{Ninja-Shell}

Function: This is a malicious PHP Web Shell. It allows an attacker to gain unauthorized remote control over a web server after an initial compromise. Key Features:

File Management: Upload, download, edit, rename, and delete files on the server.

Command Execution: Run terminal commands directly on the server (via system, exec, shell_exec).

System Reconnaissance: Displays server info, IP addresses, PHP settings, and software versions (Python, Ruby, GCC, etc.).

Privilege Escalation Tools: Attempts to read sensitive files like /etc/passwd and includes a specialized module to reset cPanel passwords.

Obfuscation: Uses Hex encoding for sensitive PHP functions to evade basic security scanners.