EIP-2026-104715

This Metasploit module exploits a file upload vulnerability in the Baldr Botnet Panel, allowing arbitrary PHP file upload and remote code execution. It supports multiple versions of the panel and uses XOR encryption for payload obfuscation.