\{0,15\}' --color
#1725638417
vi wp-config.php 
#1725638432
vi wp-settings.php 
#1725638457
grep -r FORCE_SSL_ADMIN
#1725638475
vi wp-includes/default-constants.php 
#1725638489
vi wp-config.php 
#1725638814
cd wp-admin/
#1725638816
ls .lk
#1725638819
ls -l
#1725638823
vi post-new.php 
#1725638903
ls -a
#1725638908
vi .htaccess 
#1725638919
cd ..
#1725638921
vi .htaccess 
#1725638932
vi index.php 
#1725638952
vi wp-blog-header.php 
#1725639101
vi wp-config.php 
#1725639169
fg
#1725639425
ll
#1725639427
ls -l
#1725639438
mv wp-admin wp-admin~
#1725639439
cd ..
#1725639439
ll
#1725639442
ls -l
#1725639446
ll wordpress-backups/
#1725639450
ls -l wordpress-backups/
#1725639462
ls
#1725639465
mkdir pepe
#1725639469
cd pepe/
#1725639473
wget https://es-ar.wordpress.org/latest-es_AR.zip
#1725639482
unzip latest-es_AR.zip
#1725639486
cd ..
#1725639489
cd public_
#1725639490
cd public_html/
#1725639514
cp -r ../pepe/wordpress/wp-admin .
#1725639516
ls -l
#1725639659
grep -r -o '.\{0,15\}eval(.\{0,15\}' --color | grep php
#1725639696
grep -r -o '.\{0,15\}eval(.\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725639728
vi error_log 
#1725639739
vi /home/bredicio/public_html/wp-content/mu-plugins/index.php 
#1725639760
vi /home/bredicio/public_html/wp-content/mu-plugins/index.php 
#1725639818
vi wp-comment.php 
#1725639827
ls -l wp-comment.php 
#1725639862
vi wp-content/plugins/elementor/modules/wp-login.php
#1725639875
rm wp-content/plugins/elementor/modules/wp-login.php
#1725639907
grep -r "subeval(); goto"
#1725639921
vi wp-content/plugins/depicter/vendor/typerocket/core/assets/js/tooling/fn/LkTwjEE.php 
#1725639938

#1725639965
fg
#1725639968
vi wp-content/plugins/depicter/vendor/typerocket/core/assets/js/tooling/fn/LkTwjEE.php 
#1725640119
grep -r -o '.\{0,15\}subeval(); goto.\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725640173
grep -r -o '.\{0,15\}subeval(); goto.\{0,15\}' --color | grep php | grep -v "wp-admin~" | xargs -- ls -l
#1725640181
grep -l -r -o '.\{0,15\}subeval(); goto.\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725640192
grep -l -r -o '.\{0,15\}subeval(); goto.\{0,15\}' --color | grep php | grep -v "wp-admin~" | xargs -- ls -l
#1725640200
grep -l -r -o '.\{0,15\}subeval(); goto.\{0,15\}' --color | grep php | grep -v "wp-admin~" | xargs -- rm
#1725640212
grep -r "subeval(); goto"
#1725640216
ls -l
#1725640242
grep -l -r -o '.\{0,15\}eval(.\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725640489
find . -name "about.php"
#1725640507
grep -l -r -o '.\{0,15\}eval(.\{0,15\}' --color | grep "about.php"
#1725640520
grep -l -r -o '.\{0,15\}eval(.\{0,15\}' | grep "about.php" | xargs rm
#1725640535
grep -r -o '.\{0,15\}subeval(); goto.\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725640545
grep -r -o '.\{0,15\}eval(); goto.\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725640569
ls -l
#1725640581
grep -r -o '.\{0,15\}goto.\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725640606
vi wp-content/wp-cron.php
#1725640611
rm wp-content/wp-cron.php
#1725641933
vi wp-content/plugins/wp-file-manager/lib/codemirror/mode/imTzP.php
#1725641937
rm wp-content/plugins/wp-file-manager/lib/codemirror/mode/imTzP.php
#1725641945
vi wp-content/plugins/depicter/vendor/symfony/polyfill-intl-normalizer/Resources/RTnAfe.php
#1725641952
rm wp-content/plugins/depicter/vendor/symfony/polyfill-intl-normalizer/Resources/RTnAfe.php
#1725641962
grep -lr -o '.\{0,15\}goto.\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725641968
vi wp-content/plugins/wp-file-manager/lib/codemirror/mode/php/php.js
#1725641991
