!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/sbin/   drwxr-xr-x
Free 52.59 GB of 127.8 GB (41.15%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     rpc.statd (46.52 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF!44 (444444((&HHH PtdQtd/lib/ld-linux.so.2GNU |0@#eL( `X( n@| }vv DN֔ tBk|qXtK>|Mz{(0U;jv B(,rpnCEĎ|lٟ+E;r7* qJ4O6O9~mx()Cg!{;TB0F1>u9 "=T'jQ<=kFT:  F51 g2bZwev rq=>X2LA2]# vW0Yhe[dG @=A>g:kF:\:p }v":=iwp +BxUEjk_#jF c2$N"EpA+=HNZ2A9:=&6gFB3rT2Z":FWPo%{0j{  WP+ ? j_ =  w $ h2 pU<p. 1P9M RдaDh_ 1 4D f@i 9 S!PkW E# `h: i_ libwrap.so.0__gmon_start___Jv_RegisterClassessock_hostname_finisock_hostaddrdeny_severityallow_severityrequest_inithosts_accesslibnsl.so.1libc.so.6_IO_stdin_usedsetuidsocketstrcpy__printf_chkexeclstrrchrsvcerr_systemerrpipe__strdupperrorftruncate64closedirinet_ntoasvc_sendreplystrncpysignalforkpmap_unsetinet_netofunlinkxdrmem_createlistenselectmkdirfsyncxdr_replymsggetpidcreat64svcudp_createxdr_voidstrlenxdr_enumsigemptysetopenlogmemset__errno_locationbindchdirread__syslog_chkgetsockoptsvctcp_createsetgroupsherrordup2svcerr_noproc__fprintf_chkfchowngethostbyaddrxdr_u_longxdr_stringmemcpyfclose__strtol_internal__vsnprintf_chksetsockoptmallocxdr_intstrcasecmpopendir__xstat64recvfromoptargstderrioctlalarmgetservbyname_rsetrlimit64gethostbyname__snprintf_chkxdr_pmapxdr_opaquegetopt_longgetifaddrsfilenogethostname__rpc_thread_svc_fdsetsvcerr_decodefwritesigactionrenamegetrpcbynumber_rwaitpidlocaltimelseek64strchrgetsocknamesendtoreaddir64xdr_callmsgsvcerr_auth__cxa_finalizesetsidfcntlgetrlimit64__sprintf_chkbindresvportgetdtablesizesvc_getreqsetsvc_registerfopen64setgid__strcat_chkstrcmpstrerror__libc_start_maindirfdsysconffree__cxa_atexit__stack_chk_fail_edata__bss_start_endhaccess_tblsm_unmon_all_1_svcxdr_stat_chgertnlsm_unmon_1_svcxdr_my_idSM_BAK_DIRxdr_statussm_stat_1_svcversion_pSM_STAT_PATHxdr_sm_namexdr_mon_idre_notify_rpcsvcdirtyxdr_sm_statha_callout_progxdr_monname_psm_mon_1_svcrun_modeSM_DIRxdr_sm_stat_ressm_simu_crash_1_svcsm_notify_1_svcSM_stat_chgeGLIBC_2.4GLIBC_2.3GLIBC_2.2.3GLIBC_2.2GLIBC_2.3.4GLIBC_2.1.2GLIBC_2.1.3GLIBC_2.1GLIBC_2.0    ii bii lsi vii ti ri si ii ii  $(,048<@HLPTX\hltxг 0@P DF`Xdapm|w{   ı ȱ ̱бԱرܱ  !"#$ %$&(',(0)4*8+<,@-D.H/L0P1T2X3\4`5d6h7l8p9t:x;|<=>?@ABCDEGHIJKLMNIJOȲP̲QвRԲSزTܲUVWYZ[\]^_`b cdefg h$i(j,k0l4n8o<p@qDrHsLtPuTvXw\x`ydzU83s hhhhh h($h0(h8p,h@`0hHP4hP@8hX0<h` @hhDhpHhxLhPhThXh\h`hdhhhplh`phPth@xh0|h hhhhhhhh h(h0h8ph@`hHPhP@hX0h` hhhphxhhhhhhhhph`hPh@h0h hhh hhhhh  h($h0(h8p,h@`0hHP4hP@8hX0<h` @hhDhpHhxLhPhThXh\h`hdhhhplh`phPth@xh0|h hhhhhhhh h(h0h8ph@`hHPhP@hX0h` hhhphxhhhh1^PTR"ÌdPtPQV$ÐUS[XtX[ÐUVS28uWt$,|)p49v4|49wƃ8[^]ÍUS.