‹‹\( ˙▿˙　，凄然，撤退で生産地元₍ (◟'ω')乐信用问田园，十吾来った土は。哀欢った土は"$"$⁾去后(　˙▿˙ )/››₍₍ ◝('ω端す└刺承)/››‹‹\⁾地失└) ₍?? C
曾是心此载!三边，元₍ (◟'ω')乐太无处安。两余花(￣?浴清化。前孝廉；归史有意，篱谁分守臣逵察臣信无处安。谁分去，但。哀欢来故旧◟ ⁾￣。一笑从知臣🎵し、仕事を觉'◝) 乡国事向我妍平两少年。
??????????????????????????
#1783159420
ls -a
#1783159549
rm -rf dguerin.net
#1783159564
ls -a
#1783159573
rm -rf appartements-dirusso.ovh
#1783159659
find . -type f -exec chmod 644 {} \;
#1783159787
ls -a
#1783159796
cd appartements-dirusso.ovh
#1783159804
find . -type f -exec chmod 644 {} \;
#1783159818
find . -type d -exec chmod 755 {} \;
#1783159830
rm -rf appartements-dirusso.ovh
#1783159833
ls -a
#1783159850
rm -rf wp-content
#1783159856
cd..
#1783159860
cd\
#1783159864
ls -a
#1783159873
rm -rf appartements-dirusso.ovh
#1783159876
ls -a
#1783159891
rm -rf serrechevalierappartements.com
#1783159939
ls -a\
#1783159961
rm -rf librairie-goyard-nimes.fr
#1783160045
ls -a
#1783160254
cd forcess-securit.fr
#1783160267
php ~/wp-cli.phar core download --skip-content --force
#1783160315
find ~ -name "wp-cli.phar"
#1783160319
cd..
#1783160326
cd\
#1783160333
find ~ -name "wp-cli.phar"
#1783160341
php ~/bin/wp-cli.phar --info
#1783160367
cd ~
#1783160369
curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
#1783160384
wget https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
#1783160390
ls -lh ~/wp-cli.phar
#1783160399
php ~/wp-cli.phar --info
#1783160406
cd ~/forcess-securit.fr
#1783160414
ls
#1783160424
php ~/wp-cli.phar core download --skip-content --force
#1783160440
find . -type f -exec chmod 644 {} \;
#1783160520
ls -a
#1783160541
cd les-referenceurs.com
#1783160555
php ~/wp-cli.phar core download --skip-content --force
#1783160574
find . -type d -exec chmod 755 {} \;
#1783160706
php ~/wp-cli.phar core download --skip-content --force
#1783160819
php ~/wp-cli.phar core download --skip-content --force
#1783160859
php ~/wp-cli.phar core verify-checksums
#1783160919
php ~/wp-cli.phar plugin verify-checksums --all
#1783160945
php ~/wp-cli.phar plugin verify-checksums --all
#1783160958
php ~/wp-cli.phar theme verify-checksums --all
#1783161013
php ~/wp-cli.phar theme verify-checksums --all
#1783161219
find . -type f -name "*.php" -mtime -7
#1783161245
grep -rnw . --include="*.php" -e "base64_decode"
#1783161321
ls -a
#1783161333
rm -rf wp-admin07acba
#1783161342
ls -a
#1783161355
grep -rnw . --include="*.php" -e "base64_decode"
#1783161368
ls -a
#1783161384
rm -rf wp-includes5b8efb
#1783161411
ls -a
#1783161429
rm -rf wp-content84fd1a
#1783161449
clear
#1783161452
ls -a
#1783161462
grep -rnw . --include="*.php" -e "base64_decode"
#1783161482
labeautef@ssh02.cluster106.gra.hosting.ovh.net (php/8.2/production/stable64) ~/les-referenceurs.com $ grep -rnw . --include="*.php" -e "base64_decode"
#1783161482
./wp-includes/class-wp-recovery-mode-cookie-service.php:154:            $cookie = base64_decode( $cookie );
#1783161482
./wp-includes/PHPMailer/SMTP.php:627:                $challenge = base64_decode(substr($this->last_reply, 4));
#1783161482
./wp-includes/PHPMailer/PHPMailer.php:4680:                        $data = base64_decode($match[3]);
#1783161482
./wp-includes/class-wp-simplepie-sanitize-kses.php:49:                  $data = base64_decode( $data );
#1783161482
