HEX
Server: Apache
System: Linux sg241.singhost.net 2.6.32-896.16.1.lve1.4.51.el6.x86_64 #1 SMP Wed Jan 17 13:19:23 EST 2018 x86_64
User: honghock (909)
PHP: 8.0.30
Disabled: passthru,system,shell_exec,show_source,exec,popen,proc_open
Upload Files
File: //var/softaculous/typo8/Pbkdf2Salt.php
<?php

$resp = __getHashedPassword('[[admin_pass]]');
echo '<update_pass>'.$resp.'</update_pass>';

function __getHashedPassword($password, $salt = null){
	$saltedPW = null;
	$salt = random_bytes('16');
	$hash = hash_pbkdf2('sha256', $password, $salt, '25000', 0, true);
	$saltedPW = __applySettingsToSalt($salt) . '$' . __base64Encode($hash, strlen($hash));
	
	return $saltedPW;
}

function __base64Encode($input, $count){
    $input = substr($input, 0, $count);
    return rtrim(str_replace('+', '.', base64_encode($input)), " =\r\n\t\0\x0B");
}

function __applySettingsToSalt($salt){
	$saltWithSettings = $salt;
	$saltWithSettings = '$pbkdf2-sha256$' . sprintf('%02u', '25000') . '$' . __base64Encode($salt, '16');

	return $saltWithSettings;
}

@unlink('Pbkdf2Salt.php');
	
?>