ótt $҃[]Ë$ÐUWVSq}ujtu4G9F,t$F,4$@@D$$V0D$$D$xu<[^_]ËGD$ $D$D$!tuGD$ $D$D$<[^_]ÐUMU tB0@4B4P4]Í'UW1VMu ҉Uut&׋R0҉UtB<;F<~;t*E$t$E9t^_]ÉG0x4^_]Ét$ $b^_]Ít&'UM Q0A4tB4tP0A4A0]ÍEA4A0]Ít&'UWV1S Ey}t0FD$E $Juv0tuߋލ& [^_]ÍUE]uu tt t$$Ft$Nt$@4$8]u]Í&'UVutD$4$tu^]Ð&UVSÂ$DD$DD$Ɖ$EfF*F,E$`FE $R[^]Í&UWVuF,D$D$F$mVNPV xP VPV$P$VPQWQWQ W ^_]U]Ít&'UX]ÛeE1ED$E }uuD$ D$D$D$<$KEu,vEe3]u}]Ív4$4$@|$,T$(T$$T$ PT$PT$PlT$P T$@D$D$ D$$W&|$ D$D$4$-xe&U8];eE1E D$EuD$ D$D$D$4$Et$D$$#$&US.óu D$D$ $@$D$D$[]UWVSU$`[^_]*$t$$D$ D$"뚍D$$ AD$|$$@@D$$$$$v$US3x$$I$D$D$x$$D$ $D$D$$SD$D$L$5t$D$$$D$$BV@UWVS!dut$$D$E%=@t!D$$JcD$`D$4$ t$$D$XE%=@t!D$$$E$E$vE6EU$/x.tx<$FUƍD$EUED2$3|$ƋD$ED$D$D$ U$|$D$ED$D$4$D$ t$U$tAE$4$U$^/E$ktFČ[^_]6$D$ D$D$$$qD$ $D$D$Č[^_]$1D$D$$ $D$D$$kWf$D$D$$k$D$D$$i$UD$D$$7Ifw`U]ǁÍUWVSQ`h}`ǃtp<<$98|u9`D$$D$/uiAD$`D$ D$$D$t`$9(:Ĭ[^_]D$D$`$|S@<+EEEED$Dǃ WoNevBq9$Y$D$QD$ D$$D$lD$$=`$b@$D$6D$j" $ÐUWVSr$s](eE1J@ 24$axt5D$t$$f@*G*xv@B$t&$mt$$D$ D$fx*uB@$$7$D$D$M1Me3 [^_]ËEEEEfEA(fEA@W$UZ}p0@Dž4,Dž8EADž<EDž`Dždf}\<}8fEoDžhDžlDžpEUEE,0\uDžtDžxDž|EEEPD$ D$|$4$&\D$4$4E@t4$ЋB8G$$$D$D$&fh*rt$D$$D$D$$1d<84hlp$04$D$,E4$PP(D$D$ L$<$LLED$T$H~H9LtE@t4$ЋH9LYA8zJD$$$E!EEĉ$Eą@pU$@@O@AtދA$D$D$@ tf?u@$PG#BU EqD$D$$/F@DDD$$"D $\$2GD$,D$$R @IE8<4,}ȋEȋB,E̋AEЋBEԋBE؋B 0E $lfo*G3;D$$RuXD$$7ZfUWVSLVueE1tȉʃu1}e3=9Ĝ[^_]ÍUEč| $T$ED$D$ D$t$7Up$D$ t$D$|1׹ 󫋃ET$Ep$'uu7uu08tO|9G8uM;G8D0fu+E1$迿t$ $D$`D$E@t p$Ѕf(u_EȅG@twG$$St$ $D$D$e|$$`G@uLrD$D$$u뮍81D$$%tD$ G$D$D$^G$;EtW$u耾D$4$D$Huu }}D$t$<$蜶u1]u}]ÍFD$<$tލFD$<$׳tˍF D$<$ij봍v'U])îGuu }}D$t$<$ 1҅tFD$<$'1҅‹]Ћu}]ÐU]ɸNGuu }}D$t$<$謵u1]u}]ÍFD$<$tލFD$D$<$?뿐t&U]IFuu }}t$<$1҅tFD$D$<$1҅‹]Ћu}]ÐUSE mFD$E$蜳[]Í&'U]詷.Fuu }}t$<$1҅tFD$<$1҅‹]Ћu}]ÐU|$׉4$t )ы4$ȋ|$]fUt6@t1t9*t(?t&t[t/t\tՍ]1Ã8u]Í'UWVS貶7E(ME D$$ D$$BD$$D$$*g$}$D$kD$'U] Î6u}dD$E$uStgtiE~P肢11ɉljȉʃ<9M~u$xx]u}]Ät$;v느U5E]Í&U5E]Í&UU p5Et ]ǁÍ!]Í6G51U勑tE]Ðt&UWVS,}胦5U eE1fuED$T$D$ D$D$4$蠠! t€҃)~A tMZ|t$ D$D$$(u^ fEe3*,[^_]Ðt&҃)KWtiD$ D$t$D$$НtyfƄBt$ D$D$$Cpt$ D$D$$$-t$ D$D$$۠UWVSá2 }u:&t*|$${uE D$F$ [^_]Í|$D$$ [^_]Ít&'UWVS艣2} t=DD$$ǃD$E$A[^_]Ëсt tOɃ ʉ!Ɖt)EttE|$$D$B؍D$$*ǃjt&'UVS蝢"1uD$D$4$肝t$D$$қƃFt$$ 0t$$ [^]ÐUWVS Ï0leE1oDžT$$D$ ED$D$EEEEfED$ D$4$舚:T$T$ T$D$T$$蠙Pt^tX֋D$$T$T$ T$T$Eu uFuu]tS@D$<$fEED$襜xbUe38l[^_]Íut$<$tfED$t$<$Cyw$q<$褜fDžD$D$ D$D$<$L$2t&D$<$ xhD$D$<$Ifs.$莙 'UU EU]t&UU EU]tUWVS|-,}$苙tx$}E4$tOED$BD$ D$ $*‹E8t99Ut$t&4$賙u4$Ś,[^_]$qp94$诚9},[^_]ÐUVS`eE1E 蓝,D$D$ D$ED$4$D$4$E䋃EqUe3u `[^]&'UWV1S Ï+ }<$ߘ~1ҍ&:ƒ9u [^_]ÍUWVS輜A+EUM$יEU1B$,$b~1:ƒ9uEm )‹h i)эȋEMAMAMA tEMBAJ[^_]J Q[^_] UWVS̛Q*ED$$-D$輔4D$>D$$蔔U܅t|Dž0U B$$%1Ʌ~1:ƒ9uMm)‹h i)ы<ȅt!U B9G u;G ?fuƅ/E $L/t>G[^_];Dž0 E U[^_]Ë0ƅ/qG[^_]ËU T$E$h\U (B$謒lT$D$4$D$ ND$脖/t?1GDž|BE1;0E 1ɋU1UWVSl'l EeU1҉~`Dž9tuϸ1Ue3gl [^_]D$D$$D$Dž D$$虓ǃ9nEЉ f 9Vf~uEЋFEԋFE؋F E܋FEFEFEFT$D$E싅$GEtD$T$$ђO9Džt$vtot-T$D$$$M䋓 $_$葓]D$D$$%:$͍$=$$뗍$̐U]Ít&'UWVSÁ$otEt)E}Ut+1ƍED$E D$E$9}u߃[^_]ÐU1S茕$ tD$ED$$ɍ []ÐUSN#茒UVS-ò#xp@t Ћu[^]ÐUS[|#4Y[Received SM_NOTIFY from %s, state: %dSM_NOTIFY from %s while not monitoring any hosts.Version %s Starting%02d/%02d/%04d %02d:%02d:%02d %s[%d]: %s %s/%sunlink (%s): %sUnlinked %sstrdup failedmalloc failedNot unlinking %s--host still monitored.Received SM_UNMON request from %s for %s while not monitoring any hosts.Received erroneous SM_UNMON request from %s for %sSM_MON request for hostname containing '/': %sPOSSIBLE SPOOF/ATTACK ATTEMPT!Duplicate SM_MON request for %s from procedure on %sSTAT_FAIL to %s for SM_MON of %sReceived SM_UNMON_ALL request from %s while not monitoring any hostsUNMONITORING (SM_UNMON_ALL) %s for %sSM_UNMON_ALL request from %s with no SM_MON requests from it.UNMONITORING %s for %sdel-clientexeclha callout returned %d gethostbyname error for %screat(%s) failed: %sadd-clientopendirlocalhostunlink(%s): %sclosedirWe're on our own notify list?!?*** SIMULATING CRASH! ***STAT_FAIL for %sSTAT_SUCC for %susage: %s [options] statd1.0.9%s version %s %s: bad port number: %s %s: xstrdup(%s) failed! %s: xmalloc() failed! %ssm%ssm.bak%sstate%s/sm%s/sm.bak%s/stateh?vVFNH:dn:p:o:P:statd: unable to create pipestatd: Could not forkstatd: Could not chdirstatd: dup/dev/nullNo-Daemon Log-STDERR Notify-Only Opening %s failed: %s Flushing pid file failed. Fail to drop privileges/var/lib/nfs/statd//var/lib/nfs/statd/sm/var/lib/nfs/statd/sm.bak/var/lib/nfs/statd/stateforegroundno-sysloghelpversionoutgoing-portstate-directory-pathnotify-modeha-callout/var/run/rpc.statd.pid -h, -?, --help Print this help screen. -F, --foreground Foreground (no-daemon mode) -d, --no-syslog Verbose logging to stderr. Foreground mode only. -p, --port Port to listen on -o, --outgoing-port Port for outgoing connections -V, -v, --version Display version information and exit. -n, --name Specify a local hostname. -P State directory path. -N Run in notify only mode. -H Specify a high-availability callout program. Caught signal %d, re-notifying (state %d).Caught signal %d, un-registering and exiting.Listening and outgoing ports cannot be the same! %s: getrlimit (RLIMIT_NOFILE) failed: %s %s: setrlimit (RLIMIT_NOFILE) failed: %s statd running as root. chown %s to choose different user $$$$$$5$$$$$$$;$$$$$>$$$$$$$$$$$$$/$$$$$$$$t$$$$$>open (%s): %sread (%s): %sclose (%s): %screat (%s): %sNew state: %ulseek (%s): %swrite (%s): %sfsync (%s): %sgethostname: %sstat (%s): %smkdir (%s): %sopendir (%s): %srename (%s to %s): %sclosedir (%s): %sError in status file format...correcting.Notifying...