!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/lib/iptables/   drwxr-xr-x
Free 52.24 GB of 127.8 GB (40.88%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     libipt_recent.so (7.8 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF4$4 (''@H((PtdDDQtd PI|CE>=~qX % PuEA}jd]Z"8*0*9p&
0*;__gmon_start___fini__cxa_finalize_Jv_RegisterClassesmy_initregister_match__printf_chkstdoutfputcexit_errorstrncpyoptindoptargcheck_inverse__strtol_internallibc.so.6_edata__bss_start_endGLIBC_2.1.3GLIBC_2.0GLIBC_2.3.4si	ii
ti	(H)T)X)\)`)d)h)l)))))))))**'((((((
(((()))	)
)
U`hhhhh  h($h0(h8p,h@`US[X#tFX[ÐUVS*#PuWt$$)pL9vLL9wƃP[^]ÍUS.ë" tt $҃[]Ë$ÐUSk"<$[]Ív'UWVS}3"w ~	FFFt&FG FF0G*D$D$$&<[^_]Ð<D$$F^?D$$rFHFD$$RF6PD$$2F ZD$$G 
D$dD$$FD$rD$$FD$$t&D$$D$$_[^_]
US+ $D$hD$[]Ð&UWVS}fw ~	D$$FFrFHFt&G FFG*D$D$$et4tK[^_]Ív$!D$GvD$$uD$$[^_]fD$$Kt&D$D$$D$D$$D$$rt&D$$Rt&D$$2st&D$$It&USEht[]ÍD$$t&'U]E&ãuD$p *$T$ƆƆ]u]Í&'U(E U]}}u01- 	w[D$D$ED$$ENEtF	v]u}]ËD$D$ED$$NEt롸Ɔ른Ɔ뗋D$D$F
$`ƆgNYD$D$ED$$NNU	D$D$
D$$FD$D$
D$$u=D$D$ED$$NE]T`D$$hUVS
p@tЋu[^]ÐUS[Y[! --set --rcheck --update --remove --seconds %d --hitcount %d --rttl --name %s --rsource --rdest 1.3.5recent: SET CHECK UPDATE REMOVE seconds: %d hit_count: %d TTL-Match name: %s side: source side: destDEFAULTsetrcheckupdatesecondshitcountremoverttlnamersourcerdestrecent v%s options:
[!] --set                       Add source address to list, always matches.
[!] --rcheck                    Match if source address in list.
[!] --update                    Match if source address in list, also update last-seen time.
[!] --remove                    Match if source address in list, also removes that address from list.
    --seconds seconds           For check and update commands above.
                                Specifies that the match will only occur if source address last seen within
                                the last 'seconds' seconds.
    --hitcount hits             For check and update commands above.
                                Specifies that the match will only occur if source address seen hits times.
                                May be used in conjunction with the seconds option.
    --rttl                      For check and update commands above.
                                Specifies that the match will only occur if the source address and the TTL
                                match between this packet and the one which was set.
                                Useful if you have problems with people spoofing their source address in order
                                to DoS you via this module.
    --name name                 Name of the recent list to be used.  DEFAULT used if none given.
    --rsource                   Match/Save the source address of each packet in the recent list table (default).
    --rdest                     Match/Save the destination address of each packet in the recent list table.
ipt_recent v0.3.1: Stephen Frost <sfrost@snowman.net>.  http://snowman.net/projects/ipt_recent/
recent: you must specify one of `--set', `--rcheck' `--update' or `--remove'recent: only one of `--set', `--rcheck' `--update' or `--remove' may be setI_*;@\x88xzR|T&AB
A8hAB
FXX8AB
At|AB
F\5AB
DRAB
FQ @AB
OF(
oP
(Hxohoo@o(.>N^nrecent0
)	
#,38=Elibipt_recent.so.debug_څo.shstrtab.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.data.rel.ro.dynamic.got.got.plt.data.bss.gnu_debuglinko<@PP%o@@(2ohh@A	J	xxH	SNY_e  mD{''(((((0 )  0*00L

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.006 ]--