!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/bin/   drwxr-xr-x
Free 52.29 GB of 127.8 GB (40.91%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     rmdtovbox (25.55 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF4\a4 (444444dRdRdRddxRxxHHH PtdM  Qtd/lib/ld-linux.so.2GNU <+&"<=@)K8gUaWvy BD5qz2E9=zP>=:TG)<L<Fiv99_-z/bhNo_ C(ED2>5Eh!0 (a $Z,M:yMq5.^^^^^_4_(8_<_L_ __$____,̿п0Կؿܿٳii ;ii Eii Oti Yii eii o@ >$?(<,@PTX\`dhlp t x |   !"#$%&'()*+,-./ 01234 5$6(7,8094:8;Ux/5H%L%Ph%Th%Xh%\h%`h %dh(%hh0%lh8p%ph@`%thHP%xhP@%|hX0%h` %hh%hp%hx%h%h%h%h%h%h%h%hp%h`%hP%h@%h0%h %h%h%h%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp% hx%h%h%h%h% h%$h%(h%,hp%0h`%4hP%8h@1^PTRhhйQVh@US[$TtjX[ÐUS=4u?p-lX09v&0l09w4[]Ít&'Uttt $tÐUSӃHyۉ[]Ðt&USÁtځ{~{% ȃ ؃ []ÍU $ D$@D$D$D$D$ D$$ $ D$j$&'U $ D$5@D$D$D$ $_ $ D$ D$FD$$ȾD$ D$3D$$D$ ` D$4D$$DD$ ; $ D$v D$4D$$|D$  $ D$< D$D$ D$D$$_ D$$D$$ؿD$ D$3D$$D$ u $ D$$Tt&U$]uƉ}4$}4$Eo4$eu ] } É؋]]É'U$]Éu*$% =~-]u] UuT$]Ӊ$!%\$$ Ɖ\$$%\$$]u]Í'U=]Ӊu~-\$$\$4$]u]1=}΍&'UWVS # } ÉFF&fHÉ|$$*FF܃ [^_]Ít&USӃ$?t3@D$պD$ D$$[]É$1҅t@D$D$ 뽍&UDt$E$&'UDt$E$&'UWVSU TEe M1DLPD$$D$$D$$D$$D$$ iD|D$D$$$D$ t$$D$ |$PD$ D$$jL$D$@T$J$^Tff(ffD$D$ D$t$t2@D$4D$D$ $z$ D5$X4$4$lj5.h!dns.tR@D$XD$D$ $$/Ue3Qļ[^_]Ít&uM k9td4$t&;u@D$#D$D$ $`낡@D$D$D$ $8WhtZhh@@D$D$D$ $ t&X4$x؃~4$t΋XT!TDT5D=(4$4$F<$>|$$64$%tՉ8D$5 $X$É0,(ljdns.$t4$@D$D$D$ $A$DžzDžk $ D$@D$D$D$ $ $ D${ D$6D$$D$  D$6D$$LD$ D$@D$$D$ D$3D$$D$ D$3D$$D$ r D$3D$$0D$ M D$3D$$dD$ ( D$5D$$D$  D$6D$$D$ 5@ND t&@8D$0D$D$ T$$+85D$$4$>$u (5D4$4$<$Edns.EEܸdns.UEEEEԉE؉E܉EEE4$ 4$>E܃=uUL$$>4t&% , ,,@ffF!ƍLD$\$$$cf4$8|4$x(o<8(뀁wLv@8D$\D$D$ |$$@D$D$D$ $U$$|$/ $~D$ $Dž DžDžDž +$l  ; )  # 4ЉӋ# i D Ћ4 "  *DžsD$D$$~D$D$<$t$D$$ 18uD$$1ɅUe3u ]u}]G&UW>VS,E] eU1D$D$މ$$D$D$<MD$\$$3 uLt&$$\$$t*$Ru1Ue3u,[^_]øH&U(eE1Euu ]}>D$D$$D$D$<$Vt$D$$B t1Ue3u[]u}]D$D$@$tD$$D$$4$&Zv'UWVSEeU1ҍ|$Dž4$%U PXI9u J:CtH9uI:Cu J:Ct|D$<$D$VD$D$<<$D$\$<$D$|$$;-4$K&4$Ue3u Č[^_]'UWV1Sh`E1 ƒhEEED$D$ D$\$$~b ȉʃhtXED$D$ $~'E< tA`Fƀ`?t88t&*1Ĭ[^_]D$ $`¸`tĬ[^_]US$eE1E D$ED$D$$D$ i$\$D$$<D$D$K$Ee3u $[]%t&UE $ND$ED$@ u ɉ$Z1҅uv'U u@t$nt$RÍ$^fUWVSL]eE1} DPt$Džt$$u$EEEEQffEfUXuu^jvD$ A D$D$E$UD$T$4$td4$tOtID$D$B$yMe3 L[^_]Å54$t$c1҅u닉\$D$$ODžDžDžKst& &UE M]|eU1҉u}pD$\$ $<t1Me3 uq]u}]uԋED$ D$D$$H upUD$tD$$=tSU]Ít&'UWVS^i)/ E )E}Ut+1ƍED$E D$E$9}u߃[^_]Ë$ÐUSddt Ћu[]US[(Y[17-NOV-982.0.0BETA5%s version %s (%s) %s: can't read input. %s: can't write output. %s: can't create tmpfileVBOX%s: unexpected EOF. vboxtoauvhu12r:autovbox*** Unknown ***hv234un:c:p:l:vboxmodevhq%c Creation time...........: %sCompression.............: %s Speaker name............: %s Speaker caller number...: %s Speaker phone number....: %s Speaker location........: %s rFormat..........: %s Sampling rate...: %d Channels........: %d bytes(unknown size)Size............: %d %s Data location...: %d helpversionsamplerateulawlinear8linear16adpcm-2adpcm-3adpcm-4namecalleridphonelocationquietunspecified format8-bit mu-law samples8-bit linear samples16-bit linear samples24-bit linear samples32-bit linear samplesfloating-point samplesfragmented sampled data?dsp program8-bit fixed-point samples16-bit fixed-point samples24-bit fixed-point samples32-bit fixed-point samplesnon-audio display data16-bit linear with emphasismusic Kit DSP commandsUsage: %s OPTION [ OPTION ] [ ... ] SAMPLENAME -q, --quiet Returns