File: //opt/zignosrl/.bash_history
tar xvf latest.tar.gz
mv wordpress/* .
exit
pwd
vi wp-config.php
unzip uploads.zip
ls -l
ls wp-content/
mv uploads wp-content/
cd wp-content/
ls
vi uploads/ata.dump
mysql -uadmin -p ata < uploads/ata.dump
exit
cd wp-content/plugins/
mv revolution_slider_5/revslider .
rm -rf revolution_slider_5
exit
cd wp-content/
chown -R ata.ata uploads
chown -R ata.ata themes
chown -R ata.ata themes/*
chmod -R 777 themes uploads
pw
pwd
cd themes/at
exit
cd wp-content/themes/at
exit
cd scripts
mkdir scripts
cd scripts/
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
:q!
vi image.php
php image.php
ls -l /var/www/html/ata/wp-content/uploads/2020/03/Clipboard01dfd.jpg
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vils -l /var/www/html/ata/wp-content/uploads/2020/03/simoc-284x300.png
ls -l /var/www/html/ata/wp-content/uploads/2020/03/simoc-284x300.png
vi image.php
php image.php
cp image.php ../
cd ../
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
ls -l ./wp-content/uploads/2020/03/p1.jpg
vi image.php
ls -l ./wp-content/uploads/2020/03/p1.jpg
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
mkdir wp-content/uploads/2020/04
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
grep -R 'download_url' *
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
cp image.php ima.php
vi ima.php
php ima.php
vi ima.php
php ima.php
vi ima.php
php ima.php
cp wp-content/uploads/2016/12/gigidelneri-e1585001619857.jpg .
php ima.php
vi ima.php
php ima.php
vi ima.php
vi image.php
vi ima.php
php ima.php
vi ima.php
php ima.php
vi ima.php
php ima.php
vi ima.php
php ima.php
vi ima.php
vi image.php
ls wp-content/uploads/
ls wp-content/uploads/2020/04/
vi image.php
php image.php
vi image.php
php image.php
ls wp-content/uploads/2020/04/
vi ima.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
rm -rf wp-content/uploads/2020/04/*
php image.php
vi image.php
php image.php
vi ima.php
php image.php
php ima.php
ls
rm gigidelneri-e1585001619857.jpg
php ima.php
vi ima.php
php ima.php
vi ima.php
php ima.php
vi ima.php
pw
pwd
cd wp-content/uploads/
ls
cd ..
ls
cd uploads/
ls
cd ..
ls
unzip uploads.zip
rm -rf wp-content/uploads
pwd
ls wp-content/
ls wp-content/uploads/
rm -rf wp-content/uploads/2020
mv uploads/* wp-content/uploads/
vi image.php
php image.php
ls -l /var/www/html/ata/wp-content/uploads/2020/01/apecar
chown -R ata.ata wp-content/uploads
chown -R ata.ata wp-content/uploads/*
chmod -R 777 wp-content/uploads/*
php image.php
ls -l /var/www/html/ata/wp-content/uploads/2016/09/images.png
file /var/www/html/ata/wp-content/uploads/2016/09/images.png
vi ima.php
vi image.php
vi ima.php
php ima.php
vi ima.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
ls -l /var/www/html/ata/wp-content/uploads/2020/03/palomino1-e1583334967488.jpg
file /var/www/html/ata/wp-content/uploads/2020/03/palomino1-e1583334967488.jpg
vi image.php
ls -l /var/www/html/ata/wp-content/uploads/2020/03/palomino1-e1583334967488.jpg
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
vi image.php
php image.php
exit
su
vi image.php
php image.php
vi image.php
php image.php
vi image.php
mv logo.png wp-content/uploads/2020/03/
vi ima.php
vi image.php
php image.php
