!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/sbin/   drwxr-xr-x
Free 40.47 GB of 127.8 GB (31.66%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     runuser (27.04 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF4Lg4 (444444WWW 	 	XHHH  Ptd0Q00LLQtd/lib/ld-linux.so.2GNU	RH$!IHL RUY|CEKF-qX>KA`yc*lgMIDr6;T~  dnx-Z<jC1W,
IaGa<6dkeRv"'4-z"9}3_'KDHCS*2!hjlP`?M2@1oey==[-)R%Cx(ghel_YX/(
dM[2MhP1=MtM8	M:'Mq5.:M7^^^^^_8_<_____̿п0Կؿܿٳ	
 Ш?	= `/hii

ii
	ii
ti	ii
si	ii
(RV2Z\AG]	

 $(,048 <!@"D#H$L%P&T'X)\*`+d,h-l.p/t0x1|345[6789:<=>?@BCDEHIJKLMNOPQUp+35%%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp%hx%h%h%h%h%h%h%h% hp%$h`%(hP%,h@%0h0%4h %8h%<h%@h%Dh%Hh%Lh%Ph%Th %Xh(%\h0%`h8p%dh@`%hhHP%lhP@%phX0%th` %xhh%|hp%hx%h%h%h%h%h%h%h%hp%h`%hP%h@%h0%h %h%h%h%h%h%h%h%h %h(%h0%h8p%h@`%hHP1^PTRhPh`QVhUS[TtX[ÐUS=$u?-X 9v&  9w$[]Ít&'Utt	$ÐTU]xÉ'U(]SUu}E$NjE$D$'UT$Ɖ$>=U$T$4$u
]u}]h&UWVSEKWStU0D$D$$Gt$D$D$$'E$t&0D$D$$t$$D$(>D$D$$|$$>D$D$$|$$`>D$D$$`|$$46D$D$$4t$$aD$D$$
xT$$D$0vUVSþQE$t$tƍ$uVu1[^]lUWVSQ]Q<u҃|D$DUD$H&D$t$t$tD$$ǐp4$D$t$$xextD$$9tD$$tD$$u`xs$D$	<$;D$D$D$!$$etD$$<[^_]ËD$	D$D$$hǃxD$%D$D$$dD$<$t&$^Džh4$Lx
xMt
X<1D$$D$pƋE<u2D$$D$4$E말t&D$D$D$D$^9D$4$t;D$D$D$$ǃx]D$4$uD$4$uD$4$m	D$D$D$$iǃxD$D$D$$`$tD$$D$D$D$d$$#E4$D$@bUB$MUB$tD$$}UB$5-$W$$-ƍ@|$$0|tfBt#DEL$$D$UL$$$~T$D$D$4$Z$D$D$D$$tD$$tD$$NtD$$$<D$L$$xD$t$$xMkD$$T$D$$L$UBD$$$E$8#.D$D$$`D$$D$D$D$$!D$$D$tMqD$D$$t$D$$D$ltD$$AtD$$D$D$$mD$$D$t&L$qUWVS
HQxI|wD$$.D$4$4$$ ƃ|ƃ}ƃ~DžDžDžDžDžD$L$D$T$$dft~LCv=}t&=~t&$v[vmt;Igl&uƃ}Bfƃ|4t&ƃ~$t&ptsuvGcdDž92<$tt8tFt
8tFu:D$D$$|$D$$D$UUԋFE؋FE܋FEFEFEFE$EԋE؉$E؋E$EEt8u$sESE}UԍutD$8D$T$$3$ht.t(D$D$t$D$tIuD$D$t$T"9D$D$$i:u3:Au'9ƃ}Bω{$GXD$sD$xD$D$D$$)$$5GDž[D$t$
D$D$$D$$D$'E܅M$_}V~D$D$EԉD$)Љ!‰$6xY[^_]aËS~7U쉕EeD$ED$D$D$$nU荃.M܅Uԍ3Uԍ8$ƍ$#$C4$1$+tt#U荃.Uԍ3Uԍ8u܍@u$]u+v8#tt$$*uGD$D$$^D$D$$D$$uD$D$$t$D$$D$K@6D$D$$t$D$$D$G@6D$D$$rt$D$$D$$$Ë$US=D$$D$D$D$D$$
UU
Єu,
t"/fu