rm wp-content/plugins/wp-file-manager/lib/codemirror/mode/modelica/lvDSE.php wp-content/plugins/depicter/vendor/netresearch/jsonmapper/src/JsonMapper/sYmfjossgH.php wp-content/plugins/depicter/vendor/symfony/console/Logger/vXcNwaw.php wp-content/plugins/depicter/vendor/typerocket/EtVYkS.php wp-content/plugins/depicter/vendor/typerocket/core/src/Core/upyrozXDQP.php wp-content/plugins/auxin-elements/vendor/enshrined/svg-sanitize/tests/data/OlLJIcbTq.php wp-content/plugins/elementor/core/files/assets/json/dpGIatc.php
#1725641997
vi wp-content/plugins/depicter/vendor/typerocket/core/src/Extensions/views/wp-login.php
#1725642003
rm wp-content/plugins/depicter/vendor/typerocket/core/src/Extensions/views/wp-login.php
#1725642008
vi wp-content/plugins/depicter/app/src/Document/Models/Elements/EmbedVideo.php
#1725642019
grep -lr -o '.\{0,15\}goto .\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725642024
vi wp-content/plugins/depicter/vendor/pimple/pimple/src/wp-login.php
#1725642034
rm wp-content/plugins/depicter/vendor/pimple/pimple/src/wp-login.php
#1725642038
vi wp-content/languages/themes/phlox-es_ES.l10n.php
#1725642054
vi wp-content/plugins/contact-form-7/includes/config-validator/wp-login.php
#1725642072
grep -lr -o '.\{0,15\}; goto .\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725642078
vi wp-includes/blocks/footnotes/wp-login.php
#1725642085
rm wp-includes/blocks/footnotes/wp-login.php
#1725642089
vi wp-includes/wp-cron.php
#1725642097
vi wp-includes/wp-blog-header.php
#1725642137
rm wp-includes/wp-blog-header.php wp-includes/wp-cron.php wp-content/themes/phlox/css/other/oqXhayerl.php wp-includes/theme-compat/wp/cmrovhYdnc.php wp-content/plugins/depicter/resources/scripts/player/components/storiesprogressbar/wp-login.php wp-content/plugins/depicter/resources/scripts/wp-login.php wp-content/plugins/depicter/modules/Psr/Http/Client/wp-login.php wp-content/plugins/depicter/modules/Psr/wp-login.php  wp-content/plugins/auxin-elements/admin/includes/compatibility/gopricing/images/signs/wp-login.php
#1725642147
rm wp-includes/wp-cron.php wp-content/themes/phlox/css/other/oqXhayerl.php wp-includes/theme-compat/wp/cmrovhYdnc.php wp-content/plugins/depicter/resources/scripts/player/components/storiesprogressbar/wp-login.php wp-content/plugins/depicter/resources/scripts/wp-login.php wp-content/plugins/depicter/modules/Psr/Http/Client/wp-login.php wp-content/plugins/depicter/modules/Psr/wp-login.php  wp-content/plugins/auxin-elements/admin/includes/compatibility/gopricing/images/signs/wp-login.php
#1725642158
grep -lr -o '.\{0,15\}; goto .\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725642164
rm wp-content/plugins/depicter/resources/scripts/player/components/storiesprogressbar/wp-login.php wp-content/plugins/depicter/resources/scripts/wp-login.php
#1725642169
rm wp-content/plugins/depicter/modules/Psr/Http/Client/wp-login.php wp-content/plugins/depicter/modules/Psr/wp-login.php
#1725642173
rm wp-content/plugins/auxin-elements/admin/includes/compatibility/gopricing/images/signs/wp-login.php wp-content/plugins/elementor/core/admin/notices/wp-login.php
#1725642181
rm wp-content/plugins/contact-form-7/includes/config-validator/wp-login.php wp-includes/blocks/comment-date/wp-login.php
#1725642188
rm wp-includes/blocks/comments/wp-login.php wp-includes/blocks/paragraph/wp-login.php wp-includes/blocks/navigation-submenu/wp-login.php
#1725642191
rm wp-includes/theme-compat/wp/cmrovhYdnc.php
#1725642198
grep -lr -o '.\{0,15\}; goto .\{0,15\}' --color | grep php | grep -v "wp-admin~"
#1725642205
vi wp-content/wp-blog-header.php
#1725642209
rm wp-content/wp-blog-header.php
#1725642216
ls -l wp-includes/theme-compat/wp/cmrovhYdnc.php
#1725642223
rm wp-includes/theme-compat/wp/cmrovhYdnc.php
#1725642232
vi wp-includes/wp-blog-header.php
#1725642234
rm wp-includes/wp-blog-header.php
#1725642239
vi wp-content/themes/twentytwenty/inc/wp-blog-header.php
#1725642243
vi wp-content/themes/twentytwenty/inc/wp-blog-header.php
#1725642283
grep -r base64
#1725642319
cd ..