ps -ef | grep image
mv rec-header.jpg wp-content/uploads/2020/03/
cd wp-content/themes/
grep -R 'entry-title td-module-title' *
vi Newsmag/loop-archive.php
grep -R 'entry-title td-module-title' *
grep -R 'entry-title ' *
grep -R 'td-post-categor' *
vi Newsmag/loop-archive.php
grep -R 'showDate' *
grep -R 'show_date' *
vi twentytwenty/classes/class-twentytwenty-walker-page.php
grep -R 'show_date' *
pwd
cd Newsmag/
ls
vi functions.php
grep -R 'Block 7' *
grep -R 'Block' *
grep -R 'tagDiv' *
vi includes/wp-booster/tagdiv-wp-booster-functions.php
cd wp-content/themes/new
cd wp-content/themes/Newsmag/
grep -R 'td_module_6' *
grep -R 'td_module_' *
vi loop-archive.php
grep -R td-post-date *
vi loop.php
vi loop-archive.php
vi loop-single.php
grep -R 'meta-info' *
vi loop-archive.php
vi loop.php
pwd
vi loop-single.php
ls
vi index.php
grep -R 'td-post-category' *
cd wp-content/plugins/
grep -R 'td-post-category' *
cd td-composer/
grep -R 'td-post-category' * | grep php
grep -R 'td-post-category' * | grep php | grep 7
vi legacy/Newsmag/includes/shortcodes/td_block_big_grid_7.php
grep -R 'td-post-category' * | grep php | grep class
vi legacy/common/wp_booster/td_module.php
grep -R 'Recent Comments' *
cd ..
grep -R 'Recent comments' *
vi plugins/td-composer/includes/shortcodes/vc_wp_recentcomments.php
vi plugins/td-composer/includes/tdc_map.php
vi plugins/td-composer/includes/shortcodes/vc_wp_recentcomments.php
cd wp-content/plugins/
ls
cd native-emoji/
ls
ls img/
ls img/js
exit
cd wp-content/themes/Newsmag/
ls
cd ../../plugins/
find ./ -mtime -1
cd td-composer/
vi includes/shortcodes/vc_wp_recentcomments.php
ls -l includes/shortcodes/vc_wp_recentcomments.php
cd ..
pwd
cd ..
cd themes/
mkdir atalantini
mv ../../smilies atalantini/
pwd
cd ../..
vi wp-config.php
mysql -uadmin -p ata
ls
mv wp-content/themes/atalantini/smilies .
pwd
mv emoji-keyboard-in-comment-form.zip wp-content/plugins/
cd wp-content/plugins/
unzip emoji-keyboard-in-comment-form.zip
vi wp-config.php
mysql -uadmin -p ata
cd ada_move/
mysql -uadmin -p ata < ata.dump
ls
mv *.php ../wp-content/themes/Newsmag/
cd ../wp-content/themes/Newsmag/
vi page.php
vi classifica.php
exit
cd wp-content/plugins/
ls
find ./ -mtime -1
vi ./td-composer/includes/shortcodes/vc_wp_recentcomments.php
mkdir wp-content/themes/atalantini
mv squadre wp-content/themes/atalantini/
cd wp-content/themes/Newsmag/
vi bestplayers.php
vi classifica.php
vi bestplayers.php
mv ../../../ada_move/images ../atalantini/
ls ../atalantini/
cd
ls
mv ada_move/images wp-content/themes/atalantini/
chmod -R 777 ada_move
chmod -R 777 ada_move/*
mv ada_move/images wp-content/themes/atalantini/
mv player wp-content/themes/atalantini/
ls
cd wp-content/themes/Newsmag/
ls
vigrep grid_4 *
vgrep grid_4 *
grep grid_4 *
vi bestplayers.php
vi resumeteams.php
vi resumeusers.php
vi uefagurdam.php
vi italiagurdam.php
cd wp-content/themes/Newsmag/
cd ../../plugins/td-composer/
find ./ -name td_legacy_main.css
vi ./legacy/Newsmag/assets/css/td_legacy_main.css
grep -R 'td-header-row td-header-header' *
pwd
cd wp-content/themes/atalantini/
ls
cd ../n
cd ../Newsmag/
ls
vi classifica.php
vi resumeteams.php
pwd
vi functions.php
vi resumeteams.php
mv ../../../registrazione.php .
