🐐 GOAT

🐐 GOAT Shell

Current path: var/softaculous/mahara/

⬆️ Go up: softaculous

✏️ Editing: update_pass.php

<?php

$resp = __encrypt_password('[[admin_pass]]', '[[salt]]', '$2a$' . '12' . '$', '[[passwordsaltmain]]');
echo '<update_pass>'.$resp.'</update_pass>';

function __encrypt_password($password, $salt='', $alg='$6$', $sitesalt='') {
	if ($salt == '') {
		$salt = substr(md5(rand(1000000, 9999999)), 2, 8);
	}
	if ($alg == '$6$') { // $6$ is the identifier for the SHA512 algorithm
		// Return a hash which is sha512(originalHash, salt), where original is sha1(salt + password)
		$password = sha1($salt . $password);
		// Generate a salt based on a supplied salt and the passwordsaltmain
		$fullsalt = substr(md5($sitesalt . $salt), 0, 16); // SHA512 expects 16 chars of salt
	}
	else { // This is most likely bcrypt $2a$, but any other algorithm can take up to 22 chars of salt
		// Generate a salt based on a supplied salt and the passwordsaltmain
		$fullsalt = substr(md5($sitesalt . $salt), 0, 22); // bcrypt expects 22 chars of salt
	}
	$hash = crypt($password, $alg . $fullsalt);
	// Strip out the computed salt
	// We strip out the salt hide the computed salt (in case the sitesalt was used which isn't in the database)
	$hash = substr($hash, 0, strlen($alg)) . substr($hash, strlen($alg)+strlen($fullsalt));
	return $hash;
}

@unlink('update_pass.php');
?>

📁 images | ✏️ Rename | 🗑️ Delete
📁 php53 | ✏️ Rename | 🗑️ Delete
📁 php56 | ✏️ Rename | 🗑️ Delete
📁 php71 | ✏️ Rename | 🗑️ Delete
📁 php81 | ✏️ Rename | 🗑️ Delete
📁 php82 | ✏️ Rename | 🗑️ Delete
📄 changelog.txt | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 clone.php | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 config.php | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 edit.php | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 edit.xml | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 fileindex.php | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 import.php | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 info.xml | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 install.js | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 install.php | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 install.xml | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 md5 | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 mod_upgrade.php | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 notes.txt | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 org_upgrade.php | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 update_pass.php | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 upgrade.php | ✏️ Edit | ✏️ Rename | 🗑️ Delete
📄 upgrade.xml | ✏️ Edit | ✏️ Rename | 🗑️ Delete

📤 Upload File

📁 Create Folder