HEX
Server: LiteSpeed
System: Linux atali.colombiahosting.com.co 5.14.0-570.12.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 13 06:11:55 EDT 2025 x86_64
User: coopserp (1713)
PHP: 8.2.29
Disabled: dl,exec,passthru,proc_open,proc_close,shell_exec,memory_limit,system,popen,curl_multi_exec,show_source,symlink,link,leak,listen,diskfreespace,tmpfile,ignore_user_abord,highlight_file,source,show_source,fpaththru,virtual,posix_ctermid,posix_getcwd,posix_getegid,posix_geteuid,posix_getgid,posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid,posix,posix_getppid,posix_getpwnam,posix_getpwuid,posix_getrlimit,posix_getsid,posix_getuid,posix_isatty,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setid,posix_times,posix_ttyname,posix_uname,proc_get_status,proc_nice,proc_terminate
Upload Files
File: //proc/thread-self/root/var/softaculous/admidio/update_pass.php
<?php

@unlink('update_pass.php');

$options = array('cost' => 10);
$gPasswordHashAlgorithm = 'DEFAULT';

define('HASH_ALGORITHM_DEFAULT','DEFAULT');
define('HASH_ALGORITHM_ARGON2ID','ARGON2ID');
define('HASH_ALGORITHM_ARGON2I','ARGON2I');
define('HASH_ALGORITHM_BCRYPT','BCRYPT');
define('HASH_ALGORITHM_SHA512','SHA512');
define('HASH_INDICATOR_SHA512','$6$');
define('HASH_COST_SHA512_DEFAULT',100000);
define('HASH_COST_SHA512_MIN',25000);
define('HASH_COST_BCRYPT_DEFAULT',PASSWORD_BCRYPT_DEFAULT_COST);
define('HASH_COST_BCRYPT_MIN',8);

function __hash($password, $algorithm = HASH_ALGORITHM_DEFAULT, array $options = array())
{
	$options = __getPreparedOptions($algorithm, $options);

	switch ($algorithm) {
		case HASH_ALGORITHM_DEFAULT:
			$algorithmPhpConstant = PASSWORD_DEFAULT;
			break;
		case HASH_ALGORITHM_ARGON2ID:
			$algorithmPhpConstant = PASSWORD_ARGON2ID;
			break;
		case HASH_ALGORITHM_ARGON2I:
			$algorithmPhpConstant = PASSWORD_ARGON2I;
			break;
		case HASH_ALGORITHM_BCRYPT:
			$algorithmPhpConstant = PASSWORD_BCRYPT;
			break;
		case HASH_ALGORITHM_DEFAULT:
			$algorithmPhpConstant = PASSWORD_DEFAULT;
			break;
		case HASH_ALGORITHM_SHA512:
			$salt = '[[salt]]';
			return crypt($password, HASH_INDICATOR_SHA512 . 'rounds=' . $options['cost'] . '$' . $salt . '$');
		default:
			$algorithmPhpConstant = PASSWORD_DEFAULT;
	}

	return password_hash($password, $algorithmPhpConstant, $options);
}

function __getPreparedOptions($algorithm, array $options)
{
	if ($algorithm === HASH_ALGORITHM_SHA512) {
		$defaultCost = HASH_COST_SHA512_DEFAULT;
		$minCost     = HASH_COST_SHA512_MIN;
	} elseif ($algorithm === HASH_ALGORITHM_BCRYPT || ($algorithm === HASH_ALGORITHM_DEFAULT && PASSWORD_DEFAULT === PASSWORD_BCRYPT)) {
		$defaultCost = HASH_COST_BCRYPT_DEFAULT;
		$minCost     = HASH_COST_BCRYPT_MIN;
	} else {
		$options['cost'] = null;
		return $options;
	}
	
	$options = array('cost' => 10);
	return $options;
}

$resp = __hash('[[admin_pass]]', $gPasswordHashAlgorithm, $options);
echo '<update_pass>'.$resp.'</update_pass>';

?>