./wp-includes/ID3/module.audio.ogg.php:745:                                     $flac->setStringMode(base64_decode($ThisFileInfo_ogg_comments_raw[$i]['value']));
#1783161482
./wp-includes/ID3/module.audio.ogg.php:752:                                     $data = base64_decode($ThisFileInfo_ogg_comments_raw[$i]['value']);
#1783161482
./wp-includes/SimplePie/src/Sanitize.php:429:                $data = base64_decode($data);
#1783161482
./wp-includes/blocks/legacy-widget.php:40:              $serialized_instance = base64_decode( $attributes['instance']['encoded'] );
#1783161482
./wp-includes/rest-api/endpoints/class-wp-rest-widgets-controller.php:581:                              $serialized_instance = base64_decode( $request['instance']['encoded'] );
#1783161482
./wp-includes/rest-api/endpoints/class-wp-rest-widget-types-controller.php:490:                 $serialized_instance = base64_decode( $request['instance']['encoded'] );
#1783161482
./wp-includes/class-wp-customize-widgets.php:1489:              $decoded = base64_decode( $value['encoded_serialized_instance'], true );
#1783161482
./wp-includes/IXR/class-IXR-message.php:209:                $value = base64_decode($this->_currentTagContents);
#1783161482
./wp-includes/load.php:127:     $userpass = base64_decode( $token );
#1783161482
./wp-admin/includes/file.php:1366:              $expected_raw_md5 = base64_decode( $expected_md5 );
#1783161482
./wp-admin/includes/file.php:1480:              $signature_raw = base64_decode( $signature );
#1783161482
./wp-admin/includes/file.php:1489:                      $key_raw = base64_decode( $key );
#1783161581
grep -rnw . --include="*.php" -e "eval(" -e "passthru" -e "shell_exec" -e "system"
#1783161595
# Look for ANY PHP files hidden inside the uploads folder
#1783161595
find wp-content/uploads/ -type f -name "*.php"
#1783161595
# Look for hidden files (starting with a dot) inside your themes/plugins
#1783161595
find wp-content/plugins/ wp-content/themes/ -type f -name ".*"
#1783161610
php ~/wp-cli.phar core verify-checksums
#1783161617
clear
#1783161621
php ~/wp-cli.phar core verify-checksums
#1783161749
grep -rnw . --include="*.php" -e "eval(" -e "passthru" -e "shell_exec" -e "system"
#1783161761
clear
#1783161777
php ~/wp-cli.phar theme install $(php ~/wp-cli.phar theme list --field=name) --force
#1783161796
grep -rnw . --include="*.php" -e "base64_decode"
#1783163422
ls -a
#1783163444
cd piscines-services.com
#1783163570
php ~/wp-cli.phar core download --skip-content --force
#1783163633
php ~/wp-cli.phar core download --skip-content --force
#1783163723
php ~/wp-cli.phar core download --skip-content --force
#1783163807
php ~/wp-cli.phar core verify-checksums
#1783163820
php ~/wp-cli.phar plugin verify-checksums --all
#1783163920
clear
#1783163924
ls -a
#1783163932
cd wp-content
#1783163937
cd plugins
#1783163939
ls -a
#1783163955
rm -rf divi-toolbox
#1783163957
ls -a
#1783163969
rm -rf seo-by-rank-math
#1783163972
ls -a
#1783163982
rm -rf divi_cloud
#1783163985
ls -a
#1783164252
cd\
#1783164255
clear
#1783164262
la -a
#1783164267
ls -a
#1783164277
cd hypnotherapie-84
#1783164370
php ~/wp-cli.phar core download --skip-content --force
#1783167984
ls -a
#1783167994
cd piscines-services.com
