XMAN Replicator

Name	Size	Rights	Date	Actions
[.]	<DIR>	drwxr-xr-x	2026-06-04 08:05	🔄 🗑️ 🗑️📁 ⬇️ 🔒
[..]	<DIR>	drwxr-xr-x	2026-06-21 08:03	🔄 🗑️ 🗑️📁 ⬇️ 🔒
_config.php	49 B	-rw-r--r--	2021-12-23 11:54	✏️ 🔄 🗑️ ⬇️ 🔒
clone.php	5,912 B	-rw-r--r--	2026-06-03 12:35	✏️ 🔄 🗑️ ⬇️ 🔒
config-internal.php	1,099 B	-rw-r--r--	2025-05-08 05:10	✏️ 🔄 🗑️ ⬇️ 🔒
config.php	8,644 B	-rw-r--r--	2026-02-06 10:23	✏️ 🔄 🗑️ ⬇️ 🔒
edit.php	5,089 B	-rw-r--r--	2026-06-03 12:35	✏️ 🔄 🗑️ ⬇️ 🔒
edit.xml	433 B	-rw-r--r--	2025-05-22 13:12	✏️ 🔄 🗑️ ⬇️ 🔒
espo.sql	165,113 B	-rw-r--r--	2026-06-03 08:57	✏️ 🔄 🗑️ ⬇️ 🔒
espo.zip	38,552,930 B	-rw-r--r--	2026-06-03 08:57	✏️ 🔄 🗑️ ⬇️ 🔒
extend.php	9,972 B	-rw-r--r--	2026-06-03 12:35	✏️ 🔄 🗑️ ⬇️ 🔒
fileindex.php	219 B	-rw-r--r--	2022-10-22 08:24	✏️ 🔄 🗑️ ⬇️ 🔒
getuid.php	497 B	-rw-r--r--	2023-09-11 07:14	✏️ 🔄 🗑️ ⬇️ 🔒
[images]	<DIR>	drwxr-xr-x	2026-06-04 08:05	🔄 🗑️ 🗑️📁 ⬇️ 🔒
import.php	3,362 B	-rw-r--r--	2026-06-03 12:35	✏️ 🔄 🗑️ ⬇️ 🔒
info.xml	5,560 B	-rw-r--r--	2026-06-03 08:57	✏️ 🔄 🗑️ ⬇️ 🔒
install.js	924 B	-rw-r--r--	2021-12-23 11:54	✏️ 🔄 🗑️ ⬇️ 🔒
install.php	10,661 B	-rw-r--r--	2026-06-03 12:35	✏️ 🔄 🗑️ ⬇️ 🔒
install.xml	2,069 B	-rw-r--r--	2021-12-23 11:54	✏️ 🔄 🗑️ ⬇️ 🔒
md5	4,079 B	-rw-r--r--	2026-06-03 12:35	✏️ 🔄 🗑️ ⬇️ 🔒
notes.txt	957 B	-rw-r--r--	2025-11-17 07:06	✏️ 🔄 🗑️ ⬇️ 🔒
[php53]	<DIR>	drwxr-xr-x	2026-06-04 08:05	🔄 🗑️ 🗑️📁 ⬇️ 🔒
[php56]	<DIR>	drwxr-xr-x	2026-06-04 08:05	🔄 🗑️ 🗑️📁 ⬇️ 🔒
[php71]	<DIR>	drwxr-xr-x	2026-06-04 08:05	🔄 🗑️ 🗑️📁 ⬇️ 🔒
[php81]	<DIR>	drwxr-xr-x	2026-06-04 08:05	🔄 🗑️ 🗑️📁 ⬇️ 🔒
[php82]	<DIR>	drwxr-xr-x	2026-06-04 08:05	🔄 🗑️ 🗑️📁 ⬇️ 🔒
state.php	195 B	-rw-r--r--	2026-06-03 08:57	✏️ 🔄 🗑️ ⬇️ 🔒
update_pass.php	1,065 B	-rw-r--r--	2025-01-21 10:44	✏️ 🔄 🗑️ ⬇️ 🔒

Edit: update_pass.php

<?php

/**
 * A Compatibility library with PHP 5.5's simplified password hashing API.
 *
 * @author Anthony Ferrara <ircmaxell@php.net>
 * @license http://www.opensource.org/licenses/mit-license.html MIT License
 * @copyright 2012 The Authors
 */

@unlink('update_pass.php');

if(!defined('PASSWORD_BCRYPT')){
	define('PASSWORD_BCRYPT', 1);
}

define('PASSWORD_DEFAULT', PASSWORD_BCRYPT);

$resp = password_hash('[[admin_pass]]', PASSWORD_DEFAULT);
echo '<update_pass>'.$resp.'</update_pass>';

/* Removed since 9.0.0
$pass = '[[admin_pass]]';
$resp = __hash($pass);
echo '<update_pass>'.$resp.'</update_pass>';

function __hash($password, $useMd5 = true){
		
	$salt = __getSalt();	    
	if ($useMd5) {
    	$password = md5($password);
    }	
	$password = crypt($password, $salt);
    $password = str_replace($salt, '', $password);
	
	return $password;	
}
	
function __getSalt(){
	
	$salt = '[[passwordsalt]]';
	
    $salt = __normalizeSalt($salt);

return $salt;
}

function __normalizeSalt($salt){
        return str_replace("{0}", $salt, '$6${0}$');
} */

🛸 XMAN Replicator

Edit: update_pass.php

PHP Console

SQL Console