/ttЃ
u]À8/u]BÍ&UVSBN=u4$
v%|/Nu@
</u
Bu[^]ÐU<E]Í&U(]<u} $‰fE$	u{tj	EtxD$D$$}Ƌta$Q
t$D$D$E$D$]u}]ÄEtyuEwЋD$Et$$D$멐UE;t]Í&]ÍUU};tE]Ít&E]ÍvUE$MGS;|$}t$t6ʃҍr11z$t$|$]Ív&U]:uu}FNj$$EtHFBFBFBFBFBFBFBF B E]Ћu}]Í밐t&UWV4Eč}1EĉU؉PU܉PUPUPUPUPUPUP Eă4^_]Í&U]9uƉ}D$D$$9t
]u}]Ãu捶UWVSÝ9EEUMeU1҉E}EwMfEEEEE}VM9M}!MMMM	~Mw}W}EEE܍UEEEUE}ЋM}D$EUM)D$L$$rtz}uHt&v>UB[<!w&9u֍E؉$U$u E>MQ}{MЋuMt*t&E9Es
M}EENM}td}u^}9}s
EM\M9MvE}0M9MvE}0EE0Ef9tUaU}&M}UEL$MD$<$=EUe3E/Ĝ[^_]Ã}t}fuuU9Uvj}E|?u]tN߀wPQ8tBM9Ms
}E?E9EvM\E9Ev}?EEU}EM}WMUtthE9Es
M}9\EUMuu%}}}t&EU<EE9EEEEEE9Es
UM}9EOUMPQEE׀}a}qEMMUU}U9ɉ}9}s
EU\EUUƍEt!t&M9MvUEM1u<$s}EEUEEEE7EE}EE}E}EE}g}M}}:\}M}Q}EWtѸbԸat&ȋ}}WE9Es
UM
\E9Ev}0E9EvU0MEE0QrQfQvfEn1}}vE9Es
UM
'E9Ev}\E9EvU'Er}<$xEE'EUEE;E"EUEEEt,}t"EEM9MvEWu}9}3EU$EP}WEM9}Qv}?tEЉ4&AtŃE9uw뺋}
vU(}}]xÄ1ut?UMƋ|$ED$E$EU]u}]Ív빐&UWVS1,EUMvEEEEU;Drlփ.L9HD$H$DD$)ȉHT$$2DEUEH0xT$E܋Ut$<$D$T$9w[pU䋃H4Ѝ9t<$2HE4$UljBEU܉t$<$D$ET$D$PEU,[^_]$LPHH	UVSÎ/@UuԋEԋE؋E܋EE䋃E苃E싃ET$4$D$EU14$@[^]Ð&US.ED$:$;[]Ðt&UV4Uu؉LMUE4${4^]Ðt&UV4Uu؉UE4$I4^]ÍvUSEMY.$D$ED$[]Í&'USE.UM[]US-E$D$[]Ðt&U(]ú-u}UET$UD$$EET$D$x<$EU|$T$ƋE4$D$ED$EU]u}]ÐUSE
-D$E$t[]ft&'U]E,uu$t$t
]u]ÅtUE}}]Ñ,uut71Ҹ9wCɉ΋EL$$t]u}]Í&u1Ҹ@1҅"fU],uu4$t
]u]Åt&U]+uu4$Ut$T$$c]u]ÐU]Ú+uu4$V4$D$]u]Ðt&U]NZ+uu4$t$D$$]u]U1҉Muu]
+9w*΋EL$$,t]u]Ít&U1҉Muu]ê*9wΉ$t
]u]Åttt&USMUZf*ɋt"=w#D$$[[]Ðt&u@#UWV1S,E	*M}ƒEtЃEBu|$EL$D$D$D$U$D$D$$D$D$D$D$E$D$D$$mUT$$>	w uD$D$$-t$D$D$U$2,[^_]EuD$D$$t$D$D$E$,[^_]ËuD$nuTD$뤋u,D$EuD$xuD$uD$LuD$uD$ |$ED$D$D$U$
US$EED$Eß'D$ED$ED$E$T$[]ÐU]Ít&'UWVSAM'wE)E}Ut+1ƍED$ED$E$9}u߃[^_]ÐU1S&tD$ED$$[]ÐUSß&4UStЋu[]US[T&Y[Try `%s --help' for more information.
Usage: %s [OPTION]... [-] [USER [ARG]...]
Change the effective user id and group id to that of USER.  No PAM hooks
are run, and there will be no password prompt.  This command is useful
when run as the root user.  If run as a non-root user without privilege
to set user ID, the command will fail.

