shell bypass 403

GrazzMean Shell

: /usr/local/ei/ [ drwxr-xr-x ]
Uname: Linux web3.us.cloudlogin.co 5.10.226-xeon-hst #2 SMP Fri Sep 13 12:28:44 UTC 2024 x86_64
Software: Apache
PHP version: 8.1.31 [ PHP INFO ] PHP os: Linux
Server Ip: 162.210.96.117
Your Ip: 18.191.31.223
User: edustar (269686) | Group: tty (888)
Safe Mode: OFF
Disable Function:
NONE

name : wp.php
<?php

/* Wordpress post-installation optimization script */

/* Include the rquired files to use the WP API and functions such as install() and activate_plugin() */
$path = getcwd();
require_once ("wp-load.php");
require_once ("wp-admin/includes/plugin.php");
require_once ("wp-admin/includes/plugin-install.php");
require_once ("wp-admin/includes/class-wp-upgrader.php");
require_once ("wp-admin/includes/file.php");
require_once ("wp-admin/includes/misc.php");

/*
$api = plugins_api("plugin_information", array( "slug" => "Anti-spam" ));
$object = new Plugin_Upgrader();
$object -> install ($api -> download_link);
$result = activate_plugin("$path/wp-content/plugins/anti-spam/anti-spam.php"); 
*/

$api = plugins_api('plugin_information', array('slug' => 'wpvulnerability'));
$object = new Plugin_Upgrader();
$object -> install($api->download_link);
$result = activate_plugin("$path/wp-content/plugins/wpvulnerability/wpvulnerability.php"); 

unlink("wp-content/plugins/hello.php");         /* Delete the useless Hello Dolly plugin */


$buffer = file_get_contents("wp-config.php");
$replacement = "/**#@-*/ \ndefine('WP_AUTO_UPDATE_CORE', true );\n";            /*Enable automatic WP core updates*/
$replace = preg_replace("/\/\*\*\#\@\-\*\//", $replacement, $buffer, 1);
file_put_contents("wp-config.php", $replace);

/*
if (!file_exists('.htaccess')) {
	file_put_contents('.htaccess', '# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /wordpress/
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /wordpress/index.php [L]
</IfModule>

# END WordPress');
}
*/
© 2025 GrazzMean