!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/lib/iptables/   drwxr-xr-x
Free 52.23 GB of 127.8 GB (40.87%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     libipt_unclean.so (3.19 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
Information:
Path /lib/iptables/libipt_unclean.so
Size 3.19 KB
MD5 50946aa49ece448b0f971b7bbe8eaae3
Owner/Group root/root
Perms-rwxr-xr-x
Create time 25/04/2011 18:08:41
Access time 31/07/2024 15:56:43
MODIFY time 02/11/2009 19:18:37

FULL HEXDUMP
00000000
00000018
00000030
00000048
00000060
00000078
00000090
000000A8
000000C0
000000D8
000000F0
00000108
00000120
00000138
00000150
00000168
00000180
00000198
000001B0
000001C8
000001E0
000001F8
00000210
00000228
00000240
00000258
00000270
00000288
000002A0
000002B8
000002D0
000002E8
00000300
00000318
00000330
00000348
00000360
00000378
00000390
000003A8
000003C0
000003D8
000003F0
00000408
00000420
00000438
00000450
00000468
00000480
00000498
000004B0
000004C8
000004E0
000004F8
00000510
00000528
00000540
00000558
00000570
00000588
000005A0
000005B8
000005D0
000005E8
00000600
00000618
00000630
00000648
00000660
00000678
00000690
000006A8
000006C0
000006D8
000006F0
00000708
00000720
00000738
00000750
00000768
00000780
00000798
000007B0
000007C8
000007E0
000007F8
00000810
00000828
00000840
00000858
00000870
00000888
000008A0
000008B8
000008D0
000008E8
00000900
00000918
00000930
00000948
00000960
00000978
00000990
000009A8
000009C0
000009D8
000009F0
00000A08
00000A20
00000A38
00000A50
00000A68
00000A80
00000A98
00000AB0
00000AC8
00000AE0
00000AF8
00000B10
00000B28
00000B40
00000B58
00000B70
00000B88
00000BA0
00000BB8
00000BD0
00000BE8
00000C00
00000C18
00000C30
00000C48
00000C60
00000C78
00000C90
00000CA8
7F 45 4C 46 01 01 01 00 00 00 00 00 00 00 00 00 03 00 03 00 01 00 00 00
90 03 00 00 34 00 00 00 B0 08 00 00 00 00 00 00 34 00 20 00 05 00 28 00
1A 00 19 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 06 00 00
40 06 00 00 05 00 00 00 00 10 00 00 01 00 00 00 40 06 00 00 40 16 00 00
40 16 00 00 7C 01 00 00 94 01 00 00 06 00 00 00 00 10 00 00 02 00 00 00
5C 06 00 00 5C 16 00 00 5C 16 00 00 C0 00 00 00 C0 00 00 00 06 00 00 00
04 00 00 00 50 E5 74 64 88 05 00 00 88 05 00 00 88 05 00 00 2C 00 00 00
2C 00 00 00 04 00 00 00 04 00 00 00 51 E5 74 64 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 06 00 00 00 04 00 00 00 03 00 00 00
06 00 00 00 02 00 00 00 06 00 00 00 88 00 20 01 00 C4 50 49 06 00 00 00
08 00 00 00 0B 00 00 00 BA E3 92 7C 43 45 D5 EC 3E 3D 7E EB D8 71 58 1C
B9 8D F1 0E EB D3 EF 0E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
01 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 25 00 00 00 00 00 00 00
00 00 00 00 20 00 00 00 50 00 00 00 00 00 00 00 0B 01 00 00 12 00 00 00
41 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 16 00 00 00 00 00 00 00