#1725642321
ls -l
#1725642326
rm -rf pepe
#1725642329
cd www
#1725642331
ls -l
#1725642353
tar -zcf wp-admin~.tar.gz wp-admin~
#1725642356
ls -l
#1725642369
du -sh wp-admin
#1725642389
mv wp-admin~.tar.gz wp-admin-hackeado.tar.gz
#1725642394
rm -rf wp-admin~
#1725642406
grep -r base64 | grep php
#1725642447
grep -lr -o '.\{0,15\}base64.\{0,15\}' --color | grep php
#1725642457
vi wp-content/themes/twentytwentytwo/inc/patterns/GrNmXwS.php
#1725642469
grep -lr -o '.\{0,15\}@eval.\{0,15\}' --color | grep php
#1725642480
rm wp-content/themes/FnPdNZXCC.php wp-content/themes/twentytwentytwo/inc/patterns/GrNmXwS.php wp-content/themes/twentytwentytwo/assets/qIaCFYizh.php wp-content/plugins/elementor/assets/js/packages/editor-app-bar/VYOZxO.php
#1725642485
vi wp-content/themes/phlox/css/images/controls/controls/index.php
#1725642518
vi wp-content/themes/phlox/css/images/controls/controls/cache.php 
#1725642626
f
#1725642639
vi wp-content/themes/phlox/css/images/controls/controls/.htaccess 
#1725642656
vi wp-content/themes/phlox/auxin/auxin-include/classes/class-auxin-admin-assets.php
#1725642665
vi wp-content/plugins/elementor/includes/widgets/video.php
#1725642674
grep -lr -o '.\{0,15\}@eval.\{0,15\}' --color | grep php
#1725642679
vi wp-includes/blocks/comments/adminfuns.php
#1725642685
rm wp-includes/blocks/comments/adminfuns.php
#1725642698
fg
#1725642757
grep -r "Directory is Corrupted and Unreadable."
#1725642775
vi wp-content/plugins/depicter/vendor/averta/wordpress/src/File/File/cache.php
#1725642787
vi wp-content/plugins/depicter/vendor/averta/wordpress/src/File/File/index.php 
#1725642803
ls -l wp-content/plugins/depicter/vendor/averta/wordpress/src/File/File/index.php 
#1725642808

#1725642826
vi wp-content/plugins/depicter/vendor/averta/wordpress/src/File/Asset.php 
#1725642832
vi wp-content/plugins/depicter/vendor/averta/wordpress/src/File/UploadsDirectory.php 
#1725642842
vi wp-content/plugins/depicter/vendor/averta/wordpress/src/File/File/index.php 
#1725642862
grep -r "$rua"
#1725642875
grep -r "$rua/"
#1725642880
grep -r "\$rua/"
#1725642909
ll wp-includes/js/plupload/sym404/
#1725642915
ls -l wp-includes/js/plupload/sym404/
#1725643024
rm -r wp-includes/js/plupload/sym404
#1725643044
unlink wp-includes/js/plupload/sym404/*
#1725643062
rm -r wp-includes/js/plupload/sym404/
#1725643072
ls -l wp-includes/js/plupload/sym404/ortodonciacom-Joomla.txt404/.htaccess
#1725643075
ls -l wp-includes/js/plupload/sym404/ortodonciacom-Joomla.txt404/
#1725643096
vi wp-includes/js/plupload/sym404/ortodonciacom-Joomla.txt404/.htaccess 
#1725643121

#1725643133
grep -r "\$rua/"
#1725652288
exit
#1758320917
cd www
#1758320918
ll
#1758320920
ls -l
#1758320922
vi wp-includes/version.php
#1758320979
tail ../logs/brediciones_com.php.error.log 
#1758321026
ls -ls wp-includes/sodium_compat/
#1758321035
cd wp-includes/sodium_compat/
#1758321038
wget https://raw.githubusercontent.com/WordPress/WordPress/refs/tags/6.8.2/wp-includes/sodium_compat/autoload.php
#1758321041
ls -l
#1758321056
cd ..
