!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/bin/   drwxr-xr-x
Free 52.29 GB of 127.8 GB (40.92%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     lastcomm (17.32 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF`4p@4 (444444555aa5HHH Ptd@0@@,,Qtd/lib/ld-linux.so.2GNU $e=$%()K8gUa2Ic D0 CB2Q<9Zk G<y$'a-)"jN_wsC.2KBJ%=̪SM:Mq5.^^^^^_̪4_8_<_L_h_______̿п0Կؿܿٳii pii zii ii ti ii |(&'$)      !"#Uyk"5%%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp%hx%h%h%h%h%h%h%h%hp%h`%hP%h@%h0%h %h%h%h% h%h%h1^PTRhhQVh'US[;tX[ÐUS=u?-X9v&9w[]Ít&'Utt $ÐU(]u}t\}|$$$ËE$D$I<$t0uf(UD$$T$tK]u}]Í&5N @ 2빍t&E D$D$$uUD$T$$q tU D$$T$lItUD$$T$D!tevUD$$T$U $T$5ED$$D$<$~1& tU D$$T$tΡtUD$$T$|t;KUWVS\& G8$fEG$W E̡G$EĉD$ẺD$Eȉ$;tG $ ]G$]u01\>$t%ӋDP@uD>$?uٍ&ED$ D$D$_D$$$SD$o~$FD$Q@$CD$3$DD$$XD$GEE$f1EE؉D$RPE],$}ЉD$ ED$0$D$\$D9\[^_]fD$YD$$ԪD$ <$D$t&$ D$37$ D$$ D$$ D$}$ D$?U<D$T$D$g&L$qUWVSQ(Y1}$p$< EE|$D$ @D$g\$4$ttt&5t&&t0됃 ~>Vffu~$aE\t&HuB D$D$ $ f&{$G<D$ lD$4$D$R$D$D$$#D$D$$UF;5g t;D$D$$rD$ D$$ t;D$D$$D$ D$ $ t;D$D$$D$ FD$$h t;D$D$$D$ D$$$ E܅$`$A$[$9֣zD$D$$(9F$Ȭm_$\ -U$ FD$ȬD$T$D$,D$x$D$AD$$Ð&UD$ȬD$$VÍUD$VD$$&ÍUED$dD$D$<D$ $$U8uueE1]] }:u :FtH۸t8D$4$tFUe3]u}]Í&u=Nj=뿐t&4$ <)č\$#t$D$ D$D$$}$Er$l/:fUSE$t؃[]$؃[]ÐUWVSL eE1>$ (ۅ@$Cع󫍝jDž@DžDDžHDžL$u't&$D$zu名t&Ee38e[^_]á$<$`_$|$d$b`D$D$$; dD$T$$${$<$D)ċ\$'|$D$D$ D$D$$'D$\$$}%= _$|$D$D$D$ $D$$D$$ĮD$ JWR1ۍdډ G$ Љ`\$D$ D$D$d$!`D$D$$D$t$$F9_s&t&'UUt3thED$D$$t $-ËED$ +D$D$ĉT$D$$ L $! !ZUE P,@t%D$ ET$D$9D$$ø3ԐUWVSLUB Btm]C(s؉uԋK[HXUB$EԋMA,L[^_]$|UB$xMA@MylEX(i@$PE؉U|MI$ML$M܉T$ U؉L$$? ]K Ɖ׉9| YΉ]ED$EȋMȉŰ]މEʋMŰUȉT$A$ #UBt$D$ B$D$B$vo7MD$]A$D$C$+s {s{]C([uU^v]uuB$N +MMAEU]uYqAuFD$ F D$F$D$F$$(MA QAQ9&D]C$uD$\D$D$E؉T$U܉D$ T$$Rt&t$ |$D$@D$$#$|*tWD$$M]COs(uuF,FQD$D$$1US]$E Aut&‹BuJ[]É []ÍU$0]] uu} E}1EX މp$$kUBEB(]Ћu}]UVS1҅t)u1[^] UE]ÍUE]@ Ðt&UM]u}Qt!BABt]Ћu}]ÃY99ljEsދC 40u%ƋEEE)9tFtƒzBA UE @UPE]>&'US]ChSt9CBStCBC t$$][]CKP C뼍&'US$E]\$$Gt9BD$D$D$D$ $$nuȃ$[]fU]]uu}} $0F u]]} }E]vUSӃt#tL9t $؃[]Í&u$É[]Ã8tu)Ӄ[]$g몐t&Uuu]1ۉ}V u؋u]}]ËNUE XE‹E V t[tE;Cu39} u멍&'UWVS] [--strict-match] [--print-controls] [--user ] [--tty ] [--command ] [--debug] [--version] [--help] %s: GNU Accounting Utilities (release %s) %-*.*s f:hV6.3.2all_list -------- tty_list -------- user_list --------- command_list ------------ /var/account/pacctdebugversionhelpfilestrict-matchprint-controlsuserttycommandThe system's default process accounting files are: raw process accounting data: %s summary by command name: %s summary by username: %s The system's default process accounting file is %s. The system's default login accounting file is %s. /var/account/savacct/var/account/usracct/var/log/wtmp%s: %s file_open: FILE_NAME is NULL-wbrbcouldn't open file '%s'virtual memory exhausteddevice devnum ----------------- /dev/ptsLinuxpts/%d%s/%s%-8.8d %s __/dev/dev/pty/dev/ptym[%d,%d]NULL?%s:%ldGot %lld records from file Did seek in file %lld --> %lld get_entry: couldn't read from file%s (%d) hashtab.c (get_key_len): hashing a num with len == 0hashtab.c (get_key_len): hashing a num with len == numeric333333?%-*.*s|%6.1f|%5d|%5d|;($@``0`P `$`Hd`P4`Lpd@P@8Xp0 <| @ZAB Q8AB FXp)AB (pD  F AB DhAB $AB 0$AB `?AB  AB FQF 4AB D<EAB I\0AG t?AB @_AB FJAB D `AB MFFP1AB AC  AB $ AB <AB O\P"AB tbAB D^AB D P=AB FFFkAB A rAB FFEQAB F05AB H /AB `PAB xpFAB DAB AB (AB 00AB EzR| AB E  oh@  0oHoooDo(olo.ɲxP`U SPPTٳ`pk 8`0M XAF<dв0޲CP=˲@<۬ `e dd__gmon_start__libc.so.6_IO_stdin_usedstrcpy__printf_chkexit_IO_putcstrncmpoptindperrorgetpwuidclosedir__stack_chk_failstdinstrlenmemsetfseek__fprintf_chkctimestdoutfputsmemcpyfclosemallocftello64opendir__xstat64__ctype_b_locoptargstderrgetopt_longfwritefreadreaddir64__sprintf_chkunamefopen64strcmp__libc_start_mainsysconffreeGLIBC_2.4GLIBC_2.3GLIBC_2.1GLIBC_2.2GLIBC_2.3.4GLIBC_2.0/lib/ld-linux.so.2lastcomm.debug@3ELF`484 (444444555@5HHH Ptd@0@@,,Qtd 44HH !ohh<+ 3DD;oTHoHHpW 0`  id@o`` H u*{Ȫ*x@@0,ll145555||66  7 7`77.shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.gnu_debuglink.dynbss.gnu.liblist.gnu.conflict.gnu.prelink_undo 44HH !ohh<+ oDD(ll ;oTHoHHpW 0`  id@o`` H u*{Ȫ*x@@0,ll145555||66  7 77L3@@8::D\?

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0059 ]--