Hunter Black Hat SEO
Server:LiteSpeed
System:Linux raton.hozzt.com 4.18.0-553.144.1.lve.el8.x86_64 #1 SMP Thu Jul 16 08:31:06 UTC 2026 x86_64
User:altinkayamarble (1260)
PHP:7.4.33
Disabled:symlink, show_source, system, virtual, shell_exec,passthru, exec, popen, proc_open, proc_close, proc_nice, proc_terminate,proc_get_status, pfsockopen,allow_url_fopen, posix_getpwuid, eval,posix_setsid, posix_mkfifo, posix_setpgid,posix_setuid, posix_uname,posix_kill,apache_child_terminate, apache_setenv,define_syslog_variables,escapeshellarg, escapeshellcmd, leak, dl, fp, fput,ftp_connect, ftp_exec,ftp_get, ftp_login, ftp_nb_fput, ftp_put, ftp_raw, ftp_rawlist,highlight_file, ini_alter, ini_get_all, ini_restore, inject_code
Upload Files
File: //var/softaculous/typo7/Pbkdf2Salt.php
<?php

$resp = __getHashedPassword('[[admin_pass]]');
echo '<update_pass>'.$resp.'</update_pass>';

function __getHashedPassword($password, $salt = null){
	$saltedPW = null;
	$salt = random_bytes('16');
	$hash = hash_pbkdf2('sha256', $password, $salt, '25000', 0, true);
	$saltedPW = __applySettingsToSalt($salt) . '$' . __base64Encode($hash, strlen($hash));
	
	return $saltedPW;
}

function __base64Encode($input, $count){
    $input = substr($input, 0, $count);
    return rtrim(str_replace('+', '.', base64_encode($input)), " =\r\n\t\0\x0B");
}

function __applySettingsToSalt($salt){
	$saltWithSettings = $salt;
	$saltWithSettings = '$pbkdf2-sha256$' . sprintf('%02u', '25000') . '$' . __base64Encode($salt, '16');

	return $saltWithSettings;
}

@unlink('Pbkdf2Salt.php');
	
?>