!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/etc/   drwxr-xr-x
Free 52.59 GB of 127.8 GB (41.15%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     gnome-vfs-mime-magic (10.54 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
# Copyright (C) Eazel, Inc. 2000, 2001
#
# MIME magic patterns as used by the Gnome VFS library
#
# The format of magic entries is:
#
#     offset_start[:offset_end] pattern_type pattern [&pattern_mask] type
#
# <offset_start> and <offset_end> are decimal numbers (file offsets).
#
# <pattern_type> is (byte | short | long | string | date | beshort |
#                    belong | bedate | leshort | lelong | ledate).
#
# <pattern> is an ASCII string with non-printable characters escaped
# as hex or octal escape sequences, and spaces and other important
# whitespace escaped with '\'.
#
# <pattern_mask> is a string of hex digits. The mask must be the same
# length as the pattern.
#
# <type> is a valid MIME type.
#
# Order magic patterns such that ambiguous ones (such as
# application/x-ms-dos-executable) are at the end of the list and
# therefore get applied last.
#
# Avoid rules that require a seek deep into the examined file. If you
# must, locate such rules at the end of the list so that they get
# applied last
#
# When designing new document formats, make them easily recognizable
# by defining a sufficiently unique magic pattern near the document
# start. A good pattern is at least four bytes long and contains one
# or two non-printable characters so that text files won't be
# misidentified.

0    string        %PDF-                    application/pdf
0    string        \177ELF\ \ \ \ \ \ \ \ \ \ \ \ \004 &0xffffffff000000000000000000000000ff application/x-core-file
0    string        \177ELF\ \ \ \ \ \ \ \ \ \ \ \ \003 &0xffffffff000000000000000000000000ff application/x-shared-library
0    string        \177ELF                    application/x-executable-binary

# Disable zip because detecting StarOffice files correctly is more imporant in the release
# than detecting the occasional zip file without an extension
#0    string        PK\003\004                application/zip

0    string        \004%!                    application/postscript
0    string        \000\000\001\272            video/mpeg
0    string        \000\000\001\263            video/mpeg
# .mmv, mpeg transport stream created by movieshaker
0       string          \x47\x3f\xff\x10                        video/mpeg
0    string        \377\330\377                image/jpeg
# The below ignores the details available (architecture, type, version)
0    string        \xed\xab\xee\xdb            application/x-rpm
0    string        Rar!                    application/x-rar
0    string        GIF8                    image/gif
4    string        ftypM4A                    audio/x-m4a
4    string        moov                    video/quicktime
4    string        mdat                    video/quicktime
8    string        mp42                    video/quicktime
12    string        mdat                    video/quicktime
36    string        mdat                    video/quicktime
0    belong        0x3026b275                video/x-ms-asf
0    string        ASF\                     audio/x-ms-asx
0    string        \<ASX                    audio/x-ms-asx
0    string        \<asx                    audio/x-ms-asx
0    string        MThd                    audio/x-midi
0    string        IMPM                    audio/x-it
0    string        \x1f\x07\x00\x00 &0xffffff00        video/dv
2    string        -lh0-                    application/x-lha
2    string        -lh1-                    application/x-lha
2    string        -lz4-                    application/x-lha
2    string        -lz5-                    application/x-lha
2    string        -lzs-                    application/x-lha
2    string        -lh\40-                    application/x-lha
2    string        -lhd-                    application/x-lha
2    string        -lh2-                    application/x-lha
2    string        -lh3-                    application/x-lha
2    string        -lh4-                    application/x-lha
2    string        -lh5-                    application/x-lha
20      string        \375\304\247\334            application/x-zoo
0    string        StuffIt\                 application/x-stuffit
11    string        must\ be\ converted\ with\ BinHex    application/mac-binhex40
102    string        mBIN                    application/x-macbinary
4    string        gtktalog\                 application/x-gtktalog
0    string        diff\                     text/x-patch
0    string        Index:                    text/x-patch
0    string        ***\                     text/x-patch
0    string        Only\ in\                 text/x-patch
0    string        Common\ subdirectories:\         text/x-patch
0    string        FONT                    application/x-font-vfont
0    string        IIN1                    image/tiff
0    string        MM\x00\x2a                image/tiff
0    string        II\x2a\x00                image/tiff
0    string        \x89PNG                    image/png
0    string        8BPS\ \ \000\000\000\000 &0xffffffff0000ffffffff image/x-psd
0    string        #LyX                    text/x-lyx
0    string        DCMw                    image/x-dcm
0    belong        0x59a66a95                image/x-sun-raster
0    belong        0x01da0000 &0xfcfeffff            image/x-sgi
0    belong        0xb168de3a                image/x-pcx
0    string          \x28\x00\x00\x00                        image/x-dib
0    string          SIMPLE\ \ =                             image/x-fits
0    belong          0x46506978                              image/x-fpx
0    belong        0x00000200                image/x-icb
0    belong        0x53445058                image/x-dpx
0    string        d8:announce                application/x-bittorrent
8    string        matroska                application/x-matroska