5A 01 00 00 22 00 00 00 7A 00 00 00 D4 17 00 00 00 00 00 00 10 00 F1 FF
67 00 00 00 BC 17 00 00 00 00 00 00 10 00 F1 FF 39 00 00 00 A0 04 00 00
26 00 00 00 12 00 0A 00 6E 00 00 00 BC 17 00 00 00 00 00 00 10 00 F1 FF
3B 00 00 00 20 03 00 00 00 00 00 00 12 00 08 00 10 00 00 00 44 05 00 00
00 00 00 00 12 00 0B 00 00 5F 5F 67 6D 6F 6E 5F 73 74 61 72 74 5F 5F 00
5F 66 69 6E 69 00 5F 5F 63 78 61 5F 66 69 6E 61 6C 69 7A 65 00 5F 4A 76
5F 52 65 67 69 73 74 65 72 43 6C 61 73 73 65 73 00 6D 79 5F 69 6E 69 74
00 72 65 67 69 73 74 65 72 5F 6D 61 74 63 68 00 5F 5F 70 72 69 6E 74 66
5F 63 68 6B 00 6C 69 62 63 2E 73 6F 2E 36 00 5F 65 64 61 74 61 00 5F 5F
62 73 73 5F 73 74 61 72 74 00 5F 65 6E 64 00 47 4C 49 42 43 5F 32 2E 31
2E 33 00 47 4C 49 42 43 5F 32 2E 33 2E 34 00 00 00 00 00 00 00 00 02 00
00 00 03 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 02 00 5D 00 00 00
10 00 00 00 00 00 00 00 73 1F 69 09 00 00 03 00 7F 00 00 00 10 00 00 00
74 19 69 09 00 00 02 00 8B 00 00 00 00 00 00 00 58 16 00 00 08 00 00 00
88 17 00 00 08 00 00 00 94 17 00 00 08 00 00 00 9C 17 00 00 08 00 00 00
A0 17 00 00 08 00 00 00 AC 17 00 00 08 00 00 00 44 16 00 00 01 08 00 00
1C 17 00 00 06 01 00 00 20 17 00 00 06 02 00 00 24 17 00 00 06 05 00 00
34 17 00 00 07 01 00 00 38 17 00 00 07 03 00 00 3C 17 00 00 07 04 00 00
40 17 00 00 07 05 00 00 55 89 E5 83 EC 08 E8 65 00 00 00 E8 10 01 00 00
E8 DB 01 00 00 C9 C3 00 FF B3 04 00 00 00 FF A3 08 00 00 00 00 00 00 00
FF A3 0C 00 00 00 68 00 00 00 00 E9 E0 FF FF FF FF A3 10 00 00 00 68 08
00 00 00 E9 D0 FF FF FF FF A3 14 00 00 00 68 10 00 00 00 E9 C0 FF FF FF
FF A3 18 00 00 00 68 18 00 00 00 E9 B0 FF FF FF 00 00 00 00 00 00 00 00
55 89 E5 53 83 EC 04 E8 00 00 00 00 5B 81 C3 8C 13 00 00 8B 93 F4 FF FF
FF 85 D2 74 05 E8 96 FF FF FF 58 5B C9 C3 90 90 90 90 90 90 90 90 90 90
55 89 E5 56 53 E8 AD 00 00 00 81 C3 5E 13 00 00 83 EC 10 80 BB 98 00 00
00 00 75 57 8B 83 FC FF FF FF 85 C0 74 0E 8D 83 30 FF FF FF 89 04 24 E8
84 FF FF FF 8D 83 28 FF FF FF 8D 93 24 FF FF FF 29 D0 C1 F8 02 8D 70 FF
8B 83 94 00 00 00 39 C6 76 1A 83 C0 01 89 83 94 00 00 00 FF 94 83 24 FF
FF FF 8B 83 94 00 00 00 39 C6 77 E6 C6 83 98 00 00 00 01 83 C4 10 5B 5E
5D C3 8D B6 00 00 00 00 55 89 E5 53 E8 2E 00 00 00 81 C3 DF 12 00 00 83
EC 04 8B 93 2C FF FF FF 85 D2 74 15 8B 93 F8 FF FF FF 85 D2 74 0B 8D 83
2C FF FF FF 89 04 24 FF D2 83 C4 04 5B 5D C3 8B 1C 24 C3 90 90 90 90 90
55 31 C0 89 E5 5D C3 89 F6 8D BC 27 00 00 00 00 55 89 E5 5D C3 8D 74 26
00 8D BC 27 00 00 00 00 55 89 E5 53 E8 CE FF FF FF 81 C3 7F 12 00 00 83
EC 04 8D 83 38 00 00 00 89 04 24 E8 A8 FE FF FF 83 C4 04 5B 5D C3 8D 76
00 8D BC 27 00 00 00 00 55 89 E5 53 E8 9E FF FF FF 81 C3 4F 12 00 00 83
EC 14 C7 04 24 01 00 00 00 8D 83 38 EE FF FF 89 44 24 08 8D 83 40 EE FF
FF 89 44 24 04 E8 56 FE FF FF 83 C4 14 5B 5D C3 90 90 90 90 90 90 90 90