vi resumeteams.php
vi registrazione.php
cd wp-content/themes/Newsmag/
ls
cd ../../
cd plugins/td-composer/
find ./ -time -1
find ./ -mtime -2
vi ./includes/shortcodes/vc_wp_recentcomments.php
cd wp-content/themes/Newsmag/
vi functions.php
exiit
exit
cd wp-content/plugins/
mv ../../wpdiscuz-emoticons-1.2.6.zip .
unzip wpdiscuz-emoticons-1.2.6.zip
cd wp-content/themes/Newsmag/
vi functions.php
pwd
vi functions.php
cd wp-content/
mkdir wpdiscuz
mkdir wpdiscuz/emoticons
cp -r ../smilies wpdiscuz/emoticons/
find ../ -name wpsmiliestrans.php
vi ../wp-content/plugins/wpdiscuz-emoticons/emoticons/wpsmiliestrans.php
find ../ -name unamused.png
cp ../smilies/bergamoto.gif ../wp-content/plugins/wpdiscuz-emoticons/emoticons/img/
vi ../wp-content/plugins/wpdiscuz-emoticons/emoticons/wpsmiliestrans.php
cd wp-content/plugins/comment-form-tinymce/
vi comment-form-with-tinymce.php
php comment-form-with-tinymce.php
vi comment-form-with-tinymce.php
vi ../../themes/Newsmag/functions.php
vi comment-form-with-tinymce.php
ls
pwd
cd ..
ls
vi ../../themes/Newsmag/functions.php
pwd
vi ../themes/Newsmag/functions.php
exit
cd wp-content/themes/Newsmag/
ls
vi functions.php
grep 'textarea id=' *
grep -R 'textarea id=' *
grep -R 'textarea ' *
vi comments.php
cd ../../plugins/
grep -R 'textarea ' *
grep -R 'textarea ' * | more
cd td-composer/
grep -R 'textarea ' * | more
find ./ -name comments.php
vi ./legacy/Newsmag/comments.php
pwd
cd ..
ls
cd comment-form-tinymce/
ls
vi comment-form-with-tinymce.php
cd ../td-composer/
vi ./legacy/Newsmag/comments.php
cd ../comment-form-tinymce/
vi comment-form-with-tinymce.php
cd wp-content/themes/
cd Newsmag/
vi functions.php
php functions.php
vi functions.php
php functions.php
vi functions.php
grep -R 'comment_form_defaults' *
vi functions.php
cd ../../plugins/td-composer/
grep -R 'comment_form_defaults' *
cd ../../themes/Newsmag/
vi functions.php
vi comments.php
cd ../../plugins/
ls
cd td-composer/
history | grep textarea | grep comment
grep textarea * | greo comment
grep -R textarea * | greo comment
find ./ -mtime -1
vi legacy/Newsmag/comments.php
exit
cd wp-content/plugins/
ls
unzip wpdiscuz-emoticons-1.2.6.zip
cd wpdiscuz-emoticons/
ls
cdcd emoticons/img/
ls
cd emoticons/img/
ls
cp ../../../../../smilies/eurostick.png roll.png
vi image.php
cp image.php image_all.php
vi image_all.php
php image_all.php
vi image_all.php
php image_all.php
ssh paolo@www.cotecha.it
ls
vi ima.php
vi image.php
vi image_all.php
php image_all.php
vi image_all.php
php image_all.php
ls wp-content/uploads/prova/
vi image_all.php
vi ima.php
vi image_all.php
pwd
vi image_all.php
php image_all.php
ls -l wp-content/uploads/prova/
vi image_all.php
rm wp-content/uploads/prova/*
php image_all.php
ls -l wp-content/uploads/prova/
vi image_all.php
php image_all.php
vi image_all.php
php image_all.php
vi image_all.php
php image_all.php
cd wp-content/plugins/
cd wpdiscuz-emoticons/
ls
grep -R width *
vi wpDiscuzSmile.php
grep -R width * | grep '<img'
vi wpDiscuzSmileOptions.php
pwd
cd ..
