!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/lib/security/   drwxr-xr-x
Free 52.22 GB of 127.8 GB (40.86%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     pam_smb_auth.so (40.16 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF44 (DDDDD\d    PtdQtdC5    i@P-&B I
RDcL@!P  J  E     qD5789;=ACEFGIJKLOPRUWXY[\_aefgijknpqrtvxy{}~B$LkE BkEr*Ƣa<i=t-%lDTE󩮋ubEBiVnGh铆m%=R样}:⶛((_`  {LH/;Ʌ+noi̷jEY<I[)}.F3,Rm'xF)Z!bIW9Y9?^%CE3X.l 8ۀo|mػ|  !Q1*݈y    TuqXJNs3?5vb6[ +  rUq+C-HszVWp<Ka<<bhb@'[O299"x+coG_C<s2n-%Z"i=p>b
P`
%V
Ll
^
e@
&/
N(
U]
)_D
(
`: 
%
dP
2p6@
a
?p
0Eo
(
c
`7
6e
]
tr Pc%
i` 
-l/
(
N(
od
Ou
$P2
oE
pG
P6
F
_
xp 
DI
is
3nB
\ (
]i
&cG
;k|
! n}
c6
5*
w{b;
2PW
= Qu
 ^A
 7:
c,
H
    [
Un
`(
b]
pPH
.d
m@(
@6
I0+{
p^
-%
P-X
`_<
__gmon_start___init_fini__cxa_finalize_Jv_RegisterClassessmb_readpamconffopenfgetsstrlenfclosepam_sm_setcredpam_sm_authenticatepam_get_userpam_get_item_set_auth_tokstrncpygetpwnamgetspnamstrcmp__syslog_chkValid_Userconversefreepam_set_itemSMB_InitSMB_Connect_ServerSMB_NegotiateSMB_DisconSMB_Logon_ServerSMB_Print_PktSMB_Get_Tree_MBSSMB_Get_Max_Buf_SizSMB_Get_Protocol_IDXSMB_Get_ProtocolSMB_Get_Last_ErrorSMBlib_errnoSMB_Get_Last_SMB_ErrSMBlib_SMB_ErrorSMB_TreeDisconnectRFCNB_Alloc_PktRFCNB_SendRFCNB_RecvRFCNB_Free_PktSMB_Figure_ProtocolSMB_AtrToStr__strcat_chkSMB_DOSTimToStr__sprintf_chkSMB_Get_My_NamegethostnameSMB_Get_Error_MsgstrncatRFCNB_Get_ErrorSMB_TreeConnectstrcpymallocSMB_TermSMB_Create_Con_HandleRFCNB_HangupSMBlib_Set_Sock_NoDelayRFCNB_Set_Sock_NoDelaystderrfwriteSMBlib_Statesignalgetpidgetgid__ctype_toupper_locRFCNB_CallSMB_Connect__strcpy_chkstrtokSMB_Prots_RestrictmemcpySMBencryptStrnCpystrupper__ctype_b_locE_P16E_P24E_md4hashmdfourSMBNTencryptnt_lm_owf_genmemsetcred_hash1cred_hash2__memcpy_chkRFCNB_ListenRFCNB_Get_Last_ErrorRFCNB_errnoRFCNB_Get_Last_ErrnoRFCNB_saved_errnoRFCNB_Register_Print_RoutineProt_Print_RoutineRFCNB_Get_Error_MsgstrerrorsetsockoptRFCNB_CloseRFCNB_Get_Pkt__errno_locationRFCNB_Put_PktRFCNB_Name_To_IPRFCNB_IP_ConnectRFCNB_Session_ReqRFCNB_StatsRFCNB_AName_To_NBNameRFCNB_NBName_To_ANameRFCNB_Print_Hex__fprintf_chkfputcRFCNB_Print_PktRFCNB_CvtPad_Nameinet_addrgethostbynamesocketRFCNB_TimeoutwritevRFCNB_Set_Timeoutrfcnb_alarmsigemptysetsigactionRFCNB_Discard_Rest__read_chkreadlibcrypt.so.1libc.so.6__stack_chk_fail_edata__bss_start_endGLIBC_2.0GLIBC_2.1.3GLIBC_2.4GLIBC_2.1GLIBC_2.3GLIBC_2.3.4x ii si    ii ii ii ti    ii `dhlptx|ģȣ̣Уԣأܣ`\i_    ĤPȤl̤ФcԤ}ؤ<ܤ3m7a Y] g$(
,{0 4 8v< @DkHrLPTX\`jd5hlpt|xf|bwC^ ?!"ĥEȥ#̥$ХGԥ%إ;ܥe&'()*+,I8-. /WFQJ B$0(N,1024386<D@TD4HVU$/Y hhhhh  h($h0(h8p,h@`0hHP4hP@8hX0<h` @hhDhpHhxLhPhThXh\h`hdhhhplh`phPth@xh0|h hhhhhhhh h(h0h8ph@`hHPhP@hX0h` hhhphxhhhhhhhhph`hPh@h0h hhh hhhhh  h($h0(h8p,h@`0hHP4hP@8hX0<h` @hhDhpHhxLhPhThXh\h`hdhUS[8tX[ÐUS u8t$1 |ҋ|uƃ[]Í&US.ëptt p$҃[]Ë$ÐU]fu}D$$-D$ED$P$ttU$UDE|$D$P$^tFU$UDE |$D$P$0tU f1$U D<$7]u}]ÐU1]É'UWVSlEU]eE1EDžDžDžDžvDžE9tktDžDžDžDžD$D$$ut8uK
Ue3l[^_]ËiDžt$D$$k<HET$ U D$T$$$t$D$$D$D$EЉ$E $K$V::Bqt$$rt$$ue,D$D$$W`D$D$$ST$ z,0uT$D$4$It6t$ D$D$ T$D$$W;t$T$D$ $D${tI|    eD$$UD$ D$3y`D$D$$WD$D$$W`v E     D$D$$Qy`D$D$$W9LUSK$ED$ED$$u UBD$ ED$ED$E $$[]Ív'UWVSl~,}EEEEEED$ ED$D$<$u#EftE tu$f,[^_]ËD$<$D$MƉȅt':tv:uE$\Mt $M,[^_]ÐUWVS|}<}EEЍEԍE؍E܍EE䍃E荃E9E|$$D$rtkEЉD$4$-yD$4$<[^_]ËdtًE 4$D$ED$<y?D$4$뽋E|$$D$ƸoD$4$I1끐U]Ít&'UUt]É'UUt`]É'UUtB ]ÍUUtB]Í ?|U]Ð&k |U]Ð&UWVS|{ $#T81fG@qSMBEPTfAPfAXA fAMfB!fBD$#t$A@$UD$#t$B@${xuzM} ǁǁt4$f1 [^_]ËtMABMAtыQADAH붋뭋@4$뇉4$i4$Kt&'U]E3zuu }9u]u}]ft541u VtET$$u벸뫍v'UWVS,éy }ƃt+M -3D$D$4$Mt%U :D$D$4$ t%M DD$D$4$t%U N~D$D$4$t!M XtMD$D$4$ t!U etD$D$4$w [^_]Ínڐc뫍VwL?fBt&8t&UVS0U$xD$0D$ЃD$$%D$ % D$PD$Ё%\D$p4$ƃ\T$D$ A0[^]Ít&U]    Æwuu }}t$<$x]u}]Ívt$D$<$ؐ&U8U]eE1w҉uu }}xKG D$5|4$D$.D>Ee3]u}]ø ĐGD$؃ |4$D$D>4$`9s)T$D$4$2$D$f4$4$T$)lj|$H wvKCt&'UWVSEvu&EEE$U$M $tƍF#E$EU ҉UEU@P D$M$L$D$ED$E$U1:fG@pMSMBMfBTfBPfBXB fBU@#Mfp!p#$$L$E$@Up$T$M $i@U$T$ML$ED$UB$*UT$ML$UB$q0MzB#MB!EDUMHHAHE$*E[^_]ËEE[^_]$E M $E뾉DH뇋} BE$EwE tbE$qEME tEE$GE#E$MiM $둋M $뮍UWV1SU Árׅ$Gt0GuN#mMMEnE$EU1:fG@rMSMBMfBTfBPfBXB M fBUfp!t=} p#MD$F$$~}t0GEuϋUMuT$L$F$PUMuT$L$F$nUx@!fUM B D$ $uF    MB < t<u4$?1[^_]ËuB#dlB%d`B'pB)tB+hB-|B5R7E䉖=AMD$OD$=$FuB#d胦dlB(`B$pB&tB,xB0|B@ERBEAMD$OD$E$EnE#6@M $[u4$:E$lE$K E$* $ÐU1]É'nU勁1]fUuu]`nF$E u4$p]1u]USE %nD$E@$mx1[]ËD$*D$D$ $w1[]Ít&'US>ûmD$$ r1[]ÍUWVSEU mmue M1Ʌ0,8P81@@dƀƀT8@Ƃ,<$L$8t$,$88|ǂ|UNIX@ of @some@  typf@eǂSMBlǂH@ib L@M2.1@  min@us a@ bit@ǂD4$D$PE8ǁ\8ǂXTP8LE(%t&,T(D,w $9w1PD8>4$S9wƄP8:uV8<\L$|$D$ ($8Bt]Me3 8um[^_]Ë@<$8Dž8룋0tDž87$ٍ&UWVS<EMU jjuEeU1҉ɉ1D$$t$ud$T$$ƁTƀǀ,STAFfǀ0F|ǂ|UNIX@ of @some@  typf@eǂSMBlǂH@ib L@M2.1@  min@us a@ bit@ǂD$D$P ǁ\hǂXTPWLD$P4$D$D$4$D$${P!xTDw $ 9w1ƄP/>$9wƄ:\L$|$D$ $'Bt\D$ $2DžMe3 <[^_]ËkDž$DžsD$D$T$ $D$ / $]3t&UWVSEU ]fue M1Ƀx<8pD$t$4$b<E4lTTT! t€u
Tҋ<T4)TTzX<,8`|\$<`$,\ $tX4N7P $LL 81fGL@sLSMB<fBTfBPfBXB 
fBL@!Tf@#fP)Tf@%f@'@+fP/@1fp5L4X1T$D$74$X8t4$D$/8$`p4$L$`$\p4$T$\ $0PLT$<L$B$6PL<D$T$A$-LzB%u"B<LX $1fUe3[^_]Ðt&T$D$4$<DžTDžXzA<<<,@8|HD$f@$VD $tDƋH$4X4N=P $LL81L@sLSMB<fBTfBPfBXB  fBL@!Tf@#fH/f@%f@'f@)@+f@1@3@7fp;4ƋX=4$T$D$8XL$4$S8$@p4$T$+@ $pD4$D$D$Hp4$L$H$0B $gQ;-L $L$    UWV}u Mt(u &t u^_]^_]Í&UWVS }&ã_7tGEwt*UDptwuփ [^_]ÐUXE ]3_uuEeE1ẺEE}}EEEEEEEEEfED$D$4$T4$lE4$D$=E|$D$E$Ee3u ]u}]+t&UWVSY^,E$"=}1ffu"'&}9f„fOt9ufDŽu1ftf<BuD$E |$$,[^_]ÍT랍&'UH]f]eE1EۉEЉD$Euu }}E$EEEEEEЉ|$t$$*Ee3u ]u}]*&U]F\eE1Euu }}D$D$n`$#FFF `t$$`ƅ|$GGG `|$$`D$D$$vEe3u ]u}])UWNjEVօ~1ҋD0:;Uu^_]Í&UWV΃`eE1ɉU~9U1ɉUE:U9u1ҋM
:9uEe3u`^_]q(UW}Vօt<89uЋU t‹E 49u^_]Ív'UWNjEVօ~122
:;Uu^_]Ð&UWVSeE1ÌZEA    ЈEQA    ЈEQA    ЈEQA    ЈEQA    ЈEQA?    ЈEAUEd    u1:ƃ)Ћ)D5@ux$8kM̺|D2|D
uE0҉D2
uꍅ@\tl7||lD$$Fl$00;u@|$@YEpD2D
D2D