55 89 E5 56 53 E8 5D FF FF FF 81 C3 0E 12 00 00 8D 83 20 FF FF FF 8D 70
FC 8B 40 FC 83 F8 FF 74 0C 83 EE 04 FF D0 8B 06 83 F8 FF 75 F4 5B 5E 5D
C3 90 90 90 55 89 E5 53 83 EC 04 E8 00 00 00 00 5B 81 C3 D8 11 00 00 E8
64 FE FF FF 59 5B C9 C3 31 2E 33 2E 35 00 00 00 75 6E 63 6C 65 61 6E 20
76 25 73 20 74 61 6B 65 73 20 6E 6F 20 6F 70 74 69 6F 6E 73 0A 0A 00 00
01 1B 03 3B 28 00 00 00 04 00 00 00 F8 FE FF FF 44 00 00 00 08 FF FF FF
60 00 00 00 18 FF FF FF 7C 00 00 00 48 FF FF FF 98 00 00 00 14 00 00 00
00 00 00 00 01 7A 52 00 01 7C 08 01 1B 0C 04 04 88 01 00 00 18 00 00 00
1C 00 00 00 AC FE FF FF 07 00 00 00 00 41 0E 08 85 02 44 0D 05 00 00 00
18 00 00 00 38 00 00 00 A0 FE FF FF 05 00 00 00 00 41 0E 08 85 02 42 0D
05 00 00 00 18 00 00 00 54 00 00 00 94 FE FF FF 26 00 00 00 00 41 0E 08
85 02 42 0D 05 41 83 03 18 00 00 00 70 00 00 00 A8 FE FF FF 38 00 00 00
00 41 0E 08 85 02 42 0D 05 41 83 03 00 00 00 00 FF FF FF FF 00 00 00 00
00 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 58 16 00 00 01 00 00 00
5D 00 00 00 0C 00 00 00 20 03 00 00 0D 00 00 00 44 05 00 00 F5 FE FF 6F
D4 00 00 00 05 00 00 00 D0 01 00 00 06 00 00 00 10 01 00 00 0A 00 00 00
97 00 00 00 0B 00 00 00 10 00 00 00 03 00 00 00 28 17 00 00 02 00 00 00
20 00 00 00 14 00 00 00 11 00 00 00 17 00 00 00 00 03 00 00 11 00 00 00
B0 02 00 00 12 00 00 00 50 00 00 00 13 00 00 00 08 00 00 00 FE FF FF 6F
80 02 00 00 FF FF FF 6F 01 00 00 00 F0 FF FF 6F 68 02 00 00 FA FF FF 6F
06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 5C 16 00 00 00 00 00 00 00 00 00 00 4E 03 00 00
5E 03 00 00 6E 03 00 00 7E 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 75 6E 63 6C
65 61 6E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 60 05 00 00 00 00 00 00 00 00 00 00 D0 04 00 00
00 00 00 00 80 04 00 00 90 04 00 00 00 00 00 00 00 00 00 00 C4 17 00 00
00 00 00 00 00 00 00 00 00 00 00 00 6C 69 62 69 70 74 5F 75 6E 63 6C 65
61 6E 2E 73 6F 2E 64 65 62 75 67 00 8E 5F 05 A0 00 2E 73 68 73 74 72 74
61 62 00 2E 67 6E 75 2E 68 61 73 68 00 2E 64 79 6E 73 79 6D 00 2E 64 79
6E 73 74 72 00 2E 67 6E 75 2E 76 65 72 73 69 6F 6E 00 2E 67 6E 75 2E 76
65 72 73 69 6F 6E 5F 72 00 2E 72 65 6C 2E 64 79 6E 00 2E 72 65 6C 2E 70
6C 74 00 2E 69 6E 69 74 00 2E 74 65 78 74 00 2E 66 69 6E 69 00 2E 72 6F
64 61 74 61 00 2E 65 68 5F 66 72 61 6D 65 5F 68 64 72 00 2E 65 68 5F 66
72 61 6D 65 00 2E 63 74 6F 72 73 00 2E 64 74 6F 72 73 00 2E 6A 63 72 00
2E 64 61 74 61 2E 72 65 6C 2E 72 6F 00 2E 64 79 6E 61 6D 69 63 00 2E 67
6F 74 00 2E 67 6F 74 2E 70 6C 74 00 2E 64 61 74 61 00 2E 62 73 73 00 2E
67 6E 75 5F 64 65 62 75 67 6C 69 6E 6B 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 0B 00 00 00 F6 FF FF 6F 02 00 00 00 D4 00 00 00
D4 00 00 00 3C 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 04 00 00 00
