先月私個人のサーバーに404アクセスしてきたイ・ケ・な・いURLたちの集計結果を公表する

存在しない URL にアクセスしてくるイ・ケ・な・い人たちの手口（のたぶん一部）を公表したいと思います。

## 1. アクセス回数（上位30）のURL（2024.06）
| 順位 | 回数 | URL |
|-----------:|------------:|:------------|
| 1|26|/.env|
| 2|23|/wp-content/plugins/WordPressCore/include.php|
| 3|16|/wp-content/plugins/include.php|
| 4|15|/wordpress|
| 5|15|/wp|
| 6|15|/old|
| 7|15|/new|
| 8|15|/home|
| 9|13|/bc|
| 10|13|/bk|
| 11|13|/backup|
| 12|13|/main|
| 13|13|/wp-includes/images/include.php|
| 14|12|/mt/mt-xmlrpc.cgi|
| 15|12|/cgi-bin/mt/mt-xmlrpc.cgi|
| 16|11|/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php|
| 17|9|/simple.php|
| 18|8|/wp-content/plugins/index.php|
| 19|8|/themes.php|
| 20|8|/wp-includes/widgets/include.php|
| 21|8|/wp-content/plugins/wp-theme-editor/include.php|
| 22|8|/wp-ver.php|
| 23|7|/wp-add.php?a=c|
| 24|7|/wp-content/themes/seotheme/mar.php|
| 25|7|/class.api.php|
| 26|7|/wp-content/plugins/core-plugin/include.php|
| 27|7|/wp-content/upgrade/|
| 28|6|/atomlib.php|
| 29|6|/wp-includes/css/index.php|
| 30|6|/wp-includes/SimplePie/index.php|

### 変わり種を1つご紹介
こんなのもありました...

```
/laravel-filemanager/download?working_dir=%2F../../../../../../../../../../../../../../../../../../../etc/passwd
```

全てのURLの一覧は最後に掲載しています。


## 2.404アクセス継続時間（上位30）のIPアドレス（2024.06）
（アクセスが途切れて10分を超えた場合は新たなIPアドレス(2)などとして集計）
| 順位 | 継続時間 | IPアドレス |
|-----------:|:-----------:|:------------|
| 1 |17分16秒|91.92.244.81 (4)|
| 2 |10分 8秒|91.92.244.113|
| 3 |7分48秒|91.92.244.81|
| 4 |6分22秒|152.42.252.243|
| 5 |5分27秒|173.239.214.217|
| 6 |4分42秒|173.239.214.224|
| 7 |4分41秒|173.239.214.229|
| 8 |4分14秒|173.239.214.196|
| 9 |4分 1秒|173.239.214.184 (2)|
| 10 |3分46秒|173.239.214.190|
| 11 |3分43秒|45.142.107.177|
| 12 |3分32秒|103.163.220.142|
| 13 |3分32秒|41.216.188.120|
| 14 |3分23秒|173.239.214.183|
| 15 |3分19秒|103.163.220.147|
| 16 |3分 4秒|173.239.214.195 (2)|
| 17 |2分59秒|173.239.214.204|
| 18 |2分27秒|104.28.213.199|
| 19 |2分25秒|173.239.214.187 (2)|
| 20 |2分19秒|104.28.222.63|
| 21 |2分10秒|91.92.243.31 (2)|
| 22 |2分 4秒|173.239.214.185|
| 23 |2分 3秒|103.163.220.173|
| 24 |1分58秒|91.92.242.152|
| 25 |1分55秒|128.199.162.132|
| 26 |1分53秒|91.92.244.81 (5)|
| 27 |1分51秒|94.156.68.27|
| 28 |1分48秒|91.92.243.31|
| 29 |1分31秒|173.239.214.220|
| 30 |1分31秒|91.92.242.152 (2)|

## 3. うざい例（2024.07）
ある特定のIPアドレスからの404アクセス（今月のデータの一部です）
1秒間に何回もアクセスしてくる...よくある例です。

| 時刻 | URL |
|:------------:|:------------|
| 07:43:21 | /wp-includes/Requests/about.php |
| 07:43:21 | /wp-includes/style-engine/about.php |
| 07:43:21 | /wp-includes/rest-api/about.php |
| 07:43:22 | /wp-includes/SimplePie/about.php |
| 07:43:22 | /wp-content/banners/about.php |
| 07:43:22 | /wp-content/about.php |
| 07:43:23 | /.well-known/about.php |
| 07:43:23 | /wp-includes/Text/about.php |
| 07:43:23 | /wp-includes/ID3/about.php |

<details><summary>（続き ＝ 約250行が見たい場合はこちら）</summary>

| 時刻 | URL |
|:------------:|:------------|
| 07:43:24 | /img/about.php |
| 07:43:24 | /wp-content/languages/about.php |
| 07:43:24 | /wp-includes/customize/about.php |
| 07:43:24 | /wp-includes.bak/html-api/about.php |
| 07:43:25 | /wp-includes/widgets/about.php |
| 07:43:25 | /wp-includes/IXR/about.php |
| 07:43:25 | /.well-known/pki-validation/about.php |
| 07:43:26 | /wp-includes/pomo/about.php |
| 07:43:26 | /wp-includes/block-patterns/about.php |
| 07:43:26 | /wp-content/updraft/about.php |
| 07:43:26 | /wp-content/upgrade-temp-backup/about.php |
| 07:43:27 | /wp-content/themes/about.php |
| 07:43:27 | /images/about.php |
| 07:43:27 | /wp-content/blogs.dir/about.php |
| 07:43:28 | /wp-includes/images/about.php |
| 07:43:28 | /wp-includes/about.php |
| 07:43:28 | /cgi-bin/about.php |
| 07:43:29 | /wp-content/gallery/about.php |
| 07:43:29 | /wp-includes/blocks/about.php |
| 07:43:29 | /.well-known/pki-validation/cloud.php |
| 07:43:30 | /.well-known/acme-challenge/cloud.php |
| 07:43:30 | /cloud.php |
| 07:43:30 | /cgi-bin/cloud.php |
| 07:43:31 | /wp-content/updates.php |
| 07:43:31 | /css/cloud.php |
| 07:43:31 | /img/cloud.php |
| 07:43:32 | /avaa.php |
| 07:43:32 | /images/cloud.php |
| 07:43:33 | /wp-includes/Requests/Text/admin.php |
| 07:43:33 | /updates.php |
| 07:43:34 | /libraries/legacy/updates.php |
| 07:43:34 | /libraries/phpmailer/updates.php |
| 07:43:34 | /libraries/vendor/updates.php |
| 07:43:34 | /alfa-rex.php7 |
| 07:43:35 | /alfanew.php |
| 07:43:35 | /wp-content/plugins/Cache/Cache.php |
| 07:43:35 | /wp-p.php7 |
| 07:43:36 | /wp-includes/repeater.php |
| 07:43:36 | /wp-content/repeater.php |
| 07:43:36 | /wsoyanz.php |
| 07:43:37 | /yanz.php |
| 07:43:37 | /wp-content/plugins/seoo/wsoyanz.php |
| 07:43:37 | /wp-content/plugins/seoo/wsoyanz1.php |
| 07:43:37 | /cache-compat.php |
| 07:43:38 | /ajax-actions.php |
| 07:43:38 | /wp-consar.php |
| 07:43:38 | /repeater.php |
| 07:43:39 | /admin-post.php |
| 07:43:40 | /dropdown.php |
| 07:43:40 | /about.php |
| 07:43:40 | /about.php7 |
| 07:43:40 | /alfanew.php7 |
| 07:43:41 | /adminfuns.php7 |
| 07:43:41 | /ebs.php7 |
| 07:43:41 | /ws.php7 |
| 07:43:41 | /alfanew2.php7 |
| 07:43:42 | /alfa-rex2.php7 |
| 07:43:42 | /wp-content/themes/seotheme/mar.php |
| 07:43:43 | /wp-content/plugins/seoplugins/mar.php |
| 07:43:43 | /.well-known/pki-validation/xmrlpc.php?p= |
| 07:43:43 | /.well-known/acme-challenge/xmrlpc.php?p= |
| 07:43:44 | /xmrlpc.php?p= |
| 07:43:44 | /cgi-bin/xmrlpc.php?p= |
| 07:43:44 | /css/xmrlpc.php?p= |
| 07:43:45 | /img/xmrlpc.php?p= |
| 07:43:45 | /images/xmrlpc.php?p= |
| 07:43:46 | /text.php |
| 07:43:46 | /makeasmtp.php |
| 07:43:47 | /index.php |
| 07:43:47 | /cgi-bin/xmrlpc.php |
| 07:43:47 | /404.php |
| 07:43:48 | /wp-configs.php |
| 07:43:48 | /simple.php |
| 07:43:48 | /themes.php |
| 07:43:48 | /ini.php |
| 07:43:49 | /autoload_classmap.php |
| 07:43:49 | /as.php |
| 07:43:49 | /admin/upload/css.php |
| 07:43:49 | /.well-known/pki-validation/afnew.php |
| 07:43:50 | /lufix.php |
| 07:43:50 | /media.php |
| 07:43:50 | /simple.php |
| 07:43:51 | /contact.php |
| 07:43:51 | /byp.php |
| 07:43:51 | /upload.php |
| 07:43:51 | /wp-content/themes/sketch/404.php |
| 07:43:52 | /test.php |
| 07:43:52 | /cong.php |
| 07:43:52 | /about/function.php |
| 07:43:53 | /filemanager/dialog.php |
| 07:43:53 | /bak.php |
| 07:43:53 | /wp-info.php |
| 07:43:53 | /files/index.php |
| 07:43:54 | /css.php |
| 07:43:54 | /css/index.php |
| 07:43:54 | /wp-includes/bak.php |
| 07:43:55 | /alfa-rex.php7 |
| 07:43:55 | /wp-includes/cloud.php |
| 07:43:55 | /wp-content/index.php |
| 07:43:55 | /readme.php |
| 07:43:56 | /wp-content/themes/404.php |
| 07:43:56 | /wp-content/themes.php |
| 07:43:57 | /wp-content/dropdown.php |
| 07:43:57 | /wp-includes/404.php |
| 07:43:57 | /wp-content/upgrade/index.php |
| 07:43:57 | /cgi-bin/file.php |
| 07:43:58 | /.well-known/index.php |
| 07:43:58 | /wp-content/cloud.php |
| 07:43:58 | /.well-known/acme-challenge/index.php |
| 07:43:59 | /cgi-bin/404.php |
| 07:43:59 | /wp-includes/function.php |
| 07:43:59 | /file.php |
| 07:43:59 | /.well-known/acme-challenge/autoload_classmap.php |
| 07:44:00 | /wp-includes/themes.php |
| 07:44:00 | /wp-content/file.php |
| 07:44:00 | /wp-trackback.php |
| 07:44:01 | /cgi-bin/index.php |
| 07:44:01 | /.well-known/cloud.php |
| 07:44:02 | /.well-known/wp-load.php |
| 07:44:02 | /.well-known/file.php |
| 07:44:02 | /.well-known/makeasmtp.php |
| 07:44:02 | /wp-includes/index.php |
| 07:44:03 | /.well-known/acme-challenge/admin.php |
| 07:44:03 | /.well-known/acme-challenge/makeasmtp.php |
| 07:44:03 | /radio.php |
| 07:44:04 | /wp-content/themes/index.php |
| 07:44:04 | /wp-includes/admin.php |
| 07:44:04 | /wp-includes/system_log.php?p= |
| 07:44:04 | /wp-includes/wp-activate.php |
| 07:44:05 | /wp-includes/makeasmtp.php |
| 07:44:05 | /link.php |
| 07:44:05 | /wp-content/autoload_classmap.php |
| 07:44:06 | /cgi-bin/themes.php |
| 07:44:06 | /wp-content/themes/admin.php |
| 07:44:06 | /function.php |
| 07:44:07 | /log.php |
| 07:44:07 | /wp-content/themes/themes.php |
| 07:44:07 | /.well-known/radio.php |
| 07:44:08 | /wp-mail.php |
| 07:44:08 | /.well-known/pki-validation/index.php |
| 07:44:08 | /.well-known/admin.php |
| 07:44:09 | /wp-links-opml.php |
| 07:44:09 | /.well-known/acme-challenge/radio.php |
| 07:44:09 | /wp-content/upgrade/function.php |
| 07:44:10 | /cgi-bin/radio.php |
| 07:44:10 | /.well-known/pki-validation/wp-config.php |
| 07:44:11 | /wp-content/radio.php |
| 07:44:11 | /wp-content/plugins/about.php |
| 07:44:11 | /wp-includes/wp-load.php |
| 07:44:12 | /.well-known/dropdown.php |
| 07:44:12 | /wp-content/plugins/dropdown.php |
| 07:44:13 | /wp-signup.php |
| 07:44:13 | /wp-includes/images/css.php |
| 07:44:13 | /chosen.php |
| 07:44:13 | /wp-content/cong.php |
| 07:44:14 | /mah.php |
| 07:44:14 | /.well-known/acme-challenge/plugins.php |
| 07:44:14 | /ova-tools.php |

</details>

## 4. 404アクセス全URL（ABC順）（2024.06）
```
/.aws/credentials/phpinfo
/.env
/.env.bak
```
<details><summary>（続き ＝ 約2,700行が見たい場合はこちら）</summary>

```
/.env.dev
/.env.example
/.env.php
/.env.txt
/.environment
/.git/config
/.local
/.php
/.tmb/
/.tmb/%21about.php
/.tmb/00.php
/.tmb/about.php
/.tmb/admin.php
/.tmb/asp.php
/.tmb/cloud.php
/.tmb/doc.php
/.tmb/iR7SzrsOUEP.php
/.tmb/moon.php
/.tmb/network.php
/.tmb/style.php
/.tmb/wp-inda.php
/.vscode/sftp.json
/.well-known/
/.well-known//.well-known/owlmailer.php
/.well-known/about.php
/.well-known/acme-challenge/
/.well-known/acme-challenge/Intitle.php