# Desktop file support - slightly wrong, since comments can be before
# the [Desktop Entry] line in the current spec - probably should fix
# desktop entry spec to allow this
0:32   string          [Desktop\ Entry]                        application/x-gnome-app-info

# Theme ("Metatheme") support
0:40   string          [X-GNOME-Metatheme]                     application/x-gnome-theme

# special Nautilus link type
0:32    string        \<nautilus_object\ nautilus_link    application/x-nautilus-link

# special GMC link type
0:32    string        \URL:                    application/x-gmc-link

# xpm rule needs to go before text/x-c
0    string        /*\ XPM\ */                image/x-xpixmap

0:64    string        \<!DOCTYPE\ xbel            application/x-xbel
0:192    string        \<xbel                    application/x-xbel
0:64    string        \<!DOCTYPE\ NETSCAPE-Bookmark-file-1\>    application/x-mozilla-bookmarks
0:64    string        \<!DOCTYPE\ NETSCAPE-Bookmark-file-1\>    application/x-netscape-bookmarks
0:64    string        \<ephy_bookmarks            application/x-epiphany-bookmarks

# svg rules need to go before html
0:256    string        \<!DOCTYPE\ svg                image/svg+xml
0:64    string        \<svg                    image/svg+xml
0:64    string        \<chemistry                application/x-gchempaint
0:64    string        \<crystal                application/x-gcrystal
# php rules need to go before html
0:64    string        \<?php                    application/x-php
0
:64    string        <smil>                application/x-smil
0
:64    string        <SMIL>                application/x-smil
0
:64    string        <!DOCTYPE HTML            text/html
0
:64    string        <!doctype html            text/html
0
:64    string        <HEAD                    text/html
0
:64    string        <head                    text/html
0
:64    string        <html                    text/html
0
:64    string        <HTML                    text/html
0
:64    string        <dia:diagram                application/x-dia-diagram
0
:64    string        <abiword                application/x-abiword
0
:64    string        <!DOCTYPE abiword            application/x-abiword
0
:64    string        gmr:Workbook                application/x-gnumeric
0
:64    string        <project                application/x-mrproject
# text/xml content detection needs to be after all the xml-derived formats
0:64    string        <?xml                    text/xml
0    string        
{rtf                    application/rtf
0    string        
#!/bin/sh                text/x-sh
0    string        #!/bin/bash                text/x-sh
0    string        #!/bin/csh                text/x-csh
0    string        #!/bin/ksh                text/x-ksh
0    string        #!/bin/perl                text/x-perl
0    string        #!/bin/zsh                text/x-zsh
1:16    string        /bin/sh                    text/x-sh
1
:16    string        /bin/bash                text/x-sh
1
:16    string        /bin/csh                text/x-csh
1
:16    string        /bin/ksh                text/x-ksh
1
:16    string        /bin/perl                text/x-perl
1
:16    string        /bin/python                text/x-python
0    string        BEGIN
:VCARD                text/x-vcard
0    string        BEGIN
:VCALENDAR                text/calendar
8    string        CDR vrsn                application
/vnd.corel-draw
8    string        AVI                     video
/x-msvideo
0    string        MOVI                    video
/x-sgi-movie
0    string        
.snd                    audio/basic
8    string        AIFC                    audio
/x-aifc
8    string        AIFF                    audio
/x-aiff
0    string        
.ra375                    audio/x-pn-realaudio
0    belong        0x2e7261fd                audio
/x-pn-realaudio
0    string        
.RMF                    audio/x-pn-realaudio
8    string        WAVE                    audio
/x-wav
8    string        WAV                     audio
/x-wav
0    string        RIFFxxxxCDXA 
&0xffffffff00000000ffffffff    video/mpeg
0    string        RIFF                    audio
/x-riff
0    string        OggS                    application
/ogg
0    string        pnm
://                audio/x-real-audio
0    string        rtsp
://                audio/x-real-audio
0    string        SIT
!                     application/x-stuffit
0    string        312376272276            application
/x-java-byte-code
0    string        Joy
