ls -larth
cd httpdocs/
ls -larth
rm -rf *
wget http://wordpress.org/latest.tar.gz
tar xfz latest.tar.gz
ls -larth
rm -rf latest.tar.gz
ls -larth
cd wordpress/
ll
ls -larth
cd ..
mv wordpress/* ./
l s-larth
ls -larth
rm -rf wordpress
ls -larth
ps aux | grep hp
exi
exit
ls -larth
cd httpdocs/
ls -lrath
cd wp-content
ls -larth
cd themes
ls -larth
mkdir ibuki
pwd
ls -larth
cd ..
ls -larth
cd plugins/
ll
ls -larth
mkdir revslider
ls -larth
find revslider
mkdir woocommerce
mkdir contact-form-7
ls -larth
mkdir js-composer
mv js-composer js_composer
mkdir az_custom_post_type
mkdir az_shortcodes
find az_custom_post_type/
find az_shortcodes/
exit
pwd
ls -larth
cd httpdocs/
ls -arth
ls -larth
cd core
ls -alrth
composer
composer status
composer install
find -cmin -5
pwd
cd httpdocs/core
ls -larth
cd ..
composer
ls -larth
cd corev2
cd ..
ls -lsarth corev2
rm -rf corev2
mv core core_OLD
mkdir core
cd core
composer global require "laravel/installer"
ls -lart
laravel new
composer create-project --prefer-dist laravel/laravel
ls -larth
cd ..
ls -larth
cd core
composer create-project --prefer-dist laravel/laravel
ls -larth
cd laravel
ls -larth
cat .evn
cat .env
cat composer.json
mv * ..
ls -alrth
mv .* ..
ls -alrth
cd ..
rm -rf laravel
ls -larth
ssh 85.214.88.189 
cd httpdocs/
ls -larth
cd ..
ls -larth
cd httpdocs/
ls -larth
cd ..
ls -lart
mkdir core
cd httpdocs/
cd core
mv * ../../core
ls -larth
mv .* ../../core
ls -larth
cd ..
rm -rf core
mv corev2 ..
ls -larth
mv core_OLD ..
ls -larth
find files
pwd
ln -s core /var/www/vhosts/amphoragames.com/core
ls -larth
mv videos ..
ln -s videos /var/www/vhosts/amphoragames.com/videos
ls -larth
cd ..
ls -larth
cd httpdocs/
ls -larth
ln
ln -s core ../core
ls -alrth
find core
ls -larth core
ln --help
ln -s core /var/www/vhosts/amphoragames.com/core
ls -larth
ls -larth
ls -larth core
pwd
ls -larth /var/www/vhosts/amphoragames.com/httpdocs/core
ln -s /var/www/vhosts/amphoragames.com/httpdocs/core /var/www/vhosts/amphoragames.com/core
cd ..
cd core
ls -larth
rm -rf core
pwd
ln -s /var/www/vhosts/amphoragames.com/core /var/www/vhosts/amphoragames.com/httpdocs/core
ln -s /var/www/vhosts/amphoragames.com/videos /var/www/vhosts/amphoragames.com/httpdocs/videos
cd ..
ls -alrth
cd videos
ls -larth
rm -rf videos 
ls -larth
cd ..
ls -larth
cd httpdocs/
ls -larth
cd core
ls -larth
cd ..
ls -larth
rm -rf core
ln -s /var/www/vhosts/amphoragames.com/core/public/ /var/www/vhosts/amphoragames.com/httpdocs/core
l s-larth
ls -larth
cd httpdocs/
ls -larth
cd ..
ls -larth
mkdir tienda
cd tienda
l s-larth
ls -larth
composer global require "laravel/installer"
cd ..
history | grep compo
cd tienda
composer create-project --prefer-dist laravel/laravel 
cd ..
mv tienda unidadeslimitadas
cd unidadeslimitadas/
cd ..
ls -larth
cd httpdocs/
l s-larth
ls -larth
cat .htaccess 
cd ..
mv unidadeslimitadas tienda
cd httpdocs/
ln -s unidadeslimitadas ../tienda
ls -larth
ln -s ../tienda unidadeslimitadas
ls -larth
rm -rf unidadeslimitadas
/var/www/vhosts/amphoragames.com/videos
ln
ln --help
ln -s /var/www/vhosts/amphoragames.com/videos
ln -s /var/www/vhosts/amphoragames.com/tienda unidadeslimitadas
ls -larth
rm -rf unidadeslimitadas
ln -s /var/www/vhosts/amphoragames.com/tienda/public unidadeslimitadas
ls -larth
cd ..
