!C99Shell v. 1.0 pre-release build #16!

Software: Apache. PHP/5.4.45 

uname -a: Linux webm115.cluster007.gra.hosting.ovh.net 5.15.74-ovh-vps-grsec-zfs-classid #1 SMP Wed
Oct 26 09:50:47 UTC 2022 x86_64
 

uid=763961(ebenisteaz) gid=100(users) groups=100(users) 

Safe-mode: OFF (not secure)

/home/ebenisteaz/www/admin/   drwx---r-x
Free 0 B of 0 B (0%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     ajax.js (7.63 KB)      -rw----r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
// JavaScript Document

$(function() {
///////////// Multidelete

$("#actiontodo").change(function() {
//var deletedTr = $(this).parent().parent().parent().parent().parent();
ids=new Array()
 a=0;
 $("input.checkbox:checked").each(function(){
 ids[a]=$(this).val();
 a++;
 })
 
var action = $(this).val();
var table = $(this).attr("rel");
var string = 'ids='+ ids + "&table=" + table + "&action=" + action;

 if(ids == "") {
 alert("Veuillez sélectionner au moins un enregistrement.");
 return false;
        }
if(action=="supprimer"){
	var messDel=' Cette action ne peut pas être annulée!';
} else { var messDel=''; }
if(confirm('Êtes-vous sûr de vouloir ' + action + ' les enregistrements sélectionnés? Cela permettrait également de ' + action + ' toutes les enregistrements liées.' + messDel)){
$('#loading_overlay').fadeIn();
		
$.ajax({
   type: "POST",
 	url: "includes/actions.php",
   data: string,
   cache: false,
   success: function(res){
	//deletedTr.animate({ backgroundColor: "#FAA" }, 500).delay(200).animate({ backgroundColor: "#fff" }, 500);
	//deletedTr.fadeOut('slow', function() {$(this).remove();});

	if(res=="ok")
 {
	 if(action=="supprimer"){
 $("input.checkbox:checked").each(function(){
 $(this).parent().parent().parent().parent().animate({ backgroundColor: "#FDD" }, 500).delay(200).animate({ backgroundColor: "#fff" }, 500);
 $(this).parent().parent().parent().parent().fadeOut('slow', function() {$(this).remove();});
 })
	 }
	 
	 if(action=="activer"){
 $("input.checkbox:checked").each(function(){
 $(this).parent().parent().parent().parent().animate({ backgroundColor: "#CEFFE7" }, 500).delay(200).animate({ backgroundColor:"none"}, 500);
 $(this).parent().parent().parent().parent().removeClass("trdesactive");
$(this).closest('.checker > span').removeClass('checked');
$(this).closest('table tbody tr').removeClass('thisRow');
 })
	 }
	 
	 if(action=="désactiver"){
 $("input.checkbox:checked").each(function(){
 $(this).parent().parent().parent().parent().animate({ backgroundColor: "#FDD" }, 500).delay(200).animate({ backgroundColor:"none"}, 500);
 $(this).parent().parent().parent().parent().addClass("trdesactive");
 $(this).closest('.checker > span').removeClass('checked');
 $(this).closest('table tbody tr').removeClass('thisRow');
 })
	 }
	 
 $('#loading_overlay').fadeOut();
 }
 
 }
   
 });
}
$(this).find('option:first').attr('selected', 'selected').parent('select');
return false;
	});
	
///////////////////////////////////////////////////////////

$(".deleteclient").click(function() {
var deletedTr = $(this).parent().parent();
var id = $(this).attr("id");
var table = $(this).attr("rel");
var string = 'id='+ id + "&table=" + table;

if(confirm('Êtes-vous sûr de vouloir supprimer les enregistrements sélectionnés?')){
$('#loading_overlay').fadeIn();
		
$.ajax({
   type: "POST",
 	url: "includes/delete.php",
   data: string,
   cache: false,
   success: function(){
	deletedTr.animate({ backgroundColor: "#FAA" }, 500).delay(200).animate({ backgroundColor: "#fff" }, 500);
	deletedTr.fadeOut('slow', function() {$(this).remove();});
	$('#loading_overlay').fadeOut();
  }
   
 });
}
return false;
	});
	
$(".delete").click(function() {
var deletedTr = $(this).parent().parent().parent().parent().parent();
var id = $(this).attr("id");
var table = $(this).attr("rel");
var string = 'id='+ id + "&table=" + table;

if(confirm('Voulez vous vraiment valider la supprission ')){
$('#loading_overlay').fadeIn();
		
$.ajax({
   type: "POST",
 	url: "includes/delete.php",
   data: string,
   cache: false,
   success: function(){
	deletedTr.animate({ backgroundColor: "#FAA" }, 500).delay(200).animate({ backgroundColor: "#fff" }, 500);
	deletedTr.fadeOut('slow', function() {$(this).remove();});
	$('#loading_overlay').fadeOut();
  }
   
