!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/etc/   drwxr-xr-x
Free 51.24 GB of 127.8 GB (40.09%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     conman.conf (6.16 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
##
# ConMan daemon configuration file
##
# $Id: conman.conf 500 2005-02-10 02:19:46Z dun $
##
# - Whitespace is ignored.
# - Comments are ignored (from the pound char to the newline).
# - Directives are terminated by a newline.
# - Directives may span multiple lines by escaping the newline
#     (ie, immediately preceding it with a backslash char).
# - Integers may begin with either a plus or minus, and contain only digits.
# - Strings may be single-quoted or double-quoted.
# - Strings cannot contain newlines.
# - Unquoted strings are sequences of letters, digits, and underscores;
#     they may not begin with a digit (just like a C identifier).
# - Tokens are unquoted case-insensitive strings.
##

##
# The daemon's KEEPALIVE keyword specifies whether the daemon will use
#   TCP keep-alives for detecting dead connections.  The default is ON.
##
# SERVER keepalive=(on|off)
##

##
# The daemon's LOGDIR keyword specifies a directory prefix for log files
#   that are not defined via an absolute pathname.
##
# SERVER logdir="<dir>"
##

##
# The daemon's LOGFILE keyword specifies the file to which log messages
#   are appended.  This string undergoes conversion specifier expansion.
#   If an absolute pathname is not specified, the file's location is relative
#   to LOGDIR (assuming it has been previously defined).  This file will be
#   created if it does not already exist.
# The filename may optionally be followed by a comma and a minimum priority
#   at which messages will be logged.  Refer to the syslog.conf(5) man page
#   for a list of priorities.  The default priority is 'info'.
# If this keyword is used in conjunction with the SYSLOG keyword,
#   messages will be sent to both locations.
##
# SERVER logfile="<file>[,<priority>]"
##

##
# The daemon's LOOPBACK keyword specifies whether the daemon will bind its
#   socket to the loopback address, thereby only accepting local client
#   connections directed to that address (127.0.0.1).  The default is OFF.
##
# SERVER loopback=(on|off)
##

##
# The daemon's PIDFILE keyword specifies the file to which the daemon's PID
#   is written.  The use of a pidfile is recommended if you want to use the
#   daemon's '-k' or '-r' options.
##
# SERVER pidfile="<file>"
##

##
# The daemon's PORT keyword specifies the port on which the daemon will
#   listen for client connections.
##
# SERVER port=<int>
##

##
# The daemon's RESETCMD keyword specifies a command string to be invoked by
#   a subshell upon receipt of the client's "reset" escape.  Multiple commands
#   within a string may be separated with semicolons.  This string undergoes
#   conversion specifier expansion and will be invoked multiple times if the
#   client is connected to multiple consoles.
##
# SERVER resetcmd="<str>"
##

##
# The daemon's SYSLOG keyword specifies that log messages are to be sent
#   to the system logger (syslogd) at the given facility.  Refer to the
#   syslog.conf(5) man page for a list of facilities.
# If this keyword is used in conjunction with the LOGFILE keyword,
#   messages will be sent to both locations.
##
# SERVER syslog="<facility>"
##

##
# The daemon's TCPWRAPPERS keyword specifies whether the daemon will
#   use Wietse Venema's TCP-Wrappers when accepting client connections.
#   Support for this feature must be enabled at compile-time
#   (via configure's "--with-tcp-wrappers" option).  Refer to the
#   hosts_access(5) and hosts_options(5) man pages for more details.
#   The default is OFF.
##
# SERVER tcpwrappers=(on|off)
##

##
# The daemon's TIMESTAMP keyword specifies the interval between timestamps
#   written to all console log files.  The interval is an integer that may
#   be followed by a single-char modifier; 'm' for minutes (the default),
#   'h' for hours, or 'd' for days.  The default is 0 (ie, no timestamps).
##
# SERVER timestamp=<int>(m|h|d)
##

##
# The global LOG keyword specifies the default log file to use for each
#   CONSOLE directive.  This string undergoes conversion specifier expansion
#   and must contain either '%N' or '%D'.  If an absolute pathname is not
#   given, the file's location is relative to LOGDIR (assuming it has been
#   previously defined).
##
# GLOBAL log="<file>"
##

##
#  The global LOGOPTS keyword specifies options for console log files.
#    These options can be overridden on an per-console basis by specifying
#    the CONSOLE LOGOPTS keyword.  Note that options affecting the output
#    of the console's logfile also affect the output of the console's
#    log-replay escape.
#  The valid logoptions include the following:
#    - "sanitize" or "nosanitize" - sanitized logs convert non-printable
#      characters into 7-bit printable characters.
#    - "timestamp" or "notimestamp" - timestamped logs prepend each line
#      of console output with a timestamp in "YYYY-MM-DD HH:MM:SS" format.
#      This timestamp is generated when the first character following the
#      line break is output.
#  The default is "nosanitize,notimestamp".
##
# GLOBAL logopts="nosanitize,notimestamp"
##

##
# The global SEROPTS keyword specifies options for local serial devices;
#    These options can be overridden on an per-console basis by specifying
#    the CONSOLE SEROPTS keyword.
# The default is "9600,8n1" for 9600 bps, 8 data bits, no parity, 1 stop bit.
##
# GLOBAL seropts="9600,8n1"
##

##
# The CONSOLE directive defines a console being managed by the daemon.
# The NAME keyword specifies the name used by clients to refer to the console.
# The DEV keyword specifies the location of the device.  A local serial-port
#   connection is specified with the pathname of the tty device.  A remote
#   terminal-server connection is specified with the "host:port" format
#   (where host is either a hostname or IP address).
# The optional LOG keyword specifies the file where console output is logged.
#   This string undergoes conversion specifier expansion.  If an absolute
#   pathname is not given, the file's location is relative to LOGDIR
#   (assuming it has been previously defined).  An empty log string
#   (ie, log="") disables logging, overriding the global log name.
# The optional LOGOPTS and SEROPTS keywords override the global settings.
##
# CONSOLE name="<str>" dev="<str>" \
#   [log="<file>"] [logopts="<str>"] [seropts="<str>"]
##

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0167 ]--