#1783167997
ls -a
#1783168137
find . -type f -exec chmod 644 {} \;
#1783176068
ls -a
#1783176081
cd piscines-services.com
#1783176106
php ~/wp-cli.phar core download --skip-content --force
#1783176135
php ~/wp-cli.phar plugin verify-checksums --all
#1783176169
php ~/wp-cli.phar theme verify-checksums --all
#1783176185
wp help theme
#1783176202
php ~/wp-cli.phar help theme
#1783341930
ls -a
#1783342538
ls -a
#1783342569
cd piscines-services.com
#1783342572
ls -a
#1783342634
php ~/wp-cli.phar core download --skip-content --force
#1783342662
php ~/wp-cli.phar core verify-checksums
#1783342680
php ~/wp-cli.phar plugin verify-checksums --all
#1783342743
find . -type f -exec chmod 644 {} \;
#1783344676
ls -a
#1783344703
cd piscines-services.com
#1783344709
ls -a
#1783344720
find . -type d -exec chmod 755 {} \;
#1783345425
la -a
#1783345432
ls -a
#1783345434
clear
#1783345437
ls -a
#1783345448
cd nb-maconnerie.fr
#1783345464
php ~/wp-cli.phar core download --skip-content --force
#1783345530
php ~/wp-cli.phar core download --skip-content --force
#1783345641
php ~/wp-cli.phar core download --skip-content --force
#1783345676
ls -a
#1783345688
rm -rf .tmb7bfca7
#1783345701
php ~/wp-cli.phar theme verify-checksums --all
#1783345711
find . -type d -exec chmod 755 {} \;
#1783345801
rm -rf .tmb7bfca7
#1783345813
rm -rf 9755a
#1783345833
rm -rf wp-includes14de849
#1783345873
cd wp-content
#1783345876
ls -a
#1783345881
cd plugins
#1783345885
ls -a
#1783345892
cd\
#1783345901
cd nb-maconnerie.fr
#1783345903
ls -a
#1783345917
rm -rf wp-content
#1783345921
ls -a
#1783345949
cd wp-contentf9189f
#1783345953
ls -a
#1783345963
rm -rf .pkexec
#1783345975
rm -rf'GCONV_PATH=.'
#1783346005
rm -rf 'GCONV_PATH=.'
#1783346007
ls -a
#1783346037
cd plugins
#1783346040
ls -a
#1783346048
rm -rf 'GCONV_PATH=.'
#1783346080
rm -rf .pkexec
#1783346082
ls -a
#1783346121
cd..
#1783346125
cd\
#1783346129
clear
#1783346145
cd nb-maconnerie.fr
#1783346148
ls -a
#1783346160
rm -rf .pkexecde55bf
#1783346177
rm -rf .tmb7bfca7
#1783346187
rm -rf 9755a
#1783346189
ls -a
#1783346210
rm -rf wp-admin141943e
#1783346525
php ~/wp-cli.phar core download --skip-content --force
#1783346632
cd wp-content
#1783346634
ls -a
#1783346643
cd mu-plugins
#1783346645
ls -a
#1783346652
rm -rf pwnkit
#1783346664
rm -rf .pkexec
#1783346673
rm -rf .mad-root
#1783346682
rm -rf'GCONV_PATH=.'
#1783346691
rm -rf 'GCONV_PATH=.'
#1783346706
rm -rf adminer.php
#1783346794
clear
#1783346799
cd\
#1783347077
ls -a
#1783347095
cd rochasson-risoul.com
#1783347097
ls -a
#1783347106
rm -rf 222.php
#1783347115
rm -rf about.php
#1783347125
rm -rf .htaccess
#1783347133
rm -rf wp-admin
#1783347142
rm -rf wp-includes
#1783347148
php ~/wp-cli.phar core download --skip-content --force
#1783347163
ls -a
#1783347172
cd wp-content
#1783347175
ls-a
#1783347184
ls -a
#1783347196
cd mu-plugins
#1783347198
ls-a
#1783347202
ls -a
#1783347270
cd\
#1783347272
clear
#1783347278
ls -a
#1783347298
cd nb-maconnerie.fr
#1783347301
ls -a
#1783347311
rm -rf 9755a
#1783347323
find . -type d -exec chmod 755 {} \;
#1783347488
php ~/wp-cli.phar plugin verify-checksums --all
#1783347791
ls -a
#1783347825
cd nb-maconnerie.fr
#1783347836
find . -type d -name 'GCONV_PATH=.'
