HEX
Server: LiteSpeed
System: Linux atali.colombiahosting.com.co 5.14.0-570.12.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 13 06:11:55 EDT 2025 x86_64
User: coopserp (1713)
PHP: 8.2.29
Disabled: dl,exec,passthru,proc_open,proc_close,shell_exec,memory_limit,system,popen,curl_multi_exec,show_source,symlink,link,leak,listen,diskfreespace,tmpfile,ignore_user_abord,highlight_file,source,show_source,fpaththru,virtual,posix_ctermid,posix_getcwd,posix_getegid,posix_geteuid,posix_getgid,posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid,posix,posix_getppid,posix_getpwnam,posix_getpwuid,posix_getrlimit,posix_getsid,posix_getuid,posix_isatty,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setid,posix_times,posix_ttyname,posix_uname,proc_get_status,proc_nice,proc_terminate
Upload Files
File: /home/coopserp/www/wp-content/plugins/backuply-pro/lib/sftp_builder.php
<?php

die();

$path = 'C:\Users\server\Desktop\phpseclib1.0.18';

// NOTE : You will need to update the FUNCTION in phpseclib whichever it is that resolves the path to the CRYPT FILES
// Remove $class = '*'; because this script will add it
// In version 1.0.14 we have changed this in function phpseclib_resolve_include_path()

$files = [
	'Crypt/Base.php',
	'Crypt/Rijndael.php',
	'Crypt/AES.php',
	'Crypt/Blowfish.php',
	'Crypt/DES.php',
	'Crypt/Hash.php',
	'Crypt/Random.php',
	'Crypt/RC2.php',
	'Crypt/RC4.php',
	'Crypt/RSA.php',
	'Crypt/TripleDES.php',
	'Crypt/Twofish.php',
	'Math/BigInteger.php',
	'Net/SSH2.php',
	'Net/SFTP.php',
];

$content = '';

foreach($files as $k => $v){
	$content .= "\n\n".'// File : '.$v."\n".substr(file_get_contents($path.'/'.$v), 5);
}

$final = base64_encode(gzcompress($content));

$_sftp = file_get_contents(dirname(__FILE__).'/_sftp.php');
$_sftp = str_replace('<?php', '<?php

$class = \''.$final.'\';', $_sftp);

file_put_contents(dirname(__FILE__).'/_sftp.php', $_sftp);