Hunter Black Hat SEO
Server:LiteSpeed
System:Linux raton.hozzt.com 4.18.0-553.144.1.lve.el8.x86_64 #1 SMP Thu Jul 16 08:31:06 UTC 2026 x86_64
User:altinkayamarble (1260)
PHP:7.4.33
Disabled:symlink, show_source, system, virtual, shell_exec,passthru, exec, popen, proc_open, proc_close, proc_nice, proc_terminate,proc_get_status, pfsockopen,allow_url_fopen, posix_getpwuid, eval,posix_setsid, posix_mkfifo, posix_setpgid,posix_setuid, posix_uname,posix_kill,apache_child_terminate, apache_setenv,define_syslog_variables,escapeshellarg, escapeshellcmd, leak, dl, fp, fput,ftp_connect, ftp_exec,ftp_get, ftp_login, ftp_nb_fput, ftp_put, ftp_raw, ftp_rawlist,highlight_file, ini_alter, ini_get_all, ini_restore, inject_code
Upload Files
File: //var/softaculous/moodle42/get_plugin_list.php
<?php

@unlink(__FILE__);

// Validate if the request is from Softaculous
if(php_sapi_name() == 'cli'){
	if($argv[1] != '--pass=[[autopass]]'){
		die("Unauthorized Access");
	}
	if(isset($_SERVER['REMOTE_ADDR'])){
		unset($_SERVER['REMOTE_ADDR']);
	}
	// Define CLI_SCRIPT before including config.php
	define('CLI_SCRIPT', true);
}else{
	if($_REQUEST['pass'] != '[[autopass]]'){
		die("Unauthorized Access");
	}
}

require('config.php');

$pluginman = core_plugin_manager::instance();
$plugins_list = array();
foreach ($pluginman->get_plugins() as $type => $plugins) {
    foreach ($plugins as $shortname => $plugin) {;
        if ($plugin->source == core_plugin_manager::PLUGIN_SOURCE_EXTENSION) {
            $plugins_list[] = $plugin->rootdir;
        }
    }
}

echo '<moodle_plugins>'.json_encode($plugins_list).'</moodle_plugins>';
?>