!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/sbin/   drwxr-xr-x
Free 40.47 GB of 127.8 GB (31.66%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     mount.cifs (27.12 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF 4g4 (444444ZZZ++ZHHH  PtdW||Qtd/lib/ld-linux.so.2GNU	G &"GIK9}1iTWk[v [F)4B@geyXZ2)Lr6NLT:vG>&@b>eGl@"arF::N4:#k_;,{F
pgJdkL:@28>9;4>WTxzM:Mq5.^^^^^_x8_<_L______̿п0Կؿܿٳii
ii
ii
ti	ii
si	ii

HI	
 $
(,048<@DHLPTX\`dhlp t!x"|#$%&'()*+,-./0123456789:;<=>?@ABCDEFU485%%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@% hX0%$h` %(hh%,hp%0hx%4h%8h%<h%@h%Dh%Hh%Lh%Php%Th`%XhP%\h@%`h0%dh %hh%lh%ph%th%xh%|h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp%hx%h%h%h%h%h%h%h%hp%h`%hP%h@%h0%h %h%h%h%h%h%h%h%h %h(1^PTRhPh`QVhHUS[ØYtX[ÐUS=u?-X9v&9w[]Ít&'Utt	$ÐUD$D$$VUD$D$$,D$$$$$HD$t$D$l$D$$D$$D$D$D$$D$$tD$$`D$$LD$H$8D$$$D$$$D$$D$D$$t$$UWVS,EסuD$$AD$@D$$=u$$D$<$_t@V$|D$|$D$(D$$$KD$<$kEy7$%|$D$D$\$$D$ED$E$^ÅyB$D$D$$AtE$2$u)8up=tgD$$QUt
u090@E=tD$@D$$tE$؃,[^_]U(]u}EU˺ǸщM΃}эy7E9r;]r-)xt"E|$UT$$U0E]u}]U(]u}E։ʉэYt%9rz|$t$E$LE8؋]u}]U(]u}ÅEуMD$/E$vEuD$\E$\E=t$XEE3>t${׉<$tXuE}у9~4~09}]D]E,9t	EE]u}]UWVSEUeE1E}{Un(D$D$D$ D$D$ EЉ$8D$D$D$ D$D$ E$M9GD$,$Et	ED$=E$uEtEu8uE8t&u
8
u8]t;u=Uzu=c$6R$%D$$=D$%$vÅtq,=uD$$AptH=t$SA{tډB,xuE1$Qu	8=]t;uB=t*D$D$+D$$_
D$@$?=t*D$D$/D$$@D$@$ouL$:D$D$D$$Y}
M$<D$D$D$$#fu68uP]0޿:8t޿?8

uD8]t;uD$p$i
D$#$"w0=t\$D$$i$
$G
u[8t6u_8tuf8Et8u$|
D$$"wD$k$]D$,$=+wb޿,8u$%	޿~8w$$au8tu8u\Et8u$lD$A$@w$2u8n]M;DD$$…D$$Eu`f$t&E|E$iM
< t<	uu]D$\$$u}D$=$xT
tu3D$$ىD	t&D$\$$zD$=$"rp
tuu0BZ	t&D$$AD$@D$$AkD$\$$D$=$WÅp=tt$D$$<
tuu+BD$$AD$@D$$tAED$D$U$wM$E$pED$T$D$0$\$XFu8]3'ыDPuj$u'ED$D$$$@D$D$D$ D$D$ EЉ$TEй 5u	8]3VыDPuj$u'ED$D$
$$@D$D$D$ D$D$ E$/E du"
8tu,8Etu%ED$D$$:<0tUT$D$$u,8}$GE"eu2	8tu;8Etu%ML$D$$;{<0tED$D$$u;8$ E2u8uU
u8uM!\u8uE7uA8tuG8uU"u	8uM!u8uEu8uU"uN8uduT8uM	BuW8uE  uZ8uU
 }эYEtˋMtt$E$u$b$EE}ti;EEt:D$UT$D$kD$D$CD$EE$$ML$D$ CD$EE$}уMEE=}эqU\\$M$u$b$ME}tٺiCEEЉD$D$qD$D$FD$EE$}уM=}эyuY3D$E$u$b+$E}tMٺiuED$D$xD$D$GD$EE$Ut$MUED$l$D$D$M$$$D$D$E$$$$}эYE}эY]EEC$[Ue3tČ[^_]UVSƅt1t*Äx+ÄxËu[^]U3$tÍL$qUM]u}1YeE1Dž`@Dž\tt
u!$t&/f$~pSD$$u?$D$D$D$D$$$K)$PσF$|$l`` $1\`D$!D$D$D$$$`aD$D$
D$$7D$D$
D$$