/.well-known/acme-challenge/LA.php
/.well-known/acme-challenge/about.php
/.well-known/acme-challenge/admin.php
/.well-known/acme-challenge/adminfuns.php
/.well-known/acme-challenge/atomlib.php
/.well-known/acme-challenge/bs.php
/.well-known/acme-challenge/class.api.php
/.well-known/acme-challenge/class_api.php
/.well-known/acme-challenge/cloud.php
/.well-known/acme-challenge/cong.php
/.well-known/acme-challenge/content.php
/.well-known/acme-challenge/doc.php
/.well-known/acme-challenge/dropdown.php
/.well-known/acme-challenge/edit.php
/.well-known/acme-challenge/fond.php
/.well-known/acme-challenge/gecko.php
/.well-known/acme-challenge/iR7SzrsOUEP.php
/.well-known/acme-challenge/index.php
/.well-known/acme-challenge/install.php
/.well-known/acme-challenge/license.php
/.well-known/acme-challenge/mariju.php
/.well-known/acme-challenge/moon.php
/.well-known/acme-challenge/network.php
/.well-known/acme-challenge/options.php
/.well-known/acme-challenge/plugins.php
/.well-known/acme-challenge/samll.php
/.well-known/acme-challenge/sclass_api.php
/.well-known/acme-challenge/server.php
/.well-known/acme-challenge/shell.php
/.well-known/acme-challenge/simple.php
/.well-known/acme-challenge/sx.php
/.well-known/acme-challenge/themes.php
/.well-known/acme-challenge/update.php
/.well-known/acme-challenge/upfile.php
/.well-known/acme-challenge/users.php
/.well-known/acme-challenge/wp-blog.php
/.well-known/acme-challenge/wp-load.php
/.well-known/acme-challenge/wp-signup.php
/.well-known/acme-challenge/wso112233.php
/.well-known/acme-challenge/xmrlpc.php
/.well-known/acme-challenge/xmrlpc.php?p=
/.well-known/admin.php
/.well-known/alfanew.php
/.well-known/atomlib.php
/.well-known/chosen.php
/.well-known/class.api.php
/.well-known/class_api.php
/.well-known/classwithtostring.php
/.well-known/content.php
/.well-known/data/
/.well-known/doc.php
/.well-known/exit.php
/.well-known/gif.php
/.well-known/gix.php
/.well-known/gtteeflx.php
/.well-known/heex.php
/.well-known/inc/
/.well-known/index.php
/.well-known/install.php
/.well-known/js.php
/.well-known/mar.php
/.well-known/mini.php
/.well-known/network.php
/.well-known/old/
/.well-known/options.php
/.well-known/pki-validation/
/.well-known/pki-validation/007spy.php
/.well-known/pki-validation/1.php
/.well-known/pki-validation/403.php
/.well-known/pki-validation/404.php
/.well-known/pki-validation/LA.php
/.well-known/pki-validation/about.php
/.well-known/pki-validation/admin.php
/.well-known/pki-validation/admin1.php
/.well-known/pki-validation/adminfuns.php
/.well-known/pki-validation/amaxx.php
/.well-known/pki-validation/atomlib.php
/.well-known/pki-validation/autoload_classmap.php
/.well-known/pki-validation/bless.php
/.well-known/pki-validation/bypass.php
/.well-known/pki-validation/class.api.php
/.well-known/pki-validation/class_api.php
/.well-known/pki-validation/classwithtostring.php
/.well-known/pki-validation/cloud.php
/.well-known/pki-validation/cloud1.php
/.well-known/pki-validation/colors/
/.well-known/pki-validation/cong.php
/.well-known/pki-validation/content.php
/.well-known/pki-validation/db-update.php
/.well-known/pki-validation/delpaths.php
/.well-known/pki-validation/doc.php
/.well-known/pki-validation/dropdown.php
/.well-known/pki-validation/edit.php
/.well-known/pki-validation/file.php
/.well-known/pki-validation/fm.php?xsec=blocker
/.well-known/pki-validation/fond.php
/.well-known/pki-validation/gif.php
/.well-known/pki-validation/gix.php
/.well-known/pki-validation/iR7SzrsOUEP.php
/.well-known/pki-validation/index.php
/.well-known/pki-validation/indexx.php
/.well-known/pki-validation/install.php
/.well-known/pki-validation/license.php
/.well-known/pki-validation/load.php
/.well-known/pki-validation/lock.php
/.well-known/pki-validation/mar.php
/.well-known/pki-validation/mariju.php
/.well-known/pki-validation/min.php
/.well-known/pki-validation/moon.php
/.well-known/pki-validation/moon1.php
/.well-known/pki-validation/network.php
/.well-known/pki-validation/plugins.php
/.well-known/pki-validation/radio.php
/.well-known/pki-validation/sclass_api.php
/.well-known/pki-validation/server.php
/.well-known/pki-validation/settings.php
/.well-known/pki-validation/setup.php
/.well-known/pki-validation/shell.php
/.well-known/pki-validation/ssl.php?xsec=blocker
/.well-known/pki-validation/sts.php
/.well-known/pki-validation/sx.php
/.well-known/pki-validation/system.php
/.well-known/pki-validation/termps.php
/.well-known/pki-validation/test.php
/.well-known/pki-validation/themes.php
/.well-known/pki-validation/top.php
/.well-known/pki-validation/update.php
/.well-known/pki-validation/upfile.php
/.well-known/pki-validation/upfile_%282%29.php
/.well-known/pki-validation/user.php
/.well-known/pki-validation/users.php
/.well-known/pki-validation/validation.php
/.well-known/pki-validation/w.php
/.well-known/pki-validation/web.php
/.well-known/pki-validation/worksec.php
/.well-known/pki-validation/wp-admin.php
/.well-known/pki-validation/wp-blog.php
/.well-known/pki-validation/wp-load.php
/.well-known/pki-validation/wp-login.php
/.well-known/pki-validation/wp-sigunq.php
/.well-known/pki-validation/wp-theme.php
/.well-known/pki-validation/x.php
/.well-known/pki-validation/xl2023.php
/.well-known/pki-validation/xmrlpc.php
/.well-known/pki-validation/xmrlpc.php?p=
/.well-known/pki-validation/zh-cns.php
/.well-known/pkivalidation/
/.well-known/plugins.php
/.well-known/security.txt
/.well-known/server.php
/.well-known/sx.php
/.well-known/themes.php
/.well-known/traffic-advice
/.well-known/users.php
/.well-known/wp-2019.php
/.well-known/wp-conflg.php
/.well-known/wp-cron.php?ac=3
/.well-knownold/
/.wp-cli/
/.wp-cli/wp-login.php
//
//RxR.php
//wp-content/plugins/fix/up.php
//wp-includes/css/buttons.css
/00.php
/01.php
/0x.php
/0z.php
/1.php
/11.php
/12.php
/123.php
/1234.php
/1337.php
/1mine.php
/2.php
/2019/wp-includes/wlwmanifest.xml
/2020/wp-includes/wlwmanifest.xml
/3x.php
/3x.php?3x=3x
/3xrx.php
/4.php
/403.php
/404.php
/4price3.php
/7.php
/87.php
/888.php
/991176.php
/AK-74.php
/ALFA_DATA/
/ALFA_DATA/alfacgiapi/
/ALFA_DATA/alfacgiapi/alfa.php
/ALFA_DATA/alfacgiapi/c99.php
/ALFA_DATA/alfacgiapi/fw.php
/ALFA_DATA/alfacgiapi/heex.php
/ALFA_DATA/alfacgiapi/mini.php
/ALFA_DATA/alfacgiapi/perl.alfa
/ALFA_DATA/alfacgiapi/r57.php
/ALFA_DATA/alfacgiapi/shell.php
/ALFA_DATA/alfacgiapi/uploader.php
/ALFA_DATA/alfacgiapi/ups.php
/Admin/uploads/
/Alfa.php
/Alfashell.php
/Casper.php
/Composer.php
/Diff.php
/Evil.php
/F0x.php
/FoxWSOv1.php
/FoxWSOv2.php
/IOptimize.php
/IndoXploit.php
/Intitle.php
/LA.php
/LV.php
/M1.php
/MARIJUANA.php
/MARJUNA.php
/MT//RxR.php
/Marvins.php
/Mhbgf.php
/MyShell.php
/Njima.php
/Public/
/R00T.php
/Simple.php
/Simple_PHP_backdoor.php
/Telerik.Web.UI.WebResource.axd?type=rau
/Typography.php
/WSOEnigma.php
/WordPress/
/WordPress/blob/master/wp-includes/
/XSam-XAdoo.php
/XxX.php
/YvKxJywQEgs.php
/__tests__/test-become/.env
/_admin/
/_fragment?_path=_controller%3Dphpcredits%26flag%3D2&_hash=%2BYO1V1OeZAb7v5lJgBjS3MWXUSMiys2lbKQeH3dVkRo=
/_fragment?_path=_controller%3Dphpcredits%26flag%3D2&_hash=7rDYJ6zIaLBVUzGQ1MnVx8e4WP9cWw7CNLlDm40Lh8A=
/_fragment?_path=_controller%3Dphpcredits%26flag%3D2&_hash=LphsxS0kBEbELejSWrsrplBU6WcBIqL6OHxkQsO8Ask=
/_fragment?_path=_controller%3Dphpcredits%26flag%3D2&_hash=S6CLIaQhg8Wj98USrnEGGPnKJBvIq8qjuwOFiBc0w58=
/_fragment?_path=_controller%3Dphpcredits%26flag%3D2&_hash=YskbOzB9X9a3d8s0ONiynjveZzdKLPXQ/k1ExhCNyYs=
/_fragment?_path=_controller%3Dphpcredits%26flag%3D2&_hash=btgi%2BVBQEQoDN3zEU966OzJnAWzGeLzUdupaNLYsmuk=
/_fragment?_path=_controller%3Dphpcredits%26flag%3D2&_hash=fDOyPpqhE33saz85xikjA4qFy0sVdNMc%2B4aGwpAPmXc=
/_fragment?_path=_controller%3Dphpcredits%26flag%3D2&_hash=vB6D1y61JAR%2BBmeWrA6fsxNKxg0MFNglxXXa7DfMIS0=
/_ignition/execute-solution
/_ignition/execute-solution/
/a.php
/aa.php
/about-us/
/about.php
/about.php7
/about/
/about/function.php
/abouts.php
/acces.php
/account/
/aci.php
/aclass.api.php
/add.php
/admin-ajax.php
/admin-heade.php
/admin-header.php
/admin-post.php
/admin.php
/admin.php/iR7SzrsOUEP.php
/admin/
/admin/.env
/admin/ckeditor/kcfinder/upload.php
/admin/ckeditor/plugins/kcfinder/upload.php
/admin/content/sitetree/
/admin/controller/extension/
/admin/controller/extension/extension/
/admin/core/kcfinder/upload.php
/admin/editor/
/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php
/admin/field.php
/admin/filemanager/dialog.php
/admin/images/slider/
/admin/includes/general.js
/admin/js/kcfinder/upload.php
/admin/kcfinder/upload.php
/admin/option.php
/admin/responsive_filemanager/filemanager/dialog.php
/admin/tmp/
/admin/upload/
/admin/upload/boss.php
/admin/upload/css.php
/admin/uploads/
/admin/uploads/images/
/admin/view/javascript/common.js
/admin123/
/admin123/filemanager/
/admin123/filemanager/include/
/adminer.php
/adminfuns.php
/adminfuns.php7
/administrator/
/administrator/.env
/administrator/components/
/administrator/components/com_admin/
/administrator/help/en-GB/toc.json
/administrator/img.php
/administrator/index.php
/administrator/language/en-GB/install.xml
/administrator/logs/
/administrator/templates/
/administrator/templates/bluestork/
/administrator/templates/hathor/
/administrator/templates/hathor/error.php
/administrator/templates/hathor/index.php
/administrator/templates/isis/
/ads.txt
/ae.php
/affiliates/
/aindex.php
/ajax-actions.php
/alf.php
/alfa-ioxi.php
