ROOTPLOIT
Server: Apache
System: Linux node6122.myfcloud.com 6.14.3-x86_64-linode168 #1 SMP PREEMPT_DYNAMIC Mon Apr 21 19:47:55 EDT 2025 x86_64
User: bashacomputer (1004)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: //var/softaculous/espo/getuid.php
<?php

$owner = function_exists('posix_getuid') ? posix_getuid() : 0;
$group = function_exists('posix_getegid') ? posix_getegid() : 0;
echo '\<owner>'.$owner.'</owner>';
echo '\<group>'.$group.'</group>';

// this is to handle secret key generation
$SecretKey = __generateSecretKey();
echo '\<secretkey>'.$SecretKey.'</secretkey>';

function __generateSecretKey()
{
	if (!function_exists('random_bytes')) {
		return uniqid() . substr(md5(rand()), 0, 4);
	}
	return bin2hex(random_bytes(16));
}

?>