terminal /var/www/templates/ja_landscape
vulnerability patcher this site + sibling labs
Detects known-vulnerable extensions by their real on-disk names — these vary per lab (SPPB ships as com_sppagebuilder + plugins/system/sppagebuilderliteupdater, OrdaSoft hides under cck_system / editor_cck_button, Backup Migration's WP slug is backup-backup…). Also finds ANTID00T uploader droplets (deep whole-site scan: assets_*.php / core_*.php / up*.php / uploader*.php / p2s*.php / *.php.b64 + content signature + PBCK .shtml SSI bridges) and malware (webshell scan, score ≥ 7, framework/vendor trees skipped). DB: lists Joomla/WP users — poc_*/p2s* accounts arrive pre-checked (aopa.kg cleanup pattern). Core hardening: Joomla 3 eval() sites (countModules / idna uctc / FOF) get parse-safe rewrites, J3.4.4-3.6.3 registration gets a group-injection guard (CVE-2016-8869/8870) and J4-J5.4.5/6.0-6.1 API group controller gets the core.admin checks from the 5.4.6 fix (CVE-2026-48904 — privesc kanalı kapanır). Detect scans the site this tool lives in plus sibling lab installs one level down; Patch selected deletes every checked item — but never this tool itself or any copy of it. For Joomla 3 cores it also replaces the legacy eval() sites (countModules / idna uctc / FOF) with parse-safe code, fixing the "eval()'d code" syntax error on newer PHP versions.
deep signature scan /var/www/templates/ja_landscape
PHP malware scan — signature based, layered decode (base64 / gzinflate / rot13 / hex / uu). Scans the whole hosting root recursively in small time-sliced steps, so large installations never die with a timeout.
Review the list before deleting anything.
Review the list before deleting anything.
kernel privesc check ?
Kernel sürümü (uname) tespit edilir. Sürüm eskiyse veya bilinen yerel yetki yükseltme (privesc) CVE aralıklarına düşüyorsa kırmızı flag 🚩 ile "bu kernel'da post-exploit kritik yetki yükseltme güvenlik açıkları var" uyarısı CVE numaralarıyla listelenir. Aralıklar mainline'dır — dağıtım backportları gerçek yama seviyesini gizleyebilir.
locate copies ?
"Kendini hangi dizine attı?" — bu aracın TÜM kopyalarını bulur: relocate hedef dizinlerini (plugins/system, libraries, media, images, plugins, modules, tmp, cache, logs, templates, site kökü) bu site ve kardeş lablarda tarar, her kopyanın URL + sunucu yolunu listeler. Orijinal dosya zaten silinmez; kopyayı kaybedersen buradan bul.