!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/etc/profile.d/   drwxr-xr-x
Free 52.59 GB of 127.8 GB (41.15%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     vim.csh (97 B)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
Information:
Path /etc/profile.d/vim.csh
Size 97 B
MD5 9006faaa79dabb11f1254095a60dff2c
Owner/Group root/root
Perms-rwxr-xr-x
Create time 25/04/2011 18:10:37
Access time 11/07/2024 20:40:16
MODIFY time 20/09/2009 04:24:31

HEXDUMP PREVIEW
00000000
00000018
00000030
00000048
00000060
69 66 20 28 20 2D 78 20 2F 75 73 72 2F 62 69 6E 2F 69 64 20 29 20 74 68
65 6E 0A 20 20 69 66 20 28 20 22 60 2F 75 73 72 2F 62 69 6E 2F 69 64 20
2D 75 60 22 20 3E 20 31 30 30 20 29 20 74 68 65 6E 0A 20 20 20 20 61 6C
69 61 73 20 76 69 20 76 69 6D 0A 20 20 65 6E 64 69 66 0A 65 6E 64 69 66
0A
if ( -x /usr/bin/id ) th
en   if ( "`/usr/bin/id 
-u`" > 100 ) then     al
ias vi vim   endif endif
 

HEXDUMP: [Full] [Preview]
Base64:
[Encode [+chunk [+chunk+quotes [Decode


:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0063 ]--