cd tienda/
ls -larth
rm -rf unidadeslimitadas 
mv laravel/ .
cd laravel/
ls -larth
mv * ..
mv .* ..
ls -larth
cd ..
rm -rf laravel
ls -larth
cd public
ls -larth
cd ..
ls -larth
cd ..
cd httpdocs/
ls -larth
top -c
top c-c
top -c
/usr/local/psa/bin/php_handler
su
cd tienda
ls -larth
php artisan 
composer require revolution/laravel-google-sheets
cat config/google.php
nano config/app.php
php artisan vendor:publish --provider="PulkitJalan\Google\GoogleServiceProvider" --tag="config"
ls -larth
nano .env
fg
ls -larth
cd ..
tar cvfz tienda.tar.gz tienda
mv tienda.tar.gz tienda
cd tienda
ls -larth
ls -larth
cd httpdocs
ls -larth
nano .htaccess
pwd
ls -larth
cd httpdocs/
ls -alrth
cd wp-content/
ls -alrth
cd plugins/
ls -lrth
mkdir js_composer_BAK
cp -a js_composer js_composer_BAK
ls -larth
find js_composer_BAK
ls -larth
ls -larth
gzip js_composer_BAK
zip js_composer_BAK
ls -larth
zip --help
zip js_composer_401.zip js_composer_BAK
zip -r  js_composer_401.zip js_composer_BAK
ls -larth
rm -rf js_composer_BAK
ls -larth
zip
rm -rf js_composer
zip js_composer.zip
unzip   js_composer.zip
ls -larth
cd js_composer/
ls -larth
cd ..
cd ..
cd ..
cd ..
grep -rlE --include '*.ico' --include '*.pl' --include '*.php*' --include '*.phtml' ''"'"'ev'"'"'\.'"'"'al'"'"'\.|"cr"\."eat"\."e_fun"\."cti"\."on"|stratum\+tcp|ass"\."ert|ev"\."al|internetresearch\.is|MOSLEM CYBER TEAM|<style>\.afthji { [dD][iI][sS][pP][Ll][aA][yY] \: [nN][oO][nN][eE] } <\/style>|function smartCopy\(\$source,\$dest,\$options=array\('"'"'folderPermission'"'"'=>0777,'"'"'filePermission'"'"'=>0777\)\)| = explode\(chr\(\(239-195\)\)|{return chr\(ord\(\$n\)-1\);}|\\x61\\156\\x75\\156\\x61|"uns"\."er"\."ia"|"64_de"\."co"\."de"|shauid| eval\(eval\("|\);}exit\(\);} \?>|\\x23\\50\\x2e\\53\\x29\\43\\x69\\145|O00OO0|\\x70\\x72\\x65\\x67|\\x65\\x76\\x61\\x6C\\|\\x47\\x4c\\x4fB\\x41\\x4c\\x53|EVAL PHP|PCT4BA6ODSE_|FilesMan|Web Shell|Private Shell|passssword|function decrypt_url|encrypted_url|27a46913ca3e2c0f06ae333e12b45bf3|="base64_decode"|"base"\."64_de"\."code"|="base" \. "64_decode"|                                                    \$GLOBALS\[|\$GLOBALS\[\$GLOBALS|if\(md5\(\$_POST|base"\."64_de"\."code|eval\(\$GLOBALS\[|{ eval\( \$|{eval\( \$|eval\("\?>\."|";@eval\(\$|let_me_in|eval\(gzuncompress\(base64_decode\(|eval\(gzinflate\(base64_decode\(|c99sh|\${"\\|@eval\(\$@|Facebook WebCAM|eval/\*|eval\(base64_decode\(|eval \( base64_decode |ALREADY_RUN_|"v\\x61\\x6C"|SunTrust|"a"\."s"\."s"|password crypted with md5|echo "hous"|PayPlug|FOPO|base64_decode\(base64_decode\(base64_decode\(|=Array\(base64_decode\(|}, "\\n"\), "", "|\\x2ephp"|@include "\\x2fhome|Ra0 SaaD Coder|RaoX44D|deface url here|eval\(gzinflate\(str_rot13\(base64_decode\(\$|\$_COOKIE \[str_replace\(|eval\(base64_decode\('"'"'JHN|\.\/hide -s|cryptonight|private mail-worker|Attack Shell|substr\(md5\(strrev|IndoXploit|BabbyCyberTeam|Hacked by MRH|yumingid|Community priv8|r3c0d3d|\);\$payload="|\){ return eval\(|<\?php \$payload="|\*brU\*|="\)\)\)\|eval/\*|"rawurl" \. "decode"|a-l-e-x-u-s|"noi"\."tcnuf"\."_eta"\."erc"|List files\!|>ce e?:<|0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7|query###|\.mobisla\.|\.onclasrv\.|function fgc|implode\(arry%\)|x61     156     x64     162     x6f     151     x64|if\(\(function_exists\("      |1881,37,1598,30,2887,32,5479,31,5336,35,4675,23|FBF - FTP Brute Forcer|Net::FTP|IO::Socket' * | grep -v "antispam_bee"
ls -alrth
cd logs
ls -larth
tail -f error_log 
CD ..
