!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/bin/   drwxr-xr-x
Free 52.29 GB of 127.8 GB (40.91%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     foomatic-ppd-options (3.91 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
#!/usr/bin/perl -w use strict; # This is foomatic-ppd-options, a program which will print out the # options specified by a PPD file. # # foomatic-ppd-options [file*] # reads one or more PPD files from the specified file or # standard input. If present, PPD information is separated by # lines starting with Printer: . This makes it compatible with # the LPRng 'lpc ppd' command: # lpc ppd | foomatic-ppd-options use Foomatic::Defaults; use Foomatic::DB; use Data::Dumper; use FileHandle; $0 =~ m!/([^/]+)\s*$!; my $progname = ($1 || $0); sub help { print STDERR < \$opt_d, # Help! "h" => \$opt_h, # Help! "help"=> \$opt_h) || help(); help() if $opt_h; $debug = $opt_d if $opt_d; sub getppdinfo( $ $ ); if( @ARGV ){ while( @ARGV ){ my $file = shift @ARGV; print STDERR "file $file\n" if $debug; my $fd = new FileHandle "<$file"; if( not $fd ){ die( "$progname: cannot open '$file' - $!\n" ); next; } getppdinfo($fd, $file); close($fd); } } else { getppdinfo( \*STDIN, "STDIN" ); } exit 0; my $key; sub order_by_key{$a->{$key} cmp $b->{$key}}; sub getppdinfo( $ $ ){ my( $fd, $name ) = @_; my @ppd = <$fd>; close( $fd ); print "PPD $name= " . Dumper(\@ppd) if $debug > 1; my ($printer); $printer = shift @ppd if $ppd[0] =~ /^Printer:/; print "$printer\n" if $printer; my $ppd = ppdfromvartoperl( \@ppd ); if( not defined $ppd ){ die "$progname: bad ppdfile $name\n"; } print STDERR "PPD DB " . Dumper( $ppd ) if $debug; my $makemodel = ($ppd->{'makemodel'} or ""); print "makemodel = $makemodel\n"; my $args = $ppd->{'args'}; print STDERR "PPD ARGS " . Dumper( $args ) if $debug; for my $argname ( @{$args} ) { my $name = $argname->{'name'}; my $language = "postscript"; if( $name =~ /^JCL(.*)$/ ){ $argname->{'name'} = $1; $language = "pjl"; } $argname->{'language'} = $language; } $key = 'name'; for my $argname ( sort order_by_key @{$args} ) { my $name = $argname->{'name'}; my $comment = ($argname->{'comment'} or ""); my $type = ($argname->{'type'} or ""); my $vals = ($argname->{'vals'} or []); my $default = ($argname->{'default'} or ""); my $language = ($argname->{'language'} or "postscript"); print STDERR "PPD ARG " . $name . "\n" if $debug; print STDERR "PPD VALUES " . Dumper( $vals ) . "\n" if $debug; my $values = "name=$name"; $values .= "($comment)" if( $comment ); $values .= ";"; $values .= " language=$language;"; $values .= " type=$type;" if( $type ); $values .= " default=$default;" if( $default ); $values .= " options="; if( not @{$vals} ){ if( $type eq "bool" ){ $values .= "True (True), False (False)"; } } else { $key = 'value'; for my $v ( sort order_by_key @{$vals} ){ my $value = $v->{'value'}; my $comment = ($v->{'comment'} or ""); my $driverval = ($v->{'driverval'} or ""); $driverval =~ s/[\s\n]+/ /gm; $driverval =~ s/^ //gm; $driverval =~ s/ $//gm; $driverval =~ s/[\W]/\\$&/gm; $driverval =~ s/\\ / /gm; $comment =~ s/[\W]/\\$&/g; $comment =~ s/\\ / /gm; $values .= "$value"; $values .= " ($comment)" if( $comment ); $values .= " [$driverval]" if( $driverval ); $values .= ", "; } $values =~ s/, $/;/; } print $values . "\n"; } }

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.005 ]--