#1758321056
cd ..
#1758321059
tail ../logs/brediciones_com.php.error.log 
#1758321078
cd wp-includes/sodium_compat/
#1758321081
wget https://raw.githubusercontent.com/WordPress/WordPress/refs/tags/6.8.2/wp-includes/sodium_compat/autoload-php7.php
#1758321082
cd ..
#1758321083
cd ..
#1758321087
tail ../logs/brediciones_com.php.error.log 
#1758321109
ll wp-includes/sodium_compat/src/
#1758321113
ls -lwp-includes/sodium_compat/src/
#1758321116
ls -l wp-includes/sodium_compat/src/
#1758321136
cd ..
#1758321137
ll
#1758321139
ls -l
#1758321145
wget https://github.com/WordPress/WordPress/archive/refs/tags/6.8.2.zip
#1758321160
ls -l
#1758321167
unzip 6.8.2.zip 
#1758321170
ls -l
#1758321174
rm 6.8.2.zip 
#1758321188
mv www/wp-includes{,~}
#1758321198
cp -pr WordPress-6.8.2/wp-includes www/.
#1758321201
ls -l www
#1758321204
ls -l www/
#1758321226
ls -l
#1758321230
ls -l WordPress-6.8.2/
#1758321246
diff -r WordPress-6.8.2/wp-admin www/wp-admin
#1758321289
tail logs/brediciones_com.php.error.log 
#1758321745
cd www
#1758321746
ls -l
#1758321753
ls -l wp-includes
#1758321891
find . -name "*header*"
#1758321903
find . -name "wp-header*"
#1758321906
find . -name "wp-*header*"
#1758322281
cd ..
#1758322281
ll
#1758322282
ls -l
#1758322286
rm -rf WordPress-6.8.2/
#1758325741
exit
#1758316864
ll
#1758316869
ls
#1758316872
ls -l
#1758316878
ll wordpress-backups/
#1758316883
ls -l wordpress-backups/
#1758316887
cd www
#1758316889
ls -l
#1758316898
ll -tr
#1758316903
ls -tr
#1758316906
ls -ltr
#1758316912
vi index.php 
#1758316937
vi index.php 
#1758316957
grep -r "index.php"
#1758316964
vi .htaccess 
#1758317002
vi wp-content/plugins/akismet-2/_inc/img/logo-qsoqrpqosqo.png 
#1758317032
mv wp-content/plugins/akismet-2/_inc/img/logo-qsoqrpqosqo.png{,~}
#1758317035
vi index.php 
#1758317048
ls -l
#1758317125
vi .htaccess 
#1758317223
vi .htaccess 
#1758317230
mv .htaccess{,~}
#1758317234
vi index.php 
#1758317297
vi index.php 
#1758317313
vi wp-content/plugins/akismet-2/_inc/img/logo-qsoqrpqosqo.png~ 
#1758317381
vi wp-includes/general-template.php 
#1758317415
fg
#1758317418
vi wp-content/plugins/akismet-2/_inc/img/logo-qsoqrpqosqo.png~ 
#1758317438
fg
#1758317493
grep base64_decode wp-includes/general-template.php 
#1758317499
vi wp-includes/general-template.php 
#1758317507
fg 1
#1758317529
fg
#1758317536
vi index.php 
#1758317584
ls -l
#1758317607
ls -l
#1758317610
vi index.php 
#1758317639
ls -l
#1758317674
vi index.php 
#1758317696
rm .htaccess
#1758317704
ls -la
#1758317728
ls -l
#1758317736
ls -la
#1758317750
ls -la
#1758317921
ls -la
#1758317929
vi .htaccess
#1758318044
vi .htaccess
#1758318082
grep -r base64_decode
#1758318099
vi wp-blog-header.php 
#1758318148
vi wp-blog-header.php 
#1758318161
vi index.php 
#1758318182
vi wp-content/plugins/depicter/app/src/Dashboard/Dashboard/cache.php
#1758318262
vi wp-content/plugins/woocommerce/vendor/opis/json-schema/src/Formats/Formats/index.php
#1758318295
grep -r base64_decode
#1758318346
rm wp-content/plugins/akismet-2/_inc/img/logo-qsoqrpqosqo.png~
#1758318373
vi wp-content/plugins/woocommerce/vendor/opis/json-schema/src/Formats/Formats/cache.php
#1758318417
vi wp-content/plugins/woocommerce/assets/client/admin/admin-layout/admin-layout/cache.php
#1758318441
vi wp-content/plugins/woocommerce/assets/client/admin/product-editor/blocks/product-fields/attributes/attributes/cache.php
#1758318462
