!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/bin/   drwxr-xr-x
Free 52.23 GB of 127.8 GB (40.87%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     paps (36.65 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF4č4 (444444(p(p(p((44<p<<HHHHH  PtdxlxxQtd/lib/ld-linux.so.2GNU	e!5ejpF>#h|(CElVK8qXfUaʡvIH_X/8I+/ZNXBQ ` t5]gTIfJDqQCEjiuVuH&xs~|Jk	2\>	fz,_?.sx? #$C]Rxy`M^I&:\OAhNG82";E{j^H2Zn{
VZ'^GԖ>`WolD`BdK`5h
%
T2MYmqMekM
@M*c	+MhP16M*M%MOMcKMAM'G6M?MʄMSMM[M:MMkMmMq5.MKiMMK:MWf7MW		M45	M.+	M쌌i;	M8 ii
\ii
fii
pti	zii
\`fdlhnlhje	

 !" #$$(%,&0'4(8)<*@+D,H-L.P/T0X1\2`3d4h5l6p7t8x9|:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`qa b$c(dU4?;5%%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp%hx%h%h%h%h%h%h%h%hp%h`%hP%h@%h0%h %h%h%h%h%h%h% h%$h %(h(%,h0%0h8p%4h@`%8hHP%<hP@%@hX0%Dh` %Hhh%Lhp%Phx%Th%Xh%\h%`h%dh%hh%lh%php%th`%xhP%|h@%h0%h %h%h%h%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp%hx%h%h%h%h%h%h%h%hp%h`%hP%h@%h0%h %h%h%h%h%h%h% h%$h %(h(1^PTRhhQVhSUS[èdtNX[ÐUS=tu?4-0Xp9v&p0p9wt[]Ít&'U8tt	$8ÐUWVS<EEEE̋E̋8G$E1=Eԉ\$CE؉CE܉CEC Eĉ$EċE9E}Eȃ;ut$('@$t$G$UT$UԉT$$WECECECECGdEЃ9VC$JŰR҉UٞvU


EZP؋Eĉ$<[^_]Ð&US]t;u-dD$D$$D$1[]D$$Tu[]D$$.uD$$u됡d\$D$D$$i1h&'UVSD$$$D$.$~tD$@4$gt4$4$N[^]ÐU|T$T$D$2$Ít&'U|D$L$ÍvUWVSeE1E|$$f$PPPPPPPP P$@($D$_D$D$.E\$$LD$T$T$T$D$D$4$ÉD$u$D$4$T$ÍD$$O(
P$Oٽ5f|٭۝٭G$ݝWDGP\$GH\$݅\$$\$Q$\$$+D$á|$j$D$4$T$ÍD$$\$$GP\$GH
\$݅\$G0P$O$
\$;+D$á|$$DD$4$T$ÍD$$6G0+G,\$$GP\$GH\$݅\$P$
$$O$\$*D$á|$+$4$kO<W4+W +W@)‹G0R$+G,T$\$D$G(D$D$|$!Ue3u(Ĭ[^_]ËG4+G W@)P$ݝU(]]uEt;u1dD$4D$$D$01]u]ƍED$$Et78t2dD$D$$bD$]1u]Ð>"ut&U(]]uEt;u1dD$/D$$D$p1]u]ƍED$$Et78t2dD$D$$D$]1u]Ð>"ut&L$qUWVSQA<DžDž4DžeE1DžDžDž$Dž$Dž$Dž$DžDž$$D$D$LhDž<DžPLDžXDždDžltDžpDžtDžDžDžDžDžDžDžDžDžDžDžDžDžDžDž4DžDž"DžDž-Dž,HdDžKDž(Dž0XDž4Dž8XDžDDžLxDžPDžTdDžhDžpkDž|DžDžtDž}DžDž@DžDžDžDžDžDžDžDž\$D$$4$U
DžƉt$$qB'x4@D$$E>4BBD$D$B$Ƌt$$D$tD$$ 2$$$t$<$D$$D$<$tDžDž@0ٽ22f0٭0ە٭2B4٭0ە٭2bD٭0۝٭2B<٭0۝٭2B8٭0۝٭2b@٭0۝٭2t$$D$tD$$t$$D$Pt@$D$D$ٽ22f0٭0۝٭2t$$D$t@$D$D$&ٽ22f0٭0۝٭2t$$D$t@$D$D$ٽ22f0٭0۝٭2t$$D$6t@$D$D$jٽ22f0٭0۝٭2D$D$$<$jDžt$$+D$tD$0$Džt$$D$lt&D$D$
D$$(t$$D$(tD$D$$\t$$}D$tD$D$$ $<>t?$<.D$D$uPD$\$l1Dž!$Y!D$$t$$$$$ \$$1tD<苕ݕ(ݕ0Ѓ)X))Dž(Dž Dž$)))$ٝx#DžPDžDHd
`LDžh\ݕ@lݝ\$D$<$D$$$$N95