DPtZD$D$
XD$$X8D$D$$$$u)D$D$$|$;]f
DPtZD$D$
XD$$X8D$D$$$c$u)D$D$$$.|uD$$AtVAJ:)D$D$$$yD$D$@D$\$4$Et	uv$)$tS=u!D$$A$@¡gp$
t8$
zD$D$
D$$n($Bt$2¸D\t8`\t#DžDžDžD$4$=~D$ $n/D$|$$ u(D$D$$(u$@,8~8D$:$ÅtW$)/XJ$g=D$x$t$D$$
/F//0uÉD$4$
1uIm99B9t{9uu=2uV󉵰9tK9t@9t99t 9t9uD$/<$pDž=u$F/uÉD$4$1u?$9t$9t9t9um=2uTۉ9t39t(9t!9t9t9u߉D$/4$t!Bzu
=t=T$"Cu#T$D$$VAT$uc$,
$l
u8=u/$DžDžDž	$t*D$D$4$t$[t7T$D$$YDžDž'	D$D$2$t7L$D$$DžDž%=@t7t$D$H$DžDžtLuBp9u%=u	`$x$=u=uM$47D$$AQADžDž\t׸эYt&׸э\u&9$$$Ǹэ\t׸э\tǸэ\t$sJCR$u$$`$$]񋕌D$/$ ‹9v\t%b񋕐=t==u~gxeu.=t%nA.w
\t%i\񋅘=t%}׸ы\D$\$2t/9w=t'T$D$PD$$w
@׸у˅<,9u@~$x|ىȃ$MtcùD:|:,u,;tԋt$/=tCD$D$D$$=tD$$
T$`D$D$L$4$TËt)tup$$xuG4t8%t)t$ADž$D$D$D$$j$8Dž 6$tD$$ D$$Wƅu $Dž<@DžD$H$RD$D$H$`tHTHW`@tH`tH`tHl`tHN`tH
0t0t'HgHDžLDžP<D$4$+4$}YHt$fDžHt
DžtMуL$D$$Wt$t$\t$Dž\Dž\t$t$4$Dž*$?}e3=tIM]u}]aÐU]USW*0t0$ǃ$nǃ0[]UWVSX*eE1,9,E0$9u,9,D$,D$4$^t$0$tuǃ,@D$D$D$D$uщ4$D$D$A4$?!*Eщ$E
Eщ$0$^D$E$[EEE@KLUщ D$ $LNjuǃ0
y	[D$$u‰yGD$E$?uE;E}ǃ0 $LfDž,fDž.Dž0Dž4Dž8Dž<u-,D$D$
$ $D$E$UE9}b)Љ$,D$D$$L$kD$Eȉ$8$ $J0KЋUe3t[^_]USû&$$ÐU]Ít&'UWVS}&E)E}Ut+1ƍED$ED$E$9}u߃[^_]ÐU1Sd
&tD$ED$$[]ÐUS&%UStЋu[]US[Ä%Y[
Mounting cifs URL not implemented yet. Attempt to mount %s

Usage:  %s <remotetarget> <dir> -o <options>

Mount the remote target, specified as a UNC name, to a local directory.

Options:	user=<arg>
	pass=<arg>
	dom=<arg>
	credentials=<filename>,guest,perm,noperm,setuids,nosetuids,rw,ro,
	sep=<char>,iocharset=<codepage>,suid,nosuid,exec,noexec,serverino,
	directio,mapchars,nomapchars,nolock,servernetbiosname=<SRV_RFC1001NAME>

Options not needed for servers supporting CIFS Unix extensions
	(e.g. unneeded for mounts to most Samba versions):
	uid=<uid>,gid=<gid>,dir_mode=<mode>,file_mode=<mode>,sfu
	port=<tcpport>,rsize=<size>,wsize=<size>,unc=<unc_name>,ip=<ip_address>,
	dev,nodev,nouser_xattr,netbiosname=<OUR_RFC1001NAME>,hard,soft,intr,
	nointr,ignorecase,noposixpaths,noacl

Options are described in more detail in the manual page
To display the version number of the mount helper:mount.cifs failed: access check of %s failed: %s
mount.cifs failed. %s attempting to open password file %s
mount.cifs failed. Error %s reading password file