rm wp-content/plugins/woocommerce/assets/client/admin/beta-features-tracking-modal/beta-features-tracking-modal/cache.php
#1758318487
rm wp-content/plugins/woocommerce/includes/react-admin/react-admin/cache.php
#1758318489
clear
#1758318496
grep -r base64_decode
#1758318513
rm wp-content/plugins/depicter/vendor/symfony/polyfill-php80/Resources/Resources/cache.php
#1758318523
rm wp-content/plugins/depicter/app/src/Dashboard/Dashboard/cache.php
#1758318535
rm wp-content/plugins/woocommerce/vendor/opis/json-schema/src/Formats/Formats/cache.php
#1758318546
rm wp-content/plugins/woocommerce/assets/client/admin/admin-layout/admin-layout/cache.php
#1758318548
clear
#1758318552
grep -r base64_decode
#1758318566
rm wp-content/plugins/woocommerce/assets/client/admin/print-shipping-label-banner/print-shipping-label-banner/cache.php
#1758318572
grep -r base64_decode | grep cache
#1758318584
rm wp-content/plugins/woocommerce/assets/client/admin/settings-embed/settings-embed/cache.php
#1758318598
rm wp-content/plugins/woocommerce/assets/client/admin/product-editor/blocks/generic/subsection/subsection/cache.php
#1758318608
rm wp-content/plugins/woocommerce/assets/client/admin/product-editor/blocks/product-fields/attributes/attributes/cache.php
#1758318613
grep -r base64_decode | grep cache | wc -l
#1758318629
grep -r base64_decode | grep "cache.php"
#1758318643
rm wp-content/plugins/updraftplus/vendor/guzzle/guzzle/src/Guzzle/Batch/Batch/cache.php
#1758318680
rm wp-content/plugins/woocommerce/assets/client/blocks/add-to-cart-form/add-to-cart-form/cache.php wp-content/plugins/woocommerce/assets/client/blocks/breadcrumbs/breadcrumbs/cache.php wp-content/plugins/woocommerce/packages/email-editor/src/Engine/Renderer/ContentRenderer/Layout/Layout/cache.php
#1758318685
clear && grep -r base64_decode | grep "cache.php"
#1758318690
clear && grep -r base64_decode | grep "cache.php" | wc -l
#1758318699
clear && grep -rl base64_decode | grep "cache.php" | wc -l
#1758318702
clear && grep -rl base64_decode | grep "cache.php"
#1758318754
rm wp-admin/images/images/cache.php wp-admin/images/images/images/cache.php wp-admin/images/images/images/images/cache.php wp-admin/css/colors/blue/blue/blue/cache.php wp-admin/css/colors/blue/blue/cache.php wp-admin/css/colors/coffee/coffee/cache.php wp-admin/css/colors/ocean/ocean/cache.php wp-admin/css/colors/modern/modern/cache.php wp-admin/css/colors/modern/modern/modern/cache.php wp-admin/css/colors/modern/modern/modern/modern/cache.php wp-admin/css/colors/colors/cache.php wp-admin/css/colors/sunrise/sunrise/cache.php wp-admin/css/colors/sunrise/sunrise/sunrise/cache.php wp-content/themes/twentytwentyfour/assets/fonts/fonts/cache.php wp-content/plugins/contact-form-7/modules/stripe/stripe/cache.php wp-content/plugins/contact-form-7/admin/includes/js/js/cache.php wp-content/plugins/woocommerce/packages/email-editor/src/Integrations/Core/Renderer/Blocks/icons/github/github/cache.php wp-content/plugins/woocommerce/assets/client/blocks/inner-blocks/cart-totals-block/cart-totals-block/cache.php wp-content/plugins/woocommerce/assets/client/blocks/stock-filter/stock-filter/cache.php
#1758318757
clear && grep -rl base64_decode | grep "cache.php"
#1758318776
