ROOTPLOIT
Server: Apache
System: Linux node6122.myfcloud.com 6.14.3-x86_64-linode168 #1 SMP PREEMPT_DYNAMIC Mon Apr 21 19:47:55 EDT 2025 x86_64
User: bashacomputer (1004)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: //var/softaculous/litecart/write_htpass.php
<?php
	
$username = '[[admin_username]]';
$enc_password = '[[encrypted_pass]]';
$htpasswd_file = '[[softpath]]/[[admin_folder]]/.htpasswd';

$htpasswd = file_get_contents($htpasswd_file);

if(preg_match('#(?<=^|\r\n|\r|\n)\#*('. preg_quote($username, '#') .'):.*?#', $htpasswd)){
	$htpasswd = preg_replace('#(?<=^|\r\n|\r|\n)(\#*'. preg_quote($username, '#') .'):[^\r|\n]+(\r\n?|\n)*#', '$1:{SHA}'. $enc_password . PHP_EOL, $htpasswd);
	echo '<htpasswd>'.$htpasswd.'</htpasswd>';
}
  
if(is_writable($htpasswd_file)){
	$htpasswd = file_put_contents($htpasswd_file, $htpasswd);
}
	
@unlink('write_htpass.php');
?>