ls
mkdir pr
cp wpdiscuz-emoticons-1.2.6.zip pr/
cd pr
unzip wpdiscuz-emoticons-1.2.6.zip
mv wpdiscuz-emoticons/emoticons/img/* ../wpdiscuz-emoticons/emoticons/img/
pwd
cd ..
rm -rf pr
find ./ -name wpsmiliestrans.php
vi ./wpdiscuz-emoticons/emoticons/wpsmiliestrans.php
find ./ -name silly.ng
find ./ -name silly.png
cp ../../smilies/boxe.gif ./wpdiscuz-emoticons/emoticons/img/
vi ./wpdiscuz-emoticons/emoticons/wpsmiliestrans.php
ls ../../smilies/
cp ../../smilies/* ./wpdiscuz-emoticons/emoticons/img/
vi ./wpdiscuz-emoticons/emoticons/wpsmiliestrans.php
vi ./wpdiscuz-emoticons/wpDiscuzSmileOptions.php
cd wpdiscuz-emoticons/
grep -R 'wpdiscuz-smile-container' *
vi assets/css/wpdiscuz-smile.css
vi ./emoticons/wpsmiliestrans.php
mv rec_sidebar.jpg wp-content/uploads/2020/03/rec-sidebar.jpg
cd wp-content/themes/Newsmag/
ls
cd ../../plugins/
ls
cd td-composer/
ls
find ./ -mtime -3
vi ./includes/shortcodes/vc_wp_recentcomments.php
grep -R 'Number of' *
vi includes/tdc_map.php
vi ./includes/shortcodes/vc_wp_recentcomments.php
vi includes/tdc_map.php
vi ./includes/shortcodes/vc_wp_recentcomments.php
su
wpa_cli
wpa_cli --help
exit
cd wp-content/themes/Newsmag/
ls
mv ../../../last_comments.php .
php last_comments.php
vi last_comments.php
grep wpdb *
grep wpdb * | grep global
vi uefagurdam.php
vi last_comments.php
php last_comments.php
php uefagurdam.php
vi last_comments.php
cd
ls
history | grep mysql
mysql -uadmin -p ata < user.dump
vi user.dump
pwd
cd wp-content/themes/Newsmag/
vi last_comments.php
vi resumeteams.php
vi last_comments.php
cd wp-content/themes/Newsmag/
mv ../../../login.php .
vi uefagurdam.php
vi login.php
exit
pwd
vi loginhp.php
exit
cd wp-content/themes/Newsmag/
ls
pwd
cd ../../..
vi wp-config.php
mysql -uadmin -p ata
exit
cd wp-content/themes/Newsmag/
vi functions.php
ls
pwd
grep 'select ' *
vi uefagurdam.php
cd ../../..
ls
cp loginhp.php load_avatar.php
vi load_avatar.php
vi wp-config.php
mysql -uadmin -p ata
vi load_avatar.php
ls avatar/
vi load_avatar.php
php load_avatar.php
vi load_avatar.php
php load_avatar.php
vi load_avatar.php
php load_avatar.php
vi load_avatar.php
vi image.php
vi ima.php
vi load_avatar.php
php load_avatar.php
vi ima.php
vi load_avatar.php
php load_avatar.php
vi ima.php
vi load_avatar.php
vi wp-config.php
mysql -uadmin -p ata
vi load_avatar.php
vi ima.php
vi load_avatar.php
php load_avatar.php
vi load_avatar.php
php load_avatar.php
vi load_avatar.php
vi ima.php
vi wp-config.php
mysql -uadmin -p ata
cd wp-content/themes/Newsmag/
vi last_comments.php
exit
vi wp-config.php
mysql -uadmin -p ata
vi load_avatar.php
vi wp-config.php
mysql -uadmin -p ata
vi wp-config.php
mysql -uadmin -p ata
pwd
cd wp-content/themes/Newsmag/
vi functions.php
vi wp-config.php
pwd
cd ../../..
