ROOTPLOIT
Server: Apache
System: Linux node6122.myfcloud.com 6.14.3-x86_64-linode168 #1 SMP PREEMPT_DYNAMIC Mon Apr 21 19:47:55 EDT 2025 x86_64
User: bashacomputer (1004)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system
$ pwd: /etc/chkserv.d/
Upload Files
File: //etc/chkserv.d/cphulkd
service[cphulkd]=579,POST /dovecot-auth-policy?command=allow HTTP/1.0\r\nX-API-Key: dovecot:%hulkkey_dovecot%\r\nContent-Length: 42\r\n\r\n{"username":"__cpanel__service__auth__XX"},HTTP/1.. 200,/usr/local/cpanel/scripts/restartsrv_cphulkd,cphulkd,root
@ Telegram