!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/form/   drwxr-xr-x
Free 52.82 GB of 127.8 GB (41.33%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     absent_form_02-2.doc (31 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ࡱ>	9;8#`	P&bjbjmm	*.;



$
D


4$h^Q
]
|


Uooo
o
oo:/,o
@*r

[
0De
Roo@

o




Y


D





AC%21H-

5H   & ......................				    '15H..........@7-...................................(..............
@#7H-   -%21H-
@#5"   
		I2@I2......................................................... 3A+H..........................................................
*11..................................................................................................................................................................
!5'1%21H-*0*!.......'132# !5*44%21H-#0355I-5 10 '132# #'!@G........'132#
-%21H-1IAH'15H.............................................6'15H............................................!53+...........'1
C#0+'H2%204H-I2@I2DI5H....................................................................................................................
..........................................................................................................................................................................

						          		-A*'2!17-
       *442#%2C5#0!25I
   %2!2A%I'           %2#1I5I            #'!@G	          		(%
7H-)..........................................
                                                                                      	         (..........................................)
					         	'2!@+G9I111

2
						       .......................& .................................................
   %
7H-.............................................9I#'*-     	....... ,.jv$	&	6	8	<	L			D
P
<L\^R
`
v
|
~

 ".0bººººº ºººººººººººººh0GCJaJo(h0GCJaJhWCJaJo(h8=hWCJOJQJaJhWCJaJhWCJaJh8=CJaJo(h8=CJaJo(hWCJaJo(hW5CJ\aJhW5CJ \aJ 1 &	8	D
^~
U"dPlfv x  dhgdMdhdhgd8=$dha$$dha$P&bdjpPRpjlfx&4Ҿɶɶɾɶ񶒶ɶɶɶɶxpxpaɶh0Gh0GCJOJQJaJh0GCJaJh0GCJOJQJaJhWCJOJQJaJUhW5>*CJ \aJ *jhWCJOJQJUaJmHnHuhWCJaJh0GCJaJo(hWCJaJh0GCJaJ*jh0GCJOJQJUaJmHnHuh0GhWCJOJQJaJ&............................................................................
   3A+H........................................		     	     (%
7H-)......................................................& & ..
  '15H......../...................../...............                                (................................................................)
   		                                                         (3A+H)............................................................& .
						      '15H..........@7-...........................(............& .

						3*1H
   !-C+I...........................................................	           (	 )  -8
2          (   ) D!H-8
2
   4142A					      & & ....................................................................
  (%
7H-).............................................9I#1!-	      (%
7H-)......................................................& & ..
        (...........................................................)                                (................................................................)
   (3A+H).................................................		(3A+H)............................................................& .
						      '15H..........@7-...........................(............& .

LN\   R T V X     !:!^!h!|!~!!!!!!B"F"H"T"""""V##$ $$$$ %&%4%%%%%źůŋźŋ|h@(hWCJOJQJaJh@(CJaJh@(CJOJQJaJh,CJOJQJaJo(h,CJaJo(h@(CJaJo(h@(CJaJhW5>*CJ \aJ hW5>*CJ \aJ hWCJaJhWCJaJh0GCJaJ0 ~!B"V#$%N&P&gd	%%%*&,&.&0&N&P&hW5CJ \aJ hWCJaJhWCJaJ(. A!"#$8%T@TNormal_H(CJOJQJ^J_HaJkHjmH	sH	tH	J@J	Heading 1$$@&a$_HCJ$_HaJ$J@J	Heading 2$$@&a$_HCJ _HaJ J@J	Heading 3$$@&a$_HCJ _HaJ P@P	Heading 4$$@&a$_H5CJ$\_HaJ$T@T	Heading 6$$1$@&a$_H5CJ \_HaJ N@N	Heading 7$1$@&_H5CJ \_HaJ N@N	Heading 8$1$@&_H5CJ\_HaJDADDefault Paragraph FontVi@VTable Normal :V44
la(k@(No List|-@|
Macro Text&
	`	@ 
_H(CJOJQJ^J_HaJkHjmH	sH	tH	R>@RTitle$a$_H"5CJ OJPJQJ\^J_HaJ ;.~"/U$EIo`{NO\4		f

:=00000000000000000000000000000000b%P&

 P&P&lz{,"$W
}as %4@zv(	
<

#?NB

S?NB

S?NB

S?B
S	?EFG;tu	v	tatat=~!"(/G#+DK{Xn_cj
MU[_

9=3333X
\

==`/N9vnhh^h`OJQJo(^`OJQJo(N9`/
	V@(8=S&Fh~M	,0GW	=@Snagit 10Ne00:Snagit 10 PrinterSnagit 10 PrinterSnagit 10C	4dA4DINU"SMTJSnagit 10 PrinterInputBinFORMSOURCERESDLLUniresDLLOrientationPORTRAITPaperSizeA4ResolutionOption3ColorMode24bppSnagit 10C	4dA4DINU"SMTJSnagit 10 PrinterInputBinFORMSOURCERESDLLUniresDLLOrientationPORTRAITPaperSizeA4ResolutionOption3ColorMode24bppT?L;PP
P@PPPUnknownGz Times New Roman5Symbol3&z Arial?Angsana New=AngsanaUPC?EucrosiaUPC=&Cordia New"h"$F#F 		24d662HP(?jh~2'C:\MSOFFICE\WINWORD\TEMPLATE\formpr.dotAC%21H-(9"L-!4'@-#LJiroatOh+'0	
4@L
Xdlt|jẺҾѡ͹ٹformpr.dotJiroat5Microsoft Office Word@hx@'r@Lp<j@@r	՜.+,0hp
jSsjspk6'ẺҾѡ͹Title	

 !"#$%&')*+,-./1234567:Root Entry	F q4r<1Table2WordDocument*.SummaryInformation((DocumentSummaryInformation80CompObjq
	FMicrosoft Office Word Document
MSWordDocWord.Document.89q

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0069 ]--