!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/cvc/js/   drwxr-xr-x
Free 51.01 GB of 127.8 GB (39.92%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     info_js.js (8.5 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
jQuery(document).ready(function($){
	$(".preventDf").click(function(event){
		event.preventDefault();
	});
	$('.link').hover(function(){
		$(this).addClass('hover');
	},function(){
		$(this).removeClass('hover');
	});
	$(':input[class^="required"]').blur(function(){
		var objLen = $(this).parent().find(":input[class^='required']").length;
		$(this).siblings('span.error').children('.error').remove();
		if($(this).attr('class') == 'required-thai'){
			if(!/^[ก-๙][ก-๙ 0-9\.\(\)\/\- ]*$/.test($(this).val())){
				$(this).siblings('span.error').append('<div class="error">กรุณาป้อนและควรป้อนเป็นภาษาไทยเท่านั้น</div>');
				return false;
			}/*else{
				$(this).siblings('span.error').children('.error').remove();
				return true;
			}	*/
		}else if($(this).attr('class')=='required-eng'){
			if(!/^[a-zA-Z][a-zA-Z0-9 -_\.\(\)\/ ]*$/.test($(this).val())){
				$(this).siblings('span.error').append('<div class="error">กรุณาป้อนและควรป้อนเป็นภาษาอังกฤษเท่านั้น</div>');
				return false;
			}/*else{
				$(this).siblings('span.error').children('.error').remove();
				return true;
			}*/
		}else if($(this).attr('class')=='required-float'){
			if(!/^[0-9][0-9]*.?[0-9]*$/.test(this.value)){
				$(this).siblings('span.error').append('<div class="error">กรุณาป้อนและควรป้อนเป็นตัวเลขเท่านั้น</div>');
				return false;
			}/*else{
				$(this).siblings('span.error').children('.error').remove();
				return true;
			}*/
		}else if($(this).attr('class')=='required-int'){
			if(!/^[0-9][0-9]*$/.test(this.value)){
				$(this).siblings('span.error').append('<div class="error">กรุณาป้อนและควรป้อนเป็นตัวเลขเท่านั้น</div>');
				return false;
			}/*else{
				$(this).siblings('span.error').children('.error').remove();
				return true;
			}*/
		}else if($(this).attr("class") == "required-char"){
			if(!/^[ก-๙a-zA-z][ก-๙a-zA-z ]*$/.test(this.value)){
				$(this).siblings("span.error").append('<div class="error">กรุณาป้อนและควรป้อนเฉพาะตัวอักษร</div>')
				return false;
			}/*else{
				$(this).siblings("span.error").children(".error").remove();
				return true;
			}*/
		}else if($(this).attr("class") == "required-email"){
			if(!/^[a-zA-z][a-zA-z\.-_]*@[a-z]+\.[\.a-zA-z]*[a-zA-z]$/.test(this.value)){
				$(this).siblings("span.error").append('<div class="error">กรุณาป้อนและควรป้อนเฉพาะอีเมล์</div>')
				return false;
			}/*else{
				$(this).siblings("span.error").children(".error").remove();
				return true;
			}*/
		}else{
			if(this.value == ''){
				$(this).next('span.error').append('<div class="error">กรุณาป้อนข้อมูล</div>');
				return false;				
			}/*else{
				$(this).next('span.error').children('.error').remove();
				return true;
			}*/
		}
	});
	$('table.tbOver tbody tr').hover(function(){
		$(this).addClass('trHover');
	},function(){
		$(this).removeClass('trHover');
	});
});

/*function sendPost (frmId, value, url, target) {
	var html = "";
	if(url != "")
	{
		if (jQuery("#"+frmId).length > 0) {
			jQuery("#"+frmId).attr("action",url);
		}
		else {
			jQuery("body").append("<form action=\""+url+"\" id=\""+frmId+"\" method=\"post\" ></form>");
		}
	}
	if (target != "") {
		jQuery("#"+frmId).attr("target",target);
	}
	if (value != "") {
		jQuery.each(value,function(index,value){
			if(jQuery("#"+frmId).find("input:hidden[name='"+index+"']").length == 0)
			{
				html += "<input type='hidden' name='"+index+"' value='"+value+"' id='"+index+"' />";
			}else{
				jQuery("input:hidden[name='"+index+"']").val(value);
			}
			temp = index;
		});
	}
	jQuery("#"+frmId).append(html).trigger("submit");
}*/