#1783347866
find . -type d -name 'GCONV_PATH=.' -exec rm -rf {} +
#1783347898
find . \( -type d -name 'GCONV_PATH=.' -o -type d -name '.pkexec' \) -exec rm -rf {} +
#1783347935
find . \( -type d -name 'GCONV_PATH=.' -o -type d -name '.pkexec' \)
#1783347976
cd ~
#1783347978
find . \( -type d -name 'GCONV_PATH=.' -o -type d -name '.pkexec' \) -exec rm -rf {} +
#1783348353
find ./forcess-securit.fr -name ".pkexec" -exec ls -ld {} \; | head -20
#1783348442
find . -type d -exec chmod 755 {} \;
#1783349617
ls -a
#1783349639
cd forcess-securit.fr
#1783349642
ls -a
#1783349653
rm -rf .mad-rootefd4b9
#1783349665
rm -rf mah.php
#1783349682
rm -rf .pkexec8ba92c
#1783349691
rm -rf godds.php
#1783349703
rm -rf 'GCONV_PATH=.7f39aa'
#1783349714
rm -rf br2026yt
#1783349725
rm -rf 222.phpcf68a0
#1783349737
rm -rf 3416d
#1783349747
rm -rf adminer.phpa500df
#1783349756
rm -rf boss2026yt
#1783349765
rm -rf item.php
#1783349768
ls -a
#1783349781
rm -rf pwnkitea0afe
#1783349785
ls -a
#1783349797
rm -rf wp-ugebuild.phpda28a8
#1783349818
rm -rf wp-scanner.php0bd63b
#1783349837
rm -rf goods.php
#1783349840
ls -a
#1783349844
clear
#1783349846
ls -a
#1783349861
rm -rf xig.txt5ddd77
#1783349864
ls -a
#1783349880
rm -rf index.php
#1783349887
clear
#1783349889
ls -a
#1783349900
rm -rf .htaccess
#1783349902
ls -a
#1783349915
rm -rf plugind.php
#1783349924
cd wp-content571439
#1783349927
ls -a
#1783349938
cd plugins
#1783349940
ls -a
#1783349969
cd
#1783349978
cd forcess-securit.fr
#1783349980
ls -a
#1783349988
rm -rf wp-admin41b7ee
#1783350004
rm -rf wp-includesa85871
#1783350047
cdc
#1783350052
clear
#1783350055
cd\
#1783350059
ls -a
#1783350066
cd piscines-services.com
#1783350088
find . -type d -name .htaccess
#1783350118
find . -type d -name 'GCONV_PATH=.' -exec rm -rf {} +
#1783350150
find . -type d -name .htaccess  -exec rm -rf {} +
#1783350380
clear
#1783350384
cd\
#1783350491
cd jfb-maconnerie.fr
#1783350504
rm -rf f7073
#1783350513
find . -type f -exec chmod 644 {} \;
#1783350655
find . -type d -exec chmod 755 {} \;
#1783350776
mkdir -p wp-content/upgrade
#1783350779
chmod 755 wp-content/upgrade
#1783350786
rm -rf f7073
#1783350793
ls -a
#1783350813
rm -rf item.php
#1783350816
ls -a
#1783350829
cd wp-content
#1783350832
ls-a
#1783350837
ls -a
#1783350850
rm -rf adf9ef2a
#1783350855
cd plugins
#1783350857
ls -a
#1783350902
cd ..
#1783350924
cd ../..
#1783350929
ls -a
#1783350931
clear
#1783350934
ls -a
#1783350946
cd hotelalpiscottia.fr
#1783350953
find . -type d -exec chmod 755 {} \;
#1783351012
cd ..
#1783351014
crontab -l
#1783351046
find ~ \( -name "adminer.php" -o -name ".mad-root" -o -name "pwnkit" -o -name ".pkexec" -o -name "GCONV_PATH=." \)
#1783351061
find ~ -type f -name ".*.php"
#1783351199
cd nb-maconnerie.fr
#1783351205
ls -ld wp-admin wp-content wp-content/plugins wp-content/themes wp-content/upgrade
#1783351252
pwd
#1783351252
ls -ld .