/alfa-rex.php
/alfa-rex.php7
/alfa-rex2.php7
/alfa.php
/alfa1.php
/alfa3.php
/alfacgiapi/perl.alfa
/alfaindex.php
/alfanew.php
/alfanew.php7
/alfanew2.php7
/alfapas.php
/alfarex.php
/alfashell.php
/allahnaber.php
/allez.php
/alpha.php
/am.php
/amaxx.php
/amigo.php
/an.php
/anon.php
/api.php
/api/
/api/.env
/api/.git/config
/app-ads.txt
/app.php
/app/.env
/app/.git/config
/app/config/.env
/app/etc/local.xml
/app/webroot/js/kcfinder/upload.php
/app/webroot/kcfinder/upload.php
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/application/configs/application.ini
/application/themes/admin/assets/js/kcfinder/upload.php
/apps/.env
/archiver.php
/archives.php
/arquivos/javascript/responsive_filemanager/filemanager/dialog.php
/as.php
/asset/filemanager/dialog.php
/asset/kcfinder/upload.php
/assets/
/assets/.env
/assets/.git/config
/assets/acordeonPhp/
/assets/admin.php
/assets/admin/js/tinymce/plugins/filemanager/dialog.php
/assets/admin/tinymce/plugins/filemanager/dialog.php
/assets/app.php
/assets/assets/
/assets/atomlib.php
/assets/authorize.php
/assets/bypass.php
/assets/class.php
/assets/contao/
/assets/contao/css/
/assets/contao/images/
/assets/contao/js/
/assets/css/wizard/
/assets/data.php
/assets/edit.php
/assets/filemanager/dialog.php
/assets/flags/4x3/
/assets/fonts/
/assets/fonts/about.php
/assets/images/
/assets/images/1p.php
/assets/images/about.php
/assets/images/beence.php
/assets/images/class_api.php
/assets/images/cong.php
/assets/images/doc.php
/assets/images/install.php
/assets/images/menu.php
/assets/images/server.php
/assets/images/upfile.php
/assets/images/ups.php
/assets/img/
/assets/img/seaport.php
/assets/img/team/
/assets/inb0x.php
/assets/include.php
/assets/includes/
/assets/jquery/
/assets/js/
/assets/js/about.php
/assets/js/admin.php
/assets/js/kcfinder/upload.php
/assets/js/wso.php
/assets/kcfinder/upload.php
/assets/lib/tinymce/plugins/textpattern/
/assets/lpmi/
/assets/myip.php
/assets/onkoabak.php
/assets/php/
/assets/plugins/filemanager/dialog.php
/assets/plugins/kcfinder/upload.php
/assets/plugins/tinymce/plugins/filemanager/dialog.php
/assets/responsive_filemanager/filemanager/dialog.php
/assets/scripts/filemanager/dialog.php
/assets/shell.php
/assets/source.php
/assets/tinymce/plugins/filemanager/dialog.php
/assets/tool.php
/assets/type.php
/assets/up/
/assets/ventanas_director/
/atomlib.php
/attachments/category/
/audio/.env
/authorize.php
/authorize/
/auto.php
/autoload_classmap.php
/avaa.php
/ayk.php
/b.php
/b0x.php
/b374k-2.8.php
/b374k.php
/backend/
/backend/.env
/backup
/backup.php
/backup/
/baedss.php
/baja.php
/bak.php
/bala.php
/bc
/bc/
/beence.php
/bitrix/admin/
/bk
/bk/
/bless.php
/bless_php1.php
/blocks/table/int/tmpl/
/blockstmp.php
/blog
/blog.php
/blog/
/blog/.env
/blog/.well-known/
/blog/2006/03/07/two-wikis/
/blog/2007/04/02/yandex/
/blog/2007/12/26/accept-header-inconsistencies/
/blog/2008/06/14/forum-import-release/
/blog/2010/01/31/brewers-cap-theorem/
/blog/2020/02/05/dicts-ordered/en/
/blog/2023/12/01/config-success/en/
/blog/css/
/blog/defense.php
/blog/en/
/blog/fm.php
/blog/include.php
/blog/modules/mod_simplefileuploadv1.3/elements/
/blog/payment.php
/blog/robots.txt
/blog/themes.php
/blog/wp-2018.php
/blog/wp-atom.php
/blog/wp-content/
/blog/wp-content/index.php
/blog/wp-content/plugins/
/blog/wp-content/plugins/WordPressCore/
/blog/wp-content/plugins/WordPressCore/include.php
/blog/wp-content/plugins/backup-backup/includes/
/blog/wp-content/plugins/fix/
/blog/wp-content/plugins/fix/up.php
/blog/wp-content/plugins/ubh/
/blog/wp-content/plugins/ubh/up.php
/blog/wp-content/uploads/
/blog/wp-content/uploads/403.php
/blog/wp-includes/
/blog/wp-includes/Text/Diff/Renderer/
/blog/wp-includes/Text/Diff/Renderer/content.php
/blog/wp-includes/classwithtostring.php
/blog/wp-includes/images.php
/blog/wp-includes/link.php
/blog/wp-includes/wlwmanifest.xml
/blog/wp-includes/wso.php
/blog/xmlrpc.php
/blogs/
/blogs/.env
/blogs/wp-includes/ID3/
/blogs/wp-includes/ID3/index.php
/bot.php
/bpa.php
/bs1.php
/bulk.php
/bundle.php
/by.php
/byp.php
/bypass.php
/bypass403.php
/byps.php
/c99.php
/c999shell.php
/cache-compat.php
/cache.php
/cache/
/cc.php
/ccx/
/ccx/index.php
/cgi-bin/
/cgi-bin/.env
/cgi-bin//RxR.php
/cgi-bin/991176.php
/cgi-bin/MT//RxR.php
/cgi-bin/about.php
/cgi-bin/about.php7
/cgi-bin/admin.php
/cgi-bin/cgi-bin/
/cgi-bin/cgi-bin/about.php
/cgi-bin/cgi-bin/about.php7
/cgi-bin/class.api.php
/cgi-bin/class_api.php
/cgi-bin/cloud.php
/cgi-bin/counter_dayx/
/cgi-bin/file.php
/cgi-bin/iR7SzrsOUEP.php
/cgi-bin/install.php
/cgi-bin/moon.php
/cgi-bin/mt//RxR.php
/cgi-bin/mt/mt-xmlrpc.cgi
/cgi-bin/network.php
/cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
/cgi-bin/sx.php
/cgi-bin/temp.php
/cgi-bin/test/
/cgi-bin/upfile.php
/cgi-bin/wp-2019.php
/cgi-bin/wp-blog.php
/cgi-bin/wp-login.php
/cgi-bin/wp-signup.php
/cgi-bin/xmrlpc.php
/cgi-bin/xmrlpc.php?p=
/cgi.php
/checkbex.php
/checkbox.php
/chosen
/chosen.php
/chtmlfuns.php
/cjfuns.php
/cjong.php
/ckeditor/kcfinder/upload.php
/ckeditor/plugins/kcfinder/upload.php
/class-snoopye_wso.php
/class-wp-widget-archives.php
/class-wp-xml.php
/class.api.php
/class.php
/class_api.php
/class_api_1.php
/classapi.php
/classfuns.php
/classsmtps.php
/classwithtostring.php
/client/.env
/cloud.php
/cmd.php
/cms/
/cms/tinymce/filemanager/filemanager/dialog.php
/cms/vendor/responsive_filemanager/filemanager/dialog.php
/cms/wp-includes/wlwmanifest.xml
/cms/wpadmin/network/
/comdofuns.php
/comfunctions.php
/coming-soon/
/common.php
/components/
/components/kcfinder/upload.php
/components/system.php
/confag.php
/config.bak.php
/config.php
/config/
/config/.env
/configs.php
/cong.php
/connects.php
/contact
/contact.php
/contacts.php
/content-post.php
/content.php
/contents.php
/copypaths.php
/core
/core.php
/core/.env
/core/Datavase/.env
/core/app/.env
/core/scripts/kcfinder/upload.php
/core/scripts/wysiwyg/kcfinder/upload.php
/cp.php
/cpanel.php
/credits.php
/credits.php7
/crm/.env
/cron/.env
/cronlab/.env
/crop.php
/crypted.php
/cs.php
/cs/
/css.php
/css/
/css/LA.php
/css/about.php
/css/add.php
/css/admin.php
/css/amaxx.php
/css/assets/
/css/authorize.php
/css/beence.php
/css/class-config.php
/css/class.api.php
/css/cloud.php
/css/contents.php
/css/engine.php
/css/html.php
/css/index.php
/css/install.php
/css/language/
/css/media.php
/css/sgd.php
/css/src.php
/css/sym.php
/css/upfile.php
/css/xmrlpc.php
/css/xmrlpc.php?p=
/curated-albums/
/customize.php
/cut.php
/cw.php
/cwp-config-sample.php
/daes.php
/dashboard/
/data-db.php
/data.php
/database.php
/database/.env
/date.php
/date.php7
/db-update.php
/db.php
/de/
/de/.well-known/
/de/home/
/de/wp-content/
/debug.php
/dec.php
/defaul1.php
/default.php
/default/
/defaults.php
/defender.php
/defense.php
/delete3.php
/delete4.php
/delete5.php
/delpaths.php
/dev/.git/config
/developer/.env
/development/.env
/dialog.php
/dir.php
/dir/
/dirs.php
/disclaimer/
/discount.php
/doc.php
/docs/
/docs/.env
/docs/cc.php
/domain.php
/domains/
/down.php
/download/.env
/dropdown.php
/dropdown.php7
/ebs.php7
/edit.php
/editor/filemanager/dialog.php
/ee.php
/el/
/el/wp-content/plugins/seoplugins/
/ema.php
/email.php
/empty.php
/en-nz/
/engine.php
/env.save
/env.txt
/epinyins.php
/equipo/
/erin1.PhP7
/error-log.php
/error.php
/es/
/es/wp-content/themes/wp-pridmag/
/et/
/et/teenused/
/events/main-stage/
/evil.php
/ex.php
/exapi/.env
/exit.PHP
/exit.php
/expect.php
/export.php
/ext.php
/f.php
/f0x.php
/f35ask.php
/fatal.php
/fckeditor/editor/filemanager/connectors/php/upload.php?Type=Media
/fdgs.php
/feedback.php
/feeds.php
/fi/
/field.php
/file.php
/filefuns.php
/filemanager/
/filemanager/dialog.php
/filemanager/filemanager/dialog.php
/files/
/files/autoload_classmap.php
/files/index.php
/fm.php
/fm.php?xsec=blocker
/fofo.php
/footer.php
/form.php
/forumfilm/
/fosil.php
/fox.php
/fox1.php
/foxwso.php
/foxwsov1.php
/foxx.php
/fpo-chiangrai/web2/wp-content/themes/seotheme/
/fr/
/fr/honest.php
/fun.php
/func.php
/function.php
/fw.php
/g.php
/gallery/
/gallery/images/
/gallery/include.php
/gawean.PhP7
/gaza.php
/gecko-new.php
/gecko.php
/geco.php
/geju.php
/gel4y.php
/gelay.php
/gettest.php
/gf.php
/gif.php
/gifshell.php
/gists/cache
/gix.php
/go2/
/good.php
/goods.php
/google.php
/gray.php
/green.php
/h0110w4y.php
/h4xor.php
/hacked.php
/hax.php
/haxor.php
/head.php
/heex.php
/hehe.php
/hello.php
/help.php
/highLightTitle.png
/hinfofuns.php
/home
/home.php
/home/
/home/wp-content/themes/seotheme/
/hoot.php
/hosting.php
/htaccess.php
/html.php
/hu/
/humans.txt
/hxol.php
/iR7SzrsOUEP.php
/ico.php
/icomsium.php
/identification/
/images.php
/images/
/images/1/
/images/6/
/images/LA.php
/images/Marvins.php
/images/about.php
/images/admin.php
/images/atomlib.php
/images/authorize.php
/images/avatar/
/images/avatar/12.php
/images/bak.php
/images/banner/
/images/class-config.php
/images/class.php
/images/cloud.php
/images/common/
/images/common/class_api.php
/images/config.php
/images/connexion/
/images/content/revslider/
/images/contents.php
/images/dir/
/images/downloads/
/images/editor/separator.gif
/images/f35ask.php
/images/file.php
/images/front_galery/
/images/gallery/
/images/headers/
/images/headers/mar.php
/images/iR7SzrsOUEP.php
/images/icons/
/images/icons/content.php
/images/icons/icons.php
/images/icons/modules.php
/images/image/
/images/images.php
/images/images/
/images/items/
