Hunter Black Hat SEO
Server:LiteSpeed
System:Linux raton.hozzt.com 4.18.0-553.144.1.lve.el8.x86_64 #1 SMP Thu Jul 16 08:31:06 UTC 2026 x86_64
User:altinkayamarble (1260)
PHP:7.4.33
Disabled:symlink, show_source, system, virtual, shell_exec,passthru, exec, popen, proc_open, proc_close, proc_nice, proc_terminate,proc_get_status, pfsockopen,allow_url_fopen, posix_getpwuid, eval,posix_setsid, posix_mkfifo, posix_setpgid,posix_setuid, posix_uname,posix_kill,apache_child_terminate, apache_setenv,define_syslog_variables,escapeshellarg, escapeshellcmd, leak, dl, fp, fput,ftp_connect, ftp_exec,ftp_get, ftp_login, ftp_nb_fput, ftp_put, ftp_raw, ftp_rawlist,highlight_file, ini_alter, ini_get_all, ini_restore, inject_code
Upload Files
File: //var/softaculous/moodle30/add_admin.php
<?php

@unlink(__FILE__);

//Validate if the request is from Softaculous
if($_REQUEST['pass'] != '[[autopass]]'){
    die("Unauthorized Access");
}

require_once('config.php');
require_once('lib/adminlib.php');

$user_id = (int) '[[user_id]]';

$admins = array();
foreach (explode(',', $CFG->siteadmins) as $admin) {
    $admin = (int)$admin;
    if ($admin) {
        $admins[$admin] = $admin;
    }
}

$logstringold = implode(', ', $admins);

$admins[$user_id] = $user_id;

$logstringnew = implode(', ', $admins);

set_config('siteadmins', implode(',', $admins));
add_to_config_log('siteadmins', $logstringold, $logstringnew, 'core');

$ret = array();
$ret['done'] = 1;

echo '<add_admin>'.serialize($ret).'</add_admin>';

exit(0);