!                    application/x-pef-executable
4       string        x11xAF                video
/x-fli
4       string        x12xAF                video
/x-flc
0    string        x31xbex00x00            application
/msword
0       string      PO
^Q`                       application/msword
0    string        *BEGIN\ SPREADSHEETS            application/x-applix-spreadsheet
0    string        
\x00\x00\x02\x00            application/vnd.lotus-1-2-3
0    string        PSID                    audio/prs.sid
31      string        Oleo                    application/x-oleo
0    string        FFIL                    application/x-font-ttf
65    string        FFIL                    application/x-font-ttf
0    string        LWFN                    application/x-font-type1
65    string        LWFN                    application/x-font-type1
0    string        StartFont                application/x-font-sunos-news
0    string        
\x13\x7A\x29                application/x-font-sunos-news
8    string        
\x13\x7A\x2B                application/x-font-sunos-news
0    string        %!PS-AdobeFont-1.            application/x-font-type1
6    string        %!PS-AdobeFont-1.            application/x-font-type1
0    string        %!FontType1-1.                application/x-font-type1
6    string        %!FontType1-1.                application/x-font-type1
0    string        STARTFONT
\040                application/x-font-bdf
0    string        
\001fcp                    application/x-font-pcf
0    string        D1.0
\015                application/x-font-speedo
0    string        
\x14\x02\x59\x19            application/x-font-libgrx
0    string        
\xff\x46\x4f\x4e            application/x-font-dos
7    string        
\x00\x45\x47\x41            application/x-font-dos
7    string        
\x00\x56\x49\x44            application/x-font-dos
0    string        \<MakerScreenFont            application/x-font-framemaker
0    string        
\000\001\000\000\000            application/x-font-ttf
1       string          WPC                        application/x-wordperfect
0    string        ID;                    text/spreadsheet
0    string        MZ                    application/x-ms-dos-executable
0    string        %!                    application/postscript
0       string          BZh                                     application/x-bzip
0    string        
\x1f\x8b                application/x-gzip
0    string        
\037\235                application/x-compress
0    string        
\367\002                application/x-dvi
0    string        
\367\203                application/x-font-tex
0    string        
\367\131                application/x-font-tex
0    string        
\367\312                application/x-font-tex
2    string        
\000\022                application/x-font-tex-tfm
0    string        
\x36\x04                application/x-font-linux-psf
0    string        FWS                    application/x-shockwave-flash
0    string        NSVf                    video/x-nsv
0    string        BMxxxx
\000\000 &0xffff00000000ffff    image/bmp
0    string        AT&TFORM                image/vnd.djvu
0    string        Return-Path:                message/rfc822
0    string        Path:                    message/news
0    string        Xref:                    message/news
0    string        From:                    message/rfc822
0    string        Article                    message/news
0    string        Received:                message/rfc822
0    string        
[playlist]                audio/x-scpls
0    string        
[Reference]                video/x-ms-asf
22    string        \<EDL                    application/x-cinelerra
32769    string        CD001                    application/x-iso-image
37633    string        CD001                    application/x-iso-image
32776    string        CDROM                    application/x-iso-image
0       string          OTTO                                    application/x-font-otf
54    string        S\ T\ O\ P                application/x-ipod-firmware
0:160    string        fLaC                    audio/x-flac
0:160    string        ID3
\x20\x00                audio/mpeg
0:160    string        ID3
\x30\x00                audio/mpeg
0:160    string        ID3
\x40\x00                audio/mpeg
0:512    string        
\x00\x00\x01\xba            video/mpeg
0    string        BLENDER                    application/x-blender

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0069 ]--