/images/js.php
/images/login.php
/images/matr_imgs/
/images/megamenu/
/images/news/
/images/news/func.php
/images/profiles/
/images/sclass.api.php
/images/server.php
/images/system.php
/images/thumb.php
/images/tinyfilemanager.php
/images/upload.php
/images/upload/
/images/upload/admin.php
/images/uploads/
/images/uploads/404.php
/images/uploads/atomlib.php
/images/wp-2019.php
/images/ws.php
/images/xmrlpc.php
/images/xmrlpc.php?p=
/img/
/img/about.php
/img/admin.php
/img/cloud.php
/img/img.php
/img/ini.php
/img/service.php
/img/source.php
/img/style-css.php
/img/whm2.php
/img/xmrlpc.php
/img/xmrlpc.php?p=
/inbox.php
/inc.php
/include.php
/include/
/include/amaxx.php
/include/include.php
/include/lib.php
/includes.php
/includes/
/indeex.php
/index.php
/index.php?3x=3x
/index/function.php
/index1.php
/index2.php
/index_.php
/indexs.php
/indexx.php
/indo.php
/indosec.php
/indoxploit.php
/infaccess/
/infi.php
/info.php
/ini.php
/init.php
/inje3ctor.php
/input.php
/inputs.php
/install.php
/international/
/intro/
/ioxi-rex.php
/ioxi002.PhP7
/ioxi2.php
/iqb.php
/ir/uploads/
/irrrndex.php
/issue/administrator/
/issue/administrator/index.php
/it/
/item.php
/ivc/
/j.php
/ja/
/jiema.php
/jindex.php
/jobs/
/jp.php
/jquery.php
/jquery/kcfinder/upload.php
/js.php
/js/
/js/03.php
/js/app.php
/js/be.php
/js/class.php
/js/default.php
/js/fileManager/filemanager/dialog.php
/js/header-rollup-554.js
/js/install.php
/js/kcfinder/upload.php
/js/mage/cookies.js
/js/tiny_mce/plugins/ajaxfilemanager/ajax_create_folder.php
/js/tinymce/kcfinder/upload.php
/js/tinymce4/plugins/filemanager/dialog.php
/jscripts/tiny_mce/plugins/ajaxfilemanager/ajax_create_folder.php
/json.php
/jss.php
/kcfinder/upload.php
/key-point_br.php
/kk.php
/l10n.php
/lab.php
/landing-page/
/landing/
/laravel-filemanager/download?working_dir=%2F../../../../../../../../../../../../../../../../../../../etc/passwd
/laravel/.env
/law/images/ico_blank.png
/layouts/System/VisitorIdentification.aspx
/leaf.php
/learn/lib/horde/locale/eu/
/lf.php
/lfix.php
/lfixx.php
/lib.php
/lib/filemanager/dialog.php
/lib/kcfinder/upload.php
/lib/tinymce/plugins/textpattern/
/libraries/joomla/
/libraries/legacy/
/libraries/legacy/updates.php
/libraries/phpmailer/
/libraries/phpmailer/updates.php
/libraries/vendor/
/libraries/vendor/updates.php
/library.php
/library/.env
/libs/kcfinder/upload.php
/license.php
/liefs.php
/link.php
/load-scripts.php
/load-styles.php
/local/.env
/locale.php
/localhost/.env
/locally/.env
/locations/
/locations/london-on/
/lock.php
/lock360.php
/locks.php
/log-in/
/log.php
/login-page/
/login.php
/login/
/lol.php
/luck.php
/lufi.php
/lufiix.php
/lufix.php
/lufixn.php
/lufx.php
/lux.php
/lv.php
/lv/
/lx.php
/m.php
/mad.php
/magento_version
/magmi-importer/conf/magmi.ini
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
/magmi/conf/magmi.ini
/magmi/web/download_file.php?file=../../app/etc/local.xml
/mah.php
/mail.php
/mail/src/
/mail/src/compose.php
/main
/main.php
/main/
/main/.env
/maintenance/
/makeasmtp.php
/malls.php
/manager/
/manutencao/
/map.php
/mar.php
/mari.php
/marijuana.php
/mass.php
/masss.php
/max.php
/media-upload.php
/media.php
/media/cms/footer/
/media/css/
/media/filemanager/dialog.php
/media/kcfinder/upload.php
/member-login/
/menu.php
/min.php
/mini.php
/misc/ajax.js
/moddofuns.php
/module.php
/modules.php
/modules/
/modules//mod_rebug/library/index.php
/modules/ini.php
/modules/mod_simplefileuploadv1.3/elements/
/modules/mod_simplefileuploadv1.3/elements/udd.php
/modules/modules/controller.php
/modules/network.php
/modules/themes.php
/moon.php
/motorji/
/mr.php
/mripatmu.php
/ms-edit.php
/ms-sites.php
/mt/
/mt//RxR.php
/mt/mt-xmlrpc.cgi
/my-account/
/my-sites.php
/mycommand.php
/naujienos/
/nav-menus.php
/net.php
/network.php
/new
/new-index.php
/new.php
/new/
/new/.env
/new/xmlrpc.php
/newflon/
/news/
/news/wp-includes/wlwmanifest.xml
/newsite
/newsite/
/newsite/wikindex.php
/newsleter.php
/newup.php
/nf_tracking.php
/nice.php
/ninja.php
/nl/
/nl/hp/
/novo/
/novo/admin.php
/npx.php
/nuovosito/
/ok.php
/old
/old-index.php
/old.php
/old/
/old/.env
/old/.well-known/
/old/xmlrpc.php
/olux.php
/onclickfuns.php
/option-old.php
/options-discussion.php
/options-writing.php
/options.php
/ovatools.php
/ovshell.php
/page.php
/pages/
/pages/ambassadors/
/park/
/password-page/
/payment.php
/payout.php
/pdf/
/php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
/php.php
/phpformbuilder/plugins/filemanager/dialog.php
/phpzipincs.php
/pi.php
/pl/
/platform/.env/conf/.env
/plug.php
/plugin-install.php
/plugin.php
/plugins.php
/plugins/
/plugins/kcfinder/upload.php
/plugins/responsive_filemanager/filemanager/dialog.php
/plugins/system/debug/debug.xml
/plugins/tinymce/plugins/ajaxfilemanager/ajax_create_folder.php
/pm.php
/po-content/filemanager/dialog.php
/po8sa.php
/pop.php
/post-data.php
/post-new.php
/post.php
/poupon/
/power.php
/premium.php
/priv.php
/priv8.php
/privacy.php
/prod/.env
/product.php
/production/.env
/produkt/thermo-gloves/
/psnlink/.env
/pt/
/public/
/public/.env
/public/filemanager/dialog.php
/public/js/libraries/filemanager/dialog.php
/public/scripts/filemanager/dialog.php
/public/static/version/v3/hui/lib/webuploader/0.1.5/server/
/public/wp-includes/css/dist/editor/
/pvt.php
/pws.php
/qPyYcxpHKCu.php
/qfunctions.php
/qinfofuns.php
/r57.php
/radio.php
/randkeyword.PhP7
/randkeyword.PhP8
/randkeyword.php
/raw.php
/rdv-holi.php
/reader.php
/readme.php
/rediraction.php
/register/
/rendixd.php
/repair.php
/repairs/wp-content/plugins/fix/
/repeater.php
/resources/
/resources/js/tinymce/plugins/filemanager/dialog.php
/resources/plugins/tiny_mce/plugins/filemanager/dialog.php
/resources/source.php
/responsive_filemanager/filemanager/dialog.php
/resume.php
/revision.php
/robot.php
/robots.php
/roofing/
/root.php
/s.php
/saas/.env
/sam.php
/sclass.api.php
/sclass_api.php
/scripts/filemanager/dialog.php
/se.php
/searchformz.php
/security.txt
/sellers.json
/sellex.php
/sendgrid.env
/server.php
/service.php
/session.php
/setup-config.php
/setup.php
/sftp-config.json
/sh3ll.php
/shared/.env
/shell.php
/shell20211028.php
/shells.php
/shellx.php
/shop/app/etc/local.xml
/shop/magmi-importer/conf/magmi.ini
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
/shop/magmi/conf/magmi.ini
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
/shop/wp-content/plugins/WordPressCore/
/shop/wp-includes/widgets/
/shop/wp-includes/wlwmanifest.xml
/showhide.php
/shx.php
/sign-in/
/signup/
/signupmember/
/simpla/
/simple-shell.php
/simple-upload.php
/simple.php
/simple_backdoor.php
/sindex.php
/site-gate/
/site-log.php
/site-login/
/site/
/site/.env
/site/default/
/site/images/
/site/wp-content/plugins/
/site/wp-includes/
/site/wp-includes/includes.php
/site/wp-includes/wlwmanifest.xml
/sitelog.php
/sitemap.txt
/sitemap.xml.gz
/sitemap_index.xml
/sitemaps.xml
/sites/default/files/
/sito/wp-includes/wlwmanifest.xml
/small.php
/smarter/
/smaxx.php
/smm.php
/snd.php
/social/
/soft/highlight/en/
/source.php
/splash-page/
/src.php
/src/.env
/ss.php
/ss.php?c_c
/st.php
/stag/.env
/staging/.env
/storage/
/storage/.env
/storage/filemanager2.php
/store/
/store/app/etc/local.xml
/style-css.php
/style.php
/style2.php
/styles.php
/sub.php
/suc.php
/sx.php
/sym.php
/sym403.php
/symlink.php
/sys.php
/system.php
/system_log.php
/task.php
/taw.php
/tempfuns.php
/template.php
/templates/
/templates/atomic/
/templates/atomic/error.php
/templates/atomic/index.php
/templates/atomic/network.php
/templates/atomic/templates.php
/templates/beez/
/templates/beez/index.php
/templates/beez3/
/templates/beez3/byp.php
/templates/beez3/error.php
/templates/beez3/index.php
/templates/beez5/
/templates/beez5/error.php
/templates/beez5/index.php
/templates/beez_20/
/templates/default/js/tiny_mce/plugins/ajaxfilemanager/ajax_create_folder.php
/templates/ja_purity/
/templates/ja_purity/index.php
/templates/protostar/
/templates/rhuk_milkyway/
/templates/rhuk_milkyway/index.php
/templates/system/
/templates/system/index.php
/templates/system/themes.php
/term.php
/test
/test.php
/test/
/test/.env
/test/moon.php
/test/upload.php
/test/wp-includes/wlwmanifest.xml
/testing
/text.php
/themes.php
/themes/
/themes/manager/
/themes/manager/view/
/themes/twentytwentyone/inc/
/themes/zMousse/otuz1.php
/thems.php
/thesmartestx.php
/thumb.php
/thumbs.php
/tinny.php
/tiny.php
/tinymce/filemanager/dialog.php
/tinymce/plugins/filemanager/dialog.php
/tmp/
/tmp/error.php
/tmp/sclass_api.php
/tmps/
/tonant.php
/tool.php
/tools.php
/training/
/try.php
/tuny.php
/tuny/
/twenty.php
/twins.php
/txets.php
/ty.php
/type.php
/typo3/
/u.php
/ubh.php
/ubh/
/uc.php
/under-construction/
/up.php
/up/.well-known/
/update.php
/updates.php
/upfile.php
/upgrade.php
/upl.php
/uplaod.php
/upload.php
/upload/
/upload/admin.php
/upload/alfa.php
/upload/gifshell.php
/upload/image/
/upload/injector.php
/upload/reg2.php
/upload/upload.php
/upload/upload_test.php
/uploadTest.php
/uploader.php
/uploads.php
/uploads/
/uploads/.env
/uploads/2.php
/uploads/about.php
/uploads/admin.php
/uploads/autoload_classmap.php
/uploads/b374k.php
/uploads/bk.php
/uploads/exit.php
/uploads/gifshell.php
/uploads/input.php
/uploads/l.php
/uploads/up.php
/uploads/upload.php
/uploads/wp-blog.php
/uploads/xleet.php
/use.php
/user-login/
/user-new.php
/user.php
/user/
/user/login/
/userfuns.php
/users.php
/v1/.env
/v2/
/var/.git/config