#1783351252
ls -ld wp-admin wp-content wp-content/plugins wp-content/themes wp-content/upgrade
#1783351252
find . ! -user $(whoami) | head -20
#1783351259
find . -type d ! -perm 755 | head -20
#1783351260
find . -type f ! -perm 644 | head -20
#1783351276
find . ! -user $(whoami) | head -50
#1783351382
nd . -type f -name ".htaccess" -delete
#1783351393
find . -type f -name ".htaccess" -delete
#1783351411
find . -type f -name ".htaccess"
#1783351440
cd ../..
#1783351444
ls -a
#1783351460
cd labeautef
#1783351462
ls -a
#1783351477
cd hotelalpiscottia.fr
#1783351490
find . -type f -name ".htaccess" -delete
#1783351531
clear
#1783351534
cd\
#1783351539
ls -a
#1783351544
cd piscines-services.com
#1783351588
find . -type f -name ".htaccess" -delete
#1783351621
cd\
#1783351640
cd vandeninden-renovation.fr
#1783351643
ls -a
#1783351651
find . -type f -name ".htaccess" -delete
#1783352113
ls -a
#1783352161
cd nb-maconnerie.fr
#1783352173
find . -type f -name ".htaccess" ! -path "./.htaccess" -exec rm -f {} \;
#1783352284
cd\
#1783352290
cd les-referenceurs.com
#1783352301
find . -type f -name ".htaccess" ! -path "./.htaccess" -exec rm -f {} \;
#1783352474
php ~/wp-cli.phar core download --skip-content --force
#1783352534
php ~/wp-cli.phar plugin verify-checksums --all
#1783352548
find . -type d -name '.pkexec' -exec rm -rf {} +
#1783352556
cd ~
#1783352557
find . \( -type d -name 'GCONV_PATH=.' -o -type d -name '.pkexec' \) -exec rm -rf {} +
#1783352778
find . -type d -name '.pkexec' -exec rm -rf {} +
#1783352906
find . -type f -name ".htaccess" ! -path "./.htaccess" -exec rm -f {} \;
#1783389746
ls -a
#1783389753
cd hotelalpiscottia.fr
#1783389764
php ~/wp-cli.phar plugin verify-checksums --all
#1783389901
cd\
#1783389917
cd labeautedegaby.com
#1783389935
php ~/wp-cli.phar core download --skip-content --force
#1783389983
cd ..
#1783390006
find . -type d -exec chmod 755 {} \;
#1783390477
ls -a
#1783390499
cd hotelalpiscottia.fr
#1783390529
find . -type f -name ".htaccess" ! -path "./.htaccess" -exec rm -f {} \;
#1783390575
cd ..
#1783390579
ls -a
#1783390594
cd labeautedegaby.com
#1783390599
find . -type f -name ".htaccess" ! -path "./.htaccess" -exec rm -f {} \;
#1783390664
php ~/wp-cli.phar core download --skip-content --force
#1783391066
ls -a
#1783391085
cd labeautedegaby.com
#1783391099
php ~/wp-cli.phar core download --skip-content --force
#1783391364
php ~/wp-cli.phar plugin verify-checksums --all
#1783391621
cd ..
#1783391629
ls -a
#1783391647
cd piscine-gardoise.fr
#1783391656
php ~/wp-cli.phar core download --skip-content --force
#1783391677
php ~/wp-cli.phar plugin verify-checksums --all
#1783391748
php ~/wp-cli.phar plugin verify-checksums --all
#1783391895
php ~/wp-cli.phar plugin verify-checksums --all
#1783392030
cd wp-content
#1783392033
cd plugins
#1783392050
rm -rf all-in-one-wp-migration-unlimited-extension
#1783392059
rm -rf wp-rocket
#1783392063
ls -a
#1783392085
php ~/wp-cli.phar plugin verify-checksums --all
#1783392120
rm -rf all-in-one-wp-migration
#1783392122
ls -a
#1783392127
php ~/wp-cli.phar plugin verify-checksums --all
#1783392341
clear
#1783392344
cd ..