  -, -l, --login               make the shell a login shell
  -g --group=group             specify the primary group
  -G --supp-group=group        specify a supplemental group
  -c, --command=COMMAND       pass a single COMMAND to the shell with -c
  --session-command=COMMAND    pass a single COMMAND to the shell with -c
                               and do not create a new session
  -f, --fast                   pass -f to the shell (for csh or tcsh)
  -m, --preserve-environment   do not reset environment variables
  -p                           same as -m
  -s, --shell=SHELL            run SHELL if /etc/shells allows it
      --help     display this help and exit
      --version  output version information and exit

A mere - implies -l.   If USER not given, assume root.
error copying PAM environment
could not set PAM credentials
warning: cannot change directory to %s%s: signal masking malfunction

Session terminated, killing shell...Can't specify more than %d supplemental groups/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
Report bugs to <%s>.
bug-coreutils@gnu.orgcould not open session
cannot set groupscannot set group idcannot set user id-f-ccan not fork user shell: %srunuser%s: signal malfunction
 ...killed.
/usr/share/localegroup %s does not existDavid MacKenzie, Dan Walsh5.97GNU coreutilsc:flmps:g:G:-rootuser %s does not exist/bin/shrunuser-l/dev/runuser may not be setuidincorrect passwordSHELLusing restricted shell %sTERMDISPLAYXAUTHORITYHOMEUSERLOGNAME/usr/local/bin:/bin:/usr/binPATHsession-commandfastloginpreserve-environmentshellsupp-grouphelpversionmemory exhaustedwrite error%s: %s"`'literalshell-alwaysescapeclocalelj^WP<%s (%s) %s
%s %s
(C)Written by %s.
Written by %s and %s.
Written by %s, %s, and %s.

This is free software.  You may redistribute copies of it under the terms of
the GNU General Public License <http://www.gnu.org/licenses/gpl.html>.
There is NO WARRANTY, to the extent permitted by law.

Written by %s, %s, %s,
and %s.
Written by %s, %s, %s,
%s, and %s.
Written by %s, %s, %s,
%s, %s, and %s.
Written by %s, %s, %s,
%s, %s, %s, and %s.
Written by %s, %s, %s,
%s, %s, %s, %s,
and %s.
Written by %s, %s, %s,
%s, %s, %s, %s,
%s, and %s.
Written by %s, %s, %s,
%s, %s, %s, %s,
%s, %s, and others.
u_Copyright %s %d Free Software Foundation, Inc.;H(pd  `4P0l ( Ll`0L h```@` ``@zR|LB
 8AB
FT\tAB
F|TAB
B4<	AB
C,T
D	FAB
CLD[AB
AIAB
$SAB
BDAM
 `AB
FQ*AB
-AB
 hAB
ISI `AB
FNFYAB
B $TAB
FNEHH
AB
C h8hAB
FFNAB
CAB
Bt+AB
A+AB
D-AB
D 2AB
D<*AB
AX+AB
A tAB
FQx5AB
D@AB
FQ ~AB
IFP9AB
FN8?AB
FN8X;AB
FNXx@AB
FNxYAD
NFLAD
NFMAB
D <aAB
BFBAB
D"cC*f/l5pJsUgPG[~`}J2=
Xohhā
'PHXooőooo0o`Dh(z@hDdpگ?.?g?0`\PUPpY? 01ySPkp}?oٳoϯpk`W?h0X_AF5U<0thв-0c0`ѯp?P`OWگK?PگZ`0I@iү`SДE @<6 h(@libcrypt.so.1__gmon_start___Jv_RegisterClasseslibdl.so.2libpam.so.0pam_startpam_open_sessionpam_endpam_setcredpam_getenvlistpam_close_sessionpam_set_itemlibpam_misc.so.0misc_convlibc.so.6_IO_stdin_usedsetuidstrcpy__printf_chkexecvsetlocalembrtowcoptinddcgettextgetpwuidinitgroupsgetusershellforksigprocmasksigfillsetiswprintreallocabortgetpidkill__ctype_get_mb_cur_maxendpwentgetpwnamcallocstrlensigemptysetmemset__errno_locationchdirendgrentsetgroupsttyname__fprintf_chksigaddsetgetgrnamputenvmemcpyendusershellfclose__memmove_chkmallocmbsinitgetenv__ctype_b_locoptargstderrgetuidgetopt_longfwritesigactiongeteuidwaitpid__fpending__vfprintf_chksetusershellsleepsetsidbindtextdomainsetgidstrcmpstrerror__libc_start_mainfputs_unlockedfree__environ__cxa_atexit__stack_chk_fail_fini_init_edata__bss_startsame_sessionexit_failureversion_etc_copyrightclose_stdoutprogram_nameLIBPAM_MISC_1.0LIBPAM_1.0GLIBC_2.2GLIBC_2.4GLIBC_2.3GLIBC_2.3.4GLIBC_2.1GLIBC_2.1.3GLIBC_2.0/lib/ld-linux.so.2libaudit.so.0runuser.debugiELF4\4 (444444WWW|XHHH  Ptd0Q00LLQtd44HH !ohh\+ā3';őHoW	HH
X`	
Pido.uXXC{C
 00QL||RWWWW XY0Y4Z  [H [ [.shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.data.rel.ro.dynamic.got.got.plt.data.bss.gnu_debuglink.gnu.liblist.gnu.conflict.gnu.prelink_undo44HH !ohh\+āo00;őHoW	HH
X`	
Pido.uXXC{C
 00QL||RWWWW XY0Y4Z   [H 3hh\H``l0f

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.006 ]--