}P$ݝ($
D$P<$$1D$$($ty$DžD$D$D$D$4$E+ƀ\$<${D$$T$+$+7$-G|
tD$<$D$<$tt4$݅:P$ٽ2Dž2f0٭0۝٭2Dt&u~
tutlt& b 8SÉ$`؃ |	;y$)8ƉX$JɉFvX$FD$D$F$LD$F$`ЃD$F$
D$F$vXD$F$1FFt$$ 1ۉ$D$$>l݅0\$݅(\$$DžDž0DžDž9Åۉt\lD$$Ƌ\	&T$$D$ t$|$T$L$D$D$D$$4$	1@D$01DD$,1HD$(1PD$$)ЉD$ D$D$T$D$D$D$D$$D$D$$D$8D$D$$D$D$$D$CD$D$$U$|ٽ2ۅ܍2
f0٭0۝٭2

Dž1DžDžKP$pD$T$$ݝh`݅h)T$$݅\$݅\$+S($
$$܍\$\$$3ÉD$|$$<ٞۅ=ٽ22f0
܍
٭0۝٭2R҉Z򋅠0F9~B$;PDž`iOP$ۅP+$$$$\$ T$++ )R$\$\$D$X|$Dž&݅0ݝF݅(ݝ`݅(ݝ3+%hDžD$F$dt&D$D$D$FD$$a$#ۅ5ٽ22f0
٭0۝٭2;S$q$$i$1Dž~f11149|T9$`$y9}D$D$D$|$${D$D$F$JpT$D$F$
$$$TD$D$D$d$s\DžƅWۅۅx܍؋FK$~Ë$D$$6D$D$$D$|$D$D$T$$wD$|$$41Ue3Y[^_]aËt,DžDžT$1҉$4DžDžk
Džۅ
+D$D$
D$$ $
D$.D$$	D$D$$<$yD$D$
<$YD$D$
<$9D$D$<$D$D$<$D$D$ <$oD$D$ <$DžO@$ٽ2݀2f0٭0۝٭2ٽ2݀2f0٭0۝٭2lS$R#D$D$D$d$BD$<$$1D$b$|$OiD$5$T<D$8$<Dž$D$$#D$$DžD$$D$$D$$1@D$D$D$d$$Dž3D$4D$T$$:4@D$$wDžDžDžDžDžDž}dD$"D$$D$$DžhDžDžYdD$"D$$D$A$UdD$D$$D$$$\$D$(D$D$\$D$d$$dD$#D$$\D$$@D$gD$zD$T$cU}]

