Need info, how hacker deleted all files

I just want where to find info how someone deleted all files in server. It was done in WordPress 3.6 site. I know they use this

http://ift.tt/Wc5MAN

to get wp-config, and then created new admin or changed password for current. But how they deleted all files in server (not only wordpress files, but also other files and directories, wich was in same folder as wordpress). I need this info to fix this hole.