vi wp-config.php
mysql -uadmin -p ata
vi ima.php
vi load_avatar.php
php load_avatar.php
vi load_avatar.php
php load_avatar.php
vi load_avatar.php
php load_avatar.php
vi load_avatar.php
mysql -uadmin -p ata
cp -r avatar wp-content/uploads/
mysql -uadmin -p ata
cd wp-content/plugins/
grep -R 'avatar avatar-96 wp-user-avatar wp-user-avatar-96 alignnone photo td-animation-stack-type0-2' *
grep -R 'avatar avatar-96 wp-user-avatar wp-user-avatar-9' *
grep -R 'user-avatar' *
grep -R 'user-avatar' * | grep img
vi wp-user-avatar/includes/class-wp-user-avatar-functions.php
cd wp-content/plugins/
mv ../../wp-last-login .
pw
pwd
ls
cd
ls -l
chmod -R 777 wordpress-scheduled-time
chmod -R 777 wp-last-login
mv wp-last-login wp-content/plugins/
mv wordpress-scheduled-time wp-content/plugins/
ls
su
cd wp-content/plugins/
grep -R 'top-header-menu' *
grep -R 'top-header-menu' * | more
vi td-composer/legacy/Newsmag/parts/header/top-menu.php
exit
cd wp-content/themes/Newsmag/
mv ../../../profilo.php .
vi profilo.php
vi uefagurdam.php
vi profilo.php
php profilo.php
vi profilo.php
pw
pwd
cd ../../..
ls
vi load_avatar.php
vi ima.php
vi load_avatar.php
mysql -uadmin -p ata
ls
cd wp-content/themes/Newsmag/
ls
vi profilo.php
vi ../../../load_avatar.php
cd ../../..
ls
vi load_avatar.php
vi wp-content/themes/Newsmag/profilo.php
vi load_avatar.php
vi wp-content/themes/Newsmag/profilo.php
exit
cd wp-content/themes/atalantini/
ls
cd ../Newsmag/
ls
vi last_comments.php
cd wp-content/
grep -R 'footer-logo-wrap' *
vi plugins/td-composer/legacy/Newsmag/parts/footer/td_footer_extra.php
exit
cd wp-content/themes/Newsmag/
ls
ssh paolo@www.cotecha.it
pwd
vi last_comments.php
cd
cat wp-config.
cat wp-config.php
mysql -uadmin -p ata
pwd
cd wp-content/themes/atalantini/
ls
cd ../Newsmag/
ls
vi registrazione.php
vi wp-config.php
mysql -uadmin -p ata
cd wp-content/themes/Newsmag/
vi login.php
grep facebook *
cd wp-content/plugins/
ls
exit
mkdir old
mv wp-content/plugins/revslider old/
unzip codecanyon-8jMNufQU-slider-revolution-responsive-wordpress-plugin.zip
mv revslider wp-content/plugins/
cd wp-content/plugins/
cd td-composer/
grep -R 'entry-title td-module-title' *
vi legacy/common/wp_booster/td_module.php
cd
cd wp-content/themes/Newsmag/
ls
vi last_comments.php
cd ../../plugins/wpdiscuz
ls
cd ../wpdiscuz-emoticons/
ls
vi wpDiscuzSmileOptions.php
vi wpDiscuzSmile.php
grep -R 'png' *
vi emoticons/wpsmiliestrans.php
grep regex *
grep -R regex *
grep -R str_replace *
vi emoticons/wpsmiliestrans.php
vi ../../themes/Newsmag/last_comments.php
grep -R 'wpsmiliestrans' *
vi wpDiscuzSmileOptions.php
vi ../../themes/Newsmag/last_comments.php
vi emoticons/wpsmiliestrans.php
grep -R ':twisted:' *
vi 1
mv 1 /var/www/html/ata/
grep -R ':twisted:' *
vi ../../themes/Newsmag/last_comments.php
vi ../../../1
vi emoticons/wpsmiliestrans.php
vi ../../themes/Newsmag/last_comments.php
find ./ -name canna.gif
pwd
vi ../../themes/Newsmag/last_comments.php
cd wp-content/themes/Newsmag/
vi functions.php
exit
cd wp-content/themes/Newsmag/
grep -R 'td_social_button' *
cd ../../plugins/
grep -R 'td_social_button' *
vi td-social-counter/shortcode/td_block_social_counter.php
grep -R 'td_social_button' *
vi td-social-counter/shortcode/td_block_social_counter.php
vi ../../wp-config.php
mysql -uadmin -p ata
pwd
find ./ -name tdc_sidebar*
cd ../..