15 00 00 00 0B 00 00 00 02 00 00 00 10 01 00 00 10 01 00 00 C0 00 00 00
03 00 00 00 01 00 00 00 04 00 00 00 10 00 00 00 1D 00 00 00 03 00 00 00
02 00 00 00 D0 01 00 00 D0 01 00 00 97 00 00 00 00 00 00 00 00 00 00 00
01 00 00 00 00 00 00 00 25 00 00 00 FF FF FF 6F 02 00 00 00 68 02 00 00
68 02 00 00 18 00 00 00 02 00 00 00 00 00 00 00 02 00 00 00 02 00 00 00
32 00 00 00 FE FF FF 6F 02 00 00 00 80 02 00 00 80 02 00 00 30 00 00 00
03 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 41 00 00 00 09 00 00 00
02 00 00 00 B0 02 00 00 B0 02 00 00 50 00 00 00 02 00 00 00 00 00 00 00
04 00 00 00 08 00 00 00 4A 00 00 00 09 00 00 00 02 00 00 00 00 03 00 00
00 03 00 00 20 00 00 00 02 00 00 00 09 00 00 00 04 00 00 00 08 00 00 00
53 00 00 00 01 00 00 00 06 00 00 00 20 03 00 00 20 03 00 00 17 00 00 00
00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 4E 00 00 00 01 00 00 00
06 00 00 00 38 03 00 00 38 03 00 00 50 00 00 00 00 00 00 00 00 00 00 00
04 00 00 00 04 00 00 00 59 00 00 00 01 00 00 00 06 00 00 00 90 03 00 00
90 03 00 00 B4 01 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00
5F 00 00 00 01 00 00 00 06 00 00 00 44 05 00 00 44 05 00 00 1C 00 00 00
00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 65 00 00 00 01 00 00 00
32 00 00 00 60 05 00 00 60 05 00 00 28 00 00 00 00 00 00 00 00 00 00 00
04 00 00 00 01 00 00 00 6D 00 00 00 01 00 00 00 02 00 00 00 88 05 00 00
88 05 00 00 2C 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00
7B 00 00 00 01 00 00 00 02 00 00 00 B4 05 00 00 B4 05 00 00 8C 00 00 00
00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 85 00 00 00 01 00 00 00
03 00 00 00 40 16 00 00 40 06 00 00 0C 00 00 00 00 00 00 00 00 00 00 00
04 00 00 00 00 00 00 00 8C 00 00 00 01 00 00 00 03 00 00 00 4C 16 00 00
4C 06 00 00 08 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00
93 00 00 00 01 00 00 00 03 00 00 00 54 16 00 00 54 06 00 00 04 00 00 00
00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 98 00 00 00 01 00 00 00
03 00 00 00 58 16 00 00 58 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00
04 00 00 00 00 00 00 00 A5 00 00 00 06 00 00 00 03 00 00 00 5C 16 00 00
5C 06 00 00 C0 00 00 00 03 00 00 00 00 00 00 00 04 00 00 00 08 00 00 00
AE 00 00 00 01 00 00 00 03 00 00 00 1C 17 00 00 1C 07 00 00 0C 00 00 00
00 00 00 00 00 00 00 00 04 00 00 00 04 00 00 00 B3 00 00 00 01 00 00 00
03 00 00 00 28 17 00 00 28 07 00 00 1C 00 00 00 00 00 00 00 00 00 00 00
04 00 00 00 04 00 00 00 BC 00 00 00 01 00 00 00 03 00 00 00 60 17 00 00
60 07 00 00 5C 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00
C2 00 00 00 08 00 00 00 03 00 00 00 BC 17 00 00 BC 07 00 00 18 00 00 00
00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 C7 00 00 00 01 00 00 00
00 00 00 00 00 00 00 00 BC 07 00 00 1C 00 00 00 00 00 00 00 00 00 00 00
