Are these legitimate files?

FreePBX Security
#1

are these legitimate FreePBX files?

/var/www/html/admin/modules/sysadmin/functions.inc/license.php
/usr/src/freepbx-14.0.1.24/amp_conf/htdocs/admin/modules/digium_phones/license.php
/usr/src/freepbx-14.0.1.24/amp_conf/htdocs/admin/modules/restapps/functions.inc/license.php
/usr/src/freepbx-14.0.1.24/amp_conf/htdocs/admin/modules/sysadmin/functions.inc/license.php

#2

What makes question they are not?

#3

Where did you get the source of freepbx-14.0.1.24 from ?

#4

the official distro, always. This system is not v14 anymore though, it’s been upgraded to 15

#5

was just checking the systems for the K.php hack of which license.php is a known bad file. These only showed up on one system.

#6

you should be able to “head” any commercial php file and see the zend/ioncube header

[[email protected] ~]# head /var/www/html/admin/modules/restapps/functions.inc/aastra.class.php
<?php //00671
// 0 @Ioncube;
//
// Phone Apps 16.0.21
// Copyright 2022 by Sangoma Technologies Inc., All rights reserved
//
// By installing, copying, downloading, distributing, inspecting or using
// the materials provided herewith, you agree to all of the terms of use as
// outlined in our End User Agreement which can be found and reviewed at
// https://www.freepbx.org/legal/
#7

This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.