/var/cache/mage--2/
/var/resource_config.json
/vendor/
/vendor/.env
/vendor/composer/
/vendor/composer/index.php
/vendor/geco.php
/vendor/laravel/.env
/vendor/phpunit/phpunit/build.xml
/vendor/phpunit/phpunit/src/Util/PHP/
/vendor/phpunit/phpunit/src/Util/PHP/MARIJUANA.php
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/vendor/phpunit/phpunit/src/Util/PHP/kill.php
/vendor/phpunit/phpunit/src/Util/PHP/test.php
/vendor/phpunit/phpunit/src/Util/PHP/wpx.php
/version.php
/versions.php
/verstatus.php
/vesiw.php
/view-source:
/vv.php
/vxzxbric.php
/w.php
/w0.php
/w3llstore.php
/wacking.php
/warm.PhP7
/web.php
/web/
/web/.env
/web/asparanet/wp-content/plugins/revslider/includes/external/
/web/authorize.php
/web/config.php
/web/wp-content/themes/seotheme/
/web/wp-includes/wlwmanifest.xml
/webadmin.php
/webdb.php
/weblogin/
/webshell.php
/website/
/website/wp-includes/wlwmanifest.xml
/welcome-page/
/welcome/
/well.php
/who.php
/widgets.php
/wiki-index.php
/wikiindex.php
/wikindex.php
/woh.php
/wordpress
/wordpress.php
/wordpress/
/wordpress/admin.php
/wordpress/css.php
/wordpress/wp-2018.php
/wordpress/wp-content/uploads/
/wordpress/wp-content/uploads/gix.php
/wordpress/wp-includes/
/wordpress/wp-includes/IXR/allez.php
/wordpress/wp-includes/style.php
/wordpress/wp-includes/widgets/
/wordpress/wp-includes/widgets/index.php
/wordpress/wp-includes/wlwmanifest.xml
/wordpress/xleet.php
/wordpress/xmlrpc.php
/worksec.php
/worm0.PhP7
/wp
/wp-2018.php
/wp-2019.php
/wp-2020.php
/wp-2021.php
/wp-2022.php
/wp-22.php
/wp-22.php?sfilename=bdkr28tools.php&sfilecontent=&supfiles=
/wp-23.php
/wp-activate.php
/wp-add.php
/wp-add.php?a=c
/wp-admin.php
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php
/wp-admin/dropdown.php
/wp-admin/images/wp-login.php
/wp-admin/js/about.php7
/wp-admin/shapes.php
/wp-admin/user/wp-login.php
/wp-admin/wp-login.php
/wp-admins.php
/wp-api.php
/wp-apxupx.php?apx=upx
/wp-atom.php
/wp-blog-header.php
/wp-blog.php
/wp-cache.php
/wp-class.php
/wp-cli.php
/wp-config-sample.php
/wp-config-samples.php
/wp-config.php
/wp-configs.php
/wp-confiig.php
/wp-conflg.php
/wp-consar.php
/wp-content/
/wp-content/.env
/wp-content/403.php
/wp-content/ALFA_DATA/alfacgiapi/
/wp-content/NewFolder/
/wp-content/about.php
/wp-content/admin.php
/wp-content/alfa.php
/wp-content/atomlib.php
/wp-content/backup.php
/wp-content/banners/about.php
/wp-content/batm.php
/wp-content/beence.php
/wp-content/blogs.dir/about.php
/wp-content/cache/busting/
/wp-content/classwithtostring.php
/wp-content/codeboy1877_up.php
/wp-content/configs.php
/wp-content/cong.php
/wp-content/content.php
/wp-content/css.php
/wp-content/css/
/wp-content/db-cache.php
/wp-content/dir/
/wp-content/doc.php
/wp-content/dropdown.php
/wp-content/fonts/
/wp-content/fonts/cherry-swash/___security/
/wp-content/fw.php
/wp-content/gallery/about.php
/wp-content/gif.php
/wp-content/gifshell.php
/wp-content/ice.php
/wp-content/include.php
/wp-content/indeX.php
/wp-content/index.php
/wp-content/inputs.php
/wp-content/install.php
/wp-content/item.php
/wp-content/iu.php
/wp-content/json.php
/wp-content/languages/
/wp-content/languages/404.php
/wp-content/languages/about.php
/wp-content/languages/confno7.php
/wp-content/languages/index.php
/wp-content/languages/themes/wp-login.php
/wp-content/languages/wp-conflg.php
/wp-content/library.php
/wp-content/link.php
/wp-content/lx.php
/wp-content/mah.php
/wp-content/mari.php
/wp-content/masshp.php
/wp-content/mode.php
/wp-content/mu-plugins/
/wp-content/patior/
/wp-content/plugin/apikey/
/wp-content/plugins/
/wp-content/plugins/BrutalShell/
/wp-content/plugins/Cache/
/wp-content/plugins/Cache/Cache.php
/wp-content/plugins/Cache/dropdown.php
/wp-content/plugins/CropImage/
/wp-content/plugins/Tevolution/
/wp-content/plugins/Uwogh-Segs/
/wp-content/plugins/WordPressCore/
/wp-content/plugins/WordPressCore/about.php
/wp-content/plugins/WordPressCore/admin.php
/wp-content/plugins/WordPressCore/blkfqnikz.php
/wp-content/plugins/WordPressCore/classwithtostring.php
/wp-content/plugins/WordPressCore/fm.php
/wp-content/plugins/WordPressCore/gecko.php
/wp-content/plugins/WordPressCore/include.php
/wp-content/plugins/WordPressCore/smaxx.php
/wp-content/plugins/about.php
/wp-content/plugins/accountancy-old/
/wp-content/plugins/admin.php
/wp-content/plugins/aioseoextensions/
/wp-content/plugins/akismet/
/wp-content/plugins/akismet/akismet.php
/wp-content/plugins/akismet/views/
/wp-content/plugins/akismet/views/atomlib.php
/wp-content/plugins/akismet/views/config.php
/wp-content/plugins/alfa-rex.php
/wp-content/plugins/ango/
/wp-content/plugins/apikey/
/wp-content/plugins/apikey/lfixx.php
/wp-content/plugins/apikey/mar.php
/wp-content/plugins/aryabot/
/wp-content/plugins/autoplugin/vendor/xMAN.php
/wp-content/plugins/azra-tn/wso.php
/wp-content/plugins/background-image-cropper/
/wp-content/plugins/background-image-cropper/ups.php
/wp-content/plugins/backup-backup/includes/
/wp-content/plugins/backup-backup/includes/b0x.php
/wp-content/plugins/cache-wordpress/
/wp-content/plugins/cakil/
/wp-content/plugins/ccx/
/wp-content/plugins/ccx/index.php
/wp-content/plugins/cekidot/
/wp-content/plugins/classic-editor/
/wp-content/plugins/classic-editor/server.php
/wp-content/plugins/column/
/wp-content/plugins/column/miin.php
/wp-content/plugins/configler/
/wp-content/plugins/contact-form-7/modules/akismet/
/wp-content/plugins/content-management/
/wp-content/plugins/content-management/content.php
/wp-content/plugins/core-plugin/
/wp-content/plugins/core-plugin/404.php
/wp-content/plugins/core-plugin/include.php
/wp-content/plugins/core-plugin/smaxx.php
/wp-content/plugins/core-plugin/style.php
/wp-content/plugins/core-stab/
/wp-content/plugins/core/
/wp-content/plugins/core/autoload_classmap.php
/wp-content/plugins/core/classwithtostring.php
/wp-content/plugins/core/include.php
/wp-content/plugins/css-ready-sel/
/wp-content/plugins/css-ready-sel/file.php
/wp-content/plugins/css-ready/
/wp-content/plugins/css-ready/file.php
/wp-content/plugins/custom/issue.php
/wp-content/plugins/cyberseo/
/wp-content/plugins/dapeasyinstaller/
/wp-content/plugins/db/
/wp-content/plugins/disable-media/lib.php
/wp-content/plugins/display-posts-shortcode/
/wp-content/plugins/dummyyummy/wp-signup.php
/wp-content/plugins/dzs-zoomsounds/
/wp-content/plugins/easybusy/
/wp-content/plugins/easybusy/wp-blog.php
/wp-content/plugins/elementor/
/wp-content/plugins/elementor/about.php
/wp-content/plugins/elementor/classwithtostring.php
/wp-content/plugins/elementor/includes/settings/
/wp-content/plugins/elementor/radio.php
/wp-content/plugins/elementor/sx.php
/wp-content/plugins/envato-market/inc/
/wp-content/plugins/envato-market/inc/class-envato-market-api.php
/wp-content/plugins/ern/
/wp-content/plugins/ern/aks.php
/wp-content/plugins/fix/
/wp-content/plugins/fix/1.php
/wp-content/plugins/fix/about.php
/wp-content/plugins/fix/admin.php
/wp-content/plugins/fix/css.php
/wp-content/plugins/fix/ema.php
/wp-content/plugins/fix/sx.php
/wp-content/plugins/fix/up.php
/wp-content/plugins/fix/ws.php
/wp-content/plugins/fix/xcv.php
/wp-content/plugins/forminator/addons/pro/
/wp-content/plugins/google-seo-rank/README.txt
/wp-content/plugins/google-seo-rank/module.php
/wp-content/plugins/hellopress/
/wp-content/plugins/hellopress/defaul1.php
/wp-content/plugins/hellopress/index.php
/wp-content/plugins/hellopress/wp-info.php
/wp-content/plugins/home/
/wp-content/plugins/html404/
/wp-content/plugins/html404/cry.php
/wp-content/plugins/html404/index.html
/wp-content/plugins/html404/xccc.php
/wp-content/plugins/include.php
/wp-content/plugins/index.php
/wp-content/plugins/instabuilder2/cache/
/wp-content/plugins/instabuilder2/cache/plugins/
/wp-content/plugins/install.php
/wp-content/plugins/ioptimization/
/wp-content/plugins/ioxi/
/wp-content/plugins/ioxi/ioxi-rex3.php7
/wp-content/plugins/ioxi/ioxi2.php
/wp-content/plugins/ioxi/ioxiworm.php
/wp-content/plugins/limit/
/wp-content/plugins/linkpreview/
/wp-content/plugins/linkpreview/db.php?u
/wp-content/plugins/masterx/
/wp-content/plugins/masterx/wpx.php
/wp-content/plugins/myflash/
/wp-content/plugins/newsletter/main/ALFA_DATA/
/wp-content/plugins/one-click-demo-import/vendor/
/wp-content/plugins/owfsmac/
/wp-content/plugins/ph-file-manager/wp-file.php
/wp-content/plugins/plugins-setting/
/wp-content/plugins/ppus/
/wp-content/plugins/prenota/
/wp-content/plugins/press/
/wp-content/plugins/press/wp-class.php
/wp-content/plugins/pwnd-1/dropdown.php
/wp-content/plugins/pwnd-1/pwnd.php
/wp-content/plugins/pwnd/pwnd.php
/wp-content/plugins/random/
/wp-content/plugins/random/init.php
/wp-content/plugins/revslider/includes/external/page/
/wp-content/plugins/revslider/includes/external/page/autoload_classmap.php
/wp-content/plugins/revslider/includes/external/page/index.php
/wp-content/plugins/root-file-manager/wp-file.php
/wp-content/plugins/seo-title-tag/
/wp-content/plugins/seoo/
/wp-content/plugins/seoo/wsoyanz.php
/wp-content/plugins/seoo/wsoyanz1.php
/wp-content/plugins/seooo/
/wp-content/plugins/seooo/alfa-rex.php7
/wp-content/plugins/seoplugins/
/wp-content/plugins/seoplugins/db.php
/wp-content/plugins/seoplugins/db.php?u
/wp-content/plugins/seoplugins/dropdown.php
/wp-content/plugins/seoplugins/mar.php
/wp-content/plugins/seotheme/
/wp-content/plugins/seotheme/mar.php
/wp-content/plugins/shell/about.php
/wp-content/plugins/shell20211028.php
