!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis2222/js/   drwxr-xr-x
Free 52.32 GB of 127.8 GB (40.94%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     pp_js.js (10.26 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
var jquery = jQuery.noConflict(true); jquery.extend(jquery.expr[':'], { focus: function(element) { return element == document.activeElement; } }); jquery(document).ready(function(){ jquery(".preventDf").click(function(event){ event.preventDefault(); }); jquery('#btnClear').click(function(){ jquery('#btnClear').parents('form').find(':text:not(.calendarDateInput),:hidden').attr('value','').end().find('select:not(.calendarDateInput)').children().removeAttr('selected').end().attr('value',''); jquery('div.error').remove(); //alert(jquery('#btnClear').parents('form').find(':text,:hidden').length); }); jquery('.link').hover(function(){ jquery(this).addClass('hover'); },function(){ jquery(this).removeClass('hover'); }); jquery('.preSubmit').click(function(){ jquery('#s_id').attr('value',jquery(this).next(':hidden').attr('value')); jquery('#s_id').parents('form').trigger('submit'); }); jquery('input[class^="required"],select.required').blur(function(event){ jquery(this).next('span').children('.error').remove(); if(jquery(this).attr('class') == 'required-thai'){ if(!/^[ก-๙ 0-9 . ( ) / -]+$/.test(this.value)){ jquery(this).next('span.error').append('
กรุณาป้อนและควรป้อนเป็นภาษาไทยเท่านั้น
'); return false; }else{ jquery(this).next('span.error').children('.error').remove(); return true; } }else if(jquery(this).attr('class')=='required-eng'){ if(!/^[a-z A-Z 0-9 . ( ) / -]+$/.test(this.value)){ jquery(this).next('span.error').append('
กรุณาป้อนและควรป้อนเป็นภาษาอังกฤษเท่านั้น
'); return false; }else{ jquery(this).next('span.error').children('.error').remove(); return true; } }else if(jquery(this).attr('class')=='required-float'){ if(!/^[0-9 .]+$/.test(this.value)){ jquery(this).next('span.error').append('
กรุณาป้อนและควรป้อนเป็นตัวเลขเท่านั้น
'); return false; }else{ jquery(this).next('span.error').children('.error').remove(); return true; } }else if(jquery(this).attr('class')=='required-int'){ if(!/^[0-9]+$/.test(this.value)){ jquery(this).next('span.error').append('
กรุณาป้อนและควรป้อนเป็นตัวเลขเท่านั้น
'); return false; }else{ jquery(this).next('span.error').children('.error').remove(); return true; } }else{ if(this.value == ''){ jquery(this).next('span.error').append('
กรุณาป้อนข้อมูล
'); return false; }else{ jquery(this).next('span.error').children('.error').remove(); return true; } } }); /* jquery('form.chkBeforeSubmit').submit(function(){ jquery('input[class^="required"]').trigger('blur'); var numError = jquery('div.error',this).length; if(numError) return false; }); */ jquery('table.table tbody tr').hover(function(){ jquery(this).addClass('trHover'); },function(){ jquery(this).removeClass('trHover'); }); jquery('table.tablePrint').find('td.optCol').remove(); }); function clearAttr(attr){ jquery.each(attr,function(index,value){ jquery("#"+index).attr(value,null); }); } function pre_submit(id){ jquery('#s_id').attr('value',id); jquery('#s_id').parents('form').trigger('submit'); } function preSubmitAdv(id,frm,action){ var $s_id = jquery('#s_id'); $s_id.attr('value',id); jquery(frm).children().find(':text').attr('value','').end().find('select').children().removeAttr('selected').end().attr('value',''); // jquery('#btnClear').parents('form').find(':text').attr('value','').end().find('select').children().removeAttr('selected').end().attr('value',''); jquery(frm).unbind(); if(action == "" ) jquery(frm).trigger("submit"); else jquery(frm).attr('action',action).trigger('submit'); } function preSubmitMHd(arr,frm,action){ // jquery('#btnClear').parents('form').find(':text').attr('value','').end().find('select').children().removeAttr('selected').end().attr('value',''); // jquery(frm).unbind(); jquery("#"+frm).children().find(":text").val(null).end().find("select").children().attr("selected",""); jquery.each(arr,function(key,value){ if(jquery("#"+key).length == 0) jquery("#"+frm).append(""); else jquery("#"+key).attr("value",value); //alert(key+" have "+jquery("#"+key).length+" value = "+jquery("#"+key).val()); }); if(action == "") jquery("#"+frm).trigger("submit"); else jquery("#"+frm).attr("action",action).trigger("submit"); } function confirmDel(id,frm,action,fnc){ if(confirm("คุณต้องการลบใช่หรือไม11่") == true) if(fnc == "") preSubmitAdv(id,frm,action); else fnc(id,frm,action); } function