cd ..
ls -larth
cd httpdocs/
ls -larth
grep "WPBakeryVisualComposer" * -rla
nano wp-content/themes/ibuki/vc_extend/extend-vc.php
ls -larth
cd wp-content/plugins/
ls -arlth
rm -rf js_composer.zip
cd js_composer/
ls -larth
grep getInstance * -rla
nano js_composer.php
cd ..
cd ..
cd ..
cd ..
cd logs/
ls -larth
tail-f error_log 
tail -f error_log 
cd ..
cd httpdocs/
ls -larth
cd wp-content/
ls -arlth
cd plugins/
ls -alrth
wget http://updates.wpbakery.com/visual-composer-website-builder/visualcomposer.zip
ls -larth
ls -larth
cd httpdocs/
ls -arlth
wp-content/
ls -larth
cd wp-content/plugins/
ls -larth
mkdir jscomposer
cp -a js_composer_401.zip jscomposer
cd jscomposer/
unzip js_composer_401.zip 
ls -alrth
rm -rf js_composer_401.zip
mv js_composer_BAK ../js_composer
cd ..
ls -alrth
find jscomposer/
rm -rf jscomposer
cd js_composer 
l s-larth
ls -larth
cd ..
mv js_composer js_composer_ORIG
mv js_composer_ORIG/js_composer .
ls -larth
rm -rf js_composer_ORIG
cd js_composer
ls -arlth
cd ..
ls -larth
cd ..
ls -alrth
cd ..
cd ..
ls -larth
cd logs/
ls -alrth
tail -f error_log 
cd /var/www/vhosts/amphoragames.com/httpdocs/wp-content/themes/ibuki/vc_extend/
ls -larth
nano map.php 
ls -larth
cd httpdocs/
ls -larth
mkdir en
cd ...
cd ..
ls -alrth
mkdir en
rsync -av httpdocs/ en
ls -larth
rm -rf httpdocs/en
mv en httpdocs
cd httpdocs/
l s-larth
ls -lrath
cd en
ls -lrath
find en
rm -rf en
nano wp-config
nano wp-config.php
cd ..
ls -arlth
cd ..
ls -lrath
unzip admin_gamesamphora_2019-02-22_02-11-12.sql.zip 
nano admin_gamesamphora_2019-02-22_02-11-12.sql
nano admin_gamesamphora_2019-02-22_02-11-12.sql
rm -rf admin_gamesamphora_2019-02-22_02-11-12.sql
ls -larth
rm -rf admin_gamesamphora_2019-02-22_02-11-12.sql.zip
ls -larth
rm -rf admin_gamesamphora_2019-02-22_02-18-15.sql.zip 
cd httpdocs/
ls -alrth
cd en
nano .htaccess
ls -larth
nano .htaccess_BAK
rm -rf .htaccess_BAK
find files
rm -rf files
rm -rf tts
l s-larth
cd ..
ls -larth
chmod 755 en
cd en
ls -lrath
find wp-admin
du -schx *
cd wp-content
du -schx *
cd uploads
du -schx *
rm -rf backwpup*
ls -alrth
find
cd ..
cd ..
find
ls -alrth
cd wp-content/
ls -arlth
cd plugins/
ls -larth
rm -rf visualcomposer.zip js_composer_401.zip
ls -larth
pwd
top -c
strace -p 19812
cd ..
exit
cd /var/www/vhosts/amphoragames.com/httpdocs/
ls -arlth
cd wp-content/
ls -alrth
cd plugins/
ls -larht
cd digital-publications-by-supsystic
ls a-rltrh
ls -arlth
cd modules/
ls -arlth
cd pages_import/
ls -alrth
nano mod
nano mod.php 
cd ..
cd ..
cd ..
ls -larth