/wp-content/plugins/sid/
/wp-content/plugins/smaxx.php
/wp-content/plugins/stats/
/wp-content/plugins/stats/instoll.php
/wp-content/plugins/theme-configurator/
/wp-content/plugins/three-column-screen-layout/
/wp-content/plugins/three-column-screen-layout/db.php
/wp-content/plugins/ubh/
/wp-content/plugins/ubh/1.php
/wp-content/plugins/ubh/index.php
/wp-content/plugins/ubh/up.php
/wp-content/plugins/upgrade.php
/wp-content/plugins/upspy/
/wp-content/plugins/upspy/con.php
/wp-content/plugins/upspy/index.php
/wp-content/plugins/upspy/sllolx.php
/wp-content/plugins/upspy/up.php
/wp-content/plugins/vitoria.php
/wp-content/plugins/vwcleanerplugin/
/wp-content/plugins/vwcleanerplugin/bump.php?cache
/wp-content/plugins/widget-logic/
/wp-content/plugins/woo-maxicashgateway_woo2-82/
/wp-content/plugins/wordpress-seo/packages/
/wp-content/plugins/wp-automatic/css/style.css
/wp-content/plugins/wp-catcher/index.php
/wp-content/plugins/wp-daft/
/wp-content/plugins/wp-daft/miin.php
/wp-content/plugins/wp-db-ajax-made/
/wp-content/plugins/wp-db-ajax-made/wp-ajax.php
/wp-content/plugins/wp-diambar/includes/
/wp-content/plugins/wp-doft/
/wp-content/plugins/wp-freeform/
/wp-content/plugins/wp-help/
/wp-content/plugins/wp-help/admin/wp-fclass.php
/wp-content/plugins/wp-help/index.php
/wp-content/plugins/wp-help/mini.php
/wp-content/plugins/wp-hps/sh/
/wp-content/plugins/wp-pregoes/
/wp-content/plugins/wp-sec/ab.php
/wp-content/plugins/wp-term.php
/wp-content/plugins/wp-theme-editor/include.php
/wp-content/plugins/wp-ver.php
/wp-content/plugins/wpsml-sys.php
/wp-content/plugins/wso.php
/wp-content/plugins/xichang/
/wp-content/plugins/xichang/x.php?xi
/wp-content/plugins/xt/
/wp-content/plugins/xt/index.php
/wp-content/plugins/yyobang/mar.php
/wp-content/plugins/zaen/includes/
/wp-content/plugins/zedd/
/wp-content/pm.php
/wp-content/radio.php
/wp-content/repeater.php
/wp-content/shell20211028.php
/wp-content/small.php
/wp-content/smaxx.php
/wp-content/style-css.php
/wp-content/sx.php
/wp-content/themes.php
/wp-content/themes/
/wp-content/themes/aahana/
/wp-content/themes/aahana/json.php
/wp-content/themes/about.php
/wp-content/themes/admin.php
/wp-content/themes/alera/
/wp-content/themes/alera/alpha.php
/wp-content/themes/applica/
/wp-content/themes/astra/
/wp-content/themes/astra/inc/
/wp-content/themes/astra/inc/ki1k.php
/wp-content/themes/bute/lang.php
/wp-content/themes/cameleon/includes/fileuploader/
/wp-content/themes/ccx/
/wp-content/themes/digital-download/
/wp-content/themes/digital-download/new.php
/wp-content/themes/eptonic/functions/jwpanel/scripts/valums_uploader/
/wp-content/themes/finley/
/wp-content/themes/finley/min.php
/wp-content/themes/freeyanz/
/wp-content/themes/gaukingo/
/wp-content/themes/gaukingo/db.php
/wp-content/themes/gaukingo/db.php?u
/wp-content/themes/hello-elementor/
/wp-content/themes/hideo/network.php
/wp-content/themes/include.php
/wp-content/themes/index.php
/wp-content/themes/intense/
/wp-content/themes/intense/block-css.php?mode=upload
/wp-content/themes/jaida/lang.php
/wp-content/themes/lightspeed/framework/_scripts/valums_uploader/
/wp-content/themes/mero-magazine/
/wp-content/themes/mero-megazines/
/wp-content/themes/mero-megazines/ws.php
/wp-content/themes/nuance/functions/jwpanel/scripts/valums_uploader/
/wp-content/themes/plugins.php
/wp-content/themes/pridmag/
/wp-content/themes/pridmag/db.php
/wp-content/themes/pridmag/db.php?u
/wp-content/themes/pridmag/dropdown.php
/wp-content/themes/rishi/
/wp-content/themes/seotheme/
/wp-content/themes/seotheme/db.php
/wp-content/themes/seotheme/db.php?u
/wp-content/themes/seotheme/log.php
/wp-content/themes/seotheme/mar.php
/wp-content/themes/signify/
/wp-content/themes/sketch/
/wp-content/themes/sketch/404.php
/wp-content/themes/tflow/
/wp-content/themes/themes.php
/wp-content/themes/thuoc-nam/
/wp-content/themes/travel/
/wp-content/themes/travel/issue.php
/wp-content/themes/travelscape/
/wp-content/themes/travelscape/json.php
/wp-content/themes/twenty/
/wp-content/themes/twenty/twenty.php
/wp-content/themes/twentyfive/
/wp-content/themes/twentyfive/include.php
/wp-content/themes/twentyfive/smaxx.php
/wp-content/themes/twentyfourteen/
/wp-content/themes/twentynineteen/inc/
/wp-content/themes/twentynineteen/inc/index.php
/wp-content/themes/twentytwenty/
/wp-content/themes/twentytwenty/404.php
/wp-content/themes/twentytwentyone/
/wp-content/themes/twentytwentythree/
/wp-content/themes/twentytwentythree/patterns/
/wp-content/themes/twentytwentythree/templates/
/wp-content/themes/twentytwentythree/templates/index.php
/wp-content/themes/twentytwentytwo/inc/patterns/
/wp-content/themes/twentytwentytwo/inc/patterns/index.php
/wp-content/themes/twentytwentytwo/index.php
/wp-content/themes/welfare-charity/
/wp-content/themes/wp-classic/inc/
/wp-content/themes/wp-classic/inc/index.php
/wp-content/themes/wp-pridmag/
/wp-content/themes/wp-pridmag/init.php
/wp-content/themes/wso112233.php
/wp-content/themes/zakra/
/wp-content/think.php
/wp-content/tmpls.php
/wp-content/up.php
/wp-content/updates.php
/wp-content/updraft/about.php
/wp-content/updraft/themes.php
/wp-content/upgrade-temp-backup/about.php
/wp-content/upgrade/
/wp-content/upgrade/about.php
/wp-content/upgrade/admin.php
/wp-content/upgrade/class_api.php
/wp-content/upgrade/content.php
/wp-content/upgrade/cs.php
/wp-content/upgrade/doc.php
/wp-content/upgrade/domain.php
/wp-content/upgrade/edit.php
/wp-content/upgrade/fond.php
/wp-content/upgrade/fx.php
/wp-content/upgrade/iR7SzrsOUEP.php
/wp-content/upgrade/input.php
/wp-content/upgrade/moon.php
/wp-content/upgrade/pdf.php
/wp-content/upgrade/radio.php
/wp-content/upgrade/sclass_api.php
/wp-content/upgrade/sx.php
/wp-content/upgrade/web.php
/wp-content/upgrade/wp-blog.php
/wp-content/upload.php
/wp-content/uploads/
/wp-content/uploads/2010/
/wp-content/uploads/2013/
/wp-content/uploads/2013/06/
/wp-content/uploads/2014/
/wp-content/uploads/2014/03/
/wp-content/uploads/2014/06/
/wp-content/uploads/2015/03/
/wp-content/uploads/2016/
/wp-content/uploads/2016/03/
/wp-content/uploads/2016/11/
/wp-content/uploads/2017/
/wp-content/uploads/2017/class-wp-type-registroy.php
/wp-content/uploads/2018/
/wp-content/uploads/2018/03/
/wp-content/uploads/2018/11/
/wp-content/uploads/2018/12/
/wp-content/uploads/2018/dir/
/wp-content/uploads/2018/update.php
/wp-content/uploads/2019/03/
/wp-content/uploads/2019/06/
/wp-content/uploads/2020/
/wp-content/uploads/2020/09/
/wp-content/uploads/2021/
/wp-content/uploads/2021/03/
/wp-content/uploads/2021/06/
/wp-content/uploads/2021/09/
/wp-content/uploads/2021/12/
/wp-content/uploads/2022/
/wp-content/uploads/2023/
/wp-content/uploads/2023/01/
/wp-content/uploads/2023/02/
/wp-content/uploads/2023/03/
/wp-content/uploads/2023/04/
/wp-content/uploads/2023/05/
/wp-content/uploads/2023/05/404.php
/wp-content/uploads/2023/06/
/wp-content/uploads/2023/07/
/wp-content/uploads/2023/10/
/wp-content/uploads/2023/11/
/wp-content/uploads/2023/12/
/wp-content/uploads/2023/wso.php
/wp-content/uploads/2024/
/wp-content/uploads/2024/01/
/wp-content/uploads/2024/02/
/wp-content/uploads/2024/03/
/wp-content/uploads/2024/04/
/wp-content/uploads/2024/05/
/wp-content/uploads/2024/06/
/wp-content/uploads/404.php
/wp-content/uploads/4price3.php
/wp-content/uploads/F0x.php
/wp-content/uploads/Files.php
/wp-content/uploads/about.php
/wp-content/uploads/admin.php
/wp-content/uploads/ao_ccss/
/wp-content/uploads/autoload_classmap.php
/wp-content/uploads/bak.php
/wp-content/uploads/blog.php
/wp-content/uploads/cache.php
/wp-content/uploads/component.php
/wp-content/uploads/config.php
/wp-content/uploads/cong.php
/wp-content/uploads/content.php
/wp-content/uploads/css.php
/wp-content/uploads/curriculos/
/wp-content/uploads/dec.php
/wp-content/uploads/dropdown.php
/wp-content/uploads/edit.php
/wp-content/uploads/elementor/
/wp-content/uploads/error_log.php
/wp-content/uploads/et_temp/
/wp-content/uploads/etipat.php
/wp-content/uploads/fonts/
/wp-content/uploads/footer.php
/wp-content/uploads/gecko-new.php
/wp-content/uploads/gravity_forms/
/wp-content/uploads/help.php
/wp-content/uploads/import/
/wp-content/uploads/index.php
/wp-content/uploads/info.php
/wp-content/uploads/install.php
/wp-content/uploads/json.php
/wp-content/uploads/leaflet-maps-marker-icons/
/wp-content/uploads/mar.php
/wp-content/uploads/membres/
/wp-content/uploads/menu.php
/wp-content/uploads/network.php
/wp-content/uploads/old.php
/wp-content/uploads/piotnet-addons-for-elementor/
/wp-content/uploads/revslider/
/wp-content/uploads/revslider/index.php
/wp-content/uploads/revslider/upfile.php
/wp-content/uploads/robot.php
/wp-content/uploads/settings.php
/wp-content/uploads/shell20211028.php
/wp-content/uploads/slideshow-gallery/
/wp-content/uploads/small.php
/wp-content/uploads/themes.php
/wp-content/uploads/up.php
/wp-content/uploads/uploads.php
/wp-content/uploads/user_uploads/
/wp-content/uploads/wp-atom.php
/wp-content/uploads/wp-content/uploads/
/wp-content/uploads/wp-login.php
/wp-content/uploads/wp-login.php.suspected
/wp-content/uploads/wp.php
/wp-content/uploads/wp/
/wp-content/uploads/wpforms/
/wp-content/uploads/wpr-addons/forms/
/wp-content/uploads/wso.php
/wp-content/uploads/xl2023.php
/wp-content/wp-activate.php
/wp-content/wp-atom.php
/wp-content/wp-content/patior/
/wp-content/wp-cron.php?ac=3
/wp-content/wp.php
/wp-content/wso.php
