[Djing00]

Hi,

whats the best way to inject HTML content to wordpress I have access to with a webshell?

[PublicNetwork]

You have multiple options:

Trough the adminpanel:
If you have shell access try accessing the wpconfig file. In there youll find the database password and username.
Use that to get access to the db. Once inside change the password for an encrypted version of a password you know. Google wordpress encryption for the encryptor. Once you replace the password with the current administrator you can log in.

Trough the shell:
If you want to have it be executed on every request like a mining script add it to the headers. If you go to wp-includes there you can find the HEADER.php file insert it in there.

Those are 2 options you may consider there are a lot more tho

If you need help hit me up with a pm and i can help you