FM / procwire

/var/softaculous/procwire

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
.htaccess	254	0644	edit dl rm
clone.php	5024	0644	edit dl rm
config.php	4092	0644	edit dl rm
edit.php	6280	0644	edit dl rm
edit.xml	433	0644	edit dl rm
fileindex.php	132	0644	edit dl rm
import.php	3841	0644	edit dl rm
info.xml	7437	0644	edit dl rm
install.js	924	0644	edit dl rm
install.php	10207	0644	edit dl rm
install.xml	1067	0644	edit dl rm
md5	2656	0644	edit dl rm
NOTES.txt	1685	0644	edit dl rm
update_pass.php	1056	0644	edit dl rm
upgrade.php	4461	0644	edit dl rm
upgrade.xml	1517	0644	edit dl rm

Edit: /var/softaculous/procwire/update_pass.php (1056B)

<?php

$salt_config = md5(mt_rand() . microtime(true));
echo $salt_db = '$2y$11$'.__randomBase64String(22);
echo '<SOFTACULOUS>';
echo $pass = substr(crypt('[[admin_pass]]' . '[[salt_config]]', $salt_db), 29);
		
function __randomBase64String($requiredLength = 22) {

$buffer = '';
	$rawLength = (int) ($requiredLength * 3 / 4 + 1);
	$valid = false;

if(function_exists('mcrypt_create_iv')) {
		$buffer = mcrypt_create_iv($rawLength, MCRYPT_DEV_URANDOM);
		if($buffer) $valid = true;
	}

if(!$valid && function_exists('openssl_random_pseudo_bytes')) {
		$buffer = openssl_random_pseudo_bytes($rawLength);
		if($buffer) $valid = true;
	}

if(!$valid || strlen($buffer) < $rawLength) {
		$bl = strlen($buffer);
		for($i = 0; $i < $rawLength; $i++) {
			if($i < $bl) {
				$buffer[$i] = $buffer[$i] ^ chr(mt_rand(0, 255));
			} else {
				$buffer .= chr(mt_rand(0, 255));
			}
		}
	}

$salt = str_replace('+', '.', base64_encode($buffer));
	$salt = substr($salt, 0, $requiredLength);

$salt .= $valid;

return $salt;
}

@unlink('update_pass.php');

'; echo $pass = substr(crypt('[[admin_pass]]' . '[[salt_config]]', $salt_db), 29); function __randomBase64String($requiredLength = 22) { $buffer = ''; $rawLength = (int) ($requiredLength * 3 / 4 + 1); $valid = false; if(function_exists('mcrypt_create_iv')) { $buffer = mcrypt_create_iv($rawLength, MCRYPT_DEV_URANDOM); if($buffer) $valid = true; } if(!$valid && function_exists('openssl_random_pseudo_bytes')) { $buffer = openssl_random_pseudo_bytes($rawLength); if($buffer) $valid = true; } if(!$valid || strlen($buffer) < $rawLength) { $bl = strlen($buffer); for($i = 0; $i < $rawLength; $i++) { if($i < $bl) { $buffer[$i] = $buffer[$i] ^ chr(mt_rand(0, 255)); } else { $buffer .= chr(mt_rand(0, 255)); } } } $salt = str_replace('+', '.', base64_encode($buffer)); $salt = substr($salt, 0, $requiredLength); $salt .= $valid; return $salt; } @unlink('update_pass.php'); ?>