Intrusion Exploit
Server: LiteSpeed
System: Linux cisadane.iixcp.rumahweb.net 5.14.0-427.42.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 1 14:58:02 EDT 2024 x86_64
User: lenf4658 (1805)
PHP: 8.4.19
Disabled: NONE
$ pwd: /lib/systemd/system/
Upload Files
File: //lib/systemd/system/libcare-autostart.service
[Unit]
Description=LibCare auto update
After=multi-user.target

[Service]
Type=oneshot

ExecStartPre=/usr/bin/kcarectl --has-flags libcare-enabled
ExecStart=/usr/bin/kcarectl --userspace-auto-update
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target
@ Telegram