saurindashadia

CyberPanel PSAUX attack/defense

WARNING: Please use good judgement and extra caution before downloading and running something provided in the comment section of this gist.

This repo contains 2 things:

• A decryption script
• A list of files found on the threat-actor's server

Ransomware status

saurindashadia

<?php

// Manually create entries and send notifications with Gravity Forms

$form_id = 10;

// add entry
$entry = array(
	"form_id" => $form_id,
	"1" => "Entry for field ID 1",

saurindashadia

/*Deleting content when an ACF field is deleted is easy, relatively. Please note that the use of this function cannot be undone and it will erase all traces of content for any ACF field that is deleted. 

Please be sure that this is something that you want to do before implementing this and I would strongly suggest that this is only enabled during development and not on a live site. Should a client go into ACF for some reason and delete a field, there is nothing that you’d be able to do to recover form it. */

// this action is run by ACF whenever a field is deleted
// and is called for every field in a field group when a field group is deleted
add_action('acf/delete_field', 'delete_acf_content_on_delete_field');

function delete_acf_content_on_delete_field($field) {
  // runs when acf deletes a field

saurindashadia

<?php 

class acf_update {

	/*
	*  __construct
	*
	*  A good place to add actions / filters
	*
	*  @type	functionac

saurindashadia

license: cc-by-4.0

saurindashadia

/*
 WordPressのテーマにおいて、テンプレート階層に基づきどのテンプレートファイルが使われているか書き出すコード。
 ただし、header.php や get_template_part などでインクルードされているファイルを除く。
*/

add_action('wp_footer', 'view_template_files');
if ( !function_exists( 'view_template_files' ) ):
function view_template_files() {
	if ( defined('WP_DEBUG') && WP_DEBUG ) {
		global $template;

saurindashadia

~# uname -a
~# lsb_release -a

~# locale-gen en_US
~# locale-gen en_US.UTF-8
~# apt-get -y --force-yes remove ntpdate
~# apt-get -y --force-yes install ntp
~# /etc/init.d/ntp restart
~# dpkg-reconfigure tzdata

saurindashadia

~# uname -a
~# lsb_release -a

~# locale-gen en_US
~# locale-gen en_US.UTF-8
~# apt-get -y --force-yes remove ntpdate
~# apt-get -y --force-yes install ntp
~# /etc/init.d/ntp restart
~# dpkg-reconfigure tzdata

saurindashadia

I use the first


—– BEGIN LICENSE —–
Michael Barnes
Single User License
EA7E-821385
8A353C41 872A0D5C DF9B2950 AFF6F667
C458EA6D 8EA3C286 98D1D650 131A97AB
AA919AEC EF20E143 B361B1E7 4C8B7F04

saurindashadia

<?php

/* Getting a JSON Facebook Feed
   ==========================================================================

   1. Sign in as a developer at https://developers.facebook.com/

   2. Click "Create New App" at https://developers.facebook.com/apps

   3. Under Apps Settings, find the App ID and App Secret