ÍUS$EED$$$kD$$uED$ED$E$,D$ED$E$F\$$6E$$$[]É'UVS0UM]uB}EfEm\$mm\$mAm\$mm\$mCm\$mm\$mD$$1F0[^]Í&'US$UM]B}EfEm\$mm\$mAm\$mD$
m\$m$1C$[]USU]B}EfEm\$mD$m\$m$#1C[]UUB}EfEEm\$mD$%m\$m$1ÍUSÃ$D$$D$D$MbP?D$$C$\$C\$%D$\$WD$$$%$[]Ít&'UWVS}E]uE G]E(]P$]XMD$D$.D$dD$MD$E$]D$D$F$|<;*thhM]hMUf`EfٞwFhME\$D$]$5E^EE^Č[^_]Í&}EδfEm]m΋UȍB=Nv`N=NzEE\$D$|$[؋EE\$E\$D$f$3ЋUD$D$r$kD$U$D$=MATxHstib$vEFEF$EøONMm)k4MM+U)ȉU6AUĈDUuC}EED$9EδfE̋Em]mΉE؉$Em]mVUED$BT$E؉D$ED$H$MG
XD$C$M
\$Uuu{*$O\$D$F$ED$$E$n'ЋM1)‰D$D$w$CGU\$D$VD$$t$\$D$F$MD$$E$UWVSˁE]E]EE]EE D$E؉U]D$$bED$$[ۉ]UċPU@$YEE811]UB@
X8PHMEt_E\$(E\$ RU$
Xm\$Q$
XD$ET$ED$E\$ݝx$݅x9k]UċR҉U)ED$$Ĭ[^_]Ð&UVS@E]E]E]E$]$M,E؉É\$EE\$E\$E$J3$D$@[^]
UWVSlE]E]E]E$]$gNjE,$E~g1E,t$$ÍED$EЉD$$WEىE\$E\$E\$E$;uE
Xm]u<$D$:l[^_]ÍU]]u}x$D$M$|$Ƌ$A]u}]Í&'UT$$\ÍUS]E[E[$D$D$$$[]t&US$,$D$D$D$T$Ԗ=CpS[SC[$؃[]ÐU]Ít&'UWVS^}0E)E}Ut+1ƍED$ED$E$9}u߃[^_]Ë$ÐUS((tЋu[]US[/PY[BD@@?:?legallettera4Unknown page size name: %s.
You must specify page size.
%%%%Page: %d %d
paps_bop
paps_eop
showpage
%cgiven CPI value was invalid.
given LPI value was invalid.
Monospace 12[text file]landscapecolumnsNUMfontDESCrtlDo rtl layout.justifyDo justify the lines.paperPAPERbottom-margintop-marginSet top margin. (Default: 36)right-marginleft-marginheaderencodingENCODINGlpiREALcpitexttopapsCUPS_SERVERstdinrbprettyprintnoofffalsePPDpage-leftpage-rightpage-bottompage-topDuplexNoTumbleDuplexTumbleJCLDuplexEFDuplexKD03DuplexwraptrueonyesCHARSETwindows-932WINDOWS-31Jutf-8utf8Command line error: %s
Failed to open %s!
MonospaceMonospace Bold 12UTF-8%s: Invalid encoding: %s
%s: Error reading file.
Failed to allocate a memory.
PortraitLandscape%%%%For: %s
%cupsRotation: 0
%d setnumcolumns
<span font_desc="%s">%s</span>
<span font_desc="%s">%s</span>
<span font_desc="%s">Page %d</span>%d %f moveto %d %f lineto 0 setlinewidth stroke
You must specify the amount of characters per inch.
You must specify the amount of lines per inch.
Landscape output. (Default: portrait)Number of columns output. (Default: 1)Set the font description. (Default: Monospace 12)Choose paper size. Known paper sizes are legal,
                          letter, a4. (Default: a4)Set bottom margin. (Default: 36)Set right margin. (Default: 36)Set left margin. (Default: 36)Draw page header for each page.Assume the documentation encoding.Set the amount of lines per inch.Set the amount of characters per inch.ERROR: %s job-id user title copies options [file]
ERROR: unable to open print file -
%s: Error while converting strings.
%s: Invalid character in input
Failed to convert UTF-8 to UCS-4.
Failed to convert UCS-4 to UTF-8.
%%!PS-Adobe-3.0
%s%%%%Title: %s
%%%%Creator: paps version 0.6.3 by Dov Grobgeld
%%%%Pages: (atend)
%%%%BoundingBox: 0 0 %d %d
%s%%%%BeginProlog
%%%%Orientation: %s
/papsdict 1 dict def
papsdict begin

/inch {72 mul} bind def
/mm {1 inch 25.4 div mul} bind def

%% override setpagedevice if it is not defined
/setpagedevice where {
    pop %% get rid of its dictionary
    /setpagesize { 
       3 dict begin
         /pageheight exch def 
         /pagewidth exch def
         /orientation 0 def
         %% Exchange pagewidth and pageheight so that pagewidth is bigger
         pagewidth pageheight gt {  
             pagewidth
             /pagewidth pageheight def
             /pageheight exch def
             /orientation %d def
         } if
         2 dict
         dup /PageSize [pagewidth pageheight] put
         dup /Orientation orientation put
         setpagedevice 
       end
    } def
}
{
    /setpagesize { pop pop } def
} ifelse
/duplex {
    statusdict /setduplexmode known 
    { statusdict begin setduplexmode end } {pop} ifelse
} def
/tumble {
    statusdict /settumble known
   { statusdict begin settumble end } {pop} ifelse
} def
%% Turn the page around
/turnpage {
  90 rotate
  0 pageheight neg translate
} def
%% User settings
/pagewidth %d def
/pageheight %d def
pagewidth pageheight setpagesize
/column_width %d def
/bodyheight %d def
/lmarg %d def
/ytop %d def
/do_separation_line %s def
/do_landscape %s def
/do_tumble %s def
/do_duplex %s def
%% Procedures to translate position to first and second column
/lw 20 def %% whatever
/setnumcolumns {
    /numcolumns exch def
    /firstcolumn { /xpos lmarg def /ypos ytop def} def
    /nextcolumn { 
      do_separation_line {
          xpos column_width add gutter_width 2 div add %% x start
           ytop lw add moveto              %% y start
          0 bodyheight lw add neg rlineto 0 setlinewidth stroke
      } if
      /xpos xpos column_width add gutter_width add def 
      /ypos ytop def
    } def
} def