/wp-content/xl2023.php
/wp-content/xleet.php
/wp-content/z.php
/wp-contentt.php
/wp-cron.php
/wp-cron.php?ac=3
/wp-crons.php
/wp-db.php
/wp-dmin/user/
/wp-dsdd.php
/wp-easy.php
/wp-editor.php
/wp-file.php
/wp-fox.php
/wp-head.php
/wp-header.php
/wp-hoard.php
/wp-inc.php
/wp-include/
/wp-include/inputs.php
/wp-includes.bak/html-api/about.php
/wp-includes/
/wp-includes/1mine.php
/wp-includes/403.php
/wp-includes/ID3/
/wp-includes/ID3/about.php
/wp-includes/ID3/about.php7
/wp-includes/ID3/atomlib.php
/wp-includes/ID3/cache.php
/wp-includes/ID3/class.api.php
/wp-includes/ID3/cloud.php
/wp-includes/ID3/contact.php
/wp-includes/ID3/default.php
/wp-includes/ID3/engine_functions.php
/wp-includes/ID3/getid.php
/wp-includes/ID3/getid3s.php
/wp-includes/ID3/index.php
/wp-includes/ID3/indexs.php
/wp-includes/ID3/install.php
/wp-includes/ID3/log.php
/wp-includes/ID3/radio.php
/wp-includes/ID3/readme.php
/wp-includes/ID3/sx.php
/wp-includes/ID3/tdomf-manage.php
/wp-includes/ID3/themes.php
/wp-includes/ID3/uninstall.php
/wp-includes/ID3/upload.php
/wp-includes/ID3/wp-conflg.php
/wp-includes/ID3/wp-css.php
/wp-includes/ID3/wp-includes/IXR/
/wp-includes/IXR/
/wp-includes/IXR/about.php
/wp-includes/IXR/admin.php
/wp-includes/IXR/allez.php
/wp-includes/IXR/atomlib.php
/wp-includes/IXR/class.api.php
/wp-includes/IXR/cloud.php
/wp-includes/IXR/core.php
/wp-includes/IXR/css.php
/wp-includes/IXR/doc.php
/wp-includes/IXR/index.php
/wp-includes/IXR/install.php
/wp-includes/IXR/moon.php
/wp-includes/IXR/network.php
/wp-includes/IXR/settings.php
/wp-includes/IXR/sx.php
/wp-includes/IXR/themes.php
/wp-includes/IXR/wp-includes/IXR/
/wp-includes/IXR/wsa.php
/wp-includes/PHPMailer/
/wp-includes/PHPMailer/about.php
/wp-includes/PHPMailer/admin.php
/wp-includes/PHPMailer/autoload_classmap.php
/wp-includes/PHPMailer/file.php
/wp-includes/PHPMailer/index.php
/wp-includes/PHPMailer/network.php
/wp-includes/PHPMailer/themes.php
/wp-includes/Requests/
/wp-includes/Requests/Cookie/
/wp-includes/Requests/Cookie/images.php
/wp-includes/Requests/Cookie/radio.php
/wp-includes/Requests/Exception/
/wp-includes/Requests/Exception/content.php
/wp-includes/Requests/Proxy/
/wp-includes/Requests/Response/
/wp-includes/Requests/Response/license.php
/wp-includes/Requests/Text/
/wp-includes/Requests/Text/admin.php
/wp-includes/Requests/Text/index.php
/wp-includes/Requests/Text/votes.php
/wp-includes/Requests/Transport/
/wp-includes/Requests/Transport/about.php
/wp-includes/Requests/Transport/aclass.api.php
/wp-includes/Requests/Transport/content.php
/wp-includes/Requests/Transport/contents.php
/wp-includes/Requests/Transport/index.php
/wp-includes/Requests/Transport/partners.php
/wp-includes/Requests/Transport/reverse.php
/wp-includes/Requests/Utility/
/wp-includes/Requests/about.php
/wp-includes/Requests/autoload_classmap.php
/wp-includes/Requests/b403.php
/wp-includes/Requests/chosen.php
/wp-includes/Requests/class.api.php
/wp-includes/Requests/dropdown.php
/wp-includes/Requests/edit.php
/wp-includes/Requests/index.php
/wp-includes/Requests/library/
/wp-includes/Requests/library/admin.php
/wp-includes/Requests/library/byp.php
/wp-includes/Requests/library/contents.php
/wp-includes/Requests/library/git.php
/wp-includes/Requests/library/index.php
/wp-includes/Requests/network.php
/wp-includes/Requests/src/Exception/Http/
/wp-includes/Requests/themes.php
/wp-includes/Requests/wp-scripts.php
/wp-includes/SimplePie/
/wp-includes/SimplePie/3xrx.php
/wp-includes/SimplePie/Author.php
/wp-includes/SimplePie/Cache/
/wp-includes/SimplePie/Cache/about.php
/wp-includes/SimplePie/Cache/upfile.php
/wp-includes/SimplePie/Cache/wp-load.php
/wp-includes/SimplePie/Canonical.php
/wp-includes/SimplePie/Captions.php
/wp-includes/SimplePie/Content/
/wp-includes/SimplePie/Content/Type/
/wp-includes/SimplePie/Content/Type/controller.php
/wp-includes/SimplePie/Content/Type/data.php
/wp-includes/SimplePie/Content/Type/edit.php
/wp-includes/SimplePie/Content/Type/upl.php
/wp-includes/SimplePie/Content/chosen.php
/wp-includes/SimplePie/HTTP/
/wp-includes/SimplePie/HTTP/cong.php
/wp-includes/SimplePie/HTTP/css.php
/wp-includes/SimplePie/about.php
/wp-includes/SimplePie/admin.php
/wp-includes/SimplePie/autoload_classmap.php
/wp-includes/SimplePie/comment.php
/wp-includes/SimplePie/core.php
/wp-includes/SimplePie/index.php
/wp-includes/SimplePie/menu.php
/wp-includes/SimplePie/network.php
/wp-includes/SimplePie/plugins.php
/wp-includes/SimplePie/test.php
/wp-includes/SimplePie/themes.php
/wp-includes/SimplePie/update.php
/wp-includes/SimplePie/version.php
/wp-includes/SimplePie/wp-includes/SimplePie/
/wp-includes/Text/
/wp-includes/Text/Diff.php
/wp-includes/Text/Diff/
/wp-includes/Text/Diff/Engine.php
/wp-includes/Text/Diff/Engine/
/wp-includes/Text/Diff/Engine/Renderer.php
/wp-includes/Text/Diff/Engine/admin.php
/wp-includes/Text/Diff/Engine/cache.php
/wp-includes/Text/Diff/Engine/content.php
/wp-includes/Text/Diff/Engine/options.php
/wp-includes/Text/Diff/Engine/partners.php
/wp-includes/Text/Diff/Engine/shell.php
/wp-includes/Text/Diff/Renderer/
/wp-includes/Text/Diff/Renderer/css.php
/wp-includes/Text/Diff/Renderer/install.php
/wp-includes/Text/Diff/Renderer/settings.php
/wp-includes/Text/Diff/Renderer/wp-blog.php
/wp-includes/Text/Diff/themes.php
/wp-includes/Text/about.php
/wp-includes/Text/atomlib.php
/wp-includes/Text/autoload_classmap.php
/wp-includes/Text/index.php
/wp-includes/Text/input.php
/wp-includes/Text/network.php
/wp-includes/Text/options.php
/wp-includes/Text/plugins.php
/wp-includes/Xl2023.php
/wp-includes/about.php
/wp-includes/abouts.php
/wp-includes/access.php
/wp-includes/aconfig.php
/wp-includes/admin-bar.php
/wp-includes/admin-plugins.php
/wp-includes/admin.php
/wp-includes/assets/
/wp-includes/assets/404.php
/wp-includes/assets/about.php
/wp-includes/assets/atomlib.php
/wp-includes/assets/edit.php
/wp-includes/assets/index.php
/wp-includes/assets/network.php
/wp-includes/assets/plugins.php
/wp-includes/assets/shell.php
/wp-includes/assets/users.php
/wp-includes/assets/wp-configs.php
/wp-includes/authorize.php
/wp-includes/autoload_classmap.php
/wp-includes/block-patterns/
/wp-includes/block-patterns/about.php
/wp-includes/block-patterns/admin.php
/wp-includes/block-patterns/edit.php
/wp-includes/block-patterns/index.php
/wp-includes/block-supports/
/wp-includes/block-supports/about.php
/wp-includes/block-supports/index.php
/wp-includes/block-supports/network.php
/wp-includes/block-supports/sx.php
/wp-includes/block-supports/themes.php
/wp-includes/block-supports/wp-head.php
/wp-includes/blocks-meta.php
/wp-includes/blocks/
/wp-includes/blocks/about.php
/wp-includes/blocks/archives.php
/wp-includes/blocks/audio/
/wp-includes/blocks/audio/index.php
/wp-includes/blocks/avatar/
/wp-includes/blocks/block/
/wp-includes/blocks/freeform/
/wp-includes/blocks/freeform/wp-signup.php
/wp-includes/blocks/iR7SzrsOUEP.php
/wp-includes/blocks/index.php
/wp-includes/blocks/network.php
/wp-includes/blocks/shortcode/
/wp-includes/blocks/sx.php
/wp-includes/blocks/table/int/tmpl/
/wp-includes/blocks/tinyfilemanager.php
/wp-includes/byp.php
/wp-includes/certificates/
/wp-includes/certificates/about.php
/wp-includes/certificates/admin.php
/wp-includes/certificates/class.api.php
/wp-includes/certificates/cloud.php
/wp-includes/certificates/fond.php
/wp-includes/certificates/index.php
/wp-includes/certificates/plugins.php
/wp-includes/certificates/radio.php
/wp-includes/certificates/users.php
/wp-includes/certificates/wp-sigunq.php
/wp-includes/class-IXR.php
/wp-includes/class-mail.php
/wp-includes/class-php
/wp-includes/class-snoopi.php
/wp-includes/class-wp-smtp-bar.php
/wp-includes/class.php
/wp-includes/codeboy1877_up.php
/wp-includes/content.php
/wp-includes/core.php
/wp-includes/crot.php
/wp-includes/cs.php
/wp-includes/css.php
/wp-includes/css/
/wp-includes/css/404.php
/wp-includes/css/F0x.php
/wp-includes/css/Meuhy.php
/wp-includes/css/about.php
/wp-includes/css/admin.php
/wp-includes/css/atomlib.php
/wp-includes/css/core.php
/wp-includes/css/css.php
/wp-includes/css/dist/
/wp-includes/css/dist/about.php
/wp-includes/css/dist/block-directory/
/wp-includes/css/dist/block-directory/admin.php
/wp-includes/css/dist/block-library/
/wp-includes/css/dist/chosen.php
/wp-includes/css/dist/commands/
/wp-includes/css/dist/components/
/wp-includes/css/dist/default.php
/wp-includes/css/dist/edit-site/
/wp-includes/css/dist/edit-widgets/
/wp-includes/css/dist/editor/
/wp-includes/css/dist/index.php
/wp-includes/css/dist/list-reusable-blocks/
/wp-includes/css/dist/nux/
/wp-includes/css/dist/preferences/
/wp-includes/css/dist/view.php
/wp-includes/css/dist/widgets/
/wp-includes/css/dist/widgets/wp-conflg.php
/wp-includes/css/fw.php
/wp-includes/css/index.php
/wp-includes/css/mah.php
/wp-includes/css/modules.php
/wp-includes/css/network.php
/wp-includes/css/themes.php
/wp-includes/css/ty.php
/wp-includes/css/wp-system.php
/wp-includes/customize.php
/wp-includes/customize/
/wp-includes/customize/3xrx.php
/wp-includes/customize/about.php
/wp-includes/customize/amaxx.php
/wp-includes/customize/cloud.php
/wp-includes/customize/config.php
/wp-includes/customize/dropdown.php
/wp-includes/customize/index.php
/wp-includes/customize/install.php
/wp-includes/customize/themes.php
/wp-includes/customize/wp-includes/customize/
/wp-includes/data.php
/wp-includes/database.php
/wp-includes/default.php
