Intrusion Exploit
Server: LiteSpeed
System: Linux cisadane.iixcp.rumahweb.net 5.14.0-427.42.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 1 14:58:02 EDT 2024 x86_64
User: lenf4658 (1805)
PHP: 8.4.19
Disabled: NONE
Upload Files
File: //opt/Autom8Redis/save_Autom8Redis.live.py
import cgitb
import os
import socket
import subprocess
import time
import cgi
from Autom8RedisTaskq import setup_redis


cpaneluser = os.environ["USER"]
cpanelhome = os.environ["HOME"]

def close_cpanel_liveapisock():
    """We close the cpanel LiveAPI socket here as we dont need those"""
    cp_socket = os.environ["CPANEL_CONNECT_SOCKET"]
    sock = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)
    sock.connect(cp_socket)
    sock.sendall('<cpanelxml shutdown="1" />'.encode('utf-8'))
    sock.close()

cgitb.enable()


close_cpanel_liveapisock()
form=cgi.FieldStorage()

print('Content-Type: text/html')
print('')


if form.getvalue('Option'):
    setup_redis.delay(cpaneluser, cpanelhome, form.getvalue('Option'))
    time.sleep(20)
else:
    print("ERROR: Missing Parameter")