vprint(){ window.print(); } function chkDisable(ele,obj){ alert(jquery(obj).val()); jquery(obj).attr("value",true); if(jquery(ele).attr("disabled")==true){ jquery(ele).attr("disabled",false); jquery(obj).attr("value",false); }else{ jquery(ele).attr("disabled",true); jquery(obj).attr("value",true); } } function popUp(url){ strOption = "scrollbars=yes,left=0,top=0,width=500,height=500"; window.open(url,"",strOption); } function clearFrm(frm,txtexcept,opt){ var frmId = "#"+frm; jquery(frmId+" :input").each(function(index){ if(txtexcept.indexOf(jquery(this).attr("id")) < 0){ switch(this.type){ case "password": case "text": case "select-one": case "textarea": case "hidden": jquery(this).val(""); break; case "checkbox": case "radio": this.checked = false; } } }); if(opt != ""){ jquery.each(opt,function(id,tag){ jquery(tag+".#"+id).empty(); }); } } /*function sendPost(frmId,value,url){ var html = ""; jquery.each(value,function(index,value){ if(jquery("#"+frmId).find("input:hidden[name='"+index+"']").length == 0) html += ""; else jquery("input:hidden[name='"+index+"']").val(value); temp = index; }); if (url != '') jquery("#"+frmId).attr("action",url); jquery("#"+frmId).append(html).trigger("submit"); }*/ function sendPost(frmId, value, url, target) { var html = ""; if(url != "") { if (jquery("#"+frmId).length > 0) { jquery("#"+frmId).attr("action",url); } else { jquery("body").append("
") } } if (target != "") { jquery("#"+frmId).attr("target",target); } if (value != "") { jquery.each(value,function(index,value){ if(jquery("#"+frmId).find("input:hidden[name='"+index+"']").length == 0) { html += ""; }else{ jquery("input:hidden[name='"+index+"']").val(value); } temp = index; }); } jquery("#"+frmId).append(html).trigger("submit"); } function setSuccessMsg(msg,flag){ // var jflag = parseInt(flag); var html = "
"; else html += " class=\"fail\">"; html += msg+"
"; jquery(html).appendTo("body").delay(2000).fadeOut(1000); } function isDecimal(ele){//check valid กรอกได้เฉพาะจำนวนทศนิยมที่ไม่ติดลบ val=document.getElementById(ele).value; if(val!=""){ if(!(parseFloat(val,10)==(val*1))){ alert("กรอกได้เฉพาะตัวเลขและจุดทศนิยมเท่านั้น !"); document.getElementById(ele).value=""; return false; }else if((val.indexOf("-")!=-1)){ alert("กรอกได้เฉพาะตัวเลขและจุดทศนิยมเท่านั้น !"); document.getElementById(ele).value=""; return false; } } } function isNumberic(ele){//เฉพาะจำนวนนับ val=document.getElementById(ele).value; if(val!=""){ if(!(parseFloat(val,10)==(val*1))){ alert("กรอกได้เฉพาะตัวเลขเท่านั้น !"); document.getElementById(ele).value=""; return false; }else if((val.indexOf(".")!=-1) || (val.indexOf("-")!=-1)){ alert("กรอกได้เฉพาะตัวเลขเท่านั้น !"); document.getElementById(ele).value=""; return false; } } } function calBirthDate(birthDate) { var nowDate = new Date(); var bDate = birthDate.split("/"); var resultDate = Array(); var firstDateOnMonth = new Date( nowDate.getFullYear() , nowDate.getMonth() , 1 ); var firstDateNextMonth = new Date( nowDate.getFullYear() , nowDate.getMonth()+1 , 1 ); var timeVary = firstDateNextMonth.getTime() - firstDateOnMonth.getTime(); var dayVary = timeVary / (1000*60*60*24) ; var nDate = Array(); nDate[0] = nowDate.getDate(); nDate[1] = nowDate.getMonth()+1; nDate[2] = nowDate.getFullYear(); resultDate[2] = nDate[2] - bDate[2]; resultDate[1] = nDate[1] - bDate[1]; if(resultDate[1] < 0 && resultDate[2] > 0) { resultDate[1] += 12; resultDate[2] -= 1; } resultDate[0] = nDate[0] - bDate[0]; if(resultDate[0] < 0 && resultDate[1] > 0 ) { resultDate[0] += dayVary; resultDate[1] -= 1; } // var date = new Date(); /* resultDate[0] = nDate[0] - parseInt(bDate[0]); if(resultDate[0] < 0 ){ resultDate[0] += 30; nDate[1] -= 1; } resultDate[1] = nDate[1] - parseInt(bDate[1]); if(resultDate[1] < 1 && nDate[2] > 0){ // resultDate[1] += 12; // nDate[2] -= 1; }else if(resultDate[1] < 1 && nDate[2] < 0) resultDate[1] += 12; resultDate[2] = nDate[2] - parseInt(bDate[2]); */ return resultDate[2]+" ปี "+resultDate[1]+" เดือน "+resultDate[0]+" วัน"; } function calNumDay(srcDate,destDate,target,optMsg) { var temp = (jquery(":hidden[name='"+srcDate+"']").val()).split("/"); var sDate = new Date(temp[2]+"/"+temp[1]+"/"+temp[0]); var temp = (jquery(":hidden[name='"+destDate+"']").val()).split("/"); var dDate = new Date(temp[2]+"/"+temp[1]+"/"+temp[0]); var time = dDate.getTime() - sDate.getTime(); var numDay = time/(1000*60*60*24); jquery("#"+target).append(optMsg+" "+numDay); }

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0052 ]--