/showline {
    /y exch def
    /s exch def
    xpos y moveto 
    column_width 0 rlineto stroke
    xpos y moveto /Helvetica findfont 20 scalefont setfont s show
} def
/paps_bop {  %% Beginning of page definitions
    papsdict begin
    gsave
    do_landscape {turnpage} if 
    firstcolumn
    end
} def

/paps_eop {  %% End of page cleanups
    grestore    
} def
%f %f moveto %f %f lineto 0 setlinewidth stroke
%%%%Pages: %d
%%%%Trailer
%%%%EOF
?@
ףp=@QO@ @@ @@zD?%d %d %d %d %d %d c
%d %d %d %d x
%d %d l
%d %d m
%08x-%d-%dstart_ol
%.0f fwd_x
end_ol
/%s { %s } def
+%8.0f%8.0f>%4d-%4d*%8.0f%s()paps_exec
end end
%%%%EndPrologue
%%%%BeginProlog
/papsdict 1 dict def
papsdict begin

/conicto {
    /to_y exch def
    /to_x exch def
    /conic_cntrl_y exch def
    /conic_cntrl_x exch def
    currentpoint
    /p0_y exch def
    /p0_x exch def
    /p1_x p0_x conic_cntrl_x p0_x sub 2 3 div mul add def
    /p1_y p0_y conic_cntrl_y p0_y sub 2 3 div mul add def
    /p2_x p1_x to_x p0_x sub 1 3 div mul add def
    /p2_y p1_y to_y p0_y sub 1 3 div mul add def
    p1_x p1_y p2_x p2_y to_x to_y curveto
} bind def
/start_ol { gsave } bind def
/end_ol { closepath fill grestore } bind def
/draw_char { fontdict begin gsave %f dup scale last_x last_y translate %f %f scale load exec end grestore} def
/goto_xy { fontdict begin /last_y exch def /last_x exch def end } def
/goto_x { fontdict begin /last_x exch def end } def
/fwd_x { fontdict begin /last_x exch last_x add def end } def
/c /curveto load def
/x /conicto load def
/l /lineto load def
/m /moveto load def
end
/paps_exec {
  1 dict begin
  /ps exch def
  /len ps length def
  /pos 0 def