 });
}
return false;
	});
	
$(".deletee").click(function() {

var deletedTr = $(this).parent().parent();
var id = $(this).attr("title");

var table = $(this).attr("rel");
var string = 'id='+ id + "&table=" + table;

if(confirm('Voulez vous vraiment valider la suppression ')){
		$('#loading_overlay').fadeIn();
		
$.ajax({
   type: "POST",
 	url: "includes/delete.php",
   data: string,
   cache: false,
   success: function(){
	deletedTr.fadeOut('slow', function() {$(this).remove();});
	$('#loading_overlay').fadeOut();
  }
   
 });
}
return false;
	});	
$('.thumbnails').on('click','.gallery-delete',function(e){
		e.preventDefault();
		
var deletedTr =$(this).parents('.thumbnail');
var id = $(this).attr("id");
var table = $(this).attr("rel");
var string = 'id='+ id + "&table=" + table;

if(confirm('Voulez vous vraiment valider la suppression ')){
		$('#loading_overlay').fadeIn();
		
$.ajax({
   type: "POST",
 	url: "includes/deletephoto.php",
   data: string,
   cache: false,
   success: function(res){
	deletedTr.fadeOut('slow', function() {$(this).fadeOut();});
	$('#loading_overlay').fadeOut();
  }
   
 });
}
return false;
		
		//get image id
		//alert($(this).parents('.thumbnail').attr('id'));
		//$(this).parents('.thumbnail').fadeOut();
	});

$(".toactive").live('click', function() {
var activeTr = $(this).parent();
var id = $(this).attr("id");
var activeEtat = $(this).attr("alt");
var table = $(this).attr("rel");
var target = $(this);
var inversEtat= $(this).attr("alt")==0 ? 1 : 0;
var string = 'id='+ id + "&table=" + table + "&activeEtat=" + activeEtat;

$('#loading_overlay').fadeIn();
		
$.ajax({
   type: "POST",
 	url: "includes/active.php",
   data: string,
   cache: false,
   success: function(data){
	//activeTr.fadeOut('slow', function() {$(this).remove();});
	$('#loading_overlay').fadeOut();
	if (target.hasClass('activerecord')){
        target.removeClass('activerecord').addClass('noactiverecord');
		activeTr.animate({ backgroundColor: "#FAA" }, 500).delay(200).animate({ backgroundColor: "#fff" }, 500);
		$(".noactiverecord").html("Désactivé");
		$(this).closest('tr').addClass("trdesactive");
	 }
	  else{
        target.removeClass('noactiverecord').addClass('activerecord');
		activeTr.animate({ backgroundColor: "#0C6" }, 500).delay(200).animate({ backgroundColor: "#fff" }, 500);
		$(".activerecord").html("Activé");
		$(this).closest('tr').removeClass("trdesactive");
	 }
	 target.attr('alt', inversEtat);
    

  }
 });

return false;
	});





$(".confirmeMail").live('click', function() {
var activeTr = $(this).parent();
var id = $(this).attr("alt");
var table = $(this).attr("rel");
var target = $(this);
var mpAction= $(this).attr("id");
var string = 'id='+ id + "&table=" + table + "&mpAction=" + mpAction;

$('#loading_overlay').fadeIn();
		
$.ajax({
   type: "POST",
 	url: "../includes/confirmer.php",
   data: string,
   cache: false,
   success: function(data){
	//activeTr.fadeOut('slow', function() {$(this).remove();});
	$('#loading_overlay').fadeOut();
	if (target.hasClass('activerecord')){
        target.removeClass('activerecord').addClass('noactiverecord');
		activeTr.animate({ backgroundColor: "#FAA" }, 500).delay(200).animate({ backgroundColor: "#fff" }, 500);
		$(this).html("Envoyé");
		$(this).closest('tr').addClass("trdesactive");
	 }
	  else{
        target.removeClass('noactiverecord').addClass('activerecord');
		activeTr.animate({ backgroundColor: "#0C6" }, 500).delay(200).animate({ backgroundColor: "#fff" }, 500);
		$(this).html("Envoyé");
		$(this).closest('tr').removeClass("trdesactive");
	 }
	 target.attr('alt', inversEtat);
    

  }
 });

return false;
	});



$('#loading_overlay').hide();


////////////////////// AUTRES SCRIPTS
$('#checkaction').submit(function() {
		 $('#loading_overlay').fadeIn();
	  });	

$("#valider").submit(function() {
		 $('#loading_overlay').fadeIn();
	  });

 $('.checkall').click(function() {
        $('.display').find(':checkbox').attr('checked', this.checked);
    });


});

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | Generation time: 0.0196 ]--