(new state %d)my_svc_run() - select: %sWaiting for reply... (timeo %d)Waiting for client connections.Trying to resolve %s.gethostbyname%s is not an AF_INET addressaddress of %s is %sCannot notify %s, giving up. ifa_name %s NL_MY_NAME %s xmit_mesg: sendto failed: %mxmit_mesg: short write: %m Notification of %s succeeded.Can't create socket: %mCan't notify %s, giving up.notify_host: unknown notify type %dxmit_mesg: can't encode RPC message! notify_host: failed to notify %s recv_rply: can't decode RPC message! recv_rply: [%s] RPC status %d address mismatch: expected %s, got %s recv_rply: [%s] can't decode reply body! recv_rply: [%s] service %d not registeredCallback to %s (for %d) succeeded.statd: failed to bind to outgoing port, %d falling back on randomly chosen port process_hosts: can't bind to reserved port Can't callback %s (%d,%d), giving up.unable to free argumentsյ?Fake hostname %s for %s - forward lookup doesn't match reverseFake hostname %s for %s - forward lookup doesn't existUNIX %d/%d/%d %02d:%02d:%02d %s %d.%dCould not bind name to socket: %s unable to register (%s, %d, udp).unable to register (%s, %d, tcp).+%d,%dCRED %d%s [%s] %s Could not make a socket: %s setsockopt failed: %s getsockopt failed: %s%s: cannot make a UDP socket cannot create udp service.%s: cannot make a TCP socket cannot create tcp service.%s: %s Invalid debug facility: %s turned on loggingturned on logging level %dturned off logginggeneralcallauthparseudptcpsvc_socket: bind problemsvc_socket: socket creation problemsvc_socket: socket reuse problemsvc_socket: can't get socket flagssvc_socket: can't set socket flags/proc/self/fd/etc/hosts.allow/etc/hosts.denyconnect from %s denied: %srequest from unauthorized hostsocketSIOCGIFCONFSIOCGIFFLAGSSIOCGIFADDRportmap: out of memorycannot find any active local network interfaces;Ot$tԃ8DXttDTD0$Ptpĉė,LlTԛԫ4Tp$ļ4D8T\t,THlD$ $< T\ x D d  $ 4D dd 4 T t T 8 X dx d 8 X x zR| ~AB C<#AB XuAB AFx$EAB  XZAB BFbAB IN(AB DiAB BH`AB E4AB  P|XAB IiItAB Ii(pAB A|cAB F̄NAB FQNAB L,AB I0,AB IPDAB CpAB CMAB AAB FFAB B WAB AdZAB A $sAB FFNH:AB A,d( D  F AB CLAB CAB C(LB ,KAB C\.AB I0lAB C PaAB FYFt8 AB C (~AB FT AB FT AB FT \AB FT $ȻAB FT H4AB FT l;AB I`F:AB D2AB D _AB FNF @AB FNF _AB FNF 4{AB FNF XD_AB FNF|2AB D WAB FNF.AD GLSAE 4AG H AB BF <AB FQF `AB ITx#AB CwAB F'AB F AB FQAM $AM @:AB \+NB xoAB I4AB CAB FtAB B GAB BC AG 8 AG T AB Ct AB H HJAB BC tAB C DXAB C YAB CD  ohl l  opoo0o2 4hдP+@i0j9`hi <hjp.PkP9#=&6FVfv&6FVfv&6FVfv&6FVfv&6FVfv  & 6 F V f v !!&!6!F!V!f!v!!!!!!!!ϓFdhv opWnP-N9H@rpc.statd.debug8).shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.data.rel.ro.dynamic.got.got.plt.data.bss.gnu_debuglink 44HH !ohh+ ll 3l l ;o00@HoppW `  idPo!!lu{ l 8 ! ̴

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0049 ]--