!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/bin/   drwxr-xr-x
Free 52.28 GB of 127.8 GB (40.91%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     rsvg (2.45 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
#!/usr/bin/env python

#
# This python script subsumes the old 'rsvg' C-based command-line program.
# It should be considered deprecated in favor of 'rsvg-convert'.
#

import getopt, sys, os

def usage():
    print >> sys.stdout, """Usage: rsvg [-v?] [-d|--dpi-x <float>] [-p|--dpi-y <float>]
        [-x|--x-zoom <float>] [-y|--y-zoom <float>] [-w|--width <int>]
        [-h|--height <int>] [-q|--quality <int>] [-f|--format [png, jpeg]]
        [-v|--version] [-?|--help] [--usage] [OPTIONS...] file.svg file.png"""

def help():
    print >> sys.stdout, """Usage: rsvg [OPTIONS...] file.svg file.png
  -d, --dpi-x=<float>          pixels per inch
  -p, --dpi-y=<float>          pixels per inch
  -x, --x-zoom=<float>         x zoom factor
  -y, --y-zoom=<float>         y zoom factor
  -w, --width=<int>            width
  -h, --height=<int>           height
  -q, --quality=<int>          JPEG quality
  -f, --format=[png, jpeg]     save format
  -v, --version                show version information

Help options:
  -?, --help                   Show this help message
  --usage                      Display brief usage message
""",

def shellEscape(param):
    """Escape a string parameter for the shell."""
    return "'" + param.replace("'", "'\\''") + "'"

def main():
    try:
        opts, args = getopt.getopt(sys.argv[1:], "d:p:x:y:w:h:q:f:v?", ["dpi-x=", "dpi-y=", "x-zoom=", "y-zoom=", "width=", "height=", "quality=", "format=", "version", "usage"])
    except getopt.GetoptError:
        help()
        sys.exit(1)

    command_str = ""
    
    for o, a in opts:
        if o in ("-v", "--version"):
            print "rsvg version %s" % ("2.16.1")
            sys.exit(0)
        elif o in ("--usage"):
            usage()
            sys.exit(0)
        elif o in ("-?", "--help"):
            help()
            sys.exit(0)
        elif (o in ("-f", "--format")):
            if a in ("jpg", "jpeg"):
                print >> sys.stderr, "The JPEG output format is no longer supported"
                sys.exit(1)
        elif (o in ("-q", "--quality")):
            print "The --quality option is no longer supported"
            sys.exit(1)
        else:
            command_str += " " + shellEscape(o) + " " + shellEscape(a)

    if len(args) != 2:
        help()
        sys.exit(1)

    return os.system("%s %s -o %s %s" % (shellEscape(os.path.join("/usr", "bin", "rsvg-convert")), command_str, shellEscape(args[1]), shellEscape(args[0])))

if __name__ == "__main__":
    main()

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0052 ]--