!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/bin/   drwxr-xr-x
Free 52.29 GB of 127.8 GB (40.91%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     urlgrabber (4.75 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
#!/usr/bin/python -t

#   This library is free software; you can redistribute it and/or
#   modify it under the terms of the GNU Lesser General Public
#   License as published by the Free Software Foundation; either
#   version 2.1 of the License, or (at your option) any later version.
#
#   This library is distributed in the hope that it will be useful,
#   but WITHOUT ANY WARRANTY; without even the implied warranty of
#   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
#   Lesser General Public License for more details.
#
#   You should have received a copy of the GNU Lesser General Public
#   License along with this library; if not, write to the 
#      Free Software Foundation, Inc., 
#      59 Temple Place, Suite 330, 
#      Boston, MA  02111-1307  USA

# This file is part of urlgrabber, a high-level cross-protocol url-grabber
# Copyright 2002-2004 Michael D. Stenner, Ryan Tomayko

"""Usage: urlgrabber [OPTIONS] URL [FILE]

OPTIONS

    --copy-local       ignored except for file:// urls, in which case
                       it specifies whether urlgrab should still make 
                       a copy of the file, or simply point to the 
                       existing copy.
    --throttle=NUMBER  if it's an int, it's the bytes/second throttle 
                       limit.  If it's a float, it is first multiplied
                       by bandwidth.  If throttle == 0, throttling is 
                       disabled.  If None, the module-level default 
                       (which can be set with set_throttle) is used.
    --bandwidth=NUMBER the nominal max bandwidth in bytes/second.  If
                       throttle is a float and bandwidth == 0, 
                       throttling is disabled.  If None, the 
                       module-level default (which can be set with 
                       set_bandwidth) is used.
    --range=RANGE      a tuple of the form first_byte,last_byte 
                       describing a byte range to retrieve. Either or 
                       both of the values may be specified.  If 
                       first_byte is None, byte offset 0 is assumed. 
                       If last_byte is None, the last byte available 
                       is assumed. Note that both first and last_byte 
                       values are inclusive so a range of (10,11) 
                       would return the 10th and 11th bytes of the 
                       resource.
    --user-agent=STR   the user-agent string provide if the url is HTTP.

RETRY OPTIONS

    --retry=NUMBER     the number of times to retry the grab before 
                       bailing.  If this is zero, it will retry 
                       forever. This was intentional... really, it was 
                       :). If this value is not supplied or is supplied
                       but is None retrying does not occur.
    --retrycodes       a sequence of errorcodes (values of e.errno) for 
                       which it should retry. See the doc on 
                       URLGrabError for more details on this. retrycodes 
                       defaults to -1,2,4,5,6,7 if not specified 
                       explicitly.
"""

# $Id: urlgrabber,v 1.5 2006/03/02 20:56:56 mstenner Exp $

import sys
import urlgrabber.grabber
from urlgrabber.grabber import urlgrab

DEBUG=0

def main():
    kwargs = {}
    url = None
    file = None
    proxies = {}
    
    for arg in sys.argv[1:]:
        if arg in ('--help','-h','-?'):
            print __doc__
            sys.exit(0)
        elif arg in ('--debug', '-d'):
            global DEBUG
            DEBUG = 1
        elif arg.startswith('--'):
            ls = arg[2:].split('=')
            a,v = (ls[0],len(ls) > 1 and ls[1] or 1)
            a = a.replace('-','_')
            if v is None: v = 1
            if a in ('retrycodes','range'):
                v = v.split(',')
            if a.endswith('_proxy'):
                proxies[ a[0:a.find('_')] ] = v
                continue
            if DEBUG: print a, '=', v
            kwargs[a] = v
        elif not url:
            url = arg
        elif not file:
            file = arg
        else:
            print "Bad usage. Try %s --help"  % (sys.argv[0],)
            sys.exit(99)
    if url is None:
        print "Bad usage. Try %s --help"  % (sys.argv[0],)
        sys.exit(99)
    if len(proxies):
        kwargs['proxies'] = proxies
    if DEBUG:
        print 'kwargs: ', kwargs
        print 'URL:    ', url
        print 'FILE:   ', file
        
    try: from urlgrabber.progress import text_progress_meter
    except ImportError, e: pass
    else: kwargs['progress_obj'] = text_progress_meter()
    
    urlgrabber.grabber.DEBUG = DEBUG
    filename = urlgrab(url,filename=file,**kwargs)
    print "file written to %s" % (filename,)

if __name__ == '__main__':
    main()

bool(false)

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0046 ]--