Hunter Black Hat SEO
Server:LiteSpeed
System:Linux raton.hozzt.com 4.18.0-553.144.1.lve.el8.x86_64 #1 SMP Thu Jul 16 08:31:06 UTC 2026 x86_64
User:altinkayamarble (1260)
PHP:7.4.33
Disabled:symlink, show_source, system, virtual, shell_exec,passthru, exec, popen, proc_open, proc_close, proc_nice, proc_terminate,proc_get_status, pfsockopen,allow_url_fopen, posix_getpwuid, eval,posix_setsid, posix_mkfifo, posix_setpgid,posix_setuid, posix_uname,posix_kill,apache_child_terminate, apache_setenv,define_syslog_variables,escapeshellarg, escapeshellcmd, leak, dl, fp, fput,ftp_connect, ftp_exec,ftp_get, ftp_login, ftp_nb_fput, ftp_put, ftp_raw, ftp_rawlist,highlight_file, ini_alter, ini_get_all, ini_restore, inject_code
$ pwd: /var/softaculous/goffice6/
Upload Files
File: //var/softaculous/goffice6/update_pass.php
<?php

if(function_exists('password_hash')){
	$resp =  password_hash('[[admin_pass]]', PASSWORD_DEFAULT);
	echo '<update_pass>'.$resp.'</update_pass>';
}else{
	
	$salt = uniqid();

	if(function_exists("mcrypt_create_iv")) {
		$salt = base64_encode(mcrypt_create_iv(24, MCRYPT_DEV_URANDOM));
	}
	if (CRYPT_SHA256 == 1) {
		$salt = '$5$'.$salt;
	}
	
	$resp = crypt('[[admin_pass]]', $salt);
	echo '<update_pass>'.$resp.'</update_pass>';
	
}

@unlink('update_pass.php');
?>
@Telegram