/wp-includes/defaults.php
/wp-includes/dropdown.php
/wp-includes/embedd.php
/wp-includes/error-log.php
/wp-includes/fm.php
/wp-includes/fonts/
/wp-includes/fonts/about.php
/wp-includes/fonts/admin.php
/wp-includes/fonts/class.api.php
/wp-includes/fonts/css.php
/wp-includes/fonts/head.php
/wp-includes/fonts/index.php
/wp-includes/fonts/install.php
/wp-includes/fonts/moon.php
/wp-includes/fonts/network.php
/wp-includes/fonts/plugins.php
/wp-includes/fonts/radio.php
/wp-includes/fonts/themes.php
/wp-includes/fonts/wp-aespa.php
/wp-includes/fonts/wp-blog.php
/wp-includes/fonts/wp-login.php
/wp-includes/fonts/wp-scripts.php
/wp-includes/fonts/wp-sigunq.php
/wp-includes/function.php
/wp-includes/gif.php
/wp-includes/hrtp.php
/wp-includes/html-api/
/wp-includes/html-api/admin.php
/wp-includes/html-api/atomlib.php
/wp-includes/html.php
/wp-includes/images/
/wp-includes/images/about.php
/wp-includes/images/alfa-rex.php
/wp-includes/images/crystal/
/wp-includes/images/crystal/options.php
/wp-includes/images/crystal/wp-load.php
/wp-includes/images/crystal/wp-signup.php
/wp-includes/images/css.php
/wp-includes/images/doc.php
/wp-includes/images/iR7SzrsOUEP.php
/wp-includes/images/include.php
/wp-includes/images/index.php
/wp-includes/images/media/
/wp-includes/images/media/aclass.api.php
/wp-includes/images/network.php
/wp-includes/images/smaxx.php
/wp-includes/images/smilies/
/wp-includes/images/smilies/about.php
/wp-includes/images/smilies/autoload_classmap.php
/wp-includes/images/smilies/content.php
/wp-includes/images/wlw/
/wp-includes/images/wlw/index.php
/wp-includes/images/wlw/searchengine.php
/wp-includes/images/wp-login.php
/wp-includes/inc.php
/wp-includes/include.php
/wp-includes/index.php
/wp-includes/indo.php
/wp-includes/infi.php
/wp-includes/install.php
/wp-includes/jquery.php
/wp-includes/js/
/wp-includes/js/404.php
/wp-includes/js/a.php
/wp-includes/js/about.php
/wp-includes/js/admin.php
/wp-includes/js/atomlib.php
/wp-includes/js/codemirror/
/wp-includes/js/codemirror/about.php
/wp-includes/js/codemirror/content.php
/wp-includes/js/confag.php
/wp-includes/js/crop/
/wp-includes/js/crop/about.php
/wp-includes/js/crop/crop.php
/wp-includes/js/crop/cropper.php
/wp-includes/js/dist/vendor/
/wp-includes/js/dist/vendor/atomlib.php
/wp-includes/js/dist/vendor/breess.php
/wp-includes/js/dist/vendor/fox.php
/wp-includes/js/index.php
/wp-includes/js/jcrop/
/wp-includes/js/jcrop/about.php
/wp-includes/js/jcrop/sx.php
/wp-includes/js/jquery/jquery.js
/wp-includes/js/js.php
/wp-includes/js/mediaelement/
/wp-includes/js/mediaelement/about.php
/wp-includes/js/network.php
/wp-includes/js/options.php
/wp-includes/js/plupload/
/wp-includes/js/radio.php
/wp-includes/js/session.php
/wp-includes/js/themes.php
/wp-includes/js/tinymce/
/wp-includes/js/tinymce/langs/
/wp-includes/js/tinymce/langs/about.php
/wp-includes/js/tinymce/plugins/compat3x/
/wp-includes/js/tinymce/plugins/compat3x/css/
/wp-includes/js/tinymce/plugins/compat3x/css/1.php
/wp-includes/js/tinymce/plugins/compat3x/css/wp-casper.php
/wp-includes/js/tinymce/skins/lightgray/fonts/
/wp-includes/js/tinymce/skins/lightgray/fonts/about.php
/wp-includes/js/tinymce/skins/lightgray/fonts/index.php
/wp-includes/js/tinymce/skins/lightgray/fonts/sx.php
/wp-includes/js/tinymce/skins/lightgray/img/
/wp-includes/js/tinymce/skins/lightgray/img/index.php
/wp-includes/js/tinymce/skins/wordpress/
/wp-includes/js/tinymce/skins/wordpress/images/
/wp-includes/js/tinymce/skins/wordpress/images/index.php
/wp-includes/js/tinymce/skins/wordpress/images/ws.php
/wp-includes/js/tinymce/themes/
/wp-includes/js/tinymce/themes/admin.php
/wp-includes/js/tinymce/utils/
/wp-includes/js/tinymce/utils/wp-tinymce.php
/wp-includes/js/wp-info.php
/wp-includes/js/wp-load.php
/wp-includes/language/
/wp-includes/lib.php
/wp-includes/library.php
/wp-includes/login.php
/wp-includes/lx.php
/wp-includes/mah.php
/wp-includes/mani.php
/wp-includes/mark.php
/wp-includes/ms-controller.php
/wp-includes/ms-files.php
/wp-includes/ms-media.php
/wp-includes/network.php
/wp-includes/new-index.php
/wp-includes/new.php
/wp-includes/nin.php
/wp-includes/options.php
/wp-includes/pack.php
/wp-includes/php-compat/
/wp-includes/php-compat/edit.php
/wp-includes/php-compat/index.php
/wp-includes/pm.php
/wp-includes/pomo/
/wp-includes/pomo/1.php
/wp-includes/pomo/about.php
/wp-includes/pomo/alfa.php
/wp-includes/pomo/autoload_classmap.php
/wp-includes/pomo/bypass.php
/wp-includes/pomo/chosen.php
/wp-includes/pomo/cloud.php
/wp-includes/pomo/content.php
/wp-includes/pomo/fgertreyersd.php.suspected
/wp-includes/pomo/index.php
/wp-includes/pomo/jss.php
/wp-includes/pomo/reader.php
/wp-includes/pomo/user-new.php
/wp-includes/pomo/wp-css.php
/wp-includes/pomo/wp-login.php
/wp-includes/pomo/wp-theme.php
/wp-includes/product.php
/wp-includes/radio.php
/wp-includes/random_compat/
/wp-includes/random_compat/about.php
/wp-includes/random_compat/baedss.php
/wp-includes/random_compat/bsypaass.php
/wp-includes/random_compat/chosen.php
/wp-includes/random_compat/index.php
/wp-includes/random_compat/wp-conflg.php
/wp-includes/repeater.php
/wp-includes/rest-api/
/wp-includes/rest-api/about.php
/wp-includes/rest-api/admin.php
/wp-includes/rest-api/alfa-rex.php7
/wp-includes/rest-api/endpoints/
/wp-includes/rest-api/endpoints/1.php
/wp-includes/rest-api/endpoints/about.php
/wp-includes/rest-api/endpoints/admin.php
/wp-includes/rest-api/endpoints/html.php
/wp-includes/rest-api/fields/
/wp-includes/rest-api/fields/about.php
/wp-includes/rest-api/fields/cache/
/wp-includes/rest-api/index.php
/wp-includes/rest-api/network.php
/wp-includes/rest-api/sx.php
/wp-includes/service.php
/wp-includes/shell.php
/wp-includes/shell20211028.php
/wp-includes/sitemaps/
/wp-includes/sitemaps/about.php
/wp-includes/sitemaps/index.php
/wp-includes/sitemaps/providers/
/wp-includes/sitemaps/providers/about.php
/wp-includes/sitemaps/providers/admin.php
/wp-includes/smaxx.php
/wp-includes/sodium_compat/
/wp-includes/sodium_compat/autoload-private.php
/wp-includes/sodium_compat/index.php
/wp-includes/sodium_compat/lib/
/wp-includes/sodium_compat/lib/wp-blog.php
/wp-includes/sodium_compat/src/Core/Curve25519/Ge/
/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php
/wp-includes/sodium_compat/wp-scripts.php
/wp-includes/src.php
/wp-includes/sts.php
/wp-includes/style-engine/
/wp-includes/style-engine/about.php
/wp-includes/style-engine/index.php
/wp-includes/sx.php
/wp-includes/theme-compat/
/wp-includes/theme-compat/cache.php
/wp-includes/theme-compat/cloud.php
/wp-includes/theme-compat/doc.php
/wp-includes/theme-compat/index.php
/wp-includes/theme-compat/input.php
/wp-includes/theme-compat/ok.php
/wp-includes/theme-compat/reader.php
/wp-includes/theme-compat/styles.php
/wp-includes/theme-compat/system.php
/wp-includes/theme-compat/themes.php
/wp-includes/theme-compat/wp-conflg.php
/wp-includes/themes.php
/wp-includes/tmpls.php
/wp-includes/type.php
/wp-includes/uplaod.php
/wp-includes/wcache.php
/wp-includes/web.php
/wp-includes/widgets/
/wp-includes/widgets/1.php
/wp-includes/widgets/about.php
/wp-includes/widgets/admin.php
/wp-includes/widgets/atomlib.php
/wp-includes/widgets/chosen.php
/wp-includes/widgets/class-wp-admin.php
/wp-includes/widgets/css.php
/wp-includes/widgets/geco.php
/wp-includes/widgets/include.php
/wp-includes/widgets/index.php
/wp-includes/widgets/loc.php
/wp-includes/widgets/network.php
/wp-includes/widgets/sclass_api.php
/wp-includes/widgets/wp-signup.php
/wp-includes/wlwmanifest.xml
/wp-includes/wp-2019.php
/wp-includes/wp-atom.php
/wp-includes/wp-class-us/
/wp-includes/wp-class.php
/wp-includes/wp-conflg.php
/wp-includes/wp-feed.php
/wp-includes/wp-includes/
/wp-includes/wp-includes/admin-bar.php
/wp-includes/wp-load.php
/wp-includes/wp-log.php
/wp-includes/wp-login.php
/wp-includes/wp-milcav.php
/wp-includes/wp-system.php
/wp-includes/wso.php
/wp-includes/xl2023.php
/wp-includes/xx.php
/wp-includes/y.php
/wp-index.php
/wp-info.php
/wp-init.php
/wp-l0gin.php
/wp-links-opml.php
/wp-links.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-p.php7
/wp-pano.php
/wp-scr1pts.php
/wp-seo.php
/wp-settings.php
/wp-signup.php
/wp-sigunq.php
/wp-site.php
/wp-sys.php
/wp-term.php
/wp-the1me.php
/wp-theme.php
/wp-title.php
/wp-trackback.php
/wp-trc.php
/wp-uploads-config.php
/wp-ver.php
/wp.php
/wp/
/wp/bridge/
/wp/configs.php
/wp/defense.php
/wp/img/
/wp/img/cloud.php
/wp/lfix.php
/wp/wp-includes/
/wp/wp-includes/menu.php
/wp/wp-includes/wlwmanifest.xml
/wp/wp-includes/wp-class.php
/wp/wpadmin/network/
/wp/wpadmin/network/config.php
/wp/xmlrpc.php
/wp1/wp-includes/wlwmanifest.xml
/wp2/wp-includes/wlwmanifest.xml
/wp_backup.php
/wpcontent/plugins/
/wpm.php
/wpm/start/image/
/wps/
/wps/wp-includes/
/wps/wp-includes/widgets/
/wpx.php
/ws.php
/ws.php.php
/ws.php7
/wsa.php
/wsanon.php
/wso-x569.php
/wso.php
/wso1.php
/wso112233.php
/wsoyanz.php
/wss.php
/wwr.php
/www.php
/wxo.php
/wzy.php?action=door123
/x.php
/x/index.php
/xcache.php
/xindex.php
/xl.php
/xl2023.php
/xl2023x.php
/xleet-shell.php
/xleet.php
/xleetshell.php
/xlt.php
/xml.php
/xmlrpc.php
/xmlrpc.php?rsd
/xmlrpcs.php7
/xmrlpc.php
/xmrlpc.php?p=
/xp.php
/xrx.php
/xt.php
/xt/
/xt/fm.php
/xt/index.php
/xt/smaxx.php
/xtracoool.php
/xx.php
/xx.php/wp-cron.php?ac=3
/xxc.php
/xxl.php
/xxx.php
/yanz.php
/ynz.PhP7
/ynz.php
/yo.php
/yoi.php
/z.php
/za.php
/zcanp.php
```
</details>