upload non-encapsulated payload when zip installation fails

[viniciusmarangoni]

When playng the Stapler CTF (https://www.vulnhub.com/entry/stapler-1,150/) I realized that wpxf wouldn't able to get a reverse shell using the admin_shell_upload module. The module was able to upload the zip file in wp-content/uploads/ but wasn't able to extract it to wp-content/plugins/ because lack of permissions on this dir. I don't know if this is a common behaviour. I wrote a workaround that uploads directly the php payload file (without encapsulating it in a zip) and then accesses the payload in wp-content/uploads/PAYLOADNAME.php

I apologize for any mistake in my code. I'm not familiar with ruby.

[rastating]

Thanks for the contribution @viniciusmarangoni - I've just merged it into the development branch 🎉

This should be in the next minor release, which will probably be in a few weeks time.