ROOTPLOIT
Server: LiteSpeed
System: Linux in-mum-web1878.main-hosting.eu 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: u435929562 (435929562)
PHP: 7.4.33
Disabled: system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail
Upload Files
File: //opt/process_exporter/process_exporter.yml
#
# Ansible managed
#
process_names:
  - name: mariadb
    comm:
    - mariadbd
  - name: s1
    comm:
    - s1-orchestrator
    - s1-network
    - s1-agent
    - s1-scanner
    - s1-firewall
  - name: monarx
    comm:
    - monarx-agent
    - monarx-agent-auditd
  - name: imunify
    exe:
    - /opt/imunify360/venv/bin/python3
    - /usr/sbin/imunify-realtime-av
    - /usr/bin/imunify-agent-proxy
    - /usr/sbin/imunify360-unified-access-logger
    - /usr/bin/imunify-resident
    - /usr/sbin/imunify360-php-daemon
    - /usr/sbin/wafd_imunify_daemon
    - /opt/ai-bolit/wrapper
  - name: wazuh
    exe:
    - /var/ossec/bin/wazuh-execd
    - /var/ossec/bin/wazuh-agentd
    - /var/ossec/bin/wazuh-syscheckd
    - /var/ossec/bin/wazuh-logcollector
    - /var/ossec/bin/wazuh-modulesd
  - name: hostbackup
    cmdline:
    - /hosting/tools/hostbackup.py
  - name: hostapi
    comm:
    - hostapi
  - name: lsws
    comm:
    - litespeed
  - name: php
    comm:
    - php
  - name: cron
    comm:
    - CROND
    - crond
  - name: sshd
    comm:
    - sshd
  - name: proftpd
    comm:
    - proftpd
  - name: memecached
    exe:
    - /usr/local/memcached/bin/memcached
  - name: redis
    comm:
    - redis-server