HEX
Server: nginx/1.18.0
System: Linux vps-9dcdb12e 5.15.0-176-generic #186-Ubuntu SMP Fri Mar 13 11:01:42 UTC 2026 x86_64
User: ubuntu (1000)
PHP: 8.1.2-1ubuntu2.24
Disabled: exec,passthru,shell_exec,system,proc_open,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source
Upload Files
File: //tmp/sharp_OVH.txt
### SHARP SCAN OVH ###

## A] ressasantikaa loader (ultra-builder/Aksismet/kakek) - tylko PHP, nie xml/wpress ##

## B] bagaimanaa/pages.dev/BANDOT/NAGAHOKI (katalogi malware) - tylko PHP ##

## C] forum-integritas / officialsite.txt / file_get_contents+echo loader w motywach ##

## D] the_content_base / md5(sha1(HTTP_HOST)) w functions.php motywu ##
arsmedica.bialystok.pl
brutals.pl

## E] eval(file_get_contents/curl remote) loader w motywie functions/header ##

## F] Pliki google-verif (Search Console hijack) ##

## G] root index.php loader (eval str_rot13/gzinflate/filestack) ##

DONE_SHARP_OVH