rm wp-includes/js/mediaelement/mediaelement/cache.php wp-includes/js/dist/script-modules/block-library/search/search/cache.php wp-includes/js/dist/script-modules/block-library/file/file/cache.php wp-includes/js/dist/script-modules/interactivity/interactivity/cache.php wp-includes/js/tinymce/plugins/wpemoji/wpemoji/cache.php wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/cache.php
#1758318778
clear && grep -rl base64_decode | grep "cache.php"
#1758318785
clear && grep -r base64_decode | grep "cache.php"
#1758318802
clear && grep -rl base64_decode | grep "cache.php"
#1758318836
rm wp-includes/rest-api/search/search/cache.php wp-includes/blocks/buttons/buttons/cache.php wp-includes/blocks/post-excerpt/post-excerpt/cache.php wp-includes/blocks/query-pagination-next/query-pagination-next/cache.php wp-includes/blocks/categories/categories/categories/cache.php wp-includes/blocks/navigation-submenu/navigation-submenu/cache.php wp-includes/blocks/site-logo/site-logo/cache.php wp-includes/blocks/list/list/cache.php wp-includes/blocks/comment-author-name/comment-author-name/cache.php wp-includes/blocks/code/code/cache.php wp-includes/blocks/query-no-results/query-no-results/cache.php wp-includes/blocks/post-author-name/post-author-name/cache.php wp-includes/css/dist/block-library/block-library/cache.php wp-includes/SimplePie/library/SimplePie/Cache/Cache/cache.php wp-includes/SimplePie/library/SimplePie/Decode/HTML/HTML/cache.php wp-includes/SimplePie/src/src/cache.php wp-admin/includes/includes/cache.php wp-admin/maint/maint/cache.php
#1758318838
clear && grep -rl base64_decode | grep "cache.php"
#1758318875
vi index.php 
#1758318895
grep -r chmod 
#1758318922
grep -r chmod | grep 444
#1758318948
vi wp-includes/Text/Diff/Engine/qsoqrpqosqo.ttf
#1758318961
rm wp-includes/Text/Diff/Engine/qsoqrpqosqo.ttf
#1758318965
grep -r qsoqrpqosqo
#1758318979
vi wp-content/updraft/backup_2025-09-19-1443_Bre_Ediciones_4ac1031e27de-plugins.zip
#1758319010
rm wp-includes/blocks/cover/style-rel.css wp-includes/images/w-dfbdecdbfdb.gif wp-includes/images/media/dfbdecdbfdb.png
#1758319014
grep -r style-rel
#1758319025
grep -r ue_jiang
#1758319047
grep -r 0444
#1758319065
grep -r " 0444"
#1758319070
grep -r ",0444"
#1758319090
vi .htaccess
#1758319153
ls -lt
#1758319161
ls -la
#1758319177
grep -r ,0444"
#1758319181
grep -r "0444"
#1758319191
grep -r ue_jiang
#1758319199
grep -r chmod | grep 444
#1758319207
grep -r "index.php"
#1758319275
vi wp-content/plugins/contact-form-7/includes/filesystem.php
#1758319305
ls -l
#1758319792
find . -mtime 30
#1758319809
vi wp-admin/maint/maint/index.php
#1758319824
cat wp-admin/maint/maint/index.php
#1758319830
rm wp-admin/maint/maint/index.php
#1758319847
vi wp-admin/includes/includes/index.php
#1758319858
rm wp-admin/includes/includes/index.php
#1758319867
vi wp-admin/includes/includes/.htaccess
#1758319879
rm wp-admin/includes/includes/SqkKYjzGg.bmp
#1758319884
find . -mtime 30
#1758319896
vi wp-admin/maint/maint/.htaccess
#1758319901
find . -mtime 60
#1758319939
vi .htaccess
#1758319946
vi .htaccess~
#1758319951
vi .htaccess
#1758319977
vi index.php 
#1758320011
grep -r goto
#1758320028
vi wp-content/plugins/depicter/vendor/symfony/polyfill-php80/Resources/Resources/index.php
#1758320039
rm wp-content/plugins/depicter/vendor/symfony/polyfill-php80/Resources/Resources/index.php
#1758320045
clear && grep -r goto
#1758320052
clear && grep -r goto | grep php
#1758320061
clear && grep -r "goto " | grep php
#1758320075
vi wp-content/plugins/woocommerce/assets/client/admin/print-shipping-label-banner/print-shipping-label-banner/index.php
