Intrusion Exploit
Server: LiteSpeed
System: Linux cisadane.iixcp.rumahweb.net 5.14.0-427.42.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 1 14:58:02 EDT 2024 x86_64
User: lenf4658 (1805)
PHP: 8.4.19
Disabled: NONE
$ pwd: /opt/cpanel/ea-php81/root/bin/
Upload Files
File: //opt/cpanel/ea-php81/root/bin/pecl
#!/bin/sh

exec /opt/cpanel/ea-php81/root/usr/bin/php -C \
    -d include_path=/usr/share/pear \
    -d date.timezone=UTC \
    -d output_buffering=1 \
    -d variables_order=EGPCS \
    -d safe_mode=0 \
    -d register_argc_argv="On" \
    /opt/cpanel/ea-php81/root/usr/share/pear/peclcmd.php "$@"
@ Telegram