  %% Loop over all the characters of the string
  {
    pos len eq {exit} if

    %% Get character at pos
    /ch ps pos 1 getinterval def
    
    %% check for +
    (+) ch eq {
      /pos 1 pos add def
      /xp ps pos 8 getinterval cvi def
      /yp ps pos 8 add 8 getinterval cvi def
      /pos 16 pos add def
      papsdict begin xp yp goto_xy end
    } {
      (*) ch eq {
        /pos 1 pos add def
        /xp ps pos 8 getinterval cvi def
        /pos 8 pos add def
        papsdict begin xp goto_x end
      } { (>) ch eq {
          /pos 1 pos add def
          /xp ps pos 4 getinterval cvi def
          /pos 4 pos add def
          papsdict begin xp 2 mul fwd_x end
        } { (-) ch eq {
            /pos 1 pos add def
            /xp ps pos 4 getinterval cvi def
            /pos 4 pos add def
            papsdict begin xp neg 2 mul fwd_x end
          } {
              %% Must be a 3 char sym. Load and exec
              /name ps pos 3 getinterval def
              papsdict begin name draw_char end
              /pos 3 pos add def
            } ifelse
          } ifelse
        } ifelse
    } ifelse
  } loop
  end
} def
/fontdict 1 dict def
papsdict begin fontdict begin
;On?{Gz?@@z);xXȳ<TlȸHh0P8lxh8<\t|XAB
F8AB
DTПoAB
Et@%AB
pAB
AB
AJAB
FF@AB
FF,D	FAB
AH4AH
LAB
DhAB
E0AB
D`AB
DTAB
puAB
A
AB
IXAB
C4`qAB
ETAB
FtRAB
FIAB
0<AB
DptAB
Dq+6%
ohȁ
0Ē(oToonooDoT
o
<Jɲ S5G5`Pt04]4D4зІ !Pe:4@òS044u40B40B`%50W49`aA pƲC+@8`50= 5{;sвЬ4p05;&55S5k!`4@<@up5m0o!ǵp=N4A4@3`;Pr5@pF40b`e ddlibpangoft2-1.0.so.0pango_layout_get_extentspango_font_description_set_family__gmon_start___Jv_RegisterClassesg_object_unrefg_strduppango_context_set_languagepango_font_map_load_fontsetg_mallocg_type_initpango_layout_set_textpango_layout_newg_list_prependpango_font_metrics_unrefpango_font_description_set_sizeg_ascii_strcasecmppango_ft2_font_map_newlibpango-1.0.so.0g_string_newg_utf8_skipg_strdup_printfg_string_freeg_utf8_get_charg_list_reverseg_string_appendg_string_append_printfpango_font_metrics_get_approximate_char_widthpango_fontset_get_metricspango_layout_get_linepango_context_set_base_dirpango_layout_line_get_extentspango_font_description_from_stringpango_layout_set_alignmentpango_layout_set_widthpango_layout_set_justifypango_layout_set_markuppango_language_from_stringpango_font_description_get_set_fieldspango_font_metrics_get_approximate_digit_widthpango_context_set_font_descriptionpango_layout_set_wrappango_layout_get_line_countlibgobject-2.0.so.0g_type_check_instance_castlibgmodule-2.0.so.0_finilibdl.so.2libglib-2.0.so.0g_option_context_newg_utf8_to_ucs4g_option_context_parseg_strtodg_option_context_add_main_entriesg_option_context_freeg_get_prgnameg_iconvg_iconv_closeg_ucs4_to_utf8g_path_get_basenameg_set_prgnameg_iconv_openlibcups.so.2cupsMarkOptionsppdPageSizeppdOpenFileppdMarkDefaultscupsGetOptioncupsParseOptionsppdIsMarkedlibgssapi_krb5.so.2libkrb5.so.3libk5crypto.so.3libcom_err.so.2libz.so.1libpthread.so.0__errno_locationlibm.so.6libcrypt.so.1g_vasprintfg_string_append_leng_hash_table_lookupFT_Load_Glyphg_malloc0g_hash_table_insertpango_ft2_font_get_faceg_string_truncatepango_ft2_get_contextg_string_eraseg_str_equalg_str_hashg_hash_table_new_fulllibc.so.6_IO_stdin_usedexitsetlocalefopen__stack_chk_failstdinstrftimefgetsstrlenmemset__fprintf_chkwcswidthstdoutfputsfclose__strtol_internalgetenvwcwidthstderrfwritelocaltimestrchr__strtod_internal__sprintf_chk__libc_start_mainferrorwcslenlibfreetype.so.6FT_Done_GlyphFT_Get_GlyphFT_Outline_Decompose_edata__bss_start_endGLIBC_2.0GLIBC_2.4GLIBC_2.1GLIBC_2.3.4libfontconfig.so.1librt.so.1/lib/ld-linux.so.2libgnutls.so.13libkrb5support.so.0libkeyutils.so.1libresolv.so.2libexpat.so.0libgcrypt.so.11libgpg-error.so.0libselinux.so.1libsepol.so.1p=|=Ԗ=d=T\p7hp7Ԗp7`p7Tp7`s7u7p6 !`p!0{0_XY0Z0_4X8Y<0Zh&`|&d&h&l&`('0z\'z'''(0{x((|_d`l ``<`P}`}a0zTa@azab`>b0{8c,cPcd|8T`T0_T`>`T'ĶT%T,`TP>dh>l>`>P}>}>0z$>0_0>z>>`>>Ѐ0>'D>%>0{0>,?P?|?` 0_H`>p'0{,0<ddy`d `o,o`>p`p, p`>^^^^^^p_4_l8_<_L_d__h___0\(`@\(0 ](z]( u^(0{^(|hddldld0d0zezte0{ ` 0   $ 8 `QD }P 0zd Np z `> 0  Ѐ ` 0{ , P |   ̿п0Կؿܿٳ4hdh`h0i}jzm0{oPX0_Y`>'%,PY0ZP`X(0_8Y@`>X'l%|,PY0ZЏl`P}pPzT|PPȐP~8dd`l0pP}0zz|40{T~X|ا`oodohp`pP}`p0zdppzq0{Pq|xqP~1d2l2`paps.debugslELF4Pt4 (444444(p(p(p((8<p<<HHHHH  PtdxlxxQtd44HH !ohh`+ȁ 3;onnHoTTpW	Ē(`	0id44po4uQ{Q xxlDDm((p00p88p<<pHqq00s0``s `sps.shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.gnu_debuglink.dynbss.gnu.liblist.gnu.conflict.gnu.prelink_undo44HH !ohh`+ȁ oD;onnHoTTpW	Ē(`	0id44po4uQ{Q xxlDDm((p00p88p<<pHqq00s0``s pps 3tI	T
T}
\lD

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0059 ]--