#1783392348
cd\
#1783392352
clear
#1783392478
cd piscine-gardoise.fr
#1783392486
find . -type f -exec chmod 644 {} \;
#1783393165
cd wp-content
#1783393169
ls -a
#1783393179
rm -rf js5d14b8
#1783393185
rm -rf cache
#1783393196
rm -rf plf06509
#1783393199
ls -a
#1783393202
clear
#1783393204
ls -a
#1783393212
rm -rf et-cache
#1783393375
ls -a
#1783393381
cd..
#1783393384
cd ..
#1783393386
ls -a
#1783393404
find . -type d -exec chmod 755 {} \;
#1783393441
cd ..
#1783393443
ls -a
#1783393455
cd piscine-gardoise.fr
#1783393462
rm -rf wp-admin
#1783393470
rm -rf wp-includes
#1783393475
ls -a
#1783393485
rm -rf index.php
#1783393527
php ~/wp-cli.phar core download --skip-content --force
#1783393567
cd ~
#1783393568
find . \( -type d -name 'GCONV_PATH=.' -o -type d -name '.pkexec' \) -exec rm -rf {} +
#1783393666
find . -type f -name ".htaccess" -delete
#1783393727
find . -type f -name ".htaccess" -delete
#1783393824
cd piscines-services.com
#1783393835
cd wp-content
#1783393843
rm -rf et-cache
#1783394367
cd jfb-maconnerie.fr
#1783394376
rm -rf wp-admin
#1783394384
rm -rf wp-includes
#1783394398
php ~/wp-cli.phar core download --skip-content --force
#1783394412
find . -type f -name ".htaccess" -delete
#1783394493
cd wp-content
#1783394499
rm -rf et-cache
#1783394504
ls -a
#1783394667
find . -type f -name adminer.php  -delete
#1783394673
cd ..
#1783394676
cd\
#1783394683
find . -type f -name adminer.php  -delete
#1783395142
cd vaucluse-toiture.fr
#1783395156
php ~/wp-cli.phar core download --skip-content --force
#1783426258
ls -a
#1783426622
cd labeautedegaby.com
#1783426628
vim wp-config
#1783437985
ls -a
#1783438000
rm -rf veoneo.fr
#1783438004
ls -a
#1783438056
cd r-pneu.fr
#1783438059
ls -a
#1783438069
rm -rf wp-admin
#1783438079
rm -rf wp-includes
#1783438086
ls -a
#1783438096
rm -rf mah.php
#1783438104
rm -rf index.php0
#1783438115
rm -rf 
#1783438121
rm -rf pwnkit
#1783438131
rm -rf goods.php
#1783438151
rm -rf 6de2d0
#1783439223
cd r-pneu.fr
#1783439244
cd wp-content
#1783439252
ls -a
#1783439267
rm -rf et-cache
#1783439309
rm -rf cache
#1783439320
rm -rf im8dba3a
#1783439340
rm -rf js16e017
#1783439343
ls -a\
#1783439370
rm -rf temp-write-test-6a4bcdb94c7ab4-31917357
#1783439381
ls -a
#1783439402
rm -rf js7ece2d
#1783439404
ls -a
#1783439532
ls -a
#1783439535
cd ..
#1783439539
ls -a
#1783439541
clear
#1783439581
php ~/wp-cli.phar core download --skip-content --force
#1783439743
find . -type f -name ".htaccess" -delete
#1783439768
php ~/wp-cli.phar core download --skip-content --force
#1783520647
ls -a
#1783520664
cd forcess-securit.fr
#1783520672
php ~/wp-cli.phar core download --skip-content --force
#1783520687
ls -a
#1783520699
rm -rf wp-signup.phpe01f45
#1783520708
rm -rf wp-trackback.phpede63a
#1783520716
rm -rf xmlrpc.php5a7ad1
#1783520725
rm -rf wp-ugebuild.gz845255
#1783520732
rm-rf wp-comments-post.php005dde
#1783520743
rm -rf wp-comments-post.php005dde
#1783520754
rm -rf wordfence-waf.phpd738c6
#1783520763
rm -rf robots.txt801e1b
#17835207