function sendPost(frmId, value, url, opt) {
	var html = "";
	if(url != "")
	{
		if (jQuery("#"+frmId).length > 0) {
			old_url = jQuery("#"+frmId).attr("action");
			jQuery("#"+frmId).attr("action",url);
		}
		else {
			jQuery("body").append("<form action=\""+url+"\" id=\""+frmId+"\" method=\"post\" ></form>")
		}
	}
	if (value != "") {
		jQuery.each(value,function(index,value){
			if(jQuery("#"+frmId).find("input:hidden[name='"+index+"']").length == 0)
			{
				html += "<input type='hidden' name='"+index+"' value='"+value+"' id='"+index+"' />";
			}else{
				jQuery("input:hidden[name='"+index+"']").val(value);
			}
			temp = index;
		});
	}
	if (typeof(opt) == "object") {
		var def_attrs = {'width':400,'height':400,'resizeable':true,'scrollbars':true};
		var attrs = "";
		jQuery.each(def_attrs,function(key,val){
			var tmp_val = (opt[key])?opt[key]:val;
			attrs += key+"="+tmp_val+",";
			delete opt[key];
		});
		jQuery.each(opt,function(key,val){
			attrs +=  key+"="+val+",";
		});
		attrs = attrs.substring(0,(attrs.length -1));
		jQuery("#"+frmId).submit(function(){
			window.open('', frmId+"_popup", attrs);
			this.target = frmId+"_popup";
		});
	}
	jQuery("#"+frmId).append(html).trigger("submit");
}
// this version is not complete.
/*function sendPost (frmId, value, url, target) {
	var html = "";
	if(url != "")
	{
		if (jQuery("#"+frmId).length > 0) {
			jQuery("#"+frmId).attr("action",url);
		}
		else {
			jQuery("body").append("<form action=\""+url+"\" id=\""+frmId+"\" method=\"post\" ></form>");
		}
	}
	if (typeof(target) != "undefined") {
//		jQuery("#"+frmId).attr("target","_blank");
//		กรณีต้องการ submit แล้วเปิดหน้าต่างใหม่ ว่าง url ไว้ กำหนด target = url วิธีการนี้ไม่ทำงานใน ie แต่ทำงานใน ff,ch
//		jQuery("#"+frmId).attr("target",url);
//		window.open(,url, 'width=450,height=300,status=yes,resizable=yes,scrollbars=yes');
// this function is not complete.it can't send value to new window
		newWindow = window.open(url,'_blank', 'width=450,height=300,status=yes,resizable=yes,scrollbars=yes');

		jQuery(newWindow.document).load(function(){
			if (typeof(value) != "undefined") {
				jQuery.each(value,function(index,value){
					if(jQuery("form:eq(0)",newWindow.document).find("input:hidden[name='"+index+"']").length == 0)
					{
						html += "<input type='hidden' name='"+index+"' value='"+value+"' id='"+index+"' />";
					}
					else
					{
						jQuery("input:hidden[name='"+index+"']",newWindow.document).val(value);
					}
				});
			}
			jQuery("form:eq(0)",newWindow.document).append(html);
		});
	}
	else
	{
		if (value != "") {
			jQuery.each(value,function(index,value){
				if(jQuery("#"+frmId).find("input:hidden[name='"+index+"']").length == 0)
				{
					html += "<input type='hidden' name='"+index+"' value='"+value+"' id='"+index+"' />";
				}else{
					jQuery("input:hidden[name='"+index+"']").val(value);
				}
				temp = index;
			});
		}
		jQuery("#"+frmId).append(html).trigger("submit");
	}
}
*/
/*function confirmDel(id,frm,action,fnc){
	if(confirm("คุณต้องการลบใช่หรือไม่") == true)
		if(fnc == "")
			preSubmitAdv(id,frm,action);
		else 
			fnc(id,frm,action);
}*/
function confirmDel(id,frm,action){
	if(confirm("คุณต้องการลบใช่หรือไม่") == true)
			preSubmitAdv(id,frm,action);
}
function confirmDel2(value,frm,action){
	if(confirm("คุณต้องการลบใช่หรือไม่") == true)
		sendPost(frm,value,action);
}
function preSubmitAdv(id,frm,action){
	var $s_id = jQuery('#s_id');
	$s_id.attr('value',id);
	jQuery(frm).children().find(':text').attr('value','').end().find('select').children().removeAttr('selected').end().attr('value','');
//	jQuery('#btnClear').parents('form').find(':text').attr('value','').end().find('select').children().removeAttr('selected').end().attr('value','');
	jQuery(frm).unbind();
	if(action == "" )
		jQuery(frm).trigger("submit");
	else
		jQuery(frm).attr('action',action).trigger('submit');
}

function clearFrm(frm,txtexcept,opt){
	var frmId = "#"+frm;
//	alert('in function');
	jQuery(frmId+" :input").each(function(index){
		if(txtexcept.indexOf(jQuery(this).attr("id")) < 0){
			switch(this.type){
				case "password":
				case "text":
				case "select-one":
				case "textarea":
				case "hidden":
					jQuery(this).val("");
					break;
				case "checkbox":
				case "radio":
					this.checked = false;
			}
		}
	});
	if(opt != ""){
		jQuery.each(opt,function(id,tag){
			jQuery(tag+".#"+id).empty();
		});
	}
}

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0115 ]--