only the errorcode (no descriptions). -h, --help Prints this usage message. -v, --version Prints the package version. The program returns the sample format as errorcode: - For au samples it returns %d-%d, - For vbox messages it returns 2-6, - For unknown formats or on errors it returns 255. %s: can't write vbox audio header. %s: illegal magic number for an au file. %s: number of channels != 1 (only mono supported). %s: unsupported or illegal sound encoding. %s: unsupported compression type. Usage: %s OPTION [ OPTION ] [ ... ] OUTFILE -r, --samplerate RATE Header sampling rate (default 8000). -u, --ulaw Use 8-bit uLaw output. -1, --linear8 Use 8-bit linear output. -2, --linear16 Use 16-Bit linear output (default). Note: The sampling rate is written into the file header only, it doesn't do any sampling rate conversion! %s: can't read vbox audio header%s: sample contains no vbox audio header. %s: unknown/unsupported compression %d. -2, --adpcm-2 Converts sample to adpcm-2. -3, --adpcm-3 Converts sample to adpcm-3. -4, --adpcm-4 Converts sample to adpcm-4 (default). -u, --ulaw Converts sample to ulaw. -n, --name NAME Sets header information. -p, --phone PHONE Sets header information. -l, --location LOCATION Sets header information. -h, --help Prints this usage message. -v, --version Prints the package version. Length..................: %d seconds %s: can't open "%s" (vbox sample test). %s: can't open "%s" (au sample test). %s: sample contains no vbox or sun au header. The vbox converter can be called as: vboxtoau - to convert vbox messages to au format. autovbox - to convert au format samples to vbox messages. vboxmode - to display message information (works also with au). double-precision float samples16-bit linear with compression16-bit linear with emphasis & compression̦֦eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee eeee¦?8V9:MfV5V59:BMff| |A&9NcyԽֽ2ԽMԽdԽ/vboxctrl-.. login %s %s283quit280ADPCM-2ADPCM-3ADPCM-4ALAWULAW; D t<XTpd$(TD\tt$d(@`DDD4(Hdd|d| Џ+FE D4TAG AP`rAB hAB WAB LEAAB IE@cAB FLRAB KE\AB BF piAB A<"AB T"AB  l@AB ACI(@D  F AB D8AB A@-AB p9AB =AB  AB 8fAB SXCAB FFxЯ3AB FI AB WFIаAB AM бAB WFIWAB I  0AB BI@PAB G\FAB t@^AB JAB IAB OX  hohd y D@(ooo&oo(oԅoxFp` k`cP̯p>`UeD jP0@9XPT_i0j` ppkp-`r A F022hVp0iвpB@Ep4UCP=˲ǵŻ3p^h¼vʼrռuڼ12h¼v234ռuncplh¼v qԽԽgow`e dd__gmon_start__libc.so.6_IO_stdin_usedsocketexit_IO_putcstrncmpinet_atonperrorconnectgetpwuidclosedirstrncpysignal__vsprintf_chk__stack_chk_failunlinkselectstdinstrftimechmodrewindfeofstrlen__errno_locationclearerr__fxstat64__fprintf_chkstdoutfputcfclose__strtol_internalstrcasecmpopendir__xstat64__ctype_b_locoptargstderrgethostbynamedupgetuidgetopt_longstrncatusleepfwritefread__memcpy_chklocaltimelseek64rindexreaddir64tmpfile64__sprintf_chkunamefopen64access_IO_getc__libc_start_mainferror__strtoul_internalGLIBC_2.4GLIBC_2.3GLIBC_2.2GLIBC_2.3.4GLIBC_2.1GLIBC_2.0/lib/ld-linux.so.2vboxcnvt.debugeELF4V4 (444444dRdRdRddxRxxHHH PtdM  Qtd 44HH !ohh4+ 3y;o&&HopW  (` @@  i d00 ox+uhh:{: M NddRllRttRxxR@@SDDS@@T  VD VV.shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.gnu_debuglink.dynbss.gnu.liblist.gnu.conflict.gnu.prelink_undo 44HH !ohh4+ o(ԅ ;o&&HopW  (` @@  i d00 ox+uhh:{: M NddRllRttRxxR@@SDDS@@T   V 00V4 3ddXZ[DH`

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0057 ]--