find ./ -name tdc_sidebar*
cd wp-content/plugins/
grep -R 'td-module-comments' *
vi td-composer/legacy/common/wp_booster/td_module.php
cd wp-content/themes/Newsmag/
ls
vi functions.php
cd wp-content/themes/Newsmag/
ls
vi functions.php
yum install ImageMagick
yum install Image*
yum install php-gd
su
ls
exit
df -h
date
exit
cd wp-content/themes/atalantini/
cd ../Newsmag/
vi functions.php
exit
cd wp-content/plugins/
mv ../../set-all-first-images-as-featured.1.2.2.zip .
unzip set-all-first-images-as-featured.1.2.2.zip
cd wp-content/themes/Newsmag/
vi functions.php
cd wp-content/themes/Newsmag/
vi functions.php
php functions.php
vi functions.php
cd wp-content/themes/atalantini/
ls
cd ../Newsmag/
ls
vi functions.php
ssh paolo@www.cotecha.it
vi functions.php
exit
vi wp-config.php
mysql -uadmin -p ata
cd wp-content/themes/Newsmag/
vi last_comments.php
exit
ls
rm -rf atalantini
ls
sudo su
su
exit
su
mv td_300x194.png wp-content/plugins/td-composer/legacy/Newsmag/assets/images/no-thumb/
exit
mv td_100x75.png wp-content/plugins/td-composer/legacy/Newsmag/assets/images/no-thumb/
exit
mv td_300x160.png wp-content/plugins/td-composer/legacy/Newsmag/assets/images/no-thumb/
cd
cd wp-content/plugins/td-composer/
find ./ -mtime -20
vi ./legacy/common/wp_booster/td_module.php
exit
df -h
su
cd wp-content/plugins/
ls
pwd
exit
cd wp-content/themes/atalantini/
cd ../Newsmag/
ls
vi style.css
vi editor-style.css
sudo su
ls
vi import_comments.php
cp percassi10.txt comments.txt
vi comments.txt
vi import_comments.php
php import_comments.php
exit
ls
ls -l
rm user.dump
rm wpdiscuz-emoticons-1.2.6.zip
rm codecanyon-8jMNufQU-slider-revolution-responsive-wordpress-plugin.zip
ls
rm latest.tar.gz revslider.zip
ls -l
du -sh *
cd wp-content/themes/atalantini/chats/
ls
rm -rf chat_whatsapp_con_atalantini_com_apptesters
su
pwd
ls
cd ../../..
cd
pwd
history | grep mysql
mysqldump -uadmin -p ata > ata.dump
ls
ls -l
su
exit
cd wp-content/uploads/2020/
ls
cd 04/
ls
scp supporta_paypal* atalantini@www.cotecha.it:./wp-content/upload/2020/04/
pwd
scp supporta_paypal* atalantini@www.cotecha.it:./wp-content/uploads/2020/04/
cd wp-content/uploads/2020/03/
scp -r * atalantini@www.cotecha.it:./wp-content/uploads/2020/03/
l
ls
passwd ata
passwd
exit