04 00 00 00 00 00 00 00 01 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00
D8 07 00 00 D6 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00
ELF00000000000000
00400000000040 00(0
00000000000000000@00
@00000000000@00@00
@00|0000000000000
\00\00\00000000000
000Ptd000000,000
,000000000Qtd00000000
000000000000000000000
0000000000 0PI000
000 000|CE>=~qX
0000000000000000
00000000000 000%0000000
0000 000P0000000 00000
A000000000000000000000
Z00"000z0000000000
g0000000000900000
&0000 0n0000000000
;000 00000000000D00
00000 00__gmon_start__0
_fini0__cxa_finalize0_Jv
_RegisterClasses0my_init
0register_match0__printf
_chk0libc.so.60_edata0__
bss_start0_end0GLIBC_2.1
.30GLIBC_2.3.4000000000
00000000000]000
0000000si 000000000
ti 0000000000X00000
000000000000000
0000000000D0000
0000 0000$0000
4000080000<0000
@0000Ue00000
0000000000000
000h0000000h
000000h000
000h00000000000
US0000[Ì00
tX[Ð
UVS000^0000
00uWt0$
($)p
0009v000$
0009wƃ000[^
0000US.00000
,tt
,$҃[]Ë$Ð
U1]É'0000U]Ít&
0'0000US00
8000$[]Ív
0'0000USO00
$0008D$@
D$V[]Ð
UVS]00 p
@t Ћu[^]
ÐUS0000[00
dY[1.3.5000unclean 
v%s takes no options  00
;(000000D000
`000|000H000000
0000zR0| 00000
0000000AD 000
00080000000AB 
000000T000&0000A
B A000p0008000
0AB A00000000
000000000000X00000
]000 000 00 000D00o
0000000000000 000
000 000000000(00000
 000000000000000000
00000P000000000o
00o000oh00o
00000000000000000000000
000000000000000000000000
00000000\0000000000N00
^00n00~00000000000000
00000000000000000000uncl
ean000000000000000000000
00000000`000000000000
000000000000000000
000000000000libipt_uncle
an.so.debug0_0.shstrt
ab0.gnu.hash0.dynsym0.dy
nstr0.gnu.version0.gnu.v
ersion_r0.rel.dyn0.rel.p
lt0.init0.text0.fini0.ro
data0.eh_frame_hdr0.eh_f
rame0.ctors0.dtors0.jcr0
.data.rel.ro0.dynamic0.g
ot0.got.plt0.data0.bss0.
gnu_debuglink00000000000
000000000000000000000000
00000000 000o000000
000<0000000000000000
000 0000000000000
000000000000000000
000000000000000000
0000000%000o000h00
h000000000000000000
2000o00000000000
0000000000000A000 000
0000000P0000000000
000000J000 000000000
000 000000 000000000
S000000000 00 00000
000000000000000N000000
000800800P00000000000
000000Y00000000000
0000000000000000000
_000000000D00D00000
000000000000000e000000
2000`00`00(00000000000
000000m00000000000
00,000000000000000000
{0000000000000000
000000000000000000000
000@00@00 00000000000
0000000000000000L00
L00000000000000000000
000000000T00T00000
000000000000000000000
000X00X0000000000000
0000000000000000\00
\000000000000000000
0000000000000 000
00000000000000000000
000(00(0000000000000
000000000000000`00
`00\00000000000 0000000
0000000000000000
000000000000000000000
000000000000000000000
000000000000000000000
00000000000000000000

HEXDUMP: [Full] [Preview]
Base64:
[Encode [+chunk [+chunk+quotes [Decode


:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0178 ]--