Warning: null password used since cifs password file empty
Warning: password longer than %d characters specified in cifs password fileDomain name specified twice. Username probably malformed
skipping empty user mount parameterusername specified with no parameter
mount.cifs warning - password specified twice
password specified twice, ignoring second

mount.cifs warning - password specified twice
target ip address argument missingip address %s override specified
invalid path to network resourceunc name specified twice, ignoring secondUNC Path does not begin with // or \\ error %d opening credential file %s
invalid credential file name specifiedOption '%s' requires a numerical argument
WARNING: '%s' not expressed in octal.
WARNING: CIFS mount option 'fmask' is deprecated. Use 'file_mode' instead.WARNING: CIFS mount option 'dmask' is deprecated. Use 'dir_mode' instead.mount.cifs failed due to malformed username in credentials filemount.cifs failed: password in credentials file too longmount.cifs failed: domain in credentials file too longmount error: UNC name too long
Mounting the DFS root for domain not implemented yetmount error: improperly formatted UNC name. %s does not begin with \\ or //
ip address specified explicitlymount error: could not find target server. TCP name %s not found
mount error: could not get valid ip address for target serverMounting the DFS root for a particular server not implemented yetNo ip address specified and hostname not foundmount error: can not change directory into mount target %s
mount error: mount point %s does not exist
mount error: mount point %s is not a directory
mount error: permission denied or not superuser and mount.cifs not installed SUIDNo server share name specified
Mounting the DFS root for server not implemented yetCould not allocate memory for mount options
mount.cifs kernel mount options: %s
Invalid password. Password contains too many commas.mount failed but no error number setmount error: cifs filesystem not supported by the systemretrying with upper case share nameRefer to the mount.cifs(8) manual page (e.g.man mount.cifs)
Less commonly used options:

Rarely used options:
	man 8 mount.cifs
	%s -V
malloc failednull domain%uusersuser_xattruserusername too longpassmount.cifs error: %spassword too long
secnonekrb5ipip address too longunctargetpathUNC name too short\\CIFS: UNC name too longworkgroupCIFS: invalid domain namedomain name too longcredusernamepassword
Domain %s
bad user name "%s"
gidbad group name "%s"
file_modefmaskdir_modedmasknobrlnolockguestrorwremountmalloc,%s=%suid=%sgid=%s%s: %s12RH1mount.cifs version: %s.%s%s
bad uid value "%s"
bad gid value "%s"
unknown mount option %c
afFhilL:no:O:rsSU:vVwt:PASSWDPASSWD_FDPASSWD_FILEcifs://smb:///\.Password: Password not entered, exitingunc=,ip=,user=,domain=,ver=,prefixpath=,pass=,pass=********mount error %d = %s
cannot lock mtaba+/etc/mtabcould not update mount table,mand,noexec,nosuid,nodev,syncallhelpmovebindread-onlyverboseversionread-writeoptionstypersizewsizedomcredentialsport^BBBBBBBBBBBBgBBBBBBBBBBBBBBBBBB
1BkƬ4BBBBBBBBBBxBٮBBBgBBBBkBBk/etc/mtab~/etc/mtab~%d;xPu"?ɾ. w@*`v&q4|%AB
0%AB
HғAB
FhAB
LyeAB
LޖIAB
L'AB
IڪLAB
B&"AB
( H6D	FAB
RzR|AB
8QAB
DT
KAB
It5AB
D
Xoh 
0\Doĉoo0o4o(o\o|pg?0ཻ`cPۯ`U 01@:òSP0@EPf0PTip0kٳjϯpk``ZXPW F0th0iв0Pp4PB0WPگP?޲Po0I੻ КGŻE>@h hahm!b&rTr0v8V@wWwKoStXR^W1	2uudddp	phctP`e__gmon_start__libc.so.6_IO_stdin_used__printf_chkstrrchr__strdupperrorgetpwuidinet_ntoananosleepputssigfillset__stack_chk_failunlinkreallocstrpbrkgetpidendpwentsetmntentfgetsgetpwnamcallocmemset__errno_locationchdirread__fprintf_chkgetgrnamfputcstrnlenmemcpyfclose__strtol_internalmallocgetpass__strndupgetgid__xstat64getenv__ctype_b_locoptargstderralarmgethostbyname__snprintf_chkgetuidgetopt_longstrncasecmp__realpath_chkfwritegettimeofdaysigactiongeteuidsigismemberstrchrendmntentaddmntent__ctype_toupper_locfcntl__sprintf_chkmountunamefopen64accessstrerror__libc_start_mainsnprintf__strtoul_internalfree__cxa_atexitGLIBC_2.4GLIBC_2.3GLIBC_2.2GLIBC_2.3.4GLIBC_2.1GLIBC_2.1.3GLIBC_2.0/lib/ld-linux.so.2mount.cifs.debugnNELF 4^4 (444444ZZZZHHH  PtdW||Qtd44HH !ohh,+344;o00	Hoĉ	W	DD
`	\\
0idpo  84uXXE{ttE<W|,,XZZZZZZ$  \ ]L]].shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.gnu_debuglink.dynbss.gnu.liblist.gnu.conflict.gnu.prelink_undo44HH !ohh,+o44(\\;o00	Hoĉ	W	DD
`	\\
0idpo  84uXXE{ttE<W|,,XZZZZZZ$  \ ]]D3  ^0aHaDf

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0058 ]--