#OSCP Turning your Backdoor in a WordPress Plugin

Just a quick one:

Imagine you own a wordpress and want to upload your remote php script as a nice fancy wordpress plugin. You know, just adding a feature the original installation doesn’t have. So you grab your trusty php remote shell script .. and wordpress hates it. Damm .. So how do  we build a valid wordpress plugin?

1. Open up your php script and add

/*
Plugin Name: WordPress.org Plugin
Plugin URI:  https://developer.wordpress.org/plugins/the-basics/
Description: Basic WordPress Plugin Header Comment
Version:     20160911
Author:      WordPress.org
Author URI:  https://developer.wordpress.org/
License:     GPL2
License URI: https://www.gnu.org/licenses/gpl-2.0.html
*/

to the start, then upload it

2. ??????

3. Profit

 

Easy ^^