!uڋtp\P0x|1p1$0p$0i BЃDuuʋDžDžhW    Ћ WG    G    G    ‹ыh4u샅hu14A&ʃDuuƋ<x$ Px$ "D
D
!uD
D
!uヅ09D$ $ P$@1u1<t,:ƃ)Ћ)@uEe3u Ĝ[^_]4"t&UWV }u eE1E‰EEKEGESE!E@E#E$E%UFOEe3u ^_]Ðt&!t&'UuE u}}E‰UNGUNGu}]x&U(}E}U uuEeE1AEO    4Ee3u
u}]    !'U(]E6óSU uu}}EeE1FEEe3u ]u}] U!‰V!^    ]Í'UVƉ!    !^    ]Í'U1‰1]Ðt&Uщ]Í&UWVSURuDDuXE2Eo( EI(,E#(,0E,0(E04t ,E48N0E48<$Ee8<4E?<@ 8E@D<E@DHEDHLf@EHLP< DEyLPTHEOLPƋEyZTPTXEčyZ$X$Uԉ\TyZ\ X     X\`E䍴0yZ`H kU\ƋXyZ`9Uȋ`d\yZd`hE؍yZdh    U苍d2yZhlj dhƋEyZl8[hlpE̍yZpU܉tlyZtp    ptxE썴0yZx UtƋpyZxTwUЋx|tyZ|  8xEEyZ|E    U|2yZUE |MƋEnUUMEEԍnEx    xUĉEEnEUE EMUEE䍴0nEUMƋEnUU܋MEEnE    UEE̍nUE UM2nUEfiUMƋEnU=@UMEE؍nE      UȉEEnEU MUNjE荴0nUMEEnEUƋEnUY    YMEEЍ8nE/ 2EUEnUEEE[^_]Ít&UWVfTD    D    D    ‰Tu^_]Í'U]PPPÍ&UWVSE0IuE ǃ#EgeE1@ 0ǃǃܺǃvT2~+@@@1p8=uD$ t$<$D$(7Ƅ5p EM18=u`w cEe3ǃǃǃǃuO[^_]Ë E~Ue{U]Ít&'kGU]Ð&KFU]Ð&+FUU]Ðt&USEU5òFT$1)ЋD$E $ٻ[] U(]fFuu~K$ֺD$4$D$D$D$\D$ 譾]u]Ë4$D$]u]Ív'USE D$ EAþED$D$D$$&[]ÍUuu]pEt$|4$脻]1u]Ít&U}}]賿0Eutt$臽t@E FE<$t$D$ux9F4$@]u}]Ëϋ܍'U]    ÆDu}}$ۼtaE FBBBGD$Et$$ xDF4$w]u}]Ít&.˿č&UWVS<EFCuE$覻^}@@@ @:裷EEE܉D$<$NUE$ .EBM~JFPVL$E$oED$U܍ED$ T$E D$U4$T$誺UxiUu<[^_]Ë}0t&F $覻E:ϐt&VVkE4$x<1[^_]Ëm1tUW}Vu T9ЃAADNTNuF ^_]Ðt&UW} VuTNDNQˆT9uG^_]Ív'USËAE$1[]Ít&'UWVS uֻSAt$t&~t$c4$Yu [^_]É'U]艻A}}u$ tX@xu]u}]Ít&<$輸uߋ4$1븋1輴뙍UWVS\EֺS@eU1҉EE 1ɉE}4}EW9~+E93E@E)UE}EW9~+E1~͋U}8}UD ψT)Ѓ yEωD$ SD$EED$$D1J~)EωD$ SD D$ED$$U$
T$]}e3=u\[^_]P UXuEu ]耹>Eĉ}}ủt$ ueE1[D$D$4$菳<O<ZQAu    AD$4$    T$ D$4QA    A    W$t$ D$(D$$<QAu    A4$D$    T$ D$袲E߉EȉD$$軳uȉD$ED$t$ $gt$'$膳t$ uĉD$D$4$5:QA    A    ‰T$ D$ED$$ue35@]u}]QA    AD$    iD$EĉT$ $袱uD$ (D$|$4$EwuQA    A|$D$     ƒT$(D$Eĉ$U<QA    A    xT$ QA    A    PT$ pAD$     UWV1SJ; E} $萲E9uCA~"Uƒ(ȃAAwDwuG  [^_]Í'UXEU ]õ@;EЋEŰU}uEȋEUċU$HEUeE1ou"Ue3]u}]Ë0FFFFDF F& Ũ'D$$9Eȉt$$*UD$H|$$cxEEԍEԉD$EEED$$ѳPUt/18"ME<w
UUEEU1ut&U(]ٳV9uu}} 4$|Et1]u}]É4$+t @1ڋ9븍t&U8]Y8u}} eE1D$D$$xaEUEEEEfEfD$fET$4$ȬxBUe3u/]u}]ËhN4$芯    ϐUWVSlE f7M1M
BM MM9M~
)40uMDEDM9MtRt     u봋EE~$`UMt$T$$hx[9E-~ $+l[^_]ÍE1EEK8t1"M‹A:uϋ͐UVS=ú60Uҋ~Jllp$ϪED$t$$螬x1ҁ0[^]ÍvUS辰;6D$D$D$ $設[]Í&'UWVSE c5}eU1҅~gƍEE)ƅ~WdD$ dvdUD$T$$>̃豩1Ue3u Č[^_]~&'UWVS,E覯#5u eU1҃}E}~$UD$|$$豪Em}tσ}EEE    EE    E܋EU9UU}    EEE؉9FG9EE/D$T$Uԋ$~zE؅tG1)uMʋE܃;E~ $EU؉|$$T$虪Ue3E,[^_])8t@E뮋~0U+E؉$D$;E덋蓧8tiEQ{P8t&뻋E
 US>û2UVSÚ2dp@t Ћu[^]ÐUS[d2DY[r/etc/pam_smb.confdebuguse_first_passnolocallogin: xpam_smb: Unknown Command Line Option in pam.d : %spam_smb: Local UNIX username/password pair correct.pam_smb: Local UNIX username/password check incorrect.No Local authentication done, relying on other modules for password file entry.pam_smb: Missing Configuration file : /etc/pam_smb.confpam_smb: Configuration Data, Primary %s, Backup %s, Domain %s.pam_smb: Correct NT username/password pairpam_smb: Incorrect NT password for username : %sPassword: PC NETWORK PROGRAM 1.0MICROSOFT NETWORKS 1.03MICROSOFT NETWORKS 3.0SambaNT LM 0.12NT LANMAN 1.0Read Only RHidden HSystem SVolume VDirectory DArchive A%2d/%02d/%2d %2d:%02d:%02dunknown
    Function not yet implemented.No such error code.DOS LANMAN1.0DOS LM1.2X002DOS LANMAN2.1Request completed sucessfully.Server returned a non-zero SMB Error Class and Code.A lower layer protocol error occurred.The protocol negotiated does not support the request.No space available for operation.One or more bad parameters passed.None of the protocols we offered were accepted.The attempt to send an SMB request failed. See protocol error info.The attempt to get an SMB response failed. See protocol error info.The logon request failed, but you were logged in as guest.The attempt to call the remote server failed. See protocol error info.The protocol dialect specified in a NegProt and accepted by the server is unknown.Setting no-delay on TCP socket failed ...
/\A:  
      
            
      
       
  
     
       
      
           
        

           
    
    
      
       
        
    
            
 
     
            
      
        
     
  
     
      
      
            

       %s
    errno:%sRFCNBE_OK: Routine completed successfully.RFCNBE_NoSpace: No space available for a malloc call.RFCNBE_BadName: NetBIOS name could not be translated to IP address.RFCNBE_BadRead: Read system call returned an error. Check errno.RFCNBE_BadWrite: Write system call returned an error. Check errno.RFCNBE_ProtErr: A protocol error has occurred.RFCNBE_ConGone: Connection dropped during a read or write system call.RFCNBE_BadHandle: Bad connection handle passed.RFCNBE_BadSocket: Problems creating socket.RFCNBE_ConnectFailed: Connection failed. See errno.RFCNBE_CallRejNLOCN: Call rejected. Not listening on called name.RFCNBE_CallRejNLFCN: Call rejected. Not listening for called name.RFCNBE_CallRejCNNP: Call rejected. Called name not present.RFCNBE_CallRejInfRes: Call rejected. Name present, but insufficient resources.RFCNBE_CallRejUnSpec: Call rejected. Unspecified error.RFCNBE_BadParam: Bad parameters passed to a routine.RFCNBE_Timeout: IO Operation timed out ...    %s
RFCNB Pkt %s:SESSION MESSAGE: Length = %i
sentSESSION REQUEST: Length = %i
  Called Name: %s
  Calling Name: %s
   Error = %x
RFCNB SESSION ACK: Length = %i
RFCNB SESSION REJECT: Length = %i
   Protocol Error, short Reject packet!
RFCNB SESSION RETARGET: Length = %i
RFCNB SESSION KEEP ALIVE: Length = %i
4J`0123456789ABCDEFIO Timed out ...
;Ox8(X8tXxء<H`ȥhȦhX,hHdȯ8xxH<\((X(HHh8 (D`|H    0    L    8h        (    x        h
((
H
(h
h



 (, P t   8  8 zR|  AB FNH@AD \AB I|VAB AAB C/AB CȝAB AG AG ,ĝAG HȝAG d̝LB НLB ԝAB C tAB FQF{AB C@AB E  XAB FNF D%AB L[FhdAB F XAB BF$AD LB @AB FF<eAB D :AB A<AB I\ AB I|bAB IԷIAB BoAB F TAB IN]AB C  AB FfF D\AB I\Fh8)AB AFHoAB ACFAB ADȻ(AB AFػAB IxuAB E(HAB FIHWAB FL hHuAB FTFAD AAB A AD     AD ,    AD HCAG AC<AB XAB IxAB LB LB LB AAB DAB FN$|DAB D@<AB FF `AB FFN \AB FQAB F;AG AD6AG AD%AB A$GAB F DAB FNFhPAB F @AB FIQ sAB BC PAB L] |AB FNF     xAB FQ<    D/AB F\    T}AB B|    BAB A    AB I    dAB Fuu0vzuXvvvvwLwwwxuP|<(T̃LԄ x  tro t
 Dloooo.*:JZjz
*:JZjz
*:JZjz
*:JZjz
*:JZjz
*:JZjzPtttuuuuuuttut91)!    :2*"
;3+# <4,$?7/'>6.&=5-%   
  )4%/7(3-!0,1'8"5.*2$ :2*"
<4,$ >6.&@80( 91)!    ;3+# =5-% ?7/'         
  
       (08@ '/7?&.6>%- 5=$, 4<#+ 3;"*
2:!)    19pam_smb_auth.so.debug.shstrtab.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.data.rel.ro.dynamic.got.got.plt.data.bss.gnu_debuglink o tt` %o 2oA    llJ    DD    SNYS_trtrerrG m{ll    DDLLTT`` 4h``@  

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0369 ]--