#1758320085
rm wp-content/plugins/woocommerce/assets/client/admin/print-shipping-label-banner/print-shipping-label-banner/index.php
#1758320090
clear && grep -r " goto " | grep php
#1758320105
vi wp-content/plugins/woocommerce/assets/client/admin/admin-layout/admin-layout/index.php
#1758320110
rm wp-content/plugins/woocommerce/assets/client/admin/admin-layout/admin-layout/index.php
#1758320117
clear && grep -r " goto " | grep "index.php"
#1758320121
clear && grep -r " goto " | grep "index.php" | wc -l
#1758320127
clear && grep -rl " goto " | grep "index.php"
#1758320153
vi index.php 
#1758320178
vi index.php 
#1758320193
vi index.php 
#1758320263
rm wp-includes/js/mediaelement/mediaelement/index.php wp-includes/blocks/query-pagination-next/query-pagination-next/index.php wp-includes/blocks/code/code/index.php wp-includes/blocks/post-author-name/post-author-name/index.php wp-includes/SimplePie/library/SimplePie/Decode/HTML/HTML/index.php wp-admin/images/images/index.php wp-admin/images/images/images/index.php wp-admin/css/colors/coffee/coffee/index.php wp-admin/css/colors/modern/modern/modern/index.php wp-admin/css/colors/colors/index.php wp-content/plugins/woocommerce/packages/email-editor/src/Engine/Renderer/ContentRenderer/Layout/Layout/index.php wp-content/plugins/woocommerce/assets/client/blocks/inner-blocks/cart-totals-block/cart-totals-block/index.php wp-content/plugins/woocommerce/assets/client/blocks/breadcrumbs/breadcrumbs/index.php wp-content/plugins/woocommerce/assets/client/blocks/add-to-cart-form/add-to-cart-form/index.php wp-content/plugins/woocommerce/assets/client/admin/product-editor/blocks/generic/subsection/subsection/index.php
#1758320269
clear && grep -rl " goto " | grep "index.php"
#1758320274
clear && grep -rl " goto "
#1758320278
clear && grep -r " goto "
#1758320294
clear && grep -r " goto " | grep metaphone
#1758320308
clear && grep -rl " goto " | grep metaphone
#1758320325
clear && grep -rl "metaphone"
#1758320385
rm  wp-includes/js/mediaelement/mediaelement/MWVcgJvruKnqQ.m4v wp-includes/js/dist/script-modules/block-library/search/search/aviBu.3gp wp-includes/js/dist/script-modules/block-library/file/file/CUvWeyrqQZTN.m3u wp-includes/js/dist/script-modules/interactivity/interactivity/NZvqHwKkBUiLXMrzFYG.ogv wp-includes/js/tinymce/plugins/wpemoji/wpemoji/HWZscBLei.m3u wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/tG.jpx wp-includes/rest-api/search/search/HZ.mp4 wp-includes/blocks/buttons/buttons/awNGTbPALSzuRXp.mp3 wp-includes/blocks/post-excerpt/post-excerpt/NyC.ogm wp-includes/blocks/categories/categories/categories/pShBFifbPm.png wp-includes/blocks/navigation-submenu/navigation-submenu/FxvPEbYaAXugs.tif wp-includes/blocks/site-logo/site-logo/HgucjnfBL.m4a wp-includes/blocks/list/list/saznYyMSIWeTJXkVLrRH.m4a wp-includes/blocks/comment-author-name/comment-author-name/MsBcR.bmp wp-includes/blocks/query-no-results/query-no-results/PFXWQieC.mov wp-includes/css/dist/block-library/block-library/NuISzTtqbCyRZkpJHc.jpg wp-includes/SimplePie/library/SimplePie/Cache/Cache/HplPNJXMVYEgQ.wav wp-includes/SimplePie/src/src/RMCrutybnq.flv wp-admin/images/images/images/images/fmGsyXSb.m3u wp-admin/images/images/aBZHuCLvFTw.m4v wp-admin/css/css/css/ewAzxsQJGRvaLZEiNpU.xbm wp-admin/css/colors/blue/blue/blue/qtuVgUkbiHS.swf
#1758320385
 wp-admin/css/colors/blue/blue/blue/zHBcEmjrKFCtvVQhZIR.mov
#1758320385
 wp-admin/css/colors/blue/blue/uvBtpWIKAT.wbmp
#1758320405
rm wp-content/plugins/woocommerce/includes/react-admin/react-admin/KWShlBkeMPGJatXs.f4v
#1758320405
wp-content/plugins/woocommerce/packages/email-editor/src/Integrations/Core/Renderer/Blocks/icons/github/github/qplEWwfPmC.f4v
#1758320405
wp-content/plugins/woocommerce/assets/client/blocks/stock-filter/stock-filter/mzYbQjwaFnyZlchNJ.3gp
#1758320405
wp-content/plugins/woocommerce/assets/client/admin/beta-features-tracking-modal/beta-features-tracking-modal/qTwNIJcbCXMu.mkv
#1758320405
wp-content/plugins/woocommerce/assets/client/admin/product-editor/blocks/product-fields/attributes/attributes/YIigbjEmASKze.ico
#1758320405
wp-content/plugins/woocommerce/assets/client/admin/settings-embed/settings-embed/iFwlpfrGmMqh.png
#1758320405
wp-content/plugins/woocommerce/vendor/opis/json-schema/src/Formats/Formats/ncstpUJxuSF.jpg
#1758320405
wp-content/plugins/updraftplus/vendor/guzzle/guzzle/src/Guzzle/Batch/Batch/CVGBbYfPasNLvUXxjT.m3u8
#1758320405
wp-content/plugins/depicter/app/src/Dashboard/Dashboard/xWZuk.mp3
#1758320417
rm wp-content/plugins/depicter/app/src/Dashboard/Dashboard/xWZuk.mp3
#1758320428
clear && grep -rl "metaphone"
#1758320464
rm  wp-admin/css/colors/blue/blue/blue/zHBcEmjrKFCtvVQhZIR.mov  wp-admin/css/colors/blue/blue/uvBtpWIKAT.wbmp  wp-admin/css/colors/ocean/ocean/sMcvuH.mp2 wp-admin/css/colors/light/light/CRxQlhvLFTpqmJEPBeZK.tiff  wp-admin/css/colors/modern/modern/modern/modern/ECXLqwluVTakWr.mov  wp-admin/css/colors/modern/modern/UFeRXKbwI.f4v wp-admin/css/colors/sunrise/sunrise/Kcj.ogm  wp-admin/css/colors/sunrise/sunrise/je.tif wp-admin/css/colors/sunrise/sunrise/sunrise/kqZIlwmrAtpCinLzb.flv  wp-content/themes/twentytwentyfour/assets/fonts/fonts/ql.wav  wp-content/themes/phlox/auxin/js/solo/ace/mode-php.js  wp-content/plugins/contact-form-7/modules/stripe/stripe/lRjuceJs.jp2 wp-content/plugins/contact-form-7/admin/includes/js/js/CvWhXyKPkwBSg.bmp wp-content/plugins/woocommerce/packages/email-editor/src/Integrations/Core/Renderer/Blocks/icons/github/github/qplEWwfPmC.f4v wp-content/plugins/woocommerce/assets/client/blocks/stock-filter/stock-filter/mzYbQjwaFnyZlchNJ.3gp wp-content/plugins/woocommerce/assets/client/admin/beta-features-tracking-modal/beta-features-tracking-modal/qTwNIJcbCXMu.mkv wp-content/plugins/woocommerce/assets/client/admin/product-editor/blocks/product-fields/attributes/attributes/YIigbjEmASKze.ico wp-content/plugins/woocommerce/assets/client/admin/settings-embed/settings-embed/iFwlpfrGmMqh.png wp-content/plugins/woocommerce/vendor/opis/json-schema/src/Formats/Formats/ncstpUJxuSF.jpg wp-content/plugins/updraftplus/vendor/guzzle/guzzle/src/Guzzle/Batch/Batch/CVGBbYfPasNLvUXxjT.m3u8
#1758320467
clear && grep -rl "metaphone"
#1758320475
clear && grep -rl " goto "
#1758320488
vi wp-content/themes/phlox/auxin/auxin-include/include/hooks-general.php
#1758320515
vi index.php 
#1758320522
vi .htaccess
#1758320535
grep -r "index.php" | grep chmod
#1758320539
fg
#1758320559
vi .htaccess
#1758320566
grep -r ".htaccess"
#1758320574
vi .htaccess
#1758320587
grep -r "Order allow,deny"
#1758320611
grep -r "Order allow,deny" | grep php
#1758320621
ll
#1758320622
ls -l
#1758320630
vi .htaccess
#1758320649
vi .htaccess
#1758320669
vi .htaccess
#1758320826
vi index